7dae92dac5ff309d9cf2b4ee4cd3b2a7761f0d52d334dd31d32ef01a3d59ca1c

360Tencent

http://blog.talosintelligence.co ... ndup-0519-0526.html
https://p.fuwafuwa.moe/rrrhew.zip

aerbeisi

rising
12cb31c388e382c74397a579992e1f2652464d45630b8c7ae01e6fab03402e10 ...    Trojan.Injector!8.C4-VTkPLJjA8gG <cloud>
5aaccf14351ea3bf2b60e9a67ae04eeaca5904fb6802f6d1c05ad27b985fd32d ...    Malware.Generic!P4dtQrilNuV@1 <thunder>
8200755cbedd6f15eecd8207eba534709a01957b172d7a051b9cc4769ddbf233 ...    Malware.Generic.5!tfe-9s8HI9AZV3J <cloud>
b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25 ...    Malware.Generic.5!tfe-7SfzBq30iMV <cloud>
03363f9f6938f430a58f3f417829aa3e98875703eb4c2ae12feccc07fff6ba47 ...    Ransom.Genasom!8.293-FnCBT8upFDQ <cloud>
526fef47936e460808fff7c605ee12e2cebe50234e7731680b545fb0863a6245 ...    Exploit.Pidief!8.41B-51KczIzdOq <cloud>


dr.web 5个

黑衣~魂

F-S k5
miss 1 的參考VT
Trojan.GenericKD.5057856
C:\Users\常用.user-PC.000\Desktop\6x\b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25: 已清除
Trojan.GenericKD.5101903
C:\Users\常用.user-PC.000\Desktop\6x\03363f9f6938f430a58f3f417829aa3e98875703eb4c2ae12feccc07fff6ba47: 已清除
Trojan.Script.199133
C:\Users\常用.user-PC.000\Desktop\6x\526fef47936e460808fff7c605ee12e2cebe50234e7731680b545fb0863a6245: 已清除
Gen:Heur.ManBat.1
C:\Users\常用.user-PC.000\Desktop\6x\12cb31c388e382c74397a579992e1f2652464d45630b8c7ae01e6fab03402e10: 已清除
Gen:Variant.Zusy.236342
C:\Users\常用.user-PC.000\Desktop\6x\8200755cbedd6f15eecd8207eba534709a01957b172d7a051b9cc4769ddbf233: 已清除

Eset小粉絲

Avira 5x
[mw_shl_code=css,true]Start of the scan: 2017-05-27 23:17:37
05/27/2017,23-17-37        [INFO]        c:\users\ivan\desktop\6x\03363f9f6938f430a58f3f417829aa3e98875703eb4c2ae12feccc07fff6ba47
05/27/2017,23-17-37        [INFO]        [DETECTION] file contains 'TR/Genasom.qtdxe'
05/27/2017,23-17-37        [INFO]        c:\users\ivan\desktop\6x\12cb31c388e382c74397a579992e1f2652464d45630b8c7ae01e6fab03402e10
05/27/2017,23-17-37        [INFO]        [DETECTION] file contains 'TR/BAS.Samca.13019424'
05/27/2017,23-17-37        [INFO]        c:\users\ivan\desktop\6x\526fef47936e460808fff7c605ee12e2cebe50234e7731680b545fb0863a6245
05/27/2017,23-17-37        [INFO]        [DETECTION] file contains 'EXP/Pidief.EB.353'
05/27/2017,23-17-37        [INFO]        c:\users\ivan\desktop\6x\8200755cbedd6f15eecd8207eba534709a01957b172d7a051b9cc4769ddbf233
05/27/2017,23-17-37        [INFO]        [DETECTION] file contains 'TR/Crypt.XPACK.Gen'
05/27/2017,23-17-37        [INFO]        c:\users\ivan\desktop\6x\b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
05/27/2017,23-17-37        [INFO]        [DETECTION] file contains 'TR/FileCoder.724645'[/mw_shl_code]

Yunahoshi

emsi 1miss
扫描开始：        2017/5/28 0:42:39
C:\Users\Admin\Desktop\6x\526fef47936e460808fff7c605ee12e2cebe50234e7731680b545fb0863a6245 -> (JAVASCRIPT)          Trojan.Script.199133 (B) [krnl.xmd]
C:\Users\Admin\Desktop\6x\526fef47936e460808fff7c605ee12e2cebe50234e7731680b545fb0863a6245 -> (INFECTED_JS)          Exploit.CVE-2007-5659.Gen (B) [krnl.xmd]
C:\Users\Admin\Desktop\6x\526fef47936e460808fff7c605ee12e2cebe50234e7731680b545fb0863a6245 -> (CODE 1)          Trojan.Downloader.JMUB (B) [krnl.xmd]
C:\Users\Admin\Desktop\6x\03363f9f6938f430a58f3f417829aa3e98875703eb4c2ae12feccc07fff6ba47          Trojan.GenericKD.5101903 (B) [krnl.xmd]
C:\Users\Admin\Desktop\6x\12cb31c388e382c74397a579992e1f2652464d45630b8c7ae01e6fab03402e10          Gen:Heur.ManBat.1 (B) [krnl.xmd]
C:\Users\Admin\Desktop\6x\b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25          Trojan.GenericKD.5057856 (B) [krnl.xmd]
C:\Users\Admin\Desktop\6x\8200755cbedd6f15eecd8207eba534709a01957b172d7a051b9cc4769ddbf233          Gen:Variant.Zusy.236342 (B) [krnl.xmd]

扫描        6
发现        7

欧阳宣

cylance 4x

dongwenqi

卡巴剩1个

saleniy35

ESET Kill 5x

zst470396853

如图




全部MISS 同一个文件



改EXE后缀  在win10上面  无法运行

XZ8SM7Sx0bVkoUV

火绒kill4