VT低检出(火绒和腾讯检出)

Rukia

VirusTotal - File - 7867e9f5be414c804a64723ce52b8de7bfa678b5aab2689d4d43eedda460edd7  
假的搜狗输入法，有断网操作
C:\inetpub\wwwroot\NZ7IAz2\TyUvx\is-7IQ1M.tmp 恶意的dll文件
https://wormhole.app/ROEWoa#SyKaM4jJsW_wcIrVOc1lHg
解压密码: infected

Myrenaser

红伞扫描

莒县小哥

WGC_ZY

EIS:
C:\Users\Zhang\Downloads\SG.Setup.0.2.0.1.exe.dat » INNO » {app}\TyUvx\f.w;a variant of Win64/Agent.IBD trojan;cleaned by deleting;;864001E87CC95D26BCCC530B7EDDD6D9D9A9697D;

superLYT

双击ATD

LingGao

Microsoft Defender

“SG.Setup.0.2.0.1.exe”
Trojan:Win32/Wacatac.H!ml

谈谈MEMZ

Cortex XDR Kill

1. Application Information:
   
2. Source process ID: 4088
   
3. Source process name: SG.Setup.0.2.0.1.exe
   
4. Source application location: C:\Users\User\Desktop\SG.Setup.0.2.0.1.exe
   
5. Source process command line: "C:\Users\User\Desktop\SG.Setup.0.2.0.1.exe"
   
6. Source application version: 10.0.40219.1        
   
7. Source application publisher:                                                            
   
8. Source application signers:
   
9. Source process user name: N/A\User
   
10. 
    
11. 
    
12. Prevention Information:
    
13. Prevention date: 2026年2月2日
    
14. Prevention time: 0:48:22
    
15. OS version: 10.0.20348
    
16. Component: Behavioral Threat Protection
    
17. Cortex XDR code: C0400067
    
18. Prevention description: 检测到恶意行为
    
19. Verdict: 0
    
20. Quarantined: False
    
21. Post-Detected: False
    
22. Rule name: sync.duplicate_handle_pool_party_injection
    
23. Remote actor causality ID: AdyTmmvODzEAAA/4AAAAAA==

复制代码

biue

腾讯电脑管家 1X