伪装搜狗输入法的银狐本体+衍生物1x，VT仅卡巴报毒

22222221

vt8月19日 17：14   ：https://www.virustotal.com/gui/f ... 26975d6fc?nocache=1 仅卡巴报毒
来自123云盘的分享：伪装为搜狗输入法的银狐.zip链   接：https://www.123865.com/s/tRCbVv-25Aq3?pwd=UaIz提取码：UaIz

请叫我德玛西亚

奇安信双击kill

munsimli

這網盤無法下載玩不了

a233

Avast杀衍生物

jijianan2007

360TS

lingchenheiye

火绒处理出三个：
总计用时：00:10:57
扫描对象：17749
扫描文件：1
发现风险：3
已处理风险：3
病毒详情：
风险路径：C:\Sandbox\19886\DefaultBox\user\current\Desktop\病毒\伪装为搜狗输入法的银狐\Startup Applications.zip >> sluvou_pinyin5.02.msi, 病毒名：TrojanDropper/Agent.aek, 病毒ID：b001421d68f095d4, 处理结果：已处理，删除文件
风险路径：C:\Sandbox\19886\DefaultBox\user\current\Desktop\病毒\伪装为搜狗输入法的银狐\Startup Applications.zip >> sluvou_pinyin5.02.msi >> libcurl.dll, 病毒名：Trojan/HiJack.sx, 病毒ID：749f08b5d75b38e3, 处理结果：已处理，删除文件
风险路径：C:\Sandbox\19886\DefaultBox\user\current\Desktop\病毒\伪装为搜狗输入法的银狐\Startup Applications.zip >> Startup Applications\libcurl.dll, 病毒名：Trojan/HiJack.sx, 病毒ID：749f08b5d75b38e3, 处理结果：已处理，删除文件

压缩的时空

munsimli 发表于 2025-8-19 18:17
這網盤無法下載玩不了

https://wormhole.app/4x5qQy#dtsT30kH4yvPmSZXbkckQg
分流

Curve25519

ESET Smart Security Premium 解压、扫描 miss，沙盘中安装也不报

扫描日志
检测引擎的版本: 31723 (20250820)
日期: 2025/8/20  时间: 15:13:50
已扫描的磁盘、文件夹和文件: W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications
用户: DESKTOP-K07940I\Admin
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > aegis.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/304_a592486.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/474_0e262ed.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/6_12770df.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/7_3f88f33.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/8_5866cc4.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/9_f86c4dc.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/aidraw_9807e73.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/airead_215f357.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/bg_68d2e93.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/exit-imgs_0bd4532.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/logo-big_3db1ae7.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/new-sogou-logo-sider_974aed6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/setting-select_6423fe6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/pages/main_31dbb79.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > index.html - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > polyfill.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-router-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\伪装为搜狗输入法的银狐\Startup Applications\sluvou_pinyin5.02.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.6.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react.production.min.js - 错误 - 文件受密码保护
已扫描的对象数: 2498
检测数: 0
完成时间: 15:14:24  总扫描时间: 34 秒 (00:00:34)

biue

腾讯电脑管家 1X