魔盾安全分析报告
| 分析类型 | 开始时间 | 结束时间 | 持续时间 | 分析引擎版本 |
|---|---|---|---|---|
| URL | 2019-09-11 16:07:19 | 2019-09-11 16:09:20 | 121 秒 | 1.4-Maldun |
| 虚拟机机器名 | 标签 | 虚拟机管理 | 开机时间 | 关机时间 |
|---|---|---|---|---|
| win7-sp1-x64-shaapp01-1 | win7-sp1-x64-shaapp01-1 | KVM | 2019-09-11 16:07:20 | 2019-09-11 16:09:21 |
| 魔盾分数 |
|---|
0.15正常的 |
URL信息
| URL | http://update.microsoft.com.nsatc.net |
|---|---|
| VirusTotal | VirusTotal查询失败 |
特征
检测到网络活动但没有显示在API日志中
country_name: United States
ip: 20.45.1.107
inaddrarpa:
hostname: www.update.microsoft.com
score: 8
ip:
domain: c.microsoft.com
运行截图
网络分析
访问主机记录
| 直接访问 | IP地址 | 国家名 |
|---|---|---|
| 否 | 20.45.1.107 | United States |
| 否 | 40.90.247.210 | United States |
域名解析
| 域名 | 响应 |
|---|---|
| update.microsoft.com.nsatc.net |
A 40.90.247.210
A 20.45.1.107 CNAME www.update.microsoft.com.nsatc.net |
| www.update.microsoft.com | |
| c.microsoft.com | NXDOMAIN |
TCP连接
| IP地址 | 端口 |
|---|---|
| 20.45.1.107 | 80 |
| 20.45.1.107 | 80 |
| 20.45.1.107 | 80 |
| 20.45.1.107 | 80 |
| 20.45.1.107 | 80 |
| 20.45.1.107 | 80 |
| 20.45.1.107 | 80 |
| 20.45.1.107 | 80 |
| 40.90.247.210 | 80 |
| 40.90.247.210 | 80 |
| 40.90.247.210 | 80 |
| 40.90.247.210 | 80 |
| 40.90.247.210 | 80 |
| 40.90.247.210 | 80 |
| 40.90.247.210 | 80 |
UDP连接
| IP地址 | 端口 |
|---|---|
| 192.168.122.1 | 53 |
| 192.168.122.1 | 53 |
| 192.168.122.1 | 53 |
HTTP请求
| URL | HTTP数据 |
|---|---|
| http://update.microsoft.com.nsatc.net/ | GET / HTTP/1.1 Accept: */* Accept-Language: zh-cn User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: update.microsoft.com.nsatc.net Connection: Keep-Alive |
| http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx | GET /windowsupdate/v6/default.aspx HTTP/1.1 Accept: */* Accept-Language: zh-cn User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: update.microsoft.com.nsatc.net Connection: Keep-Alive Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA |
| http://update.microsoft.com.nsatc.net/favicon.ico | GET /favicon.ico HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: update.microsoft.com.nsatc.net Connection: Keep-Alive Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA |
| http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn | GET /windowsupdate/v6/default.aspx?ln=zh-cn HTTP/1.1 Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */* Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: update.microsoft.com.nsatc.net Connection: Keep-Alive Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA |
| http://update.microsoft.com.nsatc.net/windowsupdate/v6/shared/js/webcomtop.js?637037860364677758 | GET /windowsupdate/v6/shared/js/webcomtop.js?637037860364677758 HTTP/1.1 Accept: */* Referer: http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: update.microsoft.com.nsatc.net Connection: Keep-Alive Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA |
| http://update.microsoft.com.nsatc.net/windowsupdate/v6/shared/js/tgar.js?637037860364677758 | GET /windowsupdate/v6/shared/js/tgar.js?637037860364677758 HTTP/1.1 Accept: */* Referer: http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: update.microsoft.com.nsatc.net Connection: Keep-Alive Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA |
| http://update.microsoft.com.nsatc.net/windowsupdate/v6/shared/js/spupdateids.js?637037860364677758 | GET /windowsupdate/v6/shared/js/spupdateids.js?637037860364677758 HTTP/1.1 Accept: */* Referer: http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: update.microsoft.com.nsatc.net Connection: Keep-Alive Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA |
| http://update.microsoft.com.nsatc.net/windowsupdate/v6/shared/js/commontop.js?637037860364677758 | GET /windowsupdate/v6/shared/js/commontop.js?637037860364677758 HTTP/1.1 Accept: */* Referer: http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: update.microsoft.com.nsatc.net Connection: Keep-Alive Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA |
| http://update.microsoft.com.nsatc.net/windowsupdate/v6/shared/js/redirect.js?637037860364677758 | GET /windowsupdate/v6/shared/js/redirect.js?637037860364677758 HTTP/1.1 Accept: */* Referer: http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: update.microsoft.com.nsatc.net Connection: Keep-Alive Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA |
| http://update.microsoft.com.nsatc.net/windowsupdate/v6/shared/js/resultslist.js?637037860364677758 | GET /windowsupdate/v6/shared/js/resultslist.js?637037860364677758 HTTP/1.1 Accept: */* Referer: http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: update.microsoft.com.nsatc.net Connection: Keep-Alive Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA |
| http://update.microsoft.com.nsatc.net/windowsupdate/v6/redirect.asp?UA=true | POST /windowsupdate/v6/redirect.asp?UA=true HTTP/1.1 Accept: */* Accept-Language: zh-cn Referer: http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: update.microsoft.com.nsatc.net Content-Length: 13 Connection: Keep-Alive Cache-Control: no-cache Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA |
| http://update.microsoft.com.nsatc.net/windowsupdate/v6/redirect.asp?OS=6.1&Processor=wow64&Lang=zh-cn&CurrentSite=6Live | POST /windowsupdate/v6/redirect.asp?OS=6.1&Processor=wow64&Lang=zh-cn&CurrentSite=6Live HTTP/1.1 Accept: */* Accept-Language: zh-cn Referer: http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: update.microsoft.com.nsatc.net Content-Length: 24 Connection: Keep-Alive Cache-Control: no-cache Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA |
| http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx | GET /windowsupdate/v6/vistadefault.aspx HTTP/1.1 Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */* Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/favicon.ico | GET /favicon.ico HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=zh-cn | GET /windowsupdate/v6/vistadefault.aspx?ln=zh-cn HTTP/1.1 Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */* Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/shared/js/tgar.js?637037860610414162 | GET /windowsupdate/v6/shared/js/tgar.js?637037860610414162 HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/shared/js/redirect.js?637037860610414162 | GET /windowsupdate/v6/shared/js/redirect.js?637037860610414162 HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/redirect.asp?UA=true | POST /windowsupdate/v6/redirect.asp?UA=true HTTP/1.1 Accept: */* Accept-Language: zh-cn Referer: http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=zh-cn Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: www.update.microsoft.com Content-Length: 13 Connection: Keep-Alive Cache-Control: no-cache Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/redirect.asp?OS=6.1&Processor=wow64&Lang=zh-cn&CurrentSite=6Live&SP=1&control=7.5.7601.17514 | POST /windowsupdate/v6/redirect.asp?OS=6.1&Processor=wow64&Lang=zh-cn&CurrentSite=6Live&SP=1&control=7.5.7601.17514 HTTP/1.1 Accept: */* Accept-Language: zh-cn Referer: http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=zh-cn Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: www.update.microsoft.com Content-Length: 24 Connection: Keep-Alive Cache-Control: no-cache Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/VistaToolbar.aspx?ln=zh-cn | GET /windowsupdate/v6/VistaToolbar.aspx?ln=zh-cn HTTP/1.1 Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */* Referer: http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn | GET /windowsupdate/v6/vistathanks.aspx?ln=zh-cn HTTP/1.1 Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */* Referer: http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/VistaFooter.aspx?ln=zh-cn | GET /windowsupdate/v6/VistaFooter.aspx?ln=zh-cn HTTP/1.1 Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */* Referer: http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/shared/js/tgar.js?637037860624116725 | GET /windowsupdate/v6/shared/js/tgar.js?637037860624116725 HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/shared/js/content.js?637037860624116725 | GET /windowsupdate/v6/shared/js/content.js?637037860624116725 HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/shared/css/content.css | GET /windowsupdate/v6/shared/css/content.css HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/shared/css/hcp.css | GET /windowsupdate/v6/shared/css/hcp.css HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/library/toolbar/3.0/css.aspx?c=/windowsupdate/v6/Config/zh-cn/WU/vista.config | GET /library/toolbar/3.0/css.aspx?c=/windowsupdate/v6/Config/zh-cn/WU/vista.config HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/VistaToolbar.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/shared/js/VistaWin7Shared.js | GET /windowsupdate/v6/shared/js/VistaWin7Shared.js HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/shared/images/vista/vistaarrow.jpg | GET /windowsupdate/v6/shared/images/vista/vistaarrow.jpg HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/ | GET /windowsupdate/v6/ HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/blank.aspx | GET /windowsupdate/v6/blank.aspx HTTP/1.1 Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */* Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/library/toolbar/3.0/text.aspx?t=TQ%3d%3d&f=FFFFFF&b=99B1D3&font=Microsoft+Logo+95%2c+13pt&w=105&h=29&a=0&l=0&v=0&c=TOce7uoORad40JSEsIoG7AAQU1Y%3d | GET /library/toolbar/3.0/text.aspx?t=TQ%3d%3d&f=FFFFFF&b=99B1D3&font=Microsoft+Logo+95%2c+13pt&w=105&h=29&a=0&l=0&v=0&c=TOce7uoORad40JSEsIoG7AAQU1Y%3d HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/VistaFooter.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/library/toolbar/3.0/images/banners/WindVista_masthead_ltr.gif | GET /library/toolbar/3.0/images/banners/WindVista_masthead_ltr.gif HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/VistaToolbar.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/shared/images/vista_wu_subbanner-part1_ltr.gif | GET /windowsupdate/v6/shared/images/vista_wu_subbanner-part1_ltr.gif HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/VistaToolbar.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/shared/images/vista_subbanner-part2_ltr.gif | GET /windowsupdate/v6/shared/images/vista_subbanner-part2_ltr.gif HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/VistaToolbar.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/shared/images/vista_subbanner-center.gif | GET /windowsupdate/v6/shared/images/vista_subbanner-center.gif HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/VistaToolbar.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/shared/images/win7/zh-cn/select_all_programsWin7.gif | GET /windowsupdate/v6/shared/images/win7/zh-cn/select_all_programsWin7.gif HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
| http://www.update.microsoft.com/windowsupdate/v6/shared/images/win7/zh-cn/select_wuWin7.gif | GET /windowsupdate/v6/shared/images/win7/zh-cn/select_wuWin7.gif HTTP/1.1 Accept: */* Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.update.microsoft.com Connection: Keep-Alive Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961 |
投放文件
行为分析
互斥量(Mutexes)
无信息
执行的命令
无信息
创建的服务
无信息
启动的服务
无信息
进程
iexplore.exe PID: 2564, 上一级进程 PID: 2320
访问的文件
无信息
读取的文件
无信息
修改的文件
无信息
删除的文件
无信息
注册表键
无信息
读取的注册表键
无信息
修改的注册表键
无信息
删除的注册表键
无信息
API解析
无信息