TBbabylon.exe

显示全部楼层 · 发表于 2012-9-5 10:52:36

Full Path: C:\Users\Administrator\Downloads\TBbabylon.exe
____________________________
____________________________

Developers
Not Available

Version
9.0.3.21

Identified
5/9/2012 at 10:51:50

Last Used
Not Available

Startup Item
No

____________________________
____________________________
Unknown
This program crash history is not known.
____________________________
Few Users
Fewer than 50 users in the Norton Community have used this file.
____________________________
Mature
This file was released 8 months ago.
____________________________

Bad

There are many indications that this file is untrustworthy.

____________________________

https://att.kafan.cn/forum.php?mo ... DU4NTY1OHwxMzY3MTcy

Downloaded File TBbabylon.exe from?att.kafan.cn

file origin tree

winrar.exe?

?

tbbabylon.exe?

____________________________
File Thumbprint - SHA:
6cf01e0c2fd9589ff6bb51d90c9fc28a05309bf9b0283971a2c0de5d56d2b327
____________________________
File Thumbprint - MD5:
791061999d8d0c85090b32be75261b8b
____________________________

显示全部楼层 · 发表于 2012-9-5 10:54:46

https://www.virustotal.com/file/ ... d56d2b327/analysis/ 6 / 42

显示全部楼层 · 发表于 2012-9-5 10:57:22

哪有注入行为啊

请楼主截图让我们看看吧

显示全部楼层 · 发表于 2012-9-5 11:01:46

http://fireeye.ijinshan.com/anal ... ad464c2a&type=1火眼

显示全部楼层 · 发表于 2012-9-5 12:41:16

http://camas.comodo.com/cgi-bin/ ... 971a2c0de5d56d2b327

目测安全

显示全部楼层 · 发表于 2012-9-5 12:59:19

本帖最后由 humanlwj52 于 2012-9-5 13:00 编辑

jayavira 发表于 2012-9-5 10:57
哪有注入行为啊
请楼主截图让我们看看吧

搞错了，重新运行了一下的确是没有的。

显示全部楼层 · 发表于 2012-9-5 13:12:37

threatfire 发表于 2012-9-5 11:01
http://fireeye.ijinshan.com/analyse.html?md5=ce5d7238a7c1f2bb6f22fffbad464c2a&type=1火眼

火眼不够详细，我直接双击！呵呵

显示全部楼层 · 发表于 2012-9-5 13:48:41

老机子发表于 2012-9-5 13:12
火眼不够详细，我直接双击！呵呵

安全文件

显示全部楼层 · 发表于 2012-9-5 14:21:42

本帖最后由 iyinyt 于 2012-9-5 14:30 编辑

BD扫描过，双击AVC报~~目测为流氓~

显示全部楼层 · 发表于 2012-9-5 19:27:33

红伞杀！

[可疑文件] TBbabylon.exe

本帖子中包含更多资源

本帖子中包含更多资源