1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.
| Safety rating:79 |
| Behavior list |
| Basic Information | |
|---|---|
| MD5: | 370b21a4994c7efe29772408fb126f2f |
| file type: | EXE |
| Production company: | |
| version: | 1.0.0.1---1, 0, 0, 1 |
| Shell or compiler information: | COMPILER:Microsoft Visual C++ 6.0 |
| Key behavior | |
|---|---|
| Behavior description: | 写权限映射文件 |
| details: | CiceroSharedMemDefaultS-* |
| MSCTF.MarshalInterface.FileMap.MFF..LAGGH | |
| MSCTF.MarshalInterface.FileMap.MFF.B.LAGGH | |
| MSCTF.MarshalInterface.FileMap.MFF.C.LAGGH | |
| MSCTF.MarshalInterface.FileMap.MFF.D.LAGGH | |
| MSCTF.MarshalInterface.FileMap.MFF.E.LAGGH | |
| MSCTF.MarshalInterface.FileMap.MFF.F.LAGGH | |
| MSCTF.MarshalInterface.FileMap.MFF.G.LAGGH | |
| MSCTF.Shared.SFM.MFF | |
| MSCTF.MarshalInterface.FileMap.MFF.H.JJMKH | |
| MSCTF.MarshalInterface.FileMap.MFF.I.JJMKH | |
| MSCTF.MarshalInterface.FileMap.MFF.J.JJMKH | |
| MSCTF.MarshalInterface.FileMap.MFF.K.JJMKH | |
| MSCTF.MarshalInterface.FileMap.MFF.L.JJMKH | |
| MSCTF.MarshalInterface.FileMap.MFF.M.JKMKH | |
| Behavior description: | 屏蔽窗口关闭消息 |
| details: | hWnd = 0x000202a2, Text = IPCamTool (Version:Mar 14 2013), ClassName = #32770. |
| Process behavior | |
|---|---|
| Behavior description: | 枚举进程 |
| details: | N/A |
| File behavior | |
|---|---|
| Behavior description: | 写权限映射文件 |
| details: | CiceroSharedMemDefaultS-* |
| MSCTF.MarshalInterface.FileMap.MFF..LAGGH | |
| MSCTF.MarshalInterface.FileMap.MFF.B.LAGGH | |
| MSCTF.MarshalInterface.FileMap.MFF.C.LAGGH | |
| MSCTF.MarshalInterface.FileMap.MFF.D.LAGGH | |
| MSCTF.MarshalInterface.FileMap.MFF.E.LAGGH | |
| MSCTF.MarshalInterface.FileMap.MFF.F.LAGGH | |
| MSCTF.MarshalInterface.FileMap.MFF.G.LAGGH | |
| MSCTF.Shared.SFM.MFF | |
| MSCTF.MarshalInterface.FileMap.MFF.H.JJMKH | |
| MSCTF.MarshalInterface.FileMap.MFF.I.JJMKH | |
| MSCTF.MarshalInterface.FileMap.MFF.J.JJMKH | |
| MSCTF.MarshalInterface.FileMap.MFF.K.JJMKH | |
| MSCTF.MarshalInterface.FileMap.MFF.L.JJMKH | |
| MSCTF.MarshalInterface.FileMap.MFF.M.JKMKH | |
| Registry behavior | |
|---|---|
| Behavior description: | 修改注册表 |
| details: | \REGISTRY\USER\S-*\Software\MayGion\IPCamTool\Mar 14 2013\996E\Settings\Pos |
| \REGISTRY\USER\S-*\Software\MayGion\IPCamTool\Mar 14 2013\996E\Settings\lstCtrlColumnOrderArray | |
| \REGISTRY\USER\S-*\Software\MayGion\IPCamTool\Mar 14 2013\996E\Settings\ColumnWidth0 | |
| \REGISTRY\USER\S-*\Software\MayGion\IPCamTool\Mar 14 2013\996E\Settings\ColumnWidth1 | |
| \REGISTRY\USER\S-*\Software\MayGion\IPCamTool\Mar 14 2013\996E\Settings\ColumnWidth2 | |
| \REGISTRY\USER\S-*\Software\MayGion\IPCamTool\Mar 14 2013\996E\Settings\ColumnWidth3 | |
| \REGISTRY\USER\S-*\Software\MayGion\IPCamTool\Mar 14 2013\996E\Settings\ColumnWidth4 | |
| \REGISTRY\USER\S-*\Software\MayGion\IPCamTool\Mar 14 2013\996E\Settings\ColumnWidth5 | |
| \REGISTRY\USER\S-*\Software\MayGion\IPCamTool\Mar 14 2013\996E\Settings\ColumnWidth6 | |
| \REGISTRY\USER\S-*\Software\MayGion\IPCamTool\Mar 14 2013\996E\Settings\ColumnWidth7 | |
| \REGISTRY\USER\S-*\Software\MayGion\IPCamTool\Mar 14 2013\996E\Settings\ColumnWidth8 | |
| \REGISTRY\USER\S-*\Software\MayGion\IPCamTool\Mar 14 2013\996E\Settings\ColumnWidth9 | |
| \REGISTRY\USER\S-*\Software\MayGion\IPCamTool\Mar 14 2013\996E\Settings\ColumnWidth10 | |
| \REGISTRY\USER\S-*\Software\MayGion\IPCamTool\Mar 14 2013\996E\Settings\ColumnWidth11 | |
| \REGISTRY\USER\S-*\Software\MayGion\IPCamTool\Mar 14 2013\996E\Settings\ColumnWidth12 | |
| Other behavior | |
|---|---|
| Behavior description: | 查找指定窗口 |
| details: | NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,] |
| NtUserFindWindowEx: [Class,Window] = [CicLoaderWndClass,] | |
| Behavior description: | 窗口信息 |
| details: | Pid = 416, Hwnd=0x202a6, Text = List1, ClassName = SysListView32. |
| Pid = 416, Hwnd=0x202b4, Text = 刷新, ClassName = Button. | |
| Pid = 416, Hwnd=0x202b2, Text = 打开设备, ClassName = Button. | |
| Pid = 416, Hwnd=0x302ba, Text = 网络配置, ClassName = Button. | |
| Pid = 416, Hwnd=0x302bc, Text = 清除ARP缓存, ClassName = Button. | |
| Pid = 416, Hwnd=0x202a2, Text = IPCamTool (Version:Mar 14 2013), ClassName = #32770. | |
| Behavior description: | 创建互斥体 |
| details: | 20081004-4E38-4639-9EBB-1BD15DC0A21E |
| CTF.LBES.MutexDefaultS-* | |
| CTF.Compart.MutexDefaultS-* | |
| CTF.Asm.MutexDefaultS-* | |
| CTF.Layouts.MutexDefaultS-* | |
| CTF.TMD.MutexDefaultS-* | |
| CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-* | |
| MSCTF.Shared.MUTEX.ELH | |
| MSCTF.Shared.MUTEX.MFF | |
| Behavior description: | 屏蔽窗口关闭消息 |
| details: | hWnd = 0x000202a2, Text = IPCamTool (Version:Mar 14 2013), ClassName = #32770. |
| Run screenshot |
|---|
 |
HOME
