魔盾安全分析报告

分析类型 开始时间 结束时间 持续时间 分析引擎版本
URL 2019-09-12 14:21:13 2019-09-12 14:23:14 121 秒 1.4-Maldun
虚拟机机器名 标签 虚拟机管理 开机时间 关机时间
win7-sp1-x64-shaapp01-1 win7-sp1-x64-shaapp01-1 KVM 2019-09-12 14:21:13 2019-09-12 14:23:15
魔盾分数

1.975

正常的

URL信息

URL http://tmgdtq.cn/?t=8772567465114552863498761636222137370160536032375569686044657328383023991994792915901148594490565382936303897042294684964659085618586931218830182047064674443264&g_f=2000000393
VirusTotal VirusTotal无域名信息

特征

魔盾wping.org 域名信誉系统
Neutral: tmgdtq.cn
Greylist: daohang.114so.cn
魔盾wping.org IP地址信誉系统
Neutral: 47.75.18.10
检测到网络活动但没有显示在API日志中
country_name: Canada
ip: 47.75.18.10
inaddrarpa:
hostname: tmgdtq.cn
score: 5
ip:
domain: daohang.114so.cn

运行截图

网络分析

访问主机记录

直接访问 IP地址 国家名
否 47.75.18.10 Canada

域名解析

域名 响应
tmgdtq.cn A 47.75.18.10
CNAME hya1a2222222222222222dsf2ds2g22g2g.oss-cn-hongkong.aliyuncs.com
daohang.114so.cn NXDOMAIN

TCP连接

IP地址 端口
47.75.18.10 80
47.75.18.10 80
47.75.18.10 80
47.75.18.10 80
47.75.18.10 80
47.75.18.10 80
47.75.18.10 80

UDP连接

IP地址 端口
192.168.122.1 53
192.168.122.1 53

HTTP请求

URL HTTP数据
http://tmgdtq.cn/?t=8772567465114552863498761636222137370160536032375569686044657328383023991994792915901148594490565382936303897042294684964659085618586931218830182047064674443264&g_f=2000000393 
GET /?t=8772567465114552863498761636222137370160536032375569686044657328383023991994792915901148594490565382936303897042294684964659085618586931218830182047064674443264&g_f=2000000393 HTTP/1.1
Accept: */*
Accept-Language: zh-cn
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: tmgdtq.cn
Connection: Keep-Alive
http://tmgdtq.cn/hm.js 
GET /hm.js HTTP/1.1
Accept: */*
Referer: http://tmgdtq.cn/?t=8772567465114552863498761636222137370160536032375569686044657328383023991994792915901148594490565382936303897042294684964659085618586931218830182047064674443264&g_f=2000000393
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: tmgdtq.cn
Connection: Keep-Alive
http://tmgdtq.cn/basee64.js 
GET /basee64.js HTTP/1.1
Accept: */*
Referer: http://tmgdtq.cn/?t=8772567465114552863498761636222137370160536032375569686044657328383023991994792915901148594490565382936303897042294684964659085618586931218830182047064674443264&g_f=2000000393
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: tmgdtq.cn
Connection: Keep-Alive
http://tmgdtq.cn/jquery.js 
GET /jquery.js HTTP/1.1
Accept: */*
Referer: http://tmgdtq.cn/?t=8772567465114552863498761636222137370160536032375569686044657328383023991994792915901148594490565382936303897042294684964659085618586931218830182047064674443264&g_f=2000000393
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: tmgdtq.cn
Connection: Keep-Alive
http://tmgdtq.cn/style.css 
GET /style.css HTTP/1.1
Accept: */*
Referer: http://tmgdtq.cn/?t=8772567465114552863498761636222137370160536032375569686044657328383023991994792915901148594490565382936303897042294684964659085618586931218830182047064674443264&g_f=2000000393
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: tmgdtq.cn
Connection: Keep-Alive
http://tmgdtq.cn/a20150813.3e6f7c2c.lc.css 
GET /a20150813.3e6f7c2c.lc.css HTTP/1.1
Accept: */*
Referer: http://tmgdtq.cn/?t=8772567465114552863498761636222137370160536032375569686044657328383023991994792915901148594490565382936303897042294684964659085618586931218830182047064674443264&g_f=2000000393
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: tmgdtq.cn
Connection: Keep-Alive
http://tmgdtq.cn/alert.js 
GET /alert.js HTTP/1.1
Accept: */*
Referer: http://tmgdtq.cn/?t=8772567465114552863498761636222137370160536032375569686044657328383023991994792915901148594490565382936303897042294684964659085618586931218830182047064674443264&g_f=2000000393
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: tmgdtq.cn
Connection: Keep-Alive
http://tmgdtq.cn/jquery.min.js 
GET /jquery.min.js HTTP/1.1
Accept: */*
Referer: http://tmgdtq.cn/?t=8772567465114552863498761636222137370160536032375569686044657328383023991994792915901148594490565382936303897042294684964659085618586931218830182047064674443264&g_f=2000000393
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: tmgdtq.cn
Connection: Keep-Alive
http://tmgdtq.cn/qqapi.js 
GET /qqapi.js HTTP/1.1
Accept: */*
Referer: http://tmgdtq.cn/?t=8772567465114552863498761636222137370160536032375569686044657328383023991994792915901148594490565382936303897042294684964659085618586931218830182047064674443264&g_f=2000000393
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: tmgdtq.cn
Connection: Keep-Alive

投放文件

无信息

行为分析

互斥量(Mutexes) 无信息
执行的命令 无信息
创建的服务 无信息
启动的服务 无信息

进程

iexplore.exe PID: 2600, 上一级进程 PID: 2320

访问的文件 无信息
读取的文件 无信息
修改的文件 无信息
删除的文件 无信息
注册表键 无信息
读取的注册表键 无信息
修改的注册表键 无信息
删除的注册表键 无信息
API解析 无信息