查看: 663|回复: 1

[辅助工具] 大佬们看看这个有风险吗

 关闭 [复制链接]
发表于 2018-4-21 23:28 | 显示全部楼层 |阅读模式
a896251253. 2018-4-21 23:28 663 1 显示全部楼层
行为描述:设置特殊文件夹属性
详情信息:
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
行为描述:获取TickCount值
详情信息:
TickCount = 225843, SleepMilliseconds = 1000.
行为描述:直接获取CPU时钟
详情信息:
EAX = 0x6f3fa44e, EDX = 0x000000bb
EAX = 0x6f3fa49a, EDX = 0x000000bb
EAX = 0x747a7353, EDX = 0x000000bb
EAX = 0x747a739f, EDX = 0x000000bb
EAX = 0x7c684188, EDX = 0x000000bb
EAX = 0x7c6841d4, EDX = 0x000000bb
EAX = 0x034c92cf, EDX = 0x000000bc
EAX = 0xe88b5193, EDX = 0x000000bb
EAX = 0xe88b51df, EDX = 0x000000bb
EAX = 0x0b3a60b8, EDX = 0x000000bc
EAX = 0x0b3a6104, EDX = 0x000000bc
EAX = 0x0b3a6150, EDX = 0x000000bc
EAX = 0x0b3a619c, EDX = 0x000000bc
EAX = 0x0b3a61e8, EDX = 0x000000bc
EAX = 0x0b3a6234, EDX = 0x000000bc
行为描述:获取窗口截图信息
详情信息:
Foreground window Info: HWND = 0x00010452, DC = 0x01010055.
Foreground window Info: HWND = 0x00020454, DC = 0x0c0101e7.
行为描述:VMWare特殊指令检测虚拟机
详情信息:
N/A

发表于 2018-4-22 00:37 | 显示全部楼层
vvyxxxkkk 2018-4-22 00:37 显示全部楼层
没有
回复

使用道具 举报

您需要登录后才可以回帖 登录 | 立即注册

本版积分规则 返回列表 发新帖

快速回复 返回顶部 返回列表