1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.
| Safety rating:75 |
| Behavior list |
| Basic Information | |
|---|---|
| MD5: | abf28126d554261c031d46537148cf5d |
| file type: | EXE |
| Production company: | 分享工作室2016 |
| version: | 1.2.8.0---1.2.8.0 |
| Shell or compiler information: | PACKER:ASPack 2.12 -> Alexey Solodovnikov |
| Subfile information: | aspack22_0b6524a3dumpFile / big file / EXE |
| File behavior | |
|---|---|
| Behavior description: | 查找文件 |
| details: | FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\996E.zh-CN |
| FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\996E.zh-Hans | |
| FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\996E.zh | |
| FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\996E.CHS | |
| FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\996E.CH | |
| FileName = C:\Documents and Settings | |
| FileName = C:\Documents and Settings\Administrator | |
| Registry behavior | |
|---|---|
| Behavior description: | 删除注册表键 |
| details: | \REGISTRY\MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW\ |
| Behavior description: | 删除注册表键值 |
| details: | \REGISTRY\MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW\DWFileTreeRoot |
| Other behavior | |
|---|---|
| Behavior description: | 调整进程token权限 |
| details: | SE_DEBUG_PRIVILEGE |
| SE_LOAD_DRIVER_PRIVILEGE | |
| Behavior description: | 查找指定窗口 |
| details: | NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,] |
| Behavior description: | 创建事件对象 |
| details: | EventName = Global\userenv: User Profile setup event |
| Behavior description: | 创建互斥体 |
| details: | CTF.LBES.MutexDefaultS-* |
| CTF.Compart.MutexDefaultS-* | |
| CTF.Asm.MutexDefaultS-* | |
| CTF.Layouts.MutexDefaultS-* | |
| CTF.TMD.MutexDefaultS-* | |
| CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-* | |
| windowssys | |
| Behavior description: | 窗口信息 |
| details: | Pid = 588, Hwnd=0x40368, Text = 确定, ClassName = Button. |
| Pid = 588, Hwnd=0x4036a, Text = 取消, ClassName = Button. | |
| Pid = 588, Hwnd=0x90354, Text = 应用程序发生异常 未知的软件异常 (0x0eedfade)，位置为 0x7c812aeb。 , ClassName = Static. | |
| Run screenshot |
|---|
 |
HOME
