The Acorn application guide

AV Quarantine Lab

An inert, constructed input was decoded using a generic XOR-FF transformation. Compare the original and derived hashes before examining the output. This test does not establish support for a particular antivirus vendor’s quarantine format.

Constructed test example

Inspect the result of a container-decoding test

Example input

A constructed inert container used to test generic XOR-FF decoding.

Result or controls shown

Decoded inert bytes and a report retaining original and output hashes.

The native AV Quarantine window reports one generic XOR-FF decoding result and its recovered output path. The generated output retains original and derived hashes. The input is constructed inert data, not a real vendor detection.

Enlarge the screenshot to read the source records.

Examination steps

Steps to review in your evaluation

Identify the container and the applicable decoding route.
Decode to a separate output without executing the resulting bytes.
Compare source and output hashes with the controlled reference.

Related application guides

Start with your requirements

Request an application demo

Tell us the source type and task you want to examine. We can plan a demo using suitable training material. Do not send confidential evidence.