https://www.virustotal.com/en/fi ... nalysis/1449231307/
SHA256: 91be9d70bceea4bdb26aba1ddc557e84a808a9de949229c9f6bda9e5a93a4b11
File name: 91be9d70bceea4bdb26aba1ddc557e84a808a9de949229c9f6bda9e5a93a4b11.exe
Detection ratio: 5 / 55
Analysis date: 2015-12-04 12:15:07 UTC ( 1 minute ago )
2015/12/4 20:15:13,C:\Windows\explorer.exe,53,Allowed ;执行应用程序 ("C:\Users\AAAAA\Desktop\1111\91be9d70bceea4bdb26aba1ddc557e84a808a9de949229c9f6bda9e5a93a4b11.exe" )
2015/12/4 20:15:24,C:\Users\AAAAA\Desktop\1111\91be9d70bceea4bdb26aba1ddc557e84a808a9de949229c9f6bda9e5a93a4b11.exe,53,Blocked ;执行应用程序 (netsh firewall add allowedprogram "C:\Users\AAAAA\Desktop\1111\91be9d70bceea4bdb26aba1ddc557e84a808a9de949229c9f6bda9e5a93a4b11.exe" "91be9d70bceea4bdb26aba1ddc557e84a808a9de949229c9f6bda9e5a93a4b11.exe" ENABLE)
2015/12/4 20:15:28,C:\Users\AAAAA\Desktop\1111\91be9d70bceea4bdb26aba1ddc557e84a808a9de949229c9f6bda9e5a93a4b11.exe,53,Blocked ;执行应用程序 (schtasks /create /sc minute /mo 10 /tn Java /tr C:\Users\AAAAA\Desktop\1111\91be9d70bceea4bdb26aba1ddc557e84a808a9de949229c9f6bda9e5a93a4b11.exe)
2015/12/4 20:15:33,C:\Users\AAAAA\Desktop\1111\91be9d70bceea4bdb26aba1ddc557e84a808a9de949229c9f6bda9e5a93a4b11.exe,53,Allowed ;执行应用程序 (dw20.exe -x -s 668)
2015/12/4 20:15:36,C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe,40,Allowed ;以修改权限打开进程或线程 (91be9d70bceea4bdb26aba1ddc557e84a808a9de949229c9f6bda9e5a93a4b11.exe(pid=3928))
2015/12/4 20:15:38,C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe,57,Blocked ;正在以只读方式打开受保护的进程 (explorer.exe(pid=3948))
2015/12/4 20:15:40,C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe,50,Allowed ;使用 DNS 解析服务访问网络
2015/12/4 20:15:43,C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe,48,Allowed ;出站网络访问
|