VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.
4, If your browser cannot upload files, please download VirSCAN uploader to upload.

Language
Server load
Server Load
VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

00黑猫警长    Threatbook file behavior analysis report

Basic Information

file name: 00黑猫警长
file type: EXEx86
Threat level: suspicious
MD5: 3071fb2990e40b016403664c937cc055
sha256: c8864ab145aacbdc82bb0ced5b71157ff9169b918d2a87a9016bda08c0434e9c

Document Threat Intelligence IOC Report

No intelligence IOC detected

Intelligence decision system

Undetected intelligence determination system

Network behavior report

domains: 0

Document release report

File release report not detected

File process number report

nofind

Document behavior signature report

No file behavior report detected

Static information

Section name: .text
Virtual address: 0x00001000
Physical address: 0x00000400
Physical size: 0x00000400
Section permissions: R-E
Section name: .data
Virtual address: 0x00002000
Physical address: 0x00000800
Physical size: 0x00000400
Section permissions: RW-
Section name: .rdata
Virtual address: 0x00003000
Physical address: 0x00000c00
Physical size: 0x00000200
Section permissions: R--
Section name: .eh_fram
Virtual address: 0x00004000
Physical address: 0x00000e00
Physical size: 0x00000200
Section permissions: R--
Section name: .bss
Virtual address: 0x00005000
Physical address: 0x00000000
Physical size: 0x00000000
Section permissions: RW-
Section name: .idata
Virtual address: 0x00006000
Physical address: 0x00001000
Physical size: 0x00000400
Section permissions: RW-
import_hash: 561b9c68a878348689ab9e126c1a4877
time_stamp: 2020-02-22 08:18:04
entry_point_section: .text
image_base: 0x400000
entry_point: 0x11be
PE resource information 0