Detection ratio: 0 / 54 求验证

墨家小子

https://www.virustotal.com/en/fi ... 22f850b08/analysis/
SHA256:        06dfad95007532ccf46d593eedc2474936614aedcea7bf983e36dad22f850b08
File name:        06dfad95007532ccf46d593eedc2474936614aedcea7bf983e36dad22f850b08.exe
Detection ratio:        0 / 54
Analysis date:        2015-12-10 03:39:39 UTC ( 3 minutes ago )



2015/12/10 11:42:02,C:\Windows\explorer.exe,53,Allowed ;执行应用程序 ("C:\Users\Z\Desktop\zz\06dfad95007532ccf46d593eedc2474936614aedcea7bf983e36dad22f850b08.exe" )

2015/12/10 11:42:09,C:\Users\Z\Desktop\zz\06dfad95007532ccf46d593eedc2474936614aedcea7bf983e36dad22f850b08.exe,26,Blocked ;修改受保护的注册表键 (HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run,MSPY2002)

2015/12/10 11:42:11,C:\Users\Z\Desktop\zz\06dfad95007532ccf46d593eedc2474936614aedcea7bf983e36dad22f850b08.exe,26,Blocked ;修改受保护的注册表键 (HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{E4288337-873B-11D1-BAA0-00AA00BBB8C0})

2015/12/10 11:42:13,C:\Users\Z\Desktop\zz\06dfad95007532ccf46d593eedc2474936614aedcea7bf983e36dad22f850b08.exe,26,Blocked ;修改受保护的注册表键 (HKLM\SOFTWARE\Classes\Wow6432Node\CLSID)

2015/12/10 11:42:15,C:\Users\Z\Desktop\zz\06dfad95007532ccf46d593eedc2474936614aedcea7bf983e36dad22f850b08.exe,26,Blocked ;修改受保护的注册表键 (HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{E4288337-873B-11D1-BAA0-00AA00BBB8C0}\InprocServer32)

2015/12/10 11:42:16,C:\Users\Z\Desktop\zz\06dfad95007532ccf46d593eedc2474936614aedcea7bf983e36dad22f850b08.exe,26,Blocked ;修改受保护的注册表键 (HKLM\SOFTWARE\Classes\Wow6432Node\CLSID)

2015/12/10 11:42:17,C:\Users\Z\Desktop\zz\06dfad95007532ccf46d593eedc2474936614aedcea7bf983e36dad22f850b08.exe,26,Blocked ;修改受保护的注册表键 (HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{E4288337-873B-11D1-BAA0-00AA00BBB8C0}\ProgID)

2015/12/10 11:42:18,C:\Users\Z\Desktop\zz\06dfad95007532ccf46d593eedc2474936614aedcea7bf983e36dad22f850b08.exe,26,Blocked ;修改受保护的注册表键 (HKLM\SOFTWARE\Classes\Wow6432Node\CLSID)

2015/12/10 11:42:19,C:\Users\Z\Desktop\zz\06dfad95007532ccf46d593eedc2474936614aedcea7bf983e36dad22f850b08.exe,26,Blocked ;修改受保护的注册表键 (HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{E4288337-873B-11D1-BAA0-00AA00BBB8C0}\VersionIndependentProgID)

2015/12/10 11:42:20,C:\Users\Z\Desktop\zz\06dfad95007532ccf46d593eedc2474936614aedcea7bf983e36dad22f850b08.exe,26,Terminated ;修改受保护的注册表键 (HKLM\SOFTWARE\Classes\Wow6432Node\CLSID)

samlin01

红伞miss

pal家族

墨家小子

pal家族 发表于 2015-12-10 12:56

这个东东是白的？

pal家族

墨家小子 发表于 2015-12-10 22:56
这个东东是白的？

很有可能吧。

小飞侠.net

电脑管家（鹰眼二代）++安全
奇虎360（QVM二代）++安全
。。。。看图：


MD5：
文件名: C:\Documents and Settings\Administrator\桌面\样本测试\1.rar
文件大小: 28701 字节 (28.03 KB)
修改日期: 2015-12-11 08:12
MD5: 6971c401c561f5dee59dcf409fce60ba
SHA1: db3539c2934eb5b82df17f87b34a53a82a10444f
SHA256: fe1a963df130aa6ebfddcec4af7a122d132026f40f577f3bf2f8a6cd78d4a92b
CRC32: a01f5767