home

通用文件及工具.rar

The file 通用文件及工具.rar has been detected as a potentially unwanted program by 4 anti-malware scanners. The file has been seen being downloaded from nj.poms.baidupcs.com.
MD5:
6f27f7a4c02daf3362b61ca82c8c881a

SHA-1:
c718d8fd176dbd619ba46176f3faaea7502ca9f5

SHA-256:
9d5032d08b8592bee20e45030599b7ffd29812d1b3d6496a56c51baa94aff5a6

Scanner detections:
4 / 68

Status:
Potentially unwanted

Analysis date:
11/24/2024 8:32:51 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Riskware.FTPSrv
7.1.1

ESET NOD32
Win32/TFTPD32.B potentially unsafe application
7.0.302.0

NANO AntiVirus
Trojan.Win32.TFTPD32.dvvbpv
0.30.26.3947

VIPRE Antivirus
TFTPD32 (not malicious)
44758

File size:
99.5 KB (101,837 bytes)

Common path:
C:\users\{user}\downloads\???????.rar

The file 通用文件及工具.rar has been seen being distributed by the following URL.

http://nj.poms.baidupcs.com/.../6f27f7a4c02daf3362b61ca82c8c881a?bkt=p-c99152ae24ffc6ebd6c0e919a8f08d68&fid=2872468736-250528-2345130940&time=1443519534&sign=FDTAXGERBH-DCb740ccc5511e5e8fedcff06b081203-raUVx27fFPamjv9IGeCg2Af5ftU=&to=nb&fm=Nan,B,T,t&sta_dx=0&sta_cs=0&sta_ft=rar&sta_ct=7&fm2=Nanjing,B,T,t&newver=1&newfm=1&secfm=1&flow_ver=3&pkey=14006f27f7a4c02daf3362b61ca82c8c881a9f9955d4000000018dcd&expires=1443520134&rt=sh&r=837877924&mlogid=6302310049243208024&sh=1&vuk=1211614143&vbdid=3718118642&fin=???????.rar&fn=???????.rar&uta=0&rtype=0&iv=1&isw=0&dp-logid=6302310049243208024&dp-callid=0.1.1

Remove 通用文件及工具.rar - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.