魔盾安全分析报告

分析类型 开始时间 结束时间 持续时间 分析引擎版本
URL 2019-01-16 05:45:37 2019-01-16 05:48:01 144 秒 1.4-Maldun
虚拟机机器名 标签 虚拟机管理 开机时间 关机时间
win7-sp1-x64-hpdapp01-1 win7-sp1-x64-hpdapp01-1 KVM 2019-01-16 05:45:38 None
魔盾分数

0.0

正常的

URL信息

URL http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
VirusTotal VirusTotal查询失败

特征

无特征匹配

运行截图

网络分析

访问主机记录

直接访问 IP地址 国家名
否 123.1.151.102 Hong Kong

域名解析

域名 响应
guke888.com A 123.1.151.102
www.guke888.com

TCP连接

IP地址 端口
123.1.151.102 80
123.1.151.102 80
123.1.151.102 80
123.1.151.102 80
123.1.151.102 80
123.1.151.102 80
123.1.151.102 80
123.1.151.102 80
123.1.151.102 80
123.1.151.102 80

UDP连接

IP地址 端口
192.168.122.1 53
192.168.122.1 53

HTTP请求

URL HTTP数据
http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide 
GET /member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide HTTP/1.1
Accept: */*
Accept-Language: zh-cn
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: guke888.com
Connection: Keep-Alive
http://guke888.com/data/cache/style_4_common.css?XLV 
GET /data/cache/style_4_common.css?XLV HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://guke888.com/static/js/common.js?XLV 
GET /static/js/common.js?XLV HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://guke888.com/template/bygsjw/image/js/nv_top.js 
GET /template/bygsjw/image/js/nv_top.js HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://guke888.com/static/js/md5.js?XLV 
GET /static/js/md5.js?XLV HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://guke888.com/data/cache/style_4_widthauto.css?XLV 
GET /data/cache/style_4_widthauto.css?XLV HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://guke888.com/template/bygsjw/image/logo.png 
GET /template/bygsjw/image/logo.png HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://guke888.com/static/js/common_extra.js?XLV 
GET /static/js/common_extra.js?XLV HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://guke888.com/template/bygsjw/image/qrcode.jpg 
GET /template/bygsjw/image/qrcode.jpg HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://www.guke888.com/static/image/common/pn.png 
GET /static/image/common/pn.png HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://www.guke888.com/template/bygsjw/image/background.png 
GET /template/bygsjw/image/background.png HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://www.guke888.com/static/image/common/switch_width.png 
GET /static/image/common/switch_width.png HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://www.guke888.com/static/image/common/px.png 
GET /static/image/common/px.png HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://www.guke888.com/static/image/common/arrwd.gif 
GET /static/image/common/arrwd.gif HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://www.guke888.com/template/bygsjw/image/qmenu.png 
GET /template/bygsjw/image/qmenu.png HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://www.guke888.com/static/image/common/right.gif 
GET /static/image/common/right.gif HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://www.guke888.com/static/image/common/scrolltop.png 
GET /static/image/common/scrolltop.png HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://guke888.com/misc.php?mod=seccode&action=update&idhash=cSkSd4Ub&0.9395710509791773&modid=member::logging 
GET /misc.php?mod=seccode&action=update&idhash=cSkSd4Ub&0.9395710509791773&modid=member::logging HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588760%09member.php%09logging
http://guke888.com/static/image/common/none.gif 
GET /static/image/common/none.gif HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588762%09misc.php%09seccode
http://guke888.com/misc.php?mod=seccode&update=08548&idhash=cSkSd4Ub 
GET /misc.php?mod=seccode&update=08548&idhash=cSkSd4Ub HTTP/1.1
Accept: */*
Referer: http://guke888.com/member.php?action=login&mod=logging&referer=http%3A%2F%2Fguke888.com%2Fforum.php%3Fmod%3Dguide
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588762%09misc.php%09seccode
http://guke888.com/favicon.ico 
GET /favicon.ico HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: guke888.com
Connection: Keep-Alive
Cookie: WUDz_2132_saltkey=WlTjQYJQ; WUDz_2132_lastvisit=1547585160; WUDz_2132_sid=kSd4Ub; WUDz_2132_lastact=1547588762%09misc.php%09seccode; WUDz_2132_seccode=4.7c20a1843cc630a6c4

投放文件

无信息

行为分析

互斥量(Mutexes) 无信息
执行的命令 无信息
创建的服务 无信息
启动的服务 无信息

进程

无信息
访问的文件 无信息
读取的文件 无信息
修改的文件 无信息
删除的文件 无信息
注册表键 无信息
读取的注册表键 无信息
修改的注册表键 无信息
删除的注册表键 无信息
API解析 无信息