Other behavior |
Behavior description: | 创建互斥体 |
details: | CTF.LBES.MutexDefaultS-* |
| CTF.Compart.MutexDefaultS-* |
| CTF.Asm.MutexDefaultS-* |
| CTF.Layouts.MutexDefaultS-* |
| CTF.TMD.MutexDefaultS-* |
| CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-* |
| MSCTF.Shared.MUTEX.ELH |
| MSCTF.Shared.MUTEX.MFF |
Behavior description: | 查找指定窗口 |
details: | NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,] |
| NtUserFindWindowEx: [Class,Window] = [CicLoaderWndClass,] |
Behavior description: | 窗口信息 |
details: | Pid = 416, Hwnd=0x202ca, Text = 确定, ClassName = Button. |
| Pid = 416, Hwnd=0x302da, Text = 网吧客户端机器配置文件有错!, ClassName = Static. |
| Pid = 416, Hwnd=0x202c8, Text = 网吧客户端机器配置文件有错!, ClassName = #32770. |
| Pid = 416, Hwnd=0x202a8, Text = Hao123网(&H), ClassName = Button. |
| Pid = 416, Hwnd=0x202cc, Text = Baidu网(&B), ClassName = Button. |
| Pid = 416, Hwnd=0x202b4, Text = Taobao网(&T), ClassName = Button. |
| Pid = 416, Hwnd=0x202b2, Text = 爱奇艺网(&A), ClassName = Button. |
| Pid = 416, Hwnd=0x302ba, Text = 腾讯QQ网(&X), ClassName = Button. |
| Pid = 416, Hwnd=0x302bc, Text = 网页版微信(&X), ClassName = Button. |
| Pid = 416, Hwnd=0x202d4, Text = 本地电影(&B), ClassName = Button. |
| Pid = 416, Hwnd=0x302dc, Text = 日本电影(&R), ClassName = Button. |
| Pid = 416, Hwnd=0x202d6, Text = 一键登录QQ(&Q), ClassName = Button. |
| Pid = 416, Hwnd=0x202d8, Text = 一键登录LOL(&L), ClassName = Button. |
| Pid = 416, Hwnd=0x202c2, Text = 查看下机时间, ClassName = Button. |
| Pid = 416, Hwnd=0x202c4, Text = 结账并关机, ClassName = Button. |