VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load
105.vmp.exe    Threatbook file behavior analysis report
Virscan.org multi-engine scan report
Basic Information
file name:105.vmp.exe
file type:EXEx86
Submission time:2019-05-16 00:03:58
Threat level:clean
MD5:cc817dfb331ec3135788ff22bf0781a7
sha256:491d9a3935ea2c43e19236b998c0f473386d413de9a74d0d31ea0a5e990d9a60
Document Threat Intelligence IOC Report
No intelligence IOC detected
Intelligence decision system
Undetected intelligence determination system
Network behavior report
domains:0
dns:0
http:0
udp:0
smtp:0
icmp:0
irc:0
hosts:0
Document release report
File release report not detected
File process number report
Process details:共分析了1个进程
Document behavior signature report
No file behavior report detected
Static information
Section name:.text
Virtual address:0x00001000
Physical address:0x00000000
Physical size:0x00000000
Section permissions:R-E
Section name:.rdata
Virtual address:0x00156000
Physical address:0x00000000
Physical size:0x00000000
Section permissions:R--
Section name:.data
Virtual address:0x0038e000
Physical address:0x00000000
Physical size:0x00000000
Section permissions:RW-
Section name:ezdun0
Virtual address:0x0040e000
Physical address:0x00000000
Physical size:0x00000000
Section permissions:R-E
Section name:ezdun1
Virtual address:0x00a71000
Physical address:0x00001000
Physical size:0x00a6d000
Section permissions:R-E
Section name:.rsrc
Virtual address:0x014de000
Physical address:0x00a6e000
Physical size:0x00003000
Section permissions:R--
import_hash:a4ce8f4afc0241e84e5c218103dadc1d
time_stamp:2019-05-15 23:37:47
entry_point_section:ezdun1
entry_point_section:ezdun1
image_base:0x400000
entry_point:0xb9be77
name:RT_ICON
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x014de1c4
size:0x000002e8
name:RT_ICON
language:LANG_CHINESE
filetype:GLS_BINARY_LSB_FIRST
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x014de4ac
size:0x00000128
name:RT_ICON
language:LANG_NEUTRAL
filetype:dBase IV DBT of `.DBF, blocks size 48, block length 9216, next free block index 40, 1st item \"\323\316\374\377\321\316\373\377\321\317\373\377\325\321\373\377\325\321\373\377\323\324\366\377\244\244\250\377\213\214\230\377\322\320\372\377\321\317\375\377\321\317\374\377\321\317\375\377\321\317\375\377\320\317\374\377\321\317\374\377\321\317\374\"
sublanguage:SUBLANG_NEUTRAL
offset:0x014de5d4
size:0x000025a8
name:RT_GROUP_ICON
language:LANG_NEUTRAL
filetype:MS Windows icon resource - 1 icon
sublanguage:SUBLANG_NEUTRAL
offset:0x014e0b7c
size:0x00000014
name:RT_GROUP_ICON
language:LANG_CHINESE
filetype:MS Windows icon resource - 1 icon
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x014e0b90
size:0x00000014
name:RT_GROUP_ICON
language:LANG_CHINESE
filetype:MS Windows icon resource - 1 icon
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x014e0ba4
size:0x00000014
name:RT_VERSION
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x014e0bb8
size:0x00000278

About VirSCAN | Privacy Policy | Contact us | Links | Help VirSCAN
Translated by Keith Miller, United States
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号