1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, VirSCAN can scan compressed files with password 'infected' or 'virus'.
Language
Server load
1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, VirSCAN can scan compressed files with password 'infected' or 'virus'.
| Virscan.org multi-engine scan report |
| Basic Information | |
|---|---|
| file name: | 3b396e4577cdafd31c1c23885bd401e7 |
| file type: | EXEx86 |
| Submission time: | 2019-02-12 01:02:48 |
| Threat level: | malicious |
| MD5: | 3b396e4577cdafd31c1c23885bd401e7 |
| sha256: | c590867cd9db42c4693a6e2e2ba098a617d00004932de9294a257a9af44e9413 |
| Document Threat Intelligence IOC Report | |
|---|---|
| No intelligence IOC detected | |
| Intelligence decision system | |
|---|---|
| Undetected intelligence determination system | |
| Network behavior report | |
|---|---|
| domains | |
| ip: | 91.206.183.208 |
| domain: | doddyfire.linkpc.net |
| dns | |
| type: | A |
| request: | doddyfire.linkpc.net |
| http: | 0 |
| hosts: | 9 |
| Document release report | |
|---|---|
| file name: | chargeable.exe |
| file type: | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows |
| file size: | 103872 |
| MD5: | 2b9420714a71cd63f2a6f4305dcb72da |
| File process number report | |
|---|---|
| Process details: | 0 |
| Document behavior signature report | |
|---|---|
| No file behavior report detected | |
| Static information | |
|---|---|
| PE section table information | |
| Section name: | .text |
| Virtual address: | 0x00002000 |
| Physical address: | 0x00000200 |
| Physical size: | 0x00017800 |
| Section permissions: | R-E |
| Section name: | .rsrc |
| Virtual address: | 0x0001a000 |
| Physical address: | 0x00017a00 |
| Physical size: | 0x00000400 |
| Section permissions: | R-- |
| Section name: | .reloc |
| Virtual address: | 0x0001c000 |
| Physical address: | 0x00017e00 |
| Physical size: | 0x00000200 |
| Section permissions: | R-- |
| PE basic information | |
| import_hash: | f34d5f2d4577ed6d9ceec516c1f5a744 |
| time_stamp: | 2018-06-12 01:07:31 |
| entry_point_section: | .text |
| entry_point_section: | .text |
| image_base: | 0x400000 |
| entry_point: | 0x1965e |
| PE resource information | |
| name: | RT_VERSION |
| language: | LANG_NEUTRAL |
| filetype: | data |
| sublanguage: | SUBLANG_NEUTRAL |
| offset: | 0x0001a058 |
| size: | 0x000002ec |
HOME
