Fake 搜狗浏览器 4x

MinikoMew

https://z-sougou.com<dot>cn/download.html
https://n-sougou.com<dot>cn/download.html

这两个网址每次下载都是 不同的 hash , 我没法再多下几个样本了
https://www.virustotal.com/gui/file/a70e441233f52a6a0f9bc7e67a74814a73d2d755a456e09c0992794b9f5da2e1?nocache=1
https://www.virustotal.com/gui/file/343979a99b1618a064877e9eacffd4e267507966b9aa4681d0599d581e599562/detection
https://www.virustotal.com/gui/file/93b951eed99cac5e0f5127deefba65999cc41f91d94a1e0223e96bd84437509c?nocache=1


【SougouBrowser.zip】
https://qfile.qq.com/q/UHuW78t26e


-----------------------------------------------------https://www.virustotal.com/gui/file/ffd0d827128770402eb30bd7d7ba370a1e32d3ec10909f1a2576a6dac8967aa7
https://qq-sougou.com<dot>cn/
【sougouSsrl2.8 (2).zip】
https://qfile.qq.com/q/PB2rB1Hqw0

superLYT

双击后拦截释放的exe

莒县小哥

卡巴斯基清空

WGC_ZY

卡巴清空：
Name: HEUR:Trojan.VBS.SAgent.gen
Precision: Heuristic analysis
Threat level: High
Object type: File
Object name: SougouBrowser1fe-x64.exe
Object path: C:\Users\Zhang\Downloads\SougouBrowser\SougouBrowser1fe-x64
MD5 of an object: 507ED640D60451FAB18524BF863ACF6C
Reason: Hash
Databases release date: Today, 2/5/2026 18:27:00

Name: HEUR:Trojan.VBS.SAgent.gen
Precision: Heuristic analysis
Threat level: High
Object type: File
Object name: SougouBrowser1bb-x64.exe
Object path: C:\Users\Zhang\Downloads\SougouBrowser\SougouBrowser1bb-x64
MD5 of an object: 869D4BF1EA2CD1BBF01DA44E3CDF9BA8
Reason: Machine learning
Databases release date: Today, 2/5/2026 18:27:00

Name: HEUR:Trojan.VBS.SAgent.gen
Precision: Heuristic analysis
Threat level: High
Object type: File
Object name: SougouBrowser4bd-x64.exe
Object path: C:\Users\Zhang\Downloads\SougouBrowser\SougouBrowser4bd-x64
MD5 of an object: 0F380C4B832F34FD30A57E34E5F157E2
Reason: Machine learning
Databases release date: Today, 2/5/2026 18:27:00

EIS扫描不报，不知道ESSP咋样（我原来的订阅给退了= =），随便找了其中一个双击，EIS杀掉的应该是加载器吧。C:\ProgramData\CfServerSoftwareDistribution\is-C4B7M.tmp;a variant of Win32/GenKryptik.HMWN trojan;cleaned by deleting;occurred on a new file created by the application: C:\Users\Zhang\AppData\Local\Temp\is-8IIL4.tmp\cloudflared_installer.tmp

Deep behavioral inspection scanner;file;C:\Users\Zhang\Desktop\SougouBrowser\SougouBrowser4bd-x64\SougouBrowser4bd-x64.exe;Win32/GenKryptik.HMWN trojan;cleaned by deleting

星云劫

三个ASR规则拦截，一个报毒。

xjwtzq

安天拦截