fake app 1x vt初扫5/56

ulyanov2233

【sogoupinyin3.11.12_Srtup.rar】
链接：https://qfile.qq.com/q/mZdwLXoqjK
https://wormhole.app/YZYy1p#w1wn1uvXYdy_VrU06MZ_Cg
https://www.virustotal.com/gui/f ... 3ea4e495b891fdb8d7f
c2地址:206.119.52.180

UNknownOoo

火绒
扫描：特征捉

1. 病毒详情：
   
2. 风险路径：C:\Users\UnknownOoo\Downloads\sogoupinyin3.11.12_Srtup.msi, 病毒名：TrojanDropper/Agent.aek, 病毒ID：b001421d68f095d4, 处理结果：暂不处理
   

复制代码

LSPD

eset 杀衍生物

1. 2025/8/8 17:42:36;文件系统实时防护;文件;C:\Program Files (x86)\Sogoushurufa_3.1.15_setup\Sogoushurufa_3.1.15_setup\Startup Applications\installer.exe;ML/Augur 特洛伊木马;已通过删除清除;NT AUTHORITY\SYSTEM;在通过应用程序创建的新文件上发生了事件: C:\Windows\System32\msiexec.exe (0E8B428B24AE565B8E23DEA2057112F159C76312).;14639517F4499445EC8453D2764A8249550AA11C;2025/8/5 21:10:06

复制代码

tihs

吃瓜群众第123位

AhnLab miss 双击无提示

PhozeAMTB

WD 扫描miss
双击报毒

munsimli

Emsisoft掃描msii，雙擊殺衍生物

2025/8/8 下午 06:12:17
行為監控檢測 可疑行為 "Spyware" 來自於 C:\Program Files (x86)\Sogoushurufa_3.1.15_setup\Sogoushurufa_3.1.15_setup\Startup Applications\installer.exe (SHA1: 14639517F4499445EC8453D2764A8249550AA11C)

2025/8/8 下午 06:12:18
通知： "在以下程式中發現了可疑行為： C:\Program Files (x86)\Sogoushurufa_3.1.15_setup\Sogoushurufa_3.1.15_setup\Startup Applications\installer.exe" .

munsimli

卡巴掃描miss，KSN顯示未知，雙擊殺衍生物

事件: 物件已刪除
使用者: NT AUTHORITY\SYSTEM
使用者類型: 系統使用者
應用程式名稱: msiexec.exe
應用程式路徑: C:\Windows\System32
元件: 檔案防護
結果描述: 已刪除
類型: 木馬程式
名稱: HEUR:Backdoor.Win32.nimpl.a
精確度: 啟發式分析
威脅等級: 高
物件類型: 檔案
物件名稱: data_file.png
物件路徑: C:\Program Files (x86)\Sogoushurufa_3.1.15_setup\Sogoushurufa_3.1.15_setup\Startup Applications
物件的 MD5: 1CC9A3D3DAD3C19FECEF8AA485CA13B4

心醉咖啡

360

Curve25519

ESET Smart Security Premium 解压没反应，扫描杀

扫描日志
检测引擎的版本: 31664 (20250808)
日期: 2025/8/9  时间: 10:15:30
已扫描的磁盘、文件夹和文件: W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi
用户: DESKTOP-K07940I\Admin
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > aegis.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/304_a592486.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/474_0e262ed.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/6_12770df.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/7_3f88f33.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/8_5866cc4.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/9_f86c4dc.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/aidraw_9807e73.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/airead_215f357.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/bg_68d2e93.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/exit-imgs_0bd4532.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/logo-big_3db1ae7.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/new-sogou-logo-sider_974aed6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/setting-select_6423fe6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/pages/main_31dbb79.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > index.html - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > polyfill.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-router-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogoupinyin3.11.12_Srtup\sogoupinyin3.11.12_Srtup.msi > MSI > disk1.cab > CAB > installer.exe - ML/Augur 特洛伊木马 - 已保留
已扫描的对象数: 2487
检测数: 1
已清除的对象数: 0
完成时间: 10:16:03  总扫描时间: 33 秒 (00:00:33)