1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, VirSCAN can scan compressed files with password 'infected' or 'virus'.
Language
Server load
1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, VirSCAN can scan compressed files with password 'infected' or 'virus'.
| Safety rating:60 |
| Behavior list |
| Basic Information | |
|---|---|
| MD5: | 68a4669eae7fc844669807aece8a85ae |
| file type: | EXE |
| Production company: | 纯属娱乐ぐ |
| version: | 0.0.0.0---v1.01 |
| Shell or compiler information: | COMPILER:Borland Delphi 6.0 - 7.0 [Overlay] |
| Key behavior | |
|---|---|
| Behavior description: | 在桌面创建快捷方式 |
| details: | C:\Documents and Settings\Administrator\桌面\剌客信条2.lnk |
| Behavior description: | 隐藏指定窗口 |
| details: | [Window,Class] = [Smart Install Maker,obj_Form] |
| [Window,Class] = [,obj_BUTTON] | |
| [Window,Class] = [,obj_STATIC] | |
| [Window,Class] = [< 上一步,obj_BUTTON] | |
| [Window,Class] = [AC2整合v1.01升级包 & SKIDROW破解补丁修正版 纯属娱乐ぐ QQ群：101268895 ,obj_STATIC] | |
| [Window,Class] = [启动 AC2整合v1.01升级包 && SKIDROW破解补丁修正版,obj_BUTTON] | |
| [Window,Class] = [查看自述,obj_BUTTON] | |
| [Window,Class] = [访问产品网站,obj_BUTTON] | |
| [Window,Class] = [AC2整合v1.01升级包 & SKIDROW破解补丁修正版 安装,obj_Form] | |
| [Window,Class] = [AC2整合v1.01升级包 & SKIDROW破解补丁修正版 安装,obj_App] | |
| Process behavior | |
|---|---|
| Behavior description: | 隐藏窗口创建进程 |
| details: | ImagePath = , CmdLine = "c:\monitor\ac2reg.bat" |
| Behavior description: | 创建进程 |
| details: | ImagePath = C:\WINDOWS\system32\cmd.exe, CmdLine = cmd /c ""c:\monitor\AC2Reg.bat" " |
| ImagePath = C:\WINDOWS\regedit.exe, CmdLine = regedit /s "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp.\regfile.reg" | |
| ImagePath = C:\WINDOWS\regedit.exe, CmdLine = "C:\WINDOWS\regedit.exe" /s "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp.\regfile.reg" | |
| File behavior | |
|---|---|
| Behavior description: | 写权限映射文件 |
| details: | Local\UrlZonesSM_Administrator |
| DfSharedHeapC3E7A | |
| \WINDOWS\system32\zh-cn\wshext.dll.mui | |
| Behavior description: | 在桌面创建快捷方式 |
| details: | C:\Documents and Settings\Administrator\桌面\剌客信条2.lnk |
| Behavior description: | 创建可执行文件 |
| details: | C:\monitor\ubiorbitapi_r2.dll |
| C:\monitor\AssassinsCreedIIGame.exe | |
| Behavior description: | 修改文件内容 |
| details: | C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\$inst\2.tmp---> Offset = 0 |
| C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\$inst\4.tmp---> Offset = 0 | |
| C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\$inst\5.tmp---> Offset = 91338 | |
| C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\$inst\7.tmp---> Offset = 0 | |
| C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\$inst\8.tmp---> Offset = 0 | |
| C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\$inst\15.tmp---> Offset = 0 | |
| C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\$inst\16.tmp---> Offset = 0 | |
| C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\$inst\temp_0.tmp---> Offset = 65536 | |
| C:\monitor\AC2Reg.bat---> Offset = 0 | |
| C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\$inst\0001.tmp---> Offset = 65536 | |
| C:\monitor\media\Splash\bink_uplaysplash.png---> Offset = 0 | |
| C:\monitor\media\Splash\Bitmaps\buySelector.png---> Offset = 0 | |
| C:\monitor\media\Splash\Bitmaps\error_icon.png---> Offset = 0 | |
| C:\monitor\media\Splash\Bitmaps\error_panel_bg.png---> Offset = 0 | |
| C:\monitor\media\Splash\Bitmaps\important_icon.png---> Offset = 0 | |
| Registry behavior | |
|---|---|
| Behavior description: | 修改注册表 |
| details: | \REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\monitor\AC2Reg.bat |
| \REGISTRY\MACHINE\SOFTWARE\Ubisoft\Assassin"s Creed II\InstallDir | |
| \REGISTRY\MACHINE\SOFTWARE\Ubisoft\Assassin"s Creed II\Language | |
| \REGISTRY\MACHINE\SOFTWARE\Ubisoft\Assassin"s Creed II\GameUpdate\execPath | |
| \REGISTRY\MACHINE\SOFTWARE\Ubisoft\Assassin"s Creed II\GameUpdate\info | |
| \REGISTRY\MACHINE\SOFTWARE\Ubisoft\Assassin"s Creed II\GameUpdate\language | |
| \REGISTRY\MACHINE\SOFTWARE\Ubisoft\Assassin"s Creed II\GameUpdate\installdir | |
| \REGISTRY\MACHINE\SOFTWARE\Ubisoft\Launcher\Version | |
| \REGISTRY\MACHINE\SOFTWARE\Ubisoft\Launcher\InstallDir | |
| \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Ubisoft\Assassin"s Creed II\InstallDir | |
| \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Ubisoft\Assassin"s Creed II\Language | |
| \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Ubisoft\Assassin"s Creed II\GameUpdate\execPath | |
| \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Ubisoft\Assassin"s Creed II\GameUpdate\info | |
| \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Ubisoft\Assassin"s Creed II\GameUpdate\language | |
| \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Ubisoft\Assassin"s Creed II\GameUpdate\installdir | |
| Other behavior | |
|---|---|
| Behavior description: | 创建互斥体 |
| details: | Local\ZonesCounterMutex |
| Local\ZoneAttributeCacheCounterMutex | |
| Local\ZonesCacheCounterMutex | |
| Local\ZonesLockedCacheCounterMutex | |
| SHIMLIB_LOG_MUTEX | |
| Behavior description: | 查找指定窗口 |
| details: | NtUserFindWindowEx: [Class,Window] = [RegEdit_RegEdit,] |
| Behavior description: | 隐藏指定窗口 |
| details: | [Window,Class] = [Smart Install Maker,obj_Form] |
| [Window,Class] = [,obj_BUTTON] | |
| [Window,Class] = [,obj_STATIC] | |
| [Window,Class] = [< 上一步,obj_BUTTON] | |
| [Window,Class] = [AC2整合v1.01升级包 & SKIDROW破解补丁修正版 纯属娱乐ぐ QQ群：101268895 ,obj_STATIC] | |
| [Window,Class] = [启动 AC2整合v1.01升级包 && SKIDROW破解补丁修正版,obj_BUTTON] | |
| [Window,Class] = [查看自述,obj_BUTTON] | |
| [Window,Class] = [访问产品网站,obj_BUTTON] | |
| [Window,Class] = [AC2整合v1.01升级包 & SKIDROW破解补丁修正版 安装,obj_Form] | |
| [Window,Class] = [AC2整合v1.01升级包 & SKIDROW破解补丁修正版 安装,obj_App] | |
| Behavior description: | 窗口信息 |
| details: | Pid = 1460, Hwnd=0xb0184, Text = 启动 AC2整合v1.01升级包 && SKIDROW破解补丁修正版, ClassName = obj_BUTTON. |
| Pid = 1460, Hwnd=0xa01aa, Text = 查看自述, ClassName = obj_BUTTON. | |
| Pid = 1460, Hwnd=0xb01b0, Text = 访问产品网站, ClassName = obj_BUTTON. | |
| Pid = 1460, Hwnd=0xd01f6, Text = 欢迎来到 AC2整合v1.01升级包 & SKIDROW破解补丁修正版 安装程序向导, ClassName = obj_STATIC. | |
| Pid = 1460, Hwnd=0xc017a, Text = 本向导将指导你通过 AC2整合v1.01升级包 & SKIDROW破解补丁修正版 的安装过程。 开始安装前推荐你关闭全部其它的程序。这将能够更新相关, ClassName = obj_STATIC. | |
| Pid = 1460, Hwnd=0xd01a4, Text = 如果你同意协议条款，点击 我同意 继续。你必须同意协议来安装 AC2整合v1.01升级包 & SKIDROW破解补丁修正版。, ClassName = obj_STATIC. | |
| Pid = 1460, Hwnd=0xc01e8, Text = 敬请关注更新: 游民星空论坛：http://bbs.gamersky.com/thread-532129-1-1.html Assassin"s Creed II整合了v1.01升级包+一键SKIDROW破解, ClassName = obj_RichEdit50W. | |
| Pid = 1460, Hwnd=0xb01be, Text = 请阅读下面信息。, ClassName = obj_STATIC. | |
| Pid = 1460, Hwnd=0xc01b4, Text = 敬请关注更新: 游民星空论坛：http://bbs.gamersky.com/thread-532129-1-1.html Assassin"s Creed II整合了v1.01升级包+一键SKIDROW破解, ClassName = obj_RichEdit50W. | |
| Pid = 1460, Hwnd=0xb01ce, Text = 安装程序将安装 AC2整合v1.01升级包 & SKIDROW破解补丁修正版 到下面文件夹内。要安装到不同的文件夹内，点击 浏览 选择其它文件夹。点击 , ClassName = obj_STATIC. | |
| Pid = 1460, Hwnd=0xb0164, Text = 目标文件夹, ClassName = obj_BUTTON. | |
| Pid = 1460, Hwnd=0xb0192, Text = c:\monitor, ClassName = obj_EDIT. | |
| Pid = 1460, Hwnd=0xe0358, Text = 浏览..., ClassName = obj_BUTTON. | |
| Pid = 1460, Hwnd=0xb019c, Text = 选择当安装 AC2整合v1.01升级包 & SKIDROW破解补丁修正版 时要创建的附加快捷方式。, ClassName = obj_STATIC. | |
| Pid = 1460, Hwnd=0xc01b2, Text = 创建桌面图标, ClassName = obj_BUTTON. | |
| Behavior description: | 获取系统权限 |
| details: | SE_LOAD_DRIVER_PRIVILEGE |
| Run screenshot |
|---|
 |
HOME
