Threat Feed | Online Malware Sandbox

2026-10-26T10:05:30.100

Windows Exe (x86-32)

FlashUtil.exe

malicious

SHA256: e6db741c827dcecfbef9c1fce549bfd48b5f35b0634b3686ef0ad9b7dc5d2a36

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

4/5

Malicious file detected via reputation

2/5

Deletes file after execution

1/5

Installs system startup script or application

1/5

Drops PE file

1/5

Queries system time

1/5

Executes dropped PE file

2026-10-26T10:05:17.972

Windows Exe (x86-32)

FlashUtil.exe

malicious

SHA256: e49dec435873d09b92da66d3821797bda09ebc412cd13fcce0c8c9e277a39e67

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

4/5

Malicious file detected via reputation

2/5

Deletes file after execution

1/5

Queries system time

1/5

Installs system startup script or application

1/5

Drops PE file

1/5

Executes dropped PE file

EaseUS Data Recovery Wizard.exe

2026-10-26T10:04:17.205

Windows Exe (x86-32)

EaseUS Data Recovery Wizard.exe

malicious

SHA256: f08b70958155e205b2814a9d91184f1a7b775c665ac422cb6ac1af2c8a658717

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

4/5

Malicious file detected via reputation

2/5

Delays execution

2/5

Schedules task

2/5

Creates an unusually large number of processes

2/5

Uses Alternate Data Stream (ADS) file attributes

1/5

Enumerates running processes

1/5

Reads mouse position

1/5

Monitors mouse movements and clicks

1/5

Enables process privileges

1/5

Content matched by YARA rules

1/5

Resolves API functions dynamically

1/5

Executes dropped PE file

1/5

Queries system time

1/5

Tries to detect debugger

1/5

Creates mutex

1/5

Installs system startup script or application

1/5

Deletes file after execution

1/5

Creates process with hidden window

1/5

Reads system data

Spyware

2026-10-26T10:02:58.064

Windows Exe (x86-32)

FlashUtil.exe

malicious

SHA256: 011ccc3d4072a7ef4a20a00339e38b8cd454afbd30e452726b8d75f3754763bf

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

4/5

Malicious file detected via reputation

2/5

Deletes file after execution

1/5

Installs system startup script or application

1/5

Executes dropped PE file

1/5

Drops PE file

1/5

Queries system time

2026-10-26T10:02:34.790

Windows Exe (x86-32)

FlashUtil.exe

malicious

SHA256: 5cfb616db89f41317c4631c543a336a7d7efe02a682eb76fd1d27a0c016a508b

VMRay Threat Identifiers

Severity

Operation

5/5

Malicious content matched by YARA rules

4/5

Malicious file detected via reputation

2/5

Deletes file after execution

1/5

Installs system startup script or application

1/5

Executes dropped PE file

1/5

Drops PE file

1/5

Queries system time