Unique ID of submitted data on Wireshark

What do you mean by 'submitted data'? and what do you mean by 'unique ID'? are you talking about IP packets and the Identification field in the packet header for identifying packet fragments? (i.e. https://tools.ietf.org/html/rfc6864 / https://ccie-or-null.net/2014/12/02/wireshark-tid-bit-what-does-the-ip-identification-field-tell-us/ )

There's a guide to adding columns into wireshark here anyway, the IP identification field should be in that list somewhere: https://unit42.paloaltonetworks.com/unit42-customizing-wireshark-changing-column-display/


Otherwise, I don't know of any protocols which have a field called 'Unique ID', and wireshark won't be able to read protocols that it doesn't know about.

It wasn't the identification field, so am unsure what the question that I am answering means by 'unique ID'. The submitted data refers to the packets. Thanks for trying

nvm solved it

it was a number in the info column. Hopefully this saves you some time.

If anyone can give me any hints for compromised host then it would be appreciated (not the answer, just guidance)

What question are you stuck on?

All of it. Any pointers on how to start would be appreciated

I have been given a windows virtual machine and I have to answer this question:
The malware persists through reboots. What is the registry key value’s name that results in the malware executing automatically?
This is all I have been given

Once I get this, I should get the gist and be able to find the other answers.