可疑檔案x1

megakotaro

公司郵箱收到的，在自動分析系統中執行後沒有任何動作，卡巴斯基雲拉黑，進入進階解毒技術清除
密碼：infected

物流公司最容易被偽造






VirusTotal
免费的自动化恶意软件分析服务 - 由 Falcon Sandbox 提供支持 (hybrid-analysis.com)
2021Mar01_9073782913, pdf.exe (MD5: 904AB0940DF2401C06238D452887B936) - Interactive analysis - ANY.RUN

z68436425

ESET

温馨小屋

Norton C杀

Filename: 2021Mar01_9073782913, pdf.exe
Threat name: Trojan.Gen.2Full Path: C:\Users\NortonLTSC\Desktop\2021Mar01_9073782913, pdf.exe

____________________________

____________________________


On computers as of
2021/3/1 at 14:06:26

Last Used
2021/3/1 at 14:06:26

Startup Item
No

Launched
No

Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.


____________________________


2021Mar01_9073782913, pdf.exe Threat name: Trojan.Gen.2
Locate


Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week  ago.

High
This file risk is high.


____________________________


Source: External Media


____________________________

File Actions

File: C:\Users\NortonLTSC\Desktop\ 2021Mar01_9073782913, pdf.exe Blocked
____________________________


File Thumbprint - SHA:
Not available
File Thumbprint - MD5:
Not available

NT狼狼

毒霸

心心相印

火绒kill

Kinhold

* Avast 扫描报告
* 该文件是自动生成的
*
* 扫描名称: 从 Windows 资源管理器进行扫描
* 开始于: 2021年3月1日 17:52:57
* VPS: 210301-0, 2021/03/01
*

...\2021Mar01_9073782913, pdf.exe [L] Win32:PWSX-gen [Trj] (0)

感染文件: 1
文件总计: 1
文件夹总计: 0
大小总计: 724.5 KB

*
* 扫描已停止: 2021年3月1日 17:52:59
* 运行时间是 2 秒

Kinhold

心心相印 发表于 2021-3-1 14:33
火绒kill

火绒
病毒库时间：2021-02-28 16:33
开始时间：2021-03-01 17:53
总计用时：00:00:01
扫描对象：1
扫描文件：1
发现风险：1
已处理风险：1
病毒详情：
风险路径：...\2021Mar01_9073782913, pdf.exe,
病毒名：Trojan/MSIL.Obfuscated.cr,
病毒ID：a151b463465c1414,
处理结果：已处理，删除文件

k2132

火绒   智量

anthonyqian

ESET MSIL/Kryptik.ZUL

Nocria

IKARUS

1. Date and Time: 3/1/2021 9:32:49 PM
   
2. File Size: 724.5 kB
   
3. Detection Name: Win32.SuspectCrc
   
4. Detection-ID: 319973968
   
5. Suggestion: Backup
   
6. File Name: 2021Mar01_9073782913, pdf.exe
   
7. Original Path: C:\Users\promi\Desktop\2021Mar01_9073782913, pdf
   

复制代码