VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load
AutoProxyTool.exe    Threatbook file behavior analysis report
Virscan.org multi-engine scan report
Basic Information
file name:AutoProxyTool.exe
file type:EXEx86
Submission time:2019-03-16 01:03:27
Threat level:clean
MD5:9ef95dafa1aaa431b830e140d4ef3d82
sha256:1a168874e3b447c5c05c473c2e5daa02bd055a680f72ae2bf756d166cd8912a7
Document Threat Intelligence IOC Report
No intelligence IOC detected
Intelligence decision system
Undetected intelligence determination system
Network behavior report
domains:0
dns:0
http:0
udp:0
smtp:0
icmp:0
irc:0
hosts:0
Document release report
File release report not detected
File process number report
Process details:共分析了1个进程
Document behavior signature report
Low risk behavior
General behavior:Contains ability to find and load resources of a specific module
Suspicious behavior0
High risk behavior0
Low risk behavior
System Environment Detection:Contains functionality to query system information
Suspicious behavior0
High risk behavior0
Low risk behavior
General behavior:One or more processes crashed
Suspicious behavior0
High risk behavior0
Low risk behavior0
Suspicious behavior
System Sensitive Operations:Disables application error messsages (SetErrorMode)
High risk behavior0
Low risk behavior0
Suspicious behavior
High risk behavior0
Static information
Section name:.text
Virtual address:0x00001000
Physical address:0x00001000
Physical size:0x00008000
Section permissions:R-E
Section name:.rdata
Virtual address:0x00009000
Physical address:0x00009000
Physical size:0x00001000
Section permissions:R--
Section name:.data
Virtual address:0x0000a000
Physical address:0x0000a000
Physical size:0x00001000
Section permissions:RW-
Section name:.rsrc
Virtual address:0x0000b000
Physical address:0x0000b000
Physical size:0x00007000
Section permissions:R--
import_hash:0ab341dbf4b7f3a644deae8e1cf50e08
time_stamp:2017-12-23 20:05:35
entry_point_section:.text
entry_point_section:.text
image_base:0x400000
entry_point:0x1248
name:RES
language:LANG_ENGLISH
filetype:data
sublanguage:SUBLANG_ENGLISH_US
offset:0x0000e06c
size:0x00003038
name:RT_ICON
language:LANG_NEUTRAL
filetype:dBase IV DBT of `.DBF, blocks size 48, block length 9216, next free block index 40
sublanguage:SUBLANG_NEUTRAL
offset:0x0000bac4
size:0x000025a8
name:RT_ICON
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0000b994
size:0x00000130
name:RT_ICON
language:LANG_NEUTRAL
filetype:data
sublanguage:SUBLANG_NEUTRAL
offset:0x0000b6ac
size:0x000002e8
name:RT_ICON
language:LANG_NEUTRAL
filetype:GLS_BINARY_LSB_FIRST
sublanguage:SUBLANG_NEUTRAL
offset:0x0000b584
size:0x00000128
name:RT_GROUP_ICON
language:LANG_NEUTRAL
filetype:MS Windows icon resource - 1 icon
sublanguage:SUBLANG_NEUTRAL
offset:0x0000b570
size:0x00000014
name:RT_GROUP_ICON
language:LANG_NEUTRAL
filetype:MS Windows icon resource - 3 icons, 32x32, 2-colors
sublanguage:SUBLANG_NEUTRAL
offset:0x0000b540
size:0x00000030
name:RT_VERSION
language:LANG_CHINESE
filetype:data
sublanguage:SUBLANG_CHINESE_SIMPLIFIED
offset:0x0000b210
size:0x00000330

About VirSCAN | Privacy Policy | Contact us | Links | Help VirSCAN
Translated by Keith Miller, United States
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号