VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load
改键精灵.exe    Threatbook file behavior analysis report
Virscan.org multi-engine scan report
Behavior analysis report:         Habo file analysis         Hybrid file analysis
Basic Information
file name:改键精灵.exe
file type:EXEx86
Threat level:suspicious
MD5:f7238e42746b458f5ab7250f164d3b85
sha256:8ca44518ff00f55ac00b7d7e32d9b5a5c27a6b85c660ee4e651e4d4c20a9de3a
Document Threat Intelligence IOC Report
No intelligence IOC detected
Intelligence decision system
Undetected intelligence determination system
Network behavior report
domains:0
dns:0
http:0
udp:0
smtp:0
icmp:0
irc:0
hosts:0
Document release report
File release report not detected
File process number report
nofind
Document behavior signature report
No file behavior report detected
Static information
Section name:.text
Virtual address:0x00001000
Physical address:0x00000600
Physical size:0x00009e00
Section permissions:RW-
Section name:.data
Virtual address:0x00021000
Physical address:0x0000a400
Physical size:0x00000200
Section permissions:RW-
Section name:.rsrc
Virtual address:0x00023000
Physical address:0x0000a600
Physical size:0x00005000
Section permissions:RW-
Section name:aspd199
Virtual address:0x00028000
Physical address:0x0000f600
Physical size:0x00001200
Section permissions:RW-
Section name:.adata
Virtual address:0x0002a000
Physical address:0x00010800
Physical size:0x00000000
Section permissions:RW-
import_hash:9cac23d1193aa0061e14633ce53a0d8a
time_stamp:2010-01-26 02:38:05
entry_point_section:aspd199
entry_point_section:aspd199
image_base:0x1240000
entry_point:0x28001
name:RT_ICON
language:LANG_NEUTRAL
filetype:GLS_BINARY_LSB_FIRST
sublanguage:SUBLANG_NEUTRAL
offset:0x00026d80
size:0x00000568
name:RT_ICON
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x00025ed8
size:0x00000ea8
name:RT_ICON
language:LANG_NEUTRAL
filetype:GLS_BINARY_LSB_FIRST
sublanguage:SUBLANG_NEUTRAL
offset:0x00025a70
size:0x00000468
name:RT_ICON
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x000234c8
size:0x000025a8
name:RT_GROUP_ICON
language:LANG_NEUTRAL
filetype:MS Windows icon resource - 4 icons, 16x16, 256-colors
sublanguage:SUBLANG_NEUTRAL
offset:0x00023488
size:0x00000040
name:RT_VERSION
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x00023180
size:0x00000308

About VirSCAN | Privacy Policy | Contact us | Links | Help VirSCAN
中国反网络病毒联盟
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号