1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.
Safety rating:84 |
Behavior list |
Basic Information | |
---|---|
MD5: | 1e31d121deb2f4f9b27c1521b917e510 |
file type: | EXE |
Production company: | |
version: | 1.0.0.1---1.0.0.1 |
Shell or compiler information: |
Key behavior | |
---|---|
Behavior description: | 写权限映射文件 |
details: | CiceroSharedMemDefaultS-* |
MSCTF.MarshalInterface.FileMap.MFF..OIFGH | |
MSCTF.MarshalInterface.FileMap.MFF.B.OIFGH | |
MSCTF.MarshalInterface.FileMap.MFF.C.OIFGH | |
MSCTF.MarshalInterface.FileMap.MFF.D.OIFGH | |
MSCTF.MarshalInterface.FileMap.MFF.E.OIFGH | |
MSCTF.MarshalInterface.FileMap.MFF.F.OIFGH | |
MSCTF.MarshalInterface.FileMap.MFF.G.OIFGH |
Process behavior | |
---|---|
Behavior description: | 枚举进程 |
details: | N/A |
File behavior | |
---|---|
Behavior description: | 写权限映射文件 |
details: | CiceroSharedMemDefaultS-* |
MSCTF.MarshalInterface.FileMap.MFF..OIFGH | |
MSCTF.MarshalInterface.FileMap.MFF.B.OIFGH | |
MSCTF.MarshalInterface.FileMap.MFF.C.OIFGH | |
MSCTF.MarshalInterface.FileMap.MFF.D.OIFGH | |
MSCTF.MarshalInterface.FileMap.MFF.E.OIFGH | |
MSCTF.MarshalInterface.FileMap.MFF.F.OIFGH | |
MSCTF.MarshalInterface.FileMap.MFF.G.OIFGH | |
Behavior description: | 查找文件 |
details: | FileName = C:\DOCUME~1 |
FileName = C:\Documents and Settings\ADMINI~1 | |
FileName = C:\Documents and Settings\Administrator\LOCALS~1 | |
FileName = C:\Documents and Settings\Administrator\Local Settings\Temp | |
FileName = C:\Documents and Settings\Administrator\Local Settings\%temp% |
Other behavior | |
---|---|
Behavior description: | 创建互斥体 |
details: | CTF.LBES.MutexDefaultS-* |
CTF.Compart.MutexDefaultS-* | |
CTF.Asm.MutexDefaultS-* | |
CTF.Layouts.MutexDefaultS-* | |
CTF.TMD.MutexDefaultS-* | |
CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-* | |
MSCTF.Shared.MUTEX.ELH | |
Behavior description: | 查找指定窗口 |
details: | NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,] |
Behavior description: | 窗口信息 |
details: | Pid = 416, Hwnd=0x202a6, Text = 确定, ClassName = Button. |
Pid = 416, Hwnd=0x202cc, Text = Installer integrity check has failed. Common causes include incomplete download and damaged media. Contact the installer"s author, ClassName = Static. | |
Pid = 416, Hwnd=0x302a2, Text = NSIS Error, ClassName = #32770. | |
Behavior description: | 获取系统权限 |
details: | SE_LOAD_DRIVER_PRIVILEGE |
Run screenshot |
---|
![]() |