6x from ANY.RUN

QVM360

6x (2024-07-07).zip - 蓝奏云 (lanzoue.com)

infected

QVM360

火绒扫描4/6
双击2/2


卡巴扫描5/6
双击1/1
图片太大，见楼上

腾讯电脑管家6/6


华为扫描4/6
双击0/2，等了5分钟没反应


360扫描4/6
自动机拉黑1/2
双击1/1

123456aaaafsdeg

妖刀：4 files infected

莒县小哥

WD清空

Komeiji-Reimu

卡巴斯基扫描kill 5x
剩余一个memsoft.exe双击杀
总之kill all
------------------------

360扫描kill5x

剩余memsoft.exe双击后一段时间Hips一个  

------------------------------

火绒扫描4x

风险路径：C:\Users\Marisa\Desktop\6x (2024-07-07)\1\serve-cleaned.exe, 病毒名：Backdoor/Crysan.a, 病毒ID：788a438b06aa5a7e, 处理结果：已处理，删除文件
风险路径：C:\Users\Marisa\Desktop\6x (2024-07-07)\1\QIWWUY0857W0E5QRU76T.exe, 病毒名：TrojanSpy/MSIL.PwStealer.r, 病毒ID：f8563dafb445aec9, 处理结果：已处理，删除文件
风险路径：C:\Users\Marisa\Desktop\6x (2024-07-07)\1\rama.exe, 病毒名：TrojanSpy/Stealer.lc, 病毒ID：ad1b6a9535b919d1, 处理结果：已处理，删除文件

病毒名称：Worm/DTStealer.a

病毒ID：F5E45E6730A4B750

病毒路径：C:\Users\Marisa\AppData\Local\Temp\vmware-Marisa\VMwareDnD\5499b3eb\6x (2024-07-07)\1\goPhzZ.exe

双击kill1x

剩余一个memsoft.exe 运行无反应

-------------------------------------------

小a免费版kill all

孤勇者

卡巴斯基解压kill5x,双击kill1x

断簪

eset清空
fs卸了，根本更新不了

QVM360

Komeiji-Reimu 发表于 2024-7-7 15:53
卡巴斯基扫描kill 5x
剩余一个memsoft.exe双击杀
总之kill all

没有Miss哦，看我的

Komeiji-Reimu

QVM360 发表于 2024-7-7 16:08
没有Miss哦，看我的

运行了，但是没反应

user114514

蜘蛛扫描3，未双击

goPhzZ.exe - archive ZLIB
>goPhzZ.exe/data001 - Ok
>goPhzZ.exe/data002 - Ok
>goPhzZ.exe/data003 - Ok
>goPhzZ.exe/data004 - Ok
>goPhzZ.exe/data005 - Ok
>goPhzZ.exe/data006 infected with Python.Exploit.15
>goPhzZ.exe/data007 - Ok
>goPhzZ.exe/data008 - Ok
>goPhzZ.exe/data009 - Ok
>goPhzZ.exe/data010 - Ok
>goPhzZ.exe/data011 - Ok
>goPhzZ.exe/data012 - Ok
>goPhzZ.exe/data013 packed by FLY-CODE
>>goPhzZ.exe/data013 - Ok
>goPhzZ.exe/data014 packed by FLY-CODE
>>goPhzZ.exe/data014 - Ok
>goPhzZ.exe/data015 - Ok
>goPhzZ.exe/data016 - Ok
>goPhzZ.exe/data017 - Ok
>goPhzZ.exe/data018 - Ok
>goPhzZ.exe/data019 - Ok
>goPhzZ.exe/data020 - Ok
>goPhzZ.exe/data021 - Ok
>goPhzZ.exe/data022 - Ok
>goPhzZ.exe/data023 - Ok
>goPhzZ.exe/data024 - Ok
>goPhzZ.exe/data025 - Ok
>goPhzZ.exe/data026 - Ok
>goPhzZ.exe/data027 - Ok
>goPhzZ.exe/data028 - Ok
>goPhzZ.exe/data029 - Ok
>goPhzZ.exe/data030 - Ok
>goPhzZ.exe/data031 - Ok
>goPhzZ.exe/data032 - Ok
>goPhzZ.exe/data033 - Ok
>goPhzZ.exe/data034 - Ok
>goPhzZ.exe/data035 - Ok
>goPhzZ.exe/data036 - Ok
>goPhzZ.exe/data037 - Ok
>goPhzZ.exe/data038 - Ok
>goPhzZ.exe/data039 - Ok
>goPhzZ.exe/data040 - Ok
>goPhzZ.exe/data041 - Ok
>goPhzZ.exe/data042 - Ok
>goPhzZ.exe/data043 - Ok
>goPhzZ.exe/data044 - Ok
>goPhzZ.exe/data045 - Ok
>goPhzZ.exe/data046 - Ok
>goPhzZ.exe/data047 - Ok
>goPhzZ.exe/data048 - Ok
>goPhzZ.exe/data049 - Ok
>goPhzZ.exe/data050 - Ok
>goPhzZ.exe/data051 - Ok
>goPhzZ.exe/data052 - Ok
>goPhzZ.exe/data053 - Ok
>goPhzZ.exe/data054 - Ok
>goPhzZ.exe/data055 - Ok
>goPhzZ.exe/data056 - Ok
>goPhzZ.exe/data057 - Ok
>goPhzZ.exe/data058 - Ok
>goPhzZ.exe/data059 - Ok
>goPhzZ.exe/data060 - Ok
>goPhzZ.exe/data061 - Ok
>goPhzZ.exe/data062 - Ok
>goPhzZ.exe/data063 - Ok
>goPhzZ.exe/data064 - Ok
>goPhzZ.exe/data065 - Ok
>goPhzZ.exe/data066 - Ok
>goPhzZ.exe/data067 - Ok
>goPhzZ.exe/data068 - Ok
>goPhzZ.exe/data069 - Ok
>goPhzZ.exe/data070 - Ok
>goPhzZ.exe/data071 - Ok
>goPhzZ.exe/data072 - Ok
>goPhzZ.exe/data073 - Ok
>goPhzZ.exe/data074 - Ok
>goPhzZ.exe/data075 - Ok
>goPhzZ.exe/data076 - Ok
>goPhzZ.exe/data077 - Ok
>goPhzZ.exe/data078 - Ok
>goPhzZ.exe/data079 - Ok
>goPhzZ.exe/data080 - Ok
>goPhzZ.exe/data081 - Ok
>goPhzZ.exe/data082 - Ok
>goPhzZ.exe/data083 - Ok
>goPhzZ.exe/data084 - Ok
>goPhzZ.exe/data085 - Ok
>goPhzZ.exe/data086 - Ok
>goPhzZ.exe/data087 - Ok
>goPhzZ.exe/data088 - Ok
>goPhzZ.exe/data089 - Ok
>goPhzZ.exe/data090 - Ok
>goPhzZ.exe/data091 - Ok
>goPhzZ.exe/data092 - Ok
>goPhzZ.exe/data093 - Ok
>goPhzZ.exe/data094 - Ok
>goPhzZ.exe/data095 - Ok
>goPhzZ.exe/data096 - Ok
>goPhzZ.exe/data097 - Ok
>goPhzZ.exe/data098 - Ok
>goPhzZ.exe/data099 - Ok
>goPhzZ.exe/data100 - Ok
>goPhzZ.exe/data101 - Ok
>goPhzZ.exe/data102 - Ok
>goPhzZ.exe/data103 - Ok
>goPhzZ.exe/data104 - Ok
>goPhzZ.exe/data105 - Ok
>goPhzZ.exe/data106 - Ok
>goPhzZ.exe/data107 - Ok
>goPhzZ.exe/data108 - Ok
>goPhzZ.exe/data109 - Ok
>goPhzZ.exe/data110 - Ok
>goPhzZ.exe/data111 - Ok
>goPhzZ.exe/data112 - Ok
>goPhzZ.exe/data113 - Ok
>goPhzZ.exe/data114 - Ok
>goPhzZ.exe/data115 - Ok
>goPhzZ.exe/data116 - Ok
>goPhzZ.exe/data117 - Ok
>goPhzZ.exe/data118 - Ok
>goPhzZ.exe/data119 - Ok
>goPhzZ.exe/data120 - Ok
>goPhzZ.exe/data121 - Ok
>goPhzZ.exe/data122 - Ok
>goPhzZ.exe/data123 - Ok
>goPhzZ.exe/data124 - Ok
>goPhzZ.exe/data125 - Ok
>goPhzZ.exe/data126 - Ok
>goPhzZ.exe/data127 - Ok
>goPhzZ.exe/data128 - Ok
>goPhzZ.exe/data129 - Ok
>goPhzZ.exe/data130 - Ok
>goPhzZ.exe/data131 - Ok
>goPhzZ.exe/data132 - Ok
>goPhzZ.exe/data133 - Ok
>goPhzZ.exe/data134 - Ok
>goPhzZ.exe/data135 - Ok
>goPhzZ.exe/data136 - Ok
>goPhzZ.exe/data137 - Ok
>goPhzZ.exe/data138 - Ok
>goPhzZ.exe/data139 - Ok
>goPhzZ.exe/data140 - Ok
>goPhzZ.exe/data141 - Ok
>goPhzZ.exe/data142 - Ok
>goPhzZ.exe/data143 - Ok
>goPhzZ.exe/data144 - Ok
>goPhzZ.exe/data145 - Ok
>goPhzZ.exe/data146 - Ok
>goPhzZ.exe/data147 - Ok
>goPhzZ.exe/data148 - Ok
>goPhzZ.exe/data149 - Ok
>goPhzZ.exe/data150 - Ok
>goPhzZ.exe/data151 - Ok
>goPhzZ.exe/data152 - Ok
>goPhzZ.exe/data153 - Ok
>goPhzZ.exe/data154 - Ok
>goPhzZ.exe/data155 - Ok
>goPhzZ.exe/data156 - Ok
>goPhzZ.exe/data157 - Ok
>goPhzZ.exe/data158 - Ok
>goPhzZ.exe/data159 - Ok
>goPhzZ.exe/data160 - Ok
>goPhzZ.exe/data161 - Ok
>goPhzZ.exe/data162 - Ok
>goPhzZ.exe/data163 - Ok
>goPhzZ.exe/data164 - Ok
>goPhzZ.exe/data165 - Ok
>goPhzZ.exe/data166 - Ok
>goPhzZ.exe/data167 - Ok
>goPhzZ.exe/data168 - Ok
>goPhzZ.exe/data169 - Ok
>goPhzZ.exe/data170 - Ok
>goPhzZ.exe/data171 - Ok
>goPhzZ.exe/data172 - Ok
>goPhzZ.exe/data173 - Ok
>goPhzZ.exe/data174 - Ok
>goPhzZ.exe/data175 - Ok
>goPhzZ.exe/data176 - Ok
>goPhzZ.exe/data177 - Ok
>goPhzZ.exe/data178 - Ok
>goPhzZ.exe/data179 - Ok
>goPhzZ.exe/data180 - Ok
>goPhzZ.exe/data181 - Ok
>goPhzZ.exe/data182 - Ok
>goPhzZ.exe/data183 - Ok
>goPhzZ.exe/data184 - Ok
>goPhzZ.exe/data185 - Ok
>goPhzZ.exe/data186 - Ok
>goPhzZ.exe/data187 - Ok
>goPhzZ.exe/data188 - Ok
>goPhzZ.exe/data189 - Ok
>goPhzZ.exe/data190 - Ok
>goPhzZ.exe/data191 - Ok
>goPhzZ.exe/data192 - Ok
>goPhzZ.exe/data193 - Ok
>goPhzZ.exe/data194 - Ok
>goPhzZ.exe/data195 - Ok
>goPhzZ.exe/data196 - Ok
>goPhzZ.exe/data197 - Ok
>goPhzZ.exe/data198 - Ok
>goPhzZ.exe/data199 - Ok
>goPhzZ.exe/data200 - Ok
>goPhzZ.exe/data201 - Ok
>goPhzZ.exe/data202 - Ok
>goPhzZ.exe/data203 - Ok
>goPhzZ.exe/data204 - Ok
>goPhzZ.exe/data205 - Ok
>goPhzZ.exe/data206 - Ok
>goPhzZ.exe/data207 - Ok
>goPhzZ.exe/data208 - Ok
>goPhzZ.exe/data209 - Ok
>goPhzZ.exe/data210 - Ok
>goPhzZ.exe/data211 - Ok
>goPhzZ.exe/data212 - Ok
>goPhzZ.exe/data213 - Ok
>goPhzZ.exe/data214 - Ok
>goPhzZ.exe/data215 - Ok
>goPhzZ.exe/data216 - Ok
>goPhzZ.exe/data217 - Ok
>goPhzZ.exe/data218 - Ok
>goPhzZ.exe/data219 - Ok
>goPhzZ.exe/data220 - Ok
>goPhzZ.exe/data221 - Ok
>goPhzZ.exe/data222 - Ok
>goPhzZ.exe/data223 - Ok
>goPhzZ.exe/data224 - Ok
>goPhzZ.exe/data225 - Ok
>goPhzZ.exe/data226 - Ok
>goPhzZ.exe/data227 - Ok
>goPhzZ.exe/data228 - Ok
>goPhzZ.exe/data229 - Ok
>goPhzZ.exe/data230 - Ok
>goPhzZ.exe/data231 - Ok
>goPhzZ.exe/data232 - Ok
>goPhzZ.exe/data233 - Ok
>goPhzZ.exe/data234 - Ok
>goPhzZ.exe/data235 - Ok
>goPhzZ.exe/data236 - Ok
>goPhzZ.exe/data237 - Ok
>goPhzZ.exe/data238 - Ok
>goPhzZ.exe/data239 - Ok
>goPhzZ.exe/data240 - Ok
>goPhzZ.exe/data241 - Ok
>goPhzZ.exe/data242 - Ok
>goPhzZ.exe/data243 - Ok
>goPhzZ.exe/data244 - Ok
>goPhzZ.exe/data245 - Ok
>goPhzZ.exe/data246 - Ok
>goPhzZ.exe/data247 - Ok
>goPhzZ.exe/data248 - Ok
>goPhzZ.exe/data249 - Ok
>goPhzZ.exe/data250 - Ok
>goPhzZ.exe/data251 - Ok
>goPhzZ.exe/data252 - Ok
>goPhzZ.exe/data253 - Ok
>goPhzZ.exe/data254 - Ok
>goPhzZ.exe/data255 - Ok
>goPhzZ.exe/data256 - Ok
>goPhzZ.exe/data257 - Ok
>goPhzZ.exe/data258 - Ok
>goPhzZ.exe/data259 - Ok
>goPhzZ.exe/data260 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data261 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data262 - Ok
>goPhzZ.exe/data263 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data264 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data265 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data266 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data267 - Ok
>goPhzZ.exe/data268 - Ok
>goPhzZ.exe/data269 - Ok
>goPhzZ.exe/data270 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data271 - Ok
>goPhzZ.exe/data272 - Ok
>goPhzZ.exe/data273 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data274 - Ok
>goPhzZ.exe/data275 - Ok
>goPhzZ.exe/data276 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data277 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data278 - Ok
>goPhzZ.exe/data279 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data280 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data281 - Ok
>goPhzZ.exe/data282 - Ok
>goPhzZ.exe/data283 - Ok
>goPhzZ.exe/data284 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data285 - Ok
>goPhzZ.exe/data286 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data287 - Ok
>goPhzZ.exe/data288 - Ok
>goPhzZ.exe/data289 - Ok
>goPhzZ.exe/data290 - Ok
>goPhzZ.exe/data291 - Ok
>goPhzZ.exe/data292 - Ok
>goPhzZ.exe/data293 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data294 - Ok
>goPhzZ.exe/data295 - Ok
>goPhzZ.exe/data296 - Ok
>goPhzZ.exe/data297 - Ok
>goPhzZ.exe/data298 - Ok
>goPhzZ.exe/data299 - Ok
>goPhzZ.exe/data300 - Ok
>goPhzZ.exe/data301 - Ok
>goPhzZ.exe/data302 - Ok
>goPhzZ.exe/data303 - Ok
>goPhzZ.exe/data304 - Ok
>goPhzZ.exe/data305 - Ok
>goPhzZ.exe/data306 - Ok
>goPhzZ.exe/data307 - Ok
>goPhzZ.exe/data308 - Ok
>goPhzZ.exe/data309 - Ok
>goPhzZ.exe/data310 - Ok
>goPhzZ.exe/data311 - Ok
>goPhzZ.exe/data312 - Ok
>goPhzZ.exe/data313 - Ok
>goPhzZ.exe/data314 - Ok
>goPhzZ.exe/data315 - Ok
>goPhzZ.exe/data316 - Ok
>goPhzZ.exe/data317 - Ok
>goPhzZ.exe/data318 - Ok
>goPhzZ.exe/data319 - Ok
>goPhzZ.exe/data320 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data321 - Ok
>goPhzZ.exe/data322 - Ok
>goPhzZ.exe/data323 - Ok
>goPhzZ.exe/data324 - Ok
>goPhzZ.exe/data325 - Ok
>goPhzZ.exe/data326 - Ok
>goPhzZ.exe/data327 - Ok
>goPhzZ.exe/data328 - Ok
>goPhzZ.exe/data329 - Ok
>goPhzZ.exe/data330 - Ok
>goPhzZ.exe/data331 - Ok
>goPhzZ.exe/data332 - Ok
>goPhzZ.exe/data333 - Ok
>goPhzZ.exe/data334 contains an intrusion tool Tool.Impacket.7
>goPhzZ.exe/data335 - Ok
>goPhzZ.exe/data336 - Ok
>goPhzZ.exe/data337 - Ok
>goPhzZ.exe/data338 - Ok
>goPhzZ.exe/data339 - Ok
>goPhzZ.exe/data340 - Ok
>goPhzZ.exe/data341 - Ok
>goPhzZ.exe/data342 - Ok
>goPhzZ.exe/data343 - Ok
>goPhzZ.exe/data344 - Ok
>goPhzZ.exe/data345 - Ok
>goPhzZ.exe/data346 - Ok
>goPhzZ.exe/data347 - Ok
>goPhzZ.exe/data348 - Ok
>goPhzZ.exe/data349 - Ok
>goPhzZ.exe/data350 - Ok
>goPhzZ.exe/data351 - Ok
>goPhzZ.exe/data352 - Ok
>goPhzZ.exe/data353 - Ok
>goPhzZ.exe/data354 - Ok
>goPhzZ.exe/data355 - Ok
>goPhzZ.exe/data356 - Ok
>goPhzZ.exe/data357 - Ok
>goPhzZ.exe/data358 - Ok
>goPhzZ.exe/data359 - Ok
>goPhzZ.exe/data360 - Ok
>goPhzZ.exe/data361 - Ok
>goPhzZ.exe/data362 - Ok
>goPhzZ.exe/data363 - Ok
>goPhzZ.exe/data364 - Ok
>goPhzZ.exe/data365 - Ok
>goPhzZ.exe/data366 - Ok
>goPhzZ.exe/data367 - Ok
>goPhzZ.exe/data368 - Ok
>goPhzZ.exe/data369 - Ok
>goPhzZ.exe/data370 - Ok
>goPhzZ.exe/data371 - Ok
>goPhzZ.exe/data372 - Ok
>goPhzZ.exe/data373 - Ok
>goPhzZ.exe/data374 - Ok
>goPhzZ.exe/data375 - Ok
>goPhzZ.exe/data376 - Ok
>goPhzZ.exe/data377 - Ok
>goPhzZ.exe/data378 - Ok
>goPhzZ.exe/data379 - Ok
>goPhzZ.exe/data380 - Ok
>goPhzZ.exe/data381 - Ok
>goPhzZ.exe/data382 - Ok
>goPhzZ.exe/data383 - Ok
>goPhzZ.exe/data384 - Ok
>goPhzZ.exe/data385 - Ok
>goPhzZ.exe/data386 - Ok
>goPhzZ.exe/data387 - Ok
>goPhzZ.exe/data388 - Ok
>goPhzZ.exe/data389 - Ok
>goPhzZ.exe/data390 - Ok
>goPhzZ.exe/data391 - Ok
>goPhzZ.exe/data392 - Ok
>goPhzZ.exe/data393 - Ok
>goPhzZ.exe/data394 - Ok
>goPhzZ.exe/data395 - Ok
>goPhzZ.exe/data396 - Ok
>goPhzZ.exe/data397 - Ok
>goPhzZ.exe/data398 - Ok
>goPhzZ.exe/data399 - Ok
>goPhzZ.exe/data400 - Ok
>goPhzZ.exe/data401 - Ok
>goPhzZ.exe/data402 - Ok
>goPhzZ.exe/data403 - Ok
>goPhzZ.exe/data404 - Ok
>goPhzZ.exe/data405 - Ok
>goPhzZ.exe/data406 - Ok
>goPhzZ.exe/data407 - Ok
>goPhzZ.exe/data408 - Ok
>goPhzZ.exe/data409 - Ok
>goPhzZ.exe/data410 - Ok
>goPhzZ.exe/data411 - Ok
>goPhzZ.exe/data412 - Ok
>goPhzZ.exe/data413 - Ok
>goPhzZ.exe/data414 - Ok
>goPhzZ.exe/data415 - Ok
>goPhzZ.exe/data416 - Ok
>goPhzZ.exe/data417 - Ok
>goPhzZ.exe/data418 - Ok
>goPhzZ.exe/data419 - Ok
>goPhzZ.exe/data420 - Ok
>goPhzZ.exe/data421 - Ok
>goPhzZ.exe/data422 - Ok
>goPhzZ.exe/data423 - Ok
>goPhzZ.exe/data424 - Ok
>goPhzZ.exe/data425 - Ok

其它：
20240707-160525.zip - archive ZIP
>20240707-160525.zip/QIWWUY0857W0E5QRU76T.exe infected with Trojan.PWS.StealerNET.76
>20240707-160525.zip/cresoft.exe - archive BINARYRES
>>20240707-160525.zip/cresoft.exe/data001 - archive NET
>>20240707-160525.zip/cresoft.exe/data001 - Ok
>>20240707-160525.zip/cresoft.exe/data002 - archive NET
>>>20240707-160525.zip/cresoft.exe/data002/jiWcKSeP - Ok
>>20240707-160525.zip/cresoft.exe/data002 - Ok
>>20240707-160525.zip/cresoft.exe/data003 - archive NET
>>>20240707-160525.zip/cresoft.exe/data003/wpf/localstyles.baml - Ok
>>>20240707-160525.zip/cresoft.exe/data003/wpf/messageboxex.baml - Ok
>>>20240707-160525.zip/cresoft.exe/data003/wpf/toastnotificationview.baml - Ok
>>>20240707-160525.zip/cresoft.exe/data003/wpf/colordark.baml - Ok
>>>20240707-160525.zip/cresoft.exe/data003/wpf/colorlight.baml - Ok
>>>20240707-160525.zip/cresoft.exe/data003/wpf/toast.baml - Ok
>>>20240707-160525.zip/cresoft.exe/data003/wpf/styles.baml - Ok
>>20240707-160525.zip/cresoft.exe/data003 - Ok
>>20240707-160525.zip/cresoft.exe/data004 - Ok
>>20240707-160525.zip/cresoft.exe/data005 - Ok
>>20240707-160525.zip/cresoft.exe/data006 - Ok
>>20240707-160525.zip/cresoft.exe/data007 - Ok
>>20240707-160525.zip/cresoft.exe/data008 - Ok
>>20240707-160525.zip/cresoft.exe/data009 - Ok
>>20240707-160525.zip/cresoft.exe/data010 - archive NET
>>20240707-160525.zip/cresoft.exe/data010 - Ok
>>20240707-160525.zip/cresoft.exe/data011 - Ok
>>20240707-160525.zip/cresoft.exe/data012 - Ok
>>20240707-160525.zip/cresoft.exe/data013 - Ok
>>20240707-160525.zip/cresoft.exe/data014 - Ok
>>20240707-160525.zip/cresoft.exe/data015 - Ok
>>20240707-160525.zip/cresoft.exe/data016 - Ok
>>20240707-160525.zip/cresoft.exe/data017 - archive NET
>>20240707-160525.zip/cresoft.exe/data017 - Ok
>>20240707-160525.zip/cresoft.exe/data018 - Ok
>>20240707-160525.zip/cresoft.exe/data019 - Ok
>>20240707-160525.zip/cresoft.exe/data020 - Ok
>>20240707-160525.zip/cresoft.exe/data021 - Ok
>>20240707-160525.zip/cresoft.exe/data022 - Ok
>>20240707-160525.zip/cresoft.exe/data023 - archive NET
>>20240707-160525.zip/cresoft.exe/data023 - Ok
>>20240707-160525.zip/cresoft.exe/data024 - archive NET
>>20240707-160525.zip/cresoft.exe/data024 - Ok
>>20240707-160525.zip/cresoft.exe/data025 - archive NET
>>20240707-160525.zip/cresoft.exe/data025 - Ok
>20240707-160525.zip/cresoft.exe - Ok
>20240707-160525.zip/memsoft.exe - archive BINARYRES
>>20240707-160525.zip/memsoft.exe/data001 - Ok
>>20240707-160525.zip/memsoft.exe/data002 - archive NET
>>20240707-160525.zip/memsoft.exe/data002 - Ok
>>20240707-160525.zip/memsoft.exe/data003 - archive NET
>>>20240707-160525.zip/memsoft.exe/data003/HnjEkgHf - Ok
>>20240707-160525.zip/memsoft.exe/data003 - Ok
>>20240707-160525.zip/memsoft.exe/data004 - archive NET
>>20240707-160525.zip/memsoft.exe/data004 - Ok
>20240707-160525.zip/memsoft.exe - Ok
>20240707-160525.zip/rama.exe packed by ENIGMA
>>20240707-160525.zip/rama.exe packed by BINARYRES
>>>20240707-160525.zip/rama.exe - archive BINARYRES
>>>>20240707-160525.zip/rama.exe/data001 - Ok
>>>>20240707-160525.zip/rama.exe/data002 - Ok
>>>20240707-160525.zip/rama.exe - Ok
>20240707-160525.zip/serve-cleaned.exe infected with BackDoor.AsyncRATNET.2