VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.
4, If your browser cannot upload files, please download VirSCAN uploader to upload.

Language
Server load
Server Load
VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

00荒野行动    Threatbook file behavior analysis report

Basic Information

file name: 00荒野行动
file type: EXEx86
Threat level: malicious
MD5: 856a036a3a65745d98b5365efa6597d1
sha256: 8fdab2b6f26abe2e22a6acbedda0c06de7b52c3086e9b92b260d8ce355341efb

Document Threat Intelligence IOC Report

No intelligence IOC detected

Intelligence decision system

Undetected intelligence determination system

Network behavior report

domains
ip:
domain: irc.lcirc.net
dns
type: A
request: irc.lcirc.net
http: 0
udp: 0
smtp: 0
icmp: 0
irc: 0
hosts: 0

Document release report

File release report not detected

File process number report

nofind

Document behavior signature report

No file behavior report detected

Static information

Section name: CODE
Virtual address: 0x00001000
Physical address: 0x00000400
Physical size: 0x00005600
Section permissions: RW-
Section name: DATA
Virtual address: 0x0000b000
Physical address: 0x00005a00
Physical size: 0x00000200
Section permissions: RW-
Section name: BSS
Virtual address: 0x0000c000
Physical address: 0x00005c00
Physical size: 0x00000000
Section permissions: RW-
Section name: .idata
Virtual address: 0x0000e000
Physical address: 0x00005c00
Physical size: 0x00000600
Section permissions: RW-
Section name: .tls
Virtual address: 0x0000f000
Physical address: 0x00006200
Physical size: 0x00000000
Section permissions: RW-
Section name: .rdata
Virtual address: 0x00010000
Physical address: 0x00006200
Physical size: 0x00000200
Section permissions: RW-
Section name: .rsrc
Virtual address: 0x00012000
Physical address: 0x00006400
Physical size: 0x00000400
Section permissions: RW-
Section name:
Virtual address: 0x00013000
Physical address: 0x00006800
Physical size: 0x00002400
Section permissions: RW-
import_hash: 3c0e70bfa5f73f1f1cef484e2bcb5bf8
time_stamp: 1992-06-20 06:22:17
entry_point_section:
image_base: 0x400000
entry_point: 0x14bd6
name: RT_ICON
language: LANG_ENGLISH
filetype: dBase IV DBT of @.DBF, block length 512, next free block index 40, next free block 49, next used block 48059
sublanguage: SUBLANG_ENGLISH_PHILIPPINES
offset: 0x000150be
size: 0x000002e8
name: RT_RCDATA
language: LANG_NEUTRAL
filetype: empty
sublanguage: SUBLANG_NEUTRAL
offset: 0x00012438
size: 0x00000010
name: RT_RCDATA
language: LANG_NEUTRAL
filetype: empty
sublanguage: SUBLANG_NEUTRAL
offset: 0x00012448
size: 0x000000a8
name: RT_GROUP_ICON
language: LANG_ENGLISH
filetype: data
sublanguage: SUBLANG_ENGLISH_PHILIPPINES
offset: 0x000150aa
size: 0x00000014