VirSCAN VirSCAN

1, คุณสามารถอัพโหลดไฟล์ไดๆก็ได้ที่มีขนาดไม่ใหญ่กว่า 20 เมกกะไบต์
2, VirSCAN สามารถสแกนไฟล์ที่ถูกบีบอัดในรูปแบบของ ZIP และ RAR โดยจะต้องมีไฟล์ในนั้นไม่สูงกว่า 20 ไฟล์
3, VirSCAN สามารถสแกนไฟล์บีบอัดที่มีรหัสผ่านด้วยคำว่า 'infected' และ 'virus' ได้

ภาษา
การทำงานของเซิฟเวอร์
Server Load

ข้อมูลไฟล์
ชื่อไฟล์ :nearme.apk (ไฟล์ไม่ลง)
ขนาดของไฟล์ :1870263 byte
ประเภทของไฟล์ :application/zip
MD5:33312c08e7de0ac905cdc3132a5fc0eb
SHA1:be17ba27074f9908249e2a0ef47a2f06f98486ea
  • 扫描结果
  • 权限
  • 文件行为分析
  • ผลสรุปการสแกน
    ผลสรุปการสแกน:18% โปรแกรม (6/32)พบมัลแวร์!
    รายงานการวิเคราะห์พฤติกรรม:         การวิเคราะห์ไฟล์ Habo
    เวลา: 2019-03-15 17:24:47 (CST)
    VirSCANVirSCAN
    สแกนเนอร์ เวอร์ชั่นเอ็นจิน เวอร์ชั่นของฐานข้อมูล ฐานข้อมูลวันที่ ผลการสแกน เวลา
    antiy AVL SDK 3.0 AVL SDK 3.0 2019-03-14 ไม่พบอะไร 1
    avast 18.4.3895.0 18.4.3895.0 2019-03-15 ไม่พบอะไร 36
    avg 10.0.1405 10.0.1405 2019-03-15 ไม่พบอะไร 1
    baidu 2.0.1.0 4.1.3.52192 2.0.1.0 ไม่พบอะไร 2
    baidusd 1.0 1.0 2019-03-14 ไม่พบอะไร 1
    bitdefender 7.141118 7.141118 2019-03-14 ไม่พบอะไร 7
    clamav 25387 0.100.2 2019-03-13 ไม่พบอะไร 1
    drweb 5.0.2.3300 5.0.1.1 2019-02-23 ไม่พบอะไร 11
    emsisoft 9.0.0.4324 9.0.0.4324 2014-07-03 ไม่พบอะไร 2
    fortinet 1.000, 67.024, 66.836, 66.859 5.4.247 2019-03-15 Android/Shedun.E!tr 1
    fprot 4.6.2.117 6.5.1.5418 2014-12-31 ไม่พบอะไร 2
    fsecure 2015-08-01-02 9.13 2019-03-15 Malware.ANDROID/Drop.Shedun.11 8
    gdata 25.21099 25.21099 2019-03-15 Android.Riskware.Agent.gFPAJ 13
    ikarus 5.01.04 V1.32.39.0 2019-01-31 Trojan-Dropper.AndroidOS.Shedun 4
    jiangmin 16.0.100 1.0.0.0 2019-03-14 ไม่พบอะไร 3
    kaspersky 5.5.33 5.5.33 2019-03-14 ไม่พบอะไร 21
    kingsoft 2.1 2.1 2013-09-22 ไม่พบอะไร 14
    mcafee 8974 5400.1158 2018-08-03 ไม่พบอะไร 13
    nod32 8927 3.0.21 2019-02-24 Android/TrojanDropper.Shedun.D trojan 1
    panda 9.05.01 9.05.01 2017-03-30 ไม่พบอะไร 4
    pcc 13.302.06 9.500-1005 2019-03-14 ไม่พบอะไร 2
    qh360 1.0.1 1.0.1 2019-03-14 ไม่พบอะไร 3
    qqphone 2.0.0.0 2.0.0.0 2019-03-14 ไม่พบอะไร 1
    quickheal 14.00 14.00 2019-02-10 Android.Shedun.GEN636 4
    rising 4777 4777 2019-03-14 ไม่พบอะไร 3
    sophos 4.62 3.16.1 2016-09-20 ไม่พบอะไร 12
    symantec 20151230.005 1.3.0.24 2015-12-30 ไม่พบอะไร 1
    tachyon 9.9.9 9.9.9 2013-12-27 ไม่พบอะไร 5
    thehacker 6.8.0.5 6.8.0.5 2017-03-30 ไม่พบอะไร 3
    tws 17.47.17308 1.0.2.2108 2019-03-14 ไม่พบอะไร 8
    vba 4.0.0 4.0.0 2019-03-14 ไม่พบอะไร 4
    virusbuster 15.0.985.0 5.5.2.13 2014-12-05 ไม่พบอะไร 5
    Heuristic/Suspicious Exact
    คำเตือน : การตรวจจับอาจมีการผิดพลาดเกิดขึ้นบ้าง คุณควรพิจารณาด้วยตัวคุณเองด้วย
  • 权限列表
    许可名称信息
    android.permission.VIBRATE允许设备震动
    android.permission.WRITE_EXTERNAL_STORAGE写外部存储器(如:SD卡)
    android.permission.MOUNT_UNMOUNT_FILESYSTEMS挂载、反挂载外部文件系统
    android.permission.RESTART_PACKAGES重启其他程序
    android.permission.READ_PHONE_STATE读取电话状态
    android.permission.INTERNET连接网络(2G或3G)
    android.permission.ACCESS_NETWORK_STATE读取网络状态(2G或3G)
    android.permission.RECEIVE_BOOT_COMPLETED接收开机启动广播
    android.permission.ACCESS_WIFI_STATE读取wifi网络状态
    android.permission.SEND_SMS发送短信
    android.permission.READ_SMS读取短信
    android.permission.WRITE_SMS写短信
    android.permission.RECEIVE_SMS监控接收短信
    com.oppo.findmyphone.permission.AUTH_TOKEN
    android.permission.READ_EXTERNAL_STORAGE读外部存储器(如:SD卡)
    android.permission.GET_ACCOUNTS访问账户列表
    android.permission.AUTHENTICATE_ACCOUNTS验证账户
    android.permission.READ_SETTINGS
    android.permission.READ_LOGS读取系统日志
    android.permission.GET_TASKS获取有关当前或最近运行的任务信息
    android.permission.ACCESS_FINE_LOCATION获取精确的位置(通过GPS)
    android.permission.ACCESS_COARSE_LOCATION获取粗略的位置(通过wifi、基站)
    android.permission.DISABLE_KEYGUARD禁用键盘锁
    android.permission.CHANGE_CONFIGURATION修改当前设置(如:本地化)
    android.permission.CHANGE_NETWORK_STATE变更网络状态
    android.permission.CHANGE_WIFI_STATE改变WIFI连接状态
    android.permission.RUN_INSTRUMENTATION
    android.permission.WRITE_SETTINGS读写系统设置项
  • 文件信息
    安全评分 :
    基本信息
    MD5:33312c08e7de0ac905cdc3132a5fc0eb
    包名:com.nearme.atlas
    最低运行环境:Android 3.0.x
    版权:oppo
    关键行为
    行为描述:屏蔽窗口关闭消息
    详情信息:hWnd = 0x0001033c, Text = LogViewer Pro - 52破解论坛 , ClassName = TFormView.UnicodeClass.
    hWnd = 0x00010336, Text = LogViewer Pro, ClassName = TApplication.
    文件行为
    行为描述:创建文件
    详情信息:C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\LogView.ini
    行为描述:修改文件内容
    详情信息:C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\LogView.ini ---> Offset = 0
    C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\LogView.ini ---> Offset = 15
    C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\LogView.ini ---> Offset = 26
    C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\LogView.ini ---> Offset = 12
    C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\LogView.ini ---> Offset = 21
    C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\LogView.ini ---> Offset = 32
    C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\LogView.ini ---> Offset = 37
    C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\LogView.ini ---> Offset = 52
    C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\LogView.ini ---> Offset = 78
    C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\LogView.ini ---> Offset = 87
    C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\LogView.ini ---> Offset = 96
    C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\LogView.ini ---> Offset = 113
    C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\LogView.ini ---> Offset = 147
    C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\LogView.ini ---> Offset = 179
    C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\LogView.ini ---> Offset = 187
    行为描述:查找文件
    详情信息:FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\Key.txt
    其他行为
    行为描述:创建互斥体
    详情信息:CTF.LBES.MutexDefaultS-*
    CTF.Compart.MutexDefaultS-*
    CTF.Asm.MutexDefaultS-*
    CTF.Layouts.MutexDefaultS-*
    CTF.TMD.MutexDefaultS-*
    CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-*
    MSCTF.Shared.MUTEX.IOH
    MSCTF.Shared.MUTEX.IEK
    行为描述:创建事件对象
    详情信息:EventName = DINPUTWINMM
    EventName = MSCTF.SendReceiveConection.Event.IEK.IC
    EventName = MSCTF.SendReceive.Event.IEK.IC
    行为描述:查找指定窗口
    详情信息:NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,]
    NtUserFindWindowEx: [Class,Window] = [CicLoaderWndClass,]
    NtUserFindWindowEx: [Class,Window] = [MS_WINHELP,]
    行为描述:窗口信息
    详情信息:Pid = 2628, Hwnd=0x103ae, Text = (未打开任何文件), ClassName = TPanel.
    Pid = 2628, Hwnd=0x103ac, Text = , ClassName = TTntStatusBar.UnicodeClass.
    Pid = 2628, Hwnd=0x103a8, Text = ToolBar1, ClassName = TToolBar.
    Pid = 2628, Hwnd=0x1033c, Text = LogViewer Pro - 52破解论坛 , ClassName = TFormView.UnicodeClass.
    Pid = 2628, Hwnd=0x10472, Text = 确定, ClassName = Button.
    Pid = 2628, Hwnd=0x10474, Text = 取消, ClassName = Button.
    Pid = 2628, Hwnd=0x10478, Text = 确定退出程序吗?, ClassName = Static.
    Pid = 2628, Hwnd=0x90466, Text = LogViewer, ClassName = #32770.
    Pid = 2628, Hwnd=0x1046a, Text = 确定, ClassName = Button.
    Pid = 2628, Hwnd=0x1046c, Text = 取消, ClassName = Button.
    Pid = 2628, Hwnd=0x10470, Text = 确定退出程序吗?, ClassName = Static.
    Pid = 2628, Hwnd=0x20468, Text = LogViewer, ClassName = #32770.
    行为描述:打开事件
    详情信息:HookSwitchHookEnabledEvent
    CTF.ThreadMIConnectionEvent.000007E8.00000000.0000000F
    CTF.ThreadMarshalInterfaceEvent.000007E8.00000000.0000000F
    MSCTF.SendReceiveConection.Event.IOH.IC
    MSCTF.SendReceive.Event.IOH.IC
    行为描述:屏蔽窗口关闭消息
    详情信息:hWnd = 0x0001033c, Text = LogViewer Pro - 52破解论坛 , ClassName = TFormView.UnicodeClass.
    hWnd = 0x00010336, Text = LogViewer Pro, ClassName = TApplication.
    行为描述:枚举窗口
    详情信息:N/A
    行为描述:隐藏指定窗口
    详情信息:[Window,Class] = [,ComboLBox]
    [Window,Class] = [帮助(&H),Button]
    [Window,Class] = [LogViewer Pro - 52破解论坛 ,TFormView.UnicodeClass]
    行为描述:打开互斥体
    详情信息:ShimCacheMutex
    Activities
    活动名类型
    com.nearme.atlas.ActionActivitynearme.plugin.host.startup.action.single_pay
    com.nearme.atlas.ActionActivityandroid.intent.category.DEFAULT
    com.nearme.atlas.NearmeNotificationActivitynearme.plugin.startup.failed.file.illegal
    com.nearme.atlas.NearmeNotificationActivitynearme.plugin.startup.exception.category
    com.nearme.atlas.NearmeNotificationActivityandroid.intent.category.DEFAULT
    启动方式
    名称信息
    com.nearme.atlas.declare.PayProxyBroadcastReceiver
    com.nearme.atlas.declare.PayProxyBroadcastReceiver
    com.nearme.atlas.declare.PayProxyBroadcastReceiver
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver1
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver1
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver2
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver2
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver3
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver3
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver4
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver4
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver5
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver5
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver6
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver6
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver7
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver7
    com.nearme.atlas.NearmeActionReceiver
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver8
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver8
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver9
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver9
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver10
    com.nearme.atlas.declare.ReservePayProxyBroadcastReceiver10
    com.nearme.atlas.declare.AccountProxyBroadcastReceiver
    com.nearme.atlas.declare.AccountProxyBroadcastReceiver
    com.nearme.atlas.NearmeReceiver
    com.nearme.plugin.framework.core.broadcast.NearmeProxyBroadcastReceiver
    com.nearme.plugin.framework.core.broadcast.NearmeProxyBroadcastReceiver
    com.nearme.plugin.framework.core.broadcast.NearmeProxyBroadcastReceiver
    权限列表
    许可名称信息
    android.permission.VIBRATE允许设备震动
    android.permission.WRITE_EXTERNAL_STORAGE写外部存储器(如:SD卡)
    android.permission.MOUNT_UNMOUNT_FILESYSTEMS挂载、反挂载外部文件系统
    android.permission.RESTART_PACKAGES重启其他程序
    android.permission.READ_PHONE_STATE读取电话状态
    android.permission.INTERNET连接网络(2G或3G)
    android.permission.ACCESS_NETWORK_STATE读取网络状态(2G或3G)
    android.permission.RECEIVE_BOOT_COMPLETED接收开机启动广播
    android.permission.ACCESS_WIFI_STATE读取wifi网络状态
    android.permission.SEND_SMS发送短信
    android.permission.READ_SMS读取短信
    android.permission.WRITE_SMS写短信
    android.permission.RECEIVE_SMS监控接收短信
    com.oppo.findmyphone.permission.AUTH_TOKEN
    android.permission.READ_EXTERNAL_STORAGE读外部存储器(如:SD卡)
    android.permission.GET_ACCOUNTS访问账户列表
    android.permission.AUTHENTICATE_ACCOUNTS验证账户
    android.permission.READ_SETTINGS
    android.permission.READ_LOGS读取系统日志
    android.permission.GET_TASKS获取有关当前或最近运行的任务信息
    android.permission.ACCESS_FINE_LOCATION获取精确的位置(通过GPS)
    android.permission.ACCESS_COARSE_LOCATION获取粗略的位置(通过wifi、基站)
    android.permission.DISABLE_KEYGUARD禁用键盘锁
    android.permission.CHANGE_CONFIGURATION修改当前设置(如:本地化)
    android.permission.CHANGE_NETWORK_STATE变更网络状态
    android.permission.CHANGE_WIFI_STATE改变WIFI连接状态
    android.permission.RUN_INSTRUMENTATION
    android.permission.WRITE_SETTINGS读写系统设置项
    服务列表
    名称
    com.nearme.atlas.declare.PayProxyService
    com.nearme.atlas.declare.ReservePayProxyService1
    com.nearme.atlas.declare.ReservePayProxyService2
    com.nearme.atlas.declare.ReservePayProxyService3
    com.nearme.atlas.declare.ReservePayProxyService4
    com.nearme.atlas.declare.ReservePayProxyService5
    com.nearme.atlas.declare.ReservePayProxyService6
    com.nearme.atlas.declare.ReservePayProxyService7
    com.nearme.atlas.declare.ReservePayProxyService8
    com.nearme.atlas.declare.ReservePayProxyService9
    com.nearme.atlas.declare.ReservePayProxyService10
    com.nearme.atlas.declare.AccountProxyService
    com.nearme.platform.common.taskmanager.task.TaskService
    com.nearme.plugin.framework.core.service.NearmeProxyService
    com.nearme.plugin.framework.download.DownloadService
    文件列表
    文件名 校验码
    META-INF/MANIFEST.MF 0x8a4aad8a
    META-INF/ANDROID_.SF 0x34ec69ee
    META-INF/ANDROID_.RSA 0x4f5f2bd8
    AndroidManifest.xml 0x54771fda
    classes.dex 0x51b15aa9
    resources.arsc 0x2f63c941
    assets/ 0x0
    assets/1001.apk 0x77b59dbc
    assets/local_plugin.xml 0x3c02a42f
    assets/queickpay.html 0x7c629f2d
    res/ 0x0
    res/anim/ 0x0
    res/anim/a_close_enter.xml 0x2c2286a
    res/anim/a_close_exit.xml 0x9931d06b
    res/anim/a_open_enter.xml 0xc1c473ee
    res/anim/a_open_exit.xml 0x9e843ffc
    res/anim/dialog_waiting_animation.xml 0x99755a87
    res/anim/nearmepay_zoomin.xml 0xb98342ce
    res/anim/nearmepay_zoomout.xml 0x91e58e7d
    res/anim/oppo_dialog_enter.xml 0xc95b544a
    res/anim/oppo_dialog_exit.xml 0x3aac85ec
    res/drawable-hdpi/ 0x0
    res/drawable-hdpi/alertdialog_button_diver.9.png 0x41aa4606
    res/drawable-hdpi/alertdialog_content_background.9.png 0xeeab9634
    res/drawable-hdpi/alert_dialog_button.xml 0xd4a99337
    res/drawable-hdpi/alert_dialog_button_disable.9.png 0x40517420
    res/drawable-hdpi/alert_dialog_button_disable_focused.9.png 0x40517420
    res/drawable-hdpi/alert_dialog_button_normal.9.png 0xe46de03e
    res/drawable-hdpi/alert_dialog_button_pressed.9.png 0xbec8f661
    res/drawable-hdpi/alert_dialog_button_selected_dark.9.png 0x40517420
    res/drawable-hdpi/feedback_progress_horizontal.xml 0x55d144b9
    res/drawable-hdpi/feedback_progress_indeterminate.9.png 0x7d25dcfe
    res/drawable-hdpi/feedback_progress_indeterminate_horizontal.xml 0xbbf3b6cd
    res/drawable-hdpi/hor_divider.png 0x6f30a828
    res/drawable-hdpi/popup_buy_normal.9.png 0xa26f16e0
    res/drawable-hdpi/selector_dialog_bg.xml 0xbd77c3a2
    res/drawable-hdpi/selector_dialog_white_bg.xml 0x5268a3cb
    res/drawable-hdpi/ver_divider.png 0x2ed9fe0e
    res/drawable-xxhdpi/ 0x0
    res/drawable-xxhdpi/dialog_bg.9.png 0xfb18c21f
    res/drawable-xxhdpi/ic_launcher_nearme_usercenter.png 0x775c221e
    res/drawable-xxhdpi/nearmepay_background_null.9.png 0x2b20a309
    res/drawable-xxhdpi/oppo_progress.png 0x760d80a6
    res/interpolator/ 0x0
    res/interpolator/accelerate_decelerate.xml 0x33a16614
    res/interpolator/decelerate_quad.xml 0x4143202e
    res/interpolator/oppo_overshoot_interpolator.xml 0x5065bf14
    res/layout/ 0x0
    res/layout/activity_main.xml 0xe1347564
    res/layout/activity_nearme_notification.xml 0x9de6482d
    res/layout/activity_sec.xml 0x534287b9
    res/layout/dialog_notification.xml 0xeface01c
    res/layout/dialog_standard_layout.xml 0x687b93af
    res/layout/dialog_waiting_layout.xml 0xbb6d9bf
    res/layout/feedback_activity.xml 0x9c3a3ddc
    res/layout/feedback_notify.xml 0x1a5b82ea
    res/layout/plugin_listitem.xml 0x4cf03686
    res/layout/ttactivity_sec.xml 0xc8ce3c6e
    res/menu/ 0x0
    res/menu/main.xml 0x723fec14
    运行截图
    VirSCAN

เกี่ยวกับ VirSCAN | ข้อตกลงด้านความเป็นส่วนตัว | ติดต่อเรา | ลิงค์ที่เป็นมิตร | ช่วยเหลือ VirSCAN
แปลโดย Maethasit Hongmanee, Thailand
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号