#DllHijacking

Fadouse

Lzo81~w1/WasabiDLL.dll -> Kaspersky Kill

1. Event: Malicious object detected
   
2. User: NT AUTHORITY\SYSTEM
   
3. User type: System user
   
4. Application name: elastic-endpoint.exe
   
5. Application path: C:\Program Files\Elastic\Endpoint
   
6. Component: File Anti-Virus
   
7. Result description: Detected
   
8. Type: Trojan
   
9. Name: UDS:Trojan.Win32.Dllhijack.a
   
10. Precision: Exactly
    
11. Threat level: High
    
12. Object type: File
    
13. Object name: WasabiDLL.dll
    
14. Object path: E:\Code\Virus\Lzo81~w1
    
15. MD5 of an object: 2EFC9F89EE1CAAF0593D2BA731F43B79
    
16. Reason: Cloud Protection

复制代码

scoretcal/zlibai.dll -> Elastic Defend Kill


TT/BaiduNetdiskUnite.exe 双击联网无反应，疑似环境监测

xkxkv/KeyboardH.dll -> Elastic Defend Kill

xiaoxing365

卡巴扫描1/4

aboringman

天守：2



scoretcal：



剩下一个寄



Sangfor（

aikafans

D:\desktop\#DllHijacking\scoretcal\zlibai.dll

Win64/Packed.VMProtect.X 可疑应用程序 的变量

xiaoxing365

aboringman 发表于 2024-9-6 19:02
天守：2

兄弟，奇安信怎么样？好用吗

GreatMOLA

MD 静态


执行


  

biue

腾讯电脑管家 1X