2x

Error50X

ㅤ通过QQ闪传分享了【2026年4月2日.zip】
链接：https://qfile.qq.com/q/jsrLEy1va2
F.EXE

sogou_pinyin_x64_v1.0_win.exe


sogou衍生物【X1WNJP.zip】https://qfile.qq.com/q/cSmdXtQ8hi

UNknownOoo

两个样本同源应该

火绒
运行：拦截被注入进程外联域名

1. 风险分类：木马盗号
   
2. 访问网址：vaeth.cn
   
3. 操作结果：已阻止
   
4. 
   
5. 进程ID：5488
   
6. 操作进程：C:\Windows\System32\sihost.exe
   
7. 操作进程命令行：sihost.exe

复制代码

a233

Myrenaser

BDTS双击sougou触发ATD，断网后网络未能恢复
F.exe解压 → QD:Trojan.Astraea.F6CF148C11

xjwtzq

奇安信拦截2

pyic

Dr.web分析后认为存在威胁，稍后会入库


F.Exe

Greetings,
  

Your submission has been analyzed. A corresponding record has been added to the Dr.Web virus database and will be available with the next update.


Threat: Trojan.MulDrop36.39156




Thank you for the cooperation.

sogou_pinyin_x64_v1.0_win.exe

Greetings,
  

Your submission has been analyzed. A corresponding record has been added to the Dr.Web virus database and will be available with the next update.


Threat: Trojan.Packed2.51241




Thank you for the cooperation.

心醉咖啡

360

c199529

腾讯电脑管家18

本体及衍生物 4/5

---------------------
2026-4-3 23:56:07 MD5:01dadc94a46f4883df00f67424c9b8af
2026年4月2日\F.Exe [Win32.Backdoor.Farfli.Ekjl]
2026-4-3 23:56:07 MD5:2c552da628941528fa73afd51e03238d
2026年4月2日\sogou_pinyin_x64_v1.0_win.exe [Win32.Trojan.Generic.Snkl]
2026-4-3 23:56:07 MD5:05537deca067c5360f1d44d901c0b66f
X1WNJP\R5jps.exe [Win32.Trojan.Phish.Pzfl]
2026-4-3 23:56:07 MD5:6c3bcbd53c7859ba4fbffb87b9b56b36
X1WNJP\3OZ1gxud.5 [Win64.Trojan.Kryptik.Rsmw]
---------------------