这是官网原版的按键精灵哈勃报告
很明显他会获取cookies.这意味着啥?只要你有登录行为,不论输不输入密码,就有可能凉凉

这玩意儿尤其针对steam账号,一打一个准
文件名称:
网页链接 MD5: 5b0d8cbc9696f19ab6f96d52b96c0c51
文件类型: EXE
上传时间: 2018-11-11 00:35:29
出品公司: 福建创意嘉和软件有限公司
版本: 2014.0.5.17762---2014.0.5.17762
壳或编译器信息: COMPILER:Borland Delphi 6.0 - 7.0 [Overlay]
子文件信息: DefItemName_617bd883dumpFile / f07e819ba2e46a897cfabf816d7557b2 / DLL
关键行为
行为描述: 设置特殊文件夹属性
详情信息: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet FilesC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5C:\Documents and Settings\Administrator\Local Settings\HistoryC:\Documents and Settings\Administrator\Local Settings\History\History.IE5C:\Documents and Settings\Administrator\Cookies
行为描述: 查找PE资源信息
详情信息: (FindResourceW) hModule = 0x00400000, ResName: SHFOLDERDLL, ResType: a(ID)
行为描述: 获取TickCount值
详情信息: TickCount = 227393, SleepMilliseconds =
网页链接 = 227456, SleepMilliseconds =
网页链接 = 227518, SleepMilliseconds =
网页链接 = 227581, SleepMilliseconds =
网页链接 = 227643, SleepMilliseconds =
网页链接 = 227706, SleepMilliseconds =
网页链接 = 227768, SleepMilliseconds =
网页链接 = 227831, SleepMilliseconds =
网页链接 = 227893, SleepMilliseconds =
网页链接 = 227956, SleepMilliseconds =
网页链接 = 228018, SleepMilliseconds =
网页链接 = 228081, SleepMilliseconds =
网页链接 = 228143, SleepMilliseconds =
网页链接 = 228206, SleepMilliseconds =
网页链接 = 228268, SleepMilliseconds = 50.