fake app 4x

myywin

https://wormhole.app/4xmb3R#IuXvhBsif2yXgW4WcDmkqA
bing cn真是毒窝

增加ps：有一个可能是白文件

莒县小哥

Curve25519

ESET Smart Security Premium 解压全不报，扫描 kill 2x（ChromceSetcup.msi、sogou_pinyin-2245.msi），右键查看 LiveGrid 信誉时 LiveGrid kill 搜狗拼音输入法.exe。sogou_pinyin_guanwang_15.8.exe 具有有效数字签名，为白文件

扫描日志
检测引擎的版本: 31918 (20250925)
日期: 2025/9/25  时间: 14:26:15
已扫描的磁盘、文件夹和文件: W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi;W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\搜狗拼音输入法.exe;W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\ChromceSetcup.msi;W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin_guanwang_15.8.exe
用户: DESKTOP-K07940I\Admin
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\ChromceSetcup.msi > MSI > disk1.cab > CAB > gametea2_11154.exe > NSIS > gamelist_1_1.zip > ZIP >  - 压缩文件已损坏
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\ChromceSetcup.msi > MSI > disk1.cab > CAB > gametea2_11154.exe > NSIS > gamelist_2_1.zip > ZIP >  - 压缩文件已损坏
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\ChromceSetcup.msi > MSI > disk1.cab > CAB > gametea2_11154.exe > NSIS > gamelist_3_1.zip > ZIP >  - 压缩文件已损坏
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\ChromceSetcup.msi > MSI > disk1.cab > CAB > gametea2_11154.exe > NSIS > gamelist_nl.zip > ZIP >  - 压缩文件已损坏
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\ChromceSetcup.msi > MSI > disk1.cab > CAB > gametea2_11154.exe > NSIS > matchlist_1.zip > ZIP >  - 压缩文件已损坏
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\ChromceSetcup.msi > MSI > disk1.cab > CAB > gametea2_11154.exe > NSIS > serverlist_1.zip > ZIP >  - 压缩文件已损坏
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\ChromceSetcup.msi > MSI > disk1.cab > CAB > EnumW.dll - Win64/Agent_AGen.GNG 特洛伊木马 的变量 - 已将选择操作推迟到扫描完成后进行
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > txt - Win32/Farfli.CMI 特洛伊木马 - 已将选择操作推迟到扫描完成后进行
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-router-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._aegis.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._build - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._index.html - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._polyfill.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._react-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._react-router-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._react.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/._.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/._client - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/._.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/._ai-assistant - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._304_3979cf6.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._474_593b3e0.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._assets - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._pages - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._6_0139599.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._7_726e849.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._8_39a47c9.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._9_ab1e7de.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._aidraw_5f0e6f6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._airead_32260cf.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._bg_8129e8c.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._exit-imgs_ee3ba67.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._logo-big_942cf1b.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._new-sogou-logo-sider_59892c0.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._setting-select_bb16c47.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/pages/._main_ec1b493.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/304_3979cf6.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/474_593b3e0.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/6_0139599.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/7_726e849.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/8_39a47c9.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/9_ab1e7de.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/aidraw_5f0e6f6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/airead_32260cf.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/bg_8129e8c.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/exit-imgs_ee3ba67.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/logo-big_942cf1b.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/new-sogou-logo-sider_59892c0.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/setting-select_bb16c47.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/pages/main_ec1b493.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > aegis.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > index.html - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > polyfill.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\ChromceSetcup.msi > MSI > disk1.cab > CAB > gametea2_11154.exe > NSIS > gamelist_1_1.zip > ZIP >  - 压缩文件已损坏
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\ChromceSetcup.msi > MSI > disk1.cab > CAB > gametea2_11154.exe > NSIS > gamelist_2_1.zip > ZIP >  - 压缩文件已损坏
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\ChromceSetcup.msi > MSI > disk1.cab > CAB > gametea2_11154.exe > NSIS > gamelist_3_1.zip > ZIP >  - 压缩文件已损坏
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\ChromceSetcup.msi > MSI > disk1.cab > CAB > gametea2_11154.exe > NSIS > gamelist_nl.zip > ZIP >  - 压缩文件已损坏
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\ChromceSetcup.msi > MSI > disk1.cab > CAB > gametea2_11154.exe > NSIS > matchlist_1.zip > ZIP >  - 压缩文件已损坏
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\ChromceSetcup.msi > MSI > disk1.cab > CAB > gametea2_11154.exe > NSIS > serverlist_1.zip > ZIP >  - 压缩文件已损坏
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\ChromceSetcup.msi > MSI > disk1.cab > CAB > EnumW.dll - Win64/Agent_AGen.GNG 特洛伊木马 的变量 - 已删除
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > txt - Win32/Farfli.CMI 特洛伊木马 - 已删除
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-router-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._aegis.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._build - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._index.html - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._polyfill.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._react-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._react-router-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._react.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/._.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/._client - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/._.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/._ai-assistant - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._304_3979cf6.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._474_593b3e0.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._assets - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._pages - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._6_0139599.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._7_726e849.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._8_39a47c9.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._9_ab1e7de.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._aidraw_5f0e6f6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._airead_32260cf.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._bg_8129e8c.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._exit-imgs_ee3ba67.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._logo-big_942cf1b.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._new-sogou-logo-sider_59892c0.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._setting-select_bb16c47.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/pages/._main_ec1b493.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/304_3979cf6.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/474_593b3e0.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/6_0139599.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/7_726e849.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/8_39a47c9.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/9_ab1e7de.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/aidraw_5f0e6f6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/airead_32260cf.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/bg_8129e8c.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/exit-imgs_ee3ba67.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/logo-big_942cf1b.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/new-sogou-logo-sider_59892c0.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/setting-select_bb16c47.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/pages/main_ec1b493.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > aegis.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > index.html - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > polyfill.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\fake 4x\sogou_pinyin-2245.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-dom.production.min.js - 错误 - 文件受密码保护
已扫描的对象数: 4619
检测数: 2
已清除的对象数: 2
完成时间: 14:27:44  总扫描时间: 89 秒 (00:01:29)

2025/9/25 14:30:58;文件系统实时防护;文件;\Device\TweakCubeRamDisk0\Sandbox\Admin\DefaultBox\drive\W\fake 4x\搜狗拼音输入法.exe;Suspicious Object;已通过删除清除;DESKTOP-K07940I\Admin;尝试通过应用程序访问文件时发生事件: C:\Program Files\ESET\ESET Security\egui.exe (CCCC8ACEDC552EE115C6BC6D560378998796D407).;5EFDE6C9251FE5E1ED67CDCFC17DEA1AF3F63D4A;2025/9/25 14:23:58;;

awsl10000次

有白文件？op miss 1x，首次出现于8月22日 vt0
https://opentip.kaspersky.com/0E ... /results?tab=upload
剩余三个卡巴检出

Curve25519

awsl10000次 发表于 2025-9-25 14:29
有白文件？op miss 1x，首次出现于8月22日 vt0
https://opentip.kaspersky.com/0EE362703299B0D58682B6899 ...

sogou_pinyin_guanwang_15.8.exe 具有搜狗的有效数字签名，且 ESET LiveGrid 信誉良好

myywin

awsl10000次 发表于 2025-9-25 14:29
有白文件？op miss 1x，首次出现于8月22日 vt0
https://opentip.kaspersky.com/0EE362703299B0D58682B6899 ...

惊了 钓鱼网站也会有官方安装包

xiaozhu009

自制 souxiao模型检出2x 误报1x miss 1x

LSPD

myywin 发表于 2025-9-25 14:45
惊了 钓鱼网站也会有官方安装包

感觉会通过在虚假安装包及官方安装包之间切换以规避审查

心醉咖啡

360

lovexiaomo

双击安装后好难清除