资源资料
[上传者]蜗壳会员514
[说明] 源码来自互联网,以下数据均来自AI处理非人工审核!请查看下列查杀再决定是否导入项目!短时间频繁使用本地下载可能会被创宇盾拦截,拦截后可以使用网盘下载!
下载地址:本地下载 网盘下载(推荐)
启动页main.iyu载入事件部分代码
uycl("#fd000000",false)
s a = 0
s b = 0
s c = "#FF4F8DFE|#FF3DA5FE|#FF27C3FD"
s d = "0"
s e = "leftright"
ngde(a, b, c, d, e, pressed)
us(28,"background",pressed)
ngde(3,15,"#ffffff","#ffffff",guk)
us(7,"background",guk)
ngde(3,15,"#ffffff","#ffffff",guk)
us(13,"background",guk)
ngde(3,15,"#ffffff","#ffffff",guk)
us(14,"background",guk)
ngde(3,15,"#ffffff","#ffffff",guk)
us(21,"background",guk)
ngde(3,15,"#ff6285c7","#dbdbdbdb",guk)
us(9,"background",guk)
ngde(3,15,"#ff6285c7","#dbdbdbdb",guk)
us(11,"background",guk)
ngde(3,100,"#ffee7785","#dbdbdbdb",guk)
us(10,"background",guk)
shb(a)
f(a == false)
{
}
else
{
us(21,"visibility","visible")
}
syso(a)
t()
{
hs("https://share.weiyun.com/1a0e0c9f4b8a68a52a9660610526caed",fh)
sj(fh,"【","】",bb)
syso(bb)
f(bb?"开启")
{
ufnsui()
{
utw(null,"温馨提示","软件已出新版,请立即加群更新 ","更新软件","官方q群",true,utw)
{
ss("mqqapi://card/show_pslcard?src_type=internal&version=1&uin=202902422&card_type=group&source=qrcode",joinqq)
sit(a,"action", "android.intent.action.VIEW")
sit(a,"data",joinqq)
uit(a, "chooser", "QQ群窗口")
end()
}
else
{
ss("mqqapi://card/show_pslcard?src_type=internal&version=1&uin=689155505&card_type=group&source=qrcode",joinqq)
sit(a,"action", "android.intent.action.VIEW")
sit(a,"data",joinqq)
uit(a, "chooser", "QQ群窗口")
end()
}
}
}
else
{
syso("no")
}
}
else
{
tw("请更新")
}
}
源码病毒云检测评估结果
-----------------
(mian.iyu)中存在:
疑似强制加群(或好友)(可能是恶意代码,大多数强制加群(或好友)的源码是不可用的或被多次盗用过)
疑似复制项目内容到其他目录(请自行参考代码,大多数恶意代码都是通过复制项目内容到其他项目里面从而达到感染的)
疑似恶意替换目录文件(该程序可能会非法替换某个目录的文件从而造成破坏)
疑似恶意修改目录(该程序可能会为经过用户许可非法修改某个目录的所有文件,以此达到破坏目的)
遍历目录(该程序通过遍历目录达到某种目的,误报率较高)
屌丝病毒变种2(iApp最早出现的恶意代码变种,通过注入main.iyu界面达到感染,目前已提供查杀功能)
疑似通过多行换行隐藏代码1(该程序可能会通过大量换行隐藏恶意代码,并且大多数屌丝病毒是通过该换行隐藏的,目前已提供查杀功能)
疑似操作iApp界面(误报率较高,应用可能会对iApp项目界面进行操作)
屌丝病毒初代(iApp最早出现的恶意代码变种,通过注入默认目录下的源码而达到感染的目的,具有感染性 主要受害位置为:mian.iyu的载入事件 )

随机推荐

投稿

Copyright © 漫夜 All rights reserved.( 湘ICP备17023116号-1

湘公网安备 43080202000355号