VirSCAN VirSCAN

1, E' possibile CARICARE qualsiasi file, ma c'è un limite di 20 MB per file.
2, VirSCAN supporta la decompressione Rar/Zip, ma deve essere minore di 20 file.
3, VirSCAN può eseguire la scansione dei file compressi con password 'infected' o 'virus'.

Lingua
Carico del server
Server Load

VirSCAN
VirSCAN

1, E' possibile CARICARE qualsiasi file, ma c'è un limite di 20 MB per file.
2, VirSCAN supporta la decompressione Rar/Zip, ma deve essere minore di 20 file.
3, VirSCAN può eseguire la scansione dei file compressi con password 'infected' o 'virus'.

Informazione file

Risultati dei scanner
Risultati dei scanner:6%Programma antivirus(2/32)ha trovato malware!
Rapporto di analisi del comportamento:         Analisi dei file Habo
Tempo: 2019-05-16 22:43:08 (CST)
Scanner Ver. Engine Vers. Firma Data Firma Risultati dei scanner Tempo
antiy AVL SDK 3.0 AVL SDK 3.0 2019-05-16 Trovato nulla 1
avast 18.4.3895.0 18.4.3895.0 2019-05-16 Trovato nulla 46
avg 10.0.1405 10.0.1405 2019-05-16 Trovato nulla 1
baidu 2.0.1.0 4.1.3.52192 2.0.1.0 Trovato nulla 1
baidusd 1.0 1.0 2019-05-16 Trovato nulla 1
bitdefender 7.141118 7.141118 2019-05-16 Trovato nulla 13
clamav 25450 0.100.2 2019-05-15 PUA.Andr.Trojan.Mobidash-6888313-0 1
drweb 11.0.10.1810231600 11.0.10.1810231600 2019-03-26 Android.DownLoader.255.origin 18
emsisoft 9.0.0.4324 9.0.0.4324 2014-07-03 Trovato nulla 6
fortinet 1.000, 68.511, 68.346, 68.370 5.4.247 2019-05-16 Trovato nulla 12
fprot 4.6.2.117 6.5.1.5418 2014-12-31 Trovato nulla 2
fsecure 2015-08-01-02 9.13 2019-05-16 Trovato nulla 20
gdata 25.21965 25.21965 2019-05-16 Trovato nulla 23
ikarus 5.01.05 V1.32.39.0 2019-05-16 Trovato nulla 8
jiangmin 16.0.100 1.0.0.0 2019-05-16 Trovato nulla 6
kaspersky 5.5.33 5.5.33 2019-05-16 Trovato nulla 29
kingsoft 2.1 2.1 2013-09-22 Trovato nulla 15
mcafee 9149 5400.1158 2019-01-27 Trovato nulla 19
nod32 9075 4.5.15 2019-05-16 Trovato nulla 2
panda 9.05.01 9.05.01 2017-03-30 Trovato nulla 6
pcc 13.302.06 9.500-1005 2019-05-16 Trovato nulla 7
qh360 1.0.1 1.0.1 2019-05-16 Trovato nulla 7
qqphone 2.0.0.0 2.0.0.0 2019-05-16 Trovato nulla 1
quickheal 14.00 14.00 2019-02-10 Trovato nulla 7
rising 5031 5031 2019-05-15 Trovato nulla 11
sophos 4.62 3.16.1 2016-09-20 Trovato nulla 60
symantec 20151230.005 1.3.0.24 2015-12-30 Trovato nulla 1
tachyon 9.9.9 9.9.9 2013-12-27 Trovato nulla 16
thehacker 6.8.0.5 6.8.0.5 2017-03-30 Trovato nulla 9
tws 17.47.17308 1.0.2.2108 2019-05-15 Trovato nulla 15
vba 4.0.0 4.0.0 2019-05-16 Trovato nulla 7
virusbuster 15.0.985.0 5.5.2.13 2014-12-05 Trovato nulla 7

没有相关的权限信息

文件信息
VirSCANVirSCAN
安全评分 :
基本信息
VirSCANVirSCAN
MD5:1b125e3ba0a78a25df68e4e611dd3d75
文件大小:5.58MB
上传时间: 2014-09-22 10:36:30 (CST)
包名:
最低运行环境:
版权:
关键行为
VirSCANVirSCAN
行为描述: 获取TickCount值
详情信息: TickCount = 1233656, SleepMilliseconds = 60000.
TickCount = 1233671, SleepMilliseconds = 60000.
TickCount = 1173670, SleepMilliseconds = -1.
TickCount = 1173691, SleepMilliseconds = 20.
文件行为
VirSCANVirSCAN
行为描述: 创建文件
详情信息: C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
行为描述: 查找文件
详情信息: FileName = C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
FileName = C:\Windows\Microsoft.NET\Framework\\*
FileName = C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\*
FileName = C:\Users
FileName = C:\Users\Administrator\AppData
FileName = C:\Users\Administrator\AppData\Local
FileName = C:\Users\Administrator\AppData\Local\Temp
FileName = C:\Users\Administrator\AppData\Local\%temp%
FileName = C:\Users\Administrator\AppData\Local\%temp%\b70c.exe
FileName = C:\Users\Administrator
FileName = C:\Windows\assembly\NativeImages_v4.0.30319_32\UniPatcher2019\*
FileName = C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\*
FileName = C:\Windows\assembly\NativeImages_v4.0.30319_32\System\*
FileName = C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\*
FileName = C:\Windows\assembly\GAC_MSIL\mscorlib.resources\*
注册表行为
VirSCANVirSCAN
行为描述: 修改注册表
详情信息: \REGISTRY\USER\S-*\Software\Microsoft\GDIPlus\FontCachePath
其他行为
VirSCANVirSCAN
行为描述: 检测自身是否被调试
详情信息: IsDebuggerPresent
行为描述: 创建事件对象
详情信息: EventName = Global\CPFATE_1556_v4.0.30319
行为描述: 打开事件
详情信息: Global\CLR_PerfMon_StartEnumEvent
\KernelObjects\LowMemoryCondition
HookSwitchHookEnabledEvent
Local\MSCTF.CtfActivated.Default1
Local\MSCTF.AsmCacheReady.Default1
MSFT.VSA.COM.DISABLE.1556
MSFT.VSA.IEC.STATUS.6c736db0
行为描述: 获取TickCount值
详情信息: TickCount = 1233656, SleepMilliseconds = 60000.
TickCount = 1233671, SleepMilliseconds = 60000.
TickCount = 1173670, SleepMilliseconds = -1.
TickCount = 1173691, SleepMilliseconds = 20.
行为描述: 窗口信息
详情信息: Pid = 1556, Hwnd=0xf0284, Text = 1st... Fix Hub, ClassName = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1.
Pid = 1556, Hwnd=0xe02a6, Text = This release of UniPatcher is for Unity v2019.x.x ONLY. , ClassName = WindowsForms10.EDIT.app.0.141b42a_r14_ad1.
Pid = 1556, Hwnd=0x902fa, Text = 2nd... Fix Unity, ClassName = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1.
Pid = 1556, Hwnd=0xa01ee, Text = Browse, ClassName = WindowsForms10.BUTTON.app.0.141b42a_r14_ad1.
Pid = 1556, Hwnd=0x1501de, Text = NUUN, ClassName = WindowsForms10.EDIT.app.0.141b42a_r14_ad1.
Pid = 1556, Hwnd=0x1201b4, Text = AAAA, ClassName = WindowsForms10.EDIT.app.0.141b42a_r14_ad1.
Pid = 1556, Hwnd=0x902ca, Text = AAAA, ClassName = WindowsForms10.EDIT.app.0.141b42a_r14_ad1.
Pid = 1556, Hwnd=0x8020c, Text = AAAA, ClassName = WindowsForms10.EDIT.app.0.141b42a_r14_ad1.
Pid = 1556, Hwnd=0xf028c, Text = AAAA, ClassName = WindowsForms10.EDIT.app.0.141b42a_r14_ad1.
Pid = 1556, Hwnd=0xa0290, Text = Unity folder not selected yet !, ClassName = WindowsForms10.EDIT.app.0.141b42a_r14_ad1.
Pid = 1556, Hwnd=0x16017a, Text = Folder containing Unity.exe (v2019), ClassName = WindowsForms10.STATIC.app.0.141b42a_r14_ad1.
Pid = 1556, Hwnd=0xf0228, Text = UniPatcher2019 v3 (for v2019 x64), ClassName = WindowsForms10.Window.8.app.0.141b42a_r14_ad1.
行为描述: 调用Sleep函数
详情信息: [1]: MilliSeconds = 60000.
[2]: MilliSeconds = -1.
[3]: MilliSeconds = 20.
行为描述: 打开互斥体
详情信息: Local\MSCTF.Asm.MutexDefault1
运行截图
VirSCANVirSCAN
VirSCAN