VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load
ZzFlash 1.8.exe    Threatbook file behavior analysis report
Virscan.org multi-engine scan report
Behavior analysis report:         Habo file analysis
Basic Information
file name:ZzFlash 1.8.exe
file type:EXEx86
Threat level:clean
MD5:338d2496fedea30a765dea9bda0a7d2a
sha256:63cef91521b0fe0f14f3f8dd14410c6a3a8266ea7f40ed732547be433e9c2d2b
Document Threat Intelligence IOC Report
No intelligence IOC detected
Intelligence decision system
Undetected intelligence determination system
Network behavior report
domains:0
dns:0
http:0
udp:0
smtp:0
icmp:0
irc:0
hosts:0
Document release report
File release report not detected
File process number report
Process details:共分析了1个进程
Document behavior signature report
No file behavior report detected
Static information
Section name:CODE
Virtual address:0x00001000
Physical address:0x00000400
Physical size:0x00069600
Section permissions:RW-
Section name:DATA
Virtual address:0x00119000
Physical address:0x00069a00
Physical size:0x00001600
Section permissions:RW-
Section name:BSS
Virtual address:0x0011d000
Physical address:0x0006b000
Physical size:0x00000000
Section permissions:RW-
Section name:.idata
Virtual address:0x00120000
Physical address:0x0006b000
Physical size:0x00001200
Section permissions:RW-
Section name:.tls
Virtual address:0x00123000
Physical address:0x0006c200
Physical size:0x00000000
Section permissions:RW-
Section name:.rdata
Virtual address:0x00124000
Physical address:0x0006c200
Physical size:0x00000200
Section permissions:RW-
Section name:.reloc
Virtual address:0x00125000
Physical address:0x0006c400
Physical size:0x00000000
Section permissions:RW-
Section name:.rsrc
Virtual address:0x00138000
Physical address:0x0006c400
Physical size:0x0000fe00
Section permissions:RW-
Section name:.aspack
Virtual address:0x00164000
Physical address:0x0007c200
Physical size:0x00001a00
Section permissions:RW-
Section name:.adata
Virtual address:0x00166000
Physical address:0x0007dc00
Physical size:0x00000000
Section permissions:RW-
import_hash:a7f95466fca60664f9e211ccbd427e02
time_stamp:1992-06-20 06:22:17
entry_point_section:.aspack
entry_point_section:.aspack
image_base:0x400000
entry_point:0x164001
name:WAV
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001394c8
size:0x0000272a
name:RT_CURSOR
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013bbf4
size:0x00000134
name:RT_CURSOR
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013bd28
size:0x00000134
name:RT_CURSOR
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013be5c
size:0x00000134
name:RT_CURSOR
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013bf90
size:0x00000134
name:RT_CURSOR
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013c0c4
size:0x00000134
name:RT_CURSOR
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013c1f8
size:0x00000134
name:RT_CURSOR
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013c32c
size:0x00000134
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013c460
size:0x000001d0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013c630
size:0x000001e4
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013c814
size:0x000001d0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013c9e4
size:0x000001d0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013cbb4
size:0x000001d0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013cd84
size:0x000001d0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013cf54
size:0x000001d0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013d124
size:0x000001d0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013d2f4
size:0x000001d0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013d4c4
size:0x000001d0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013d694
size:0x000000c0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013d754
size:0x000000e0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013d834
size:0x000000e0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013d914
size:0x000000e0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013d9f4
size:0x000000c0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013dab4
size:0x000000c0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013db74
size:0x000000e0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013dc54
size:0x000000c0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013dd14
size:0x000000e0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013ddf4
size:0x000000e8
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013dedc
size:0x000000c0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:Sendmail frozen configuration - version \275%9w+)\376\031W\370\346e\324\252\314\254\253\377\377\373\234\357\252\373\207=\367\315\271\342(\347\336\374\212\357\316\274\357\316\274/\317\235\214r<}L\373+\376\025y\347)\224\236X\366Ld\226
sublanguage:SUBLANG_NEUTRAL
offset:0x0013df9c
size:0x000000d0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013e06c
size:0x000000d0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013e13c
size:0x000000d0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013e20c
size:0x000000d0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013e2dc
size:0x000000d0
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013e3ac
size:0x000000d0
name:RT_BITMAP
language:LANG_ENGLISH
filetype:data
sublanguage:SUBLANG_ENGLISH_US
offset:0x0013e47c
size:0x00000088
name:RT_BITMAP
language:LANG_ENGLISH
filetype:data
sublanguage:SUBLANG_ENGLISH_US
offset:0x0013e504
size:0x000000a8
name:RT_BITMAP
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013e5ac
size:0x000000e0
name:RT_BITMAP
language:LANG_ENGLISH
filetype:data
sublanguage:SUBLANG_ENGLISH_US
offset:0x0013e68c
size:0x000000b0
name:RT_ICON
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x001656a4
size:0x000002e8
name:RT_DIALOG
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013ea24
size:0x00000052
name:RT_STRING
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013ea78
size:0x000002c8
name:RT_STRING
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013ed40
size:0x00000408
name:RT_STRING
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013f148
size:0x000003b8
name:RT_STRING
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013f500
size:0x0000036c
name:RT_STRING
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013f86c
size:0x00000344
name:RT_STRING
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013fbb0
size:0x000001e0
name:RT_STRING
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013fd90
size:0x000001ec
name:RT_STRING
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0013ff7c
size:0x00000390
name:RT_STRING
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0014030c
size:0x000004bc

About VirSCAN | Privacy Policy | Contact us | Links | Help VirSCAN
Translated by Keith Miller, United States
中国反网络病毒联盟
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号