VirSCAN VirSCAN

1, คุณสามารถอัพโหลดไฟล์ไดๆก็ได้ที่มีขนาดไม่ใหญ่กว่า 20 เมกกะไบต์
2, VirSCAN สามารถสแกนไฟล์ที่ถูกบีบอัดในรูปแบบของ ZIP และ RAR โดยจะต้องมีไฟล์ในนั้นไม่สูงกว่า 20 ไฟล์
3, VirSCAN สามารถสแกนไฟล์บีบอัดที่มีรหัสผ่านด้วยคำว่า 'infected' และ 'virus' ได้

ภาษา
การทำงานของเซิฟเวอร์
Server Load

ข้อมูลไฟล์
ชื่อไฟล์ :dtsq119.apk (File not down)
ขนาดของไฟล์ :2291531 byte
ประเภทของไฟล์ :application/zip
MD5:849983c72e7038b836eef63cea8f5e2c
SHA1:c1c4d79b158ba032d7e5e8b7c908b73e35454df3
  • 扫描结果
  • 权限
  • 文件行为分析
  • ผลสรุปการสแกน
    ผลสรุปการสแกน:3% โปรแกรม (1/32)พบมัลแวร์!
    รายงานการวิเคราะห์พฤติกรรม:         การวิเคราะห์ไฟล์ Habo
    เวลา: 2018-01-19 09:24:31 (CST)
    VirSCANVirSCAN
    สแกนเนอร์ เวอร์ชั่นเอ็นจิน เวอร์ชั่นของฐานข้อมูล ฐานข้อมูลวันที่ ผลการสแกน เวลา
    antiy AVL SDK 2.0 1970-01-01 ไม่พบอะไร 5
    asquared 9.0.0.4799 9.0.0.4799 2015-03-08 ไม่พบอะไร 2
    avast 170303-1 4.7.4 2017-03-03 ไม่พบอะไร 60
    avg 2109/14812 10.0.1405 2018-01-13 ไม่พบอะไร 60
    baidu 2.0.1.0 4.1.3.52192 2.0.1.0 ไม่พบอะไร 5
    baidusd 1.0 1.0 2017-03-22 ไม่พบอะไร 1
    bitdefender 7.58879 7.90123 2015-01-16 ไม่พบอะไร 60
    clamav 24230 0.97.5 2018-01-17 ไม่พบอะไร 60
    drweb 5.0.2.3300 5.0.1.1 2018-01-18 ไม่พบอะไร 60
    fortinet 1.000, 54.529, 54.511, 54.409 5.4.247 2018-01-19 ไม่พบอะไร 60
    fprot 4.6.2.117 6.5.1.5418 2016-02-05 ไม่พบอะไร 60
    fsecure 2015-08-01-02 9.13 2015-08-01 ไม่พบอะไร 60
    gdata 25.15716 25.15716 2018-01-17 ไม่พบอะไร 13
    ikarus 4.00.03 V1.32.31.0 2018-01-18 ไม่พบอะไร 60
    jiangmin 16.0.100 1.0.0.0 2017-12-22 ไม่พบอะไร 2
    kaspersky 5.5.33 5.5.33 2014-04-01 ไม่พบอะไร 60
    kingsoft 2.1 2.1 2018-01-17 ไม่พบอะไร 4
    mcafee 8620 5400.1158 2017-08-12 ไม่พบอะไร 60
    nod32 6752 3.0.21 2018-01-17 ไม่พบอะไร 60
    panda 9.05.01 9.05.01 2018-01-16 ไม่พบอะไร 4
    pcc 13.302.06 9.500-1005 2017-03-27 ไม่พบอะไร 60
    qh360 1.0.1 1.0.1 1.0.1 ไม่พบอะไร 3
    qqphone 1.0.0.0 1.0.0.0 2015-12-30 ไม่พบอะไร 60
    quickheal 14.00 14.00 2017-11-18 Android.Styricka.GEN6254 3
    rising 3110 3110 2017-12-26 ไม่พบอะไร 2
    sophos 5.32 3.65.2 2016-10-10 ไม่พบอะไร 60
    symantec 20151230.005 1.3.0.24 2015-12-30 ไม่พบอะไร 60
    tachyon 9.9.9 9.9.9 2013-12-27 ไม่พบอะไร 3
    thehacker 6.8.0.5 6.8.0.5 2018-01-15 ไม่พบอะไร 2
    tws 17.47.17308 1.0.2.2108 2018-01-16 ไม่พบอะไร 14
    vba 3.12.29.5 beta 3.12.29.5 beta 2018-01-18 ไม่พบอะไร 60
    virusbuster 15.0.985.0 5.5.2.13 2014-12-05 ไม่พบอะไร 60
    Heuristic/Suspicious Exact
    คำเตือน : การตรวจจับอาจมีการผิดพลาดเกิดขึ้นบ้าง คุณควรพิจารณาด้วยตัวคุณเองด้วย
    คัดลอกไปยังคลิปบอร์ด
  • 权限列表
    许可名称信息
    com.android.launcher.permission.INSTALL_SHORTCUT创建快捷方式
    android.permission.GET_TASKS获取有关当前或最近运行的任务信息
    ACCESS_WIFI_STATE
    android.permission.WRITE_EXTERNAL_STORAGE写外部存储器(如:SD卡)
    android.permission.ACCESS_WIFI_STATE读取wifi网络状态
    android.permission.ACCESS_COARSE_LOCATION获取粗略的位置(通过wifi、基站)
    android.permission.MOUNT_UNMOUNT_FILESYSTEMS挂载、反挂载外部文件系统
    android.permission.READ_PHONE_STATE读取电话状态
    android.permission.SYSTEM_ALERT_WINDOW显示系统窗口
    android.permission.ACCESS_WIFI_STATE.android.permission.READ_PHONE_STATE
    android.permission.INTERNET连接网络(2G或3G)
    android.permission.CHANGE_WIFI_STATE改变WIFI连接状态
    android.permission.ACCESS_LOCATION_EXTRA_COMMANDS访问额外的定位指令
    android.permission.ACCESS_FINE_LOCATION获取精确的位置(通过GPS)
    com.android.launcher.permission.READ_SETTINGS读取快捷方式信息
    android.permission.WAKE_LOCK手机屏幕关闭后后台进程仍运行
    android.permission.ACCESS_NETWORK_STATE读取网络状态(2G或3G)
    android.permission.CHANGE_CONFIGURATION修改当前设置(如:本地化)
  • 文件信息
    安全评分 :
    基本信息
    MD5:849983c72e7038b836eef63cea8f5e2c
    包名:com.dtsq.ayou
    最低运行环境:Android 2.2.x
    版权:ayou
    关键行为
    行为描述:获取TickCount值
    详情信息:TickCount = 220265, SleepMilliseconds = 1000.
    TickCount = 220484, SleepMilliseconds = 1000.
    TickCount = 220625, SleepMilliseconds = 1000.
    TickCount = 220656, SleepMilliseconds = 1000.
    TickCount = 220671, SleepMilliseconds = 1000.
    TickCount = 220703, SleepMilliseconds = 1000.
    TickCount = 220718, SleepMilliseconds = 1000.
    TickCount = 221234, SleepMilliseconds = 1000.
    TickCount = 221250, SleepMilliseconds = 1000.
    TickCount = 220500, SleepMilliseconds = 250.
    TickCount = 220316, SleepMilliseconds = 20.
    TickCount = 220332, SleepMilliseconds = 20.
    TickCount = 220363, SleepMilliseconds = 20.
    TickCount = 227250, SleepMilliseconds = 1000.
    TickCount = 226657, SleepMilliseconds = 1.
    行为描述:利用进程调试属性使系统蓝屏
    详情信息:N/A
    行为描述:修改注册表_系统防火墙可信进程列表
    详情信息:\REGISTRY\MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Administrator\Application Data\dwm.exe
    行为描述:设置启动项
    详情信息:C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\fdd773d38724ef6c975c8403a5df229c.exe
    行为描述:直接获取CPU时钟
    详情信息:EAX = 0x4749750f, EDX = 0x000000b5
    EAX = 0x49fc748b, EDX = 0x000000b5
    EAX = 0x49fc74d7, EDX = 0x000000b5
    EAX = 0x49fc7523, EDX = 0x000000b5
    EAX = 0x49fc756f, EDX = 0x000000b5
    EAX = 0x49fc75bb, EDX = 0x000000b5
    EAX = 0x4c844544, EDX = 0x000000b5
    EAX = 0x4c844590, EDX = 0x000000b5
    EAX = 0x4c8445dc, EDX = 0x000000b5
    EAX = 0x4c844628, EDX = 0x000000b5
    EAX = 0xe92fc626, EDX = 0x000000b7
    EAX = 0xe92fc672, EDX = 0x000000b7
    EAX = 0xe92fc6be, EDX = 0x000000b7
    EAX = 0xe92fc70a, EDX = 0x000000b7
    EAX = 0xe92fc756, EDX = 0x000000b7
    行为描述:修改注册表_启动项
    详情信息:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Run\fdd773d38724ef6c975c8403a5df229c
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\fdd773d38724ef6c975c8403a5df229c
    进程行为
    行为描述:隐藏窗口创建进程
    详情信息:ImagePath = , CmdLine = netsh firewall add allowedprogram "C:\Documents and Settings\Administrator\Application Data\dwm.exe" "dwm.exe" ENABLE
    行为描述:创建进程
    详情信息:[0x00000b68]ImagePath = C:\WINDOWS\system32\netsh.exe, CmdLine = netsh firewall add allowedprogram "C:\Documents and Settings\Administrator\Application Data\dwm.exe" "dwm.exe" ENABLE
    行为描述:创建新文件进程
    详情信息:[0x00000b2c]ImagePath = C:\Documents and Settings\Administrator\Application Data\dwm.exe, CmdLine = "C:\Documents and Settings\Administrator\Application Data\dwm.exe"
    行为描述:创建本地线程
    详情信息:TargetProcess: %temp%\****.exe, InheritedFromPID = 2000, ProcessID = 2752, ThreadID = 2788, StartAddress = 792A741C, Parameter = 00000000
    TargetProcess: %temp%\****.exe, InheritedFromPID = 2000, ProcessID = 2752, ThreadID = 2792, StartAddress = 791F59C0, Parameter = 001B0170
    TargetProcess: %temp%\****.exe, InheritedFromPID = 2000, ProcessID = 2752, ThreadID = 2820, StartAddress = 77DC845A, Parameter = 00000000
    TargetProcess: %temp%\****.exe, InheritedFromPID = 2000, ProcessID = 2752, ThreadID = 2868, StartAddress = 792F7F68, Parameter = 00000000
    TargetProcess: %temp%\****.exe, InheritedFromPID = 2000, ProcessID = 2752, ThreadID = 2872, StartAddress = 77E56C7D, Parameter = 001D66A0
    TargetProcess: %temp%\****.exe, InheritedFromPID = 2000, ProcessID = 2752, ThreadID = 2876, StartAddress = 769AE43B, Parameter = 001C7D88
    TargetProcess: dwm.exe, InheritedFromPID = 2752, ProcessID = 2860, ThreadID = 2880, StartAddress = 792A741C, Parameter = 00000000
    TargetProcess: dwm.exe, InheritedFromPID = 2752, ProcessID = 2860, ThreadID = 2884, StartAddress = 791F59C0, Parameter = 001B0028
    TargetProcess: dwm.exe, InheritedFromPID = 2752, ProcessID = 2860, ThreadID = 2888, StartAddress = 77DC845A, Parameter = 00000000
    TargetProcess: netsh.exe, InheritedFromPID = 2860, ProcessID = 2920, ThreadID = 2928, StartAddress = 77DC845A, Parameter = 00000000
    TargetProcess: netsh.exe, InheritedFromPID = 2860, ProcessID = 2920, ThreadID = 2956, StartAddress = 77E56C7D, Parameter = 001B7450
    TargetProcess: netsh.exe, InheritedFromPID = 2860, ProcessID = 2920, ThreadID = 2960, StartAddress = 769AE43B, Parameter = 001B9030
    TargetProcess: netsh.exe, InheritedFromPID = 2860, ProcessID = 2920, ThreadID = 2964, StartAddress = 77E56C7D, Parameter = 001BE428
    TargetProcess: dwm.exe, InheritedFromPID = 2752, ProcessID = 2860, ThreadID = 3068, StartAddress = 791F59C0, Parameter = 001C5EF8
    TargetProcess: dwm.exe, InheritedFromPID = 2752, ProcessID = 2860, ThreadID = 3072, StartAddress = 791F59C0, Parameter = 001C5EF8
    文件行为
    行为描述:创建文件
    详情信息:C:\Documents and Settings\Administrator\Application Data\dwm.exe
    行为描述:创建可执行文件
    详情信息:C:\Documents and Settings\Administrator\Application Data\dwm.exe
    C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\fdd773d38724ef6c975c8403a5df229c.exe
    行为描述:查找文件
    详情信息:FileName = C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
    FileName = C:\WINDOWS\Microsoft.NET\Framework\\*
    FileName = C:\WINDOWS\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.INI
    FileName = C:\Documents and Settings\Administrator\Local Settings\Temp
    FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%
    FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe
    FileName = C:\Documents and Settings
    FileName = C:\Documents and Settings\Administrator
    FileName = C:\Documents and Settings\Administrator\Local Settings
    FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\996E.INI
    FileName = C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.INI
    FileName = C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.INI
    FileName = C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.INI
    FileName = C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
    FileName = C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
    行为描述:设置启动项
    详情信息:C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\fdd773d38724ef6c975c8403a5df229c.exe
    行为描述:复制文件
    详情信息:C:\Documents and Settings\Administrator\Application Data\dwm.exe ---> C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\fdd773d38724ef6c975c8403a5df229c.exe
    行为描述:修改文件内容
    详情信息:C:\Documents and Settings\Administrator\Application Data\dwm.exe ---> Offset = 0
    C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\fdd773d38724ef6c975c8403a5df229c.exe ---> Offset = 0
    C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\fdd773d38724ef6c975c8403a5df229c.exe ---> Offset = 65536
    C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\fdd773d38724ef6c975c8403a5df229c.exe ---> Offset = 131072
    C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\fdd773d38724ef6c975c8403a5df229c.exe ---> Offset = 196608
    网络行为
    行为描述:建立到一个指定的套接字连接
    详情信息:IP: **.0.0.**:97, SOCKET = 0x0000022c
    IP: **.0.0.**:97, SOCKET = 0x000003a4
    IP: **.0.0.**:97, SOCKET = 0x000003b8
    IP: **.0.0.**:97, SOCKET = 0x000003cc
    IP: **.0.0.**:97, SOCKET = 0x000003e0
    IP: **.0.0.**:97, SOCKET = 0x000003f4
    IP: **.0.0.**:97, SOCKET = 0x00000408
    IP: **.0.0.**:97, SOCKET = 0x0000041c
    IP: **.0.0.**:97, SOCKET = 0x00000438
    IP: **.0.0.**:97, SOCKET = 0x0000044c
    IP: **.0.0.**:97, SOCKET = 0x00000460
    IP: **.0.0.**:97, SOCKET = 0x00000474
    IP: **.0.0.**:97, SOCKET = 0x00000488
    IP: **.0.0.**:97, SOCKET = 0x0000049c
    IP: **.0.0.**:97, SOCKET = 0x000004b0
    注册表行为
    行为描述:修改注册表
    详情信息:\REGISTRY\USER\S-*\di
    \REGISTRY\USER\S-*\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\Documents and Settings\Administrator\Application Data\dwm.exe
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing\FWCFG\EnableFileTracing
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing\FWCFG\EnableConsoleTracing
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing\FWCFG\FileTracingMask
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing\FWCFG\ConsoleTracingMask
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing\FWCFG\MaxFileSize
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing\FWCFG\FileDirectory
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\NAP\Netsh\LogSessionName
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\NAP\Netsh\Active
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\NAP\Netsh\ControlFlags
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\NAP\Netsh\Napmontr\Guid
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\NAP\Netsh\Napmontr\BitNames
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\qagent\LogSessionName
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\qagent\Active
    行为描述:修改注册表_系统环境变量
    详情信息:\REGISTRY\USER\S-*\Environment\SEE_MASK_NOZONECHECKS
    行为描述:修改注册表_系统防火墙可信进程列表
    详情信息:\REGISTRY\MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Administrator\Application Data\dwm.exe
    行为描述:修改注册表_启动项
    详情信息:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Run\fdd773d38724ef6c975c8403a5df229c
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\fdd773d38724ef6c975c8403a5df229c
    其他行为
    行为描述:检测自身是否被调试
    详情信息:IsDebuggerPresent
    行为描述:创建互斥体
    详情信息:CTF.LBES.MutexDefaultS-*
    CTF.Compart.MutexDefaultS-*
    CTF.Asm.MutexDefaultS-*
    CTF.Layouts.MutexDefaultS-*
    CTF.TMD.MutexDefaultS-*
    CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-*
    fdd773d38724ef6c975c8403a5df229c
    Local\ZonesCounterMutex
    Local\ZoneAttributeCacheCounterMutex
    Local\ZonesCacheCounterMutex
    Local\ZonesLockedCacheCounterMutex
    行为描述:创建事件对象
    详情信息:EventName = Global\CPFATE_2752_v4.0.30319
    EventName = Global\CPFATE_2860_v4.0.30319
    EventName = Global\crypt32LogoffEvent
    EventName = DINPUTWINMM
    行为描述:打开互斥体
    详情信息:ShimCacheMutex
    Local\!IETld!Mutex
    行为描述:获取TickCount值
    详情信息:TickCount = 220265, SleepMilliseconds = 1000.
    TickCount = 220484, SleepMilliseconds = 1000.
    TickCount = 220625, SleepMilliseconds = 1000.
    TickCount = 220656, SleepMilliseconds = 1000.
    TickCount = 220671, SleepMilliseconds = 1000.
    TickCount = 220703, SleepMilliseconds = 1000.
    TickCount = 220718, SleepMilliseconds = 1000.
    TickCount = 221234, SleepMilliseconds = 1000.
    TickCount = 221250, SleepMilliseconds = 1000.
    TickCount = 220500, SleepMilliseconds = 250.
    TickCount = 220316, SleepMilliseconds = 20.
    TickCount = 220332, SleepMilliseconds = 20.
    TickCount = 220363, SleepMilliseconds = 20.
    TickCount = 227250, SleepMilliseconds = 1000.
    TickCount = 226657, SleepMilliseconds = 1.
    行为描述:调整进程token权限
    详情信息:SE_LOAD_DRIVER_PRIVILEGE
    SE_DEBUG_PRIVILEGE
    SE_INC_BASE_PRIORITY_PRIVILEGE
    行为描述:打开事件
    详情信息:Global\CLR_PerfMon_StartEnumEvent
    \KernelObjects\LowMemoryCondition
    HookSwitchHookEnabledEvent
    _fCanRegisterWithShellService
    \SECURITY\LSA_AUTHENTICATION_INITIALIZED
    MSFT.VSA.COM.DISABLE.2752
    MSFT.VSA.IEC.STATUS.6c736db0
    Global\crypt32LogoffEvent
    Global\SvcctrlStartEvent_A3752DX
    MSFT.VSA.COM.DISABLE.2920
    MSFT.VSA.COM.DISABLE.2860
    行为描述:利用进程调试属性使系统蓝屏
    详情信息:N/A
    行为描述:可执行文件签名信息
    详情信息:C:\Documents and Settings\Administrator\Application Data\dwm.exe(签名验证: 未通过)
    C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\fdd773d38724ef6c975c8403a5df229c.exe(签名验证: 未通过)
    行为描述:调用Sleep函数
    详情信息:[1]: MilliSeconds = 5000.
    [2]: MilliSeconds = 1000.
    [4]: MilliSeconds = -1.
    [5]: MilliSeconds = 20.
    [3]: MilliSeconds = 250.
    [6]: MilliSeconds = 20.
    [7]: MilliSeconds = 20.
    [3]: MilliSeconds = 2000.
    [4]: MilliSeconds = 1.
    [5]: MilliSeconds = 1.
    [6]: MilliSeconds = 1.
    [7]: MilliSeconds = 1000.
    [8]: MilliSeconds = 1.
    [9]: MilliSeconds = 1.
    [10]: MilliSeconds = 1.
    行为描述:可执行文件MD5
    详情信息:C:\Documents and Settings\Administrator\Application Data\dwm.exe ---> 8461888883b6bc29fd00b59d6f1af67e
    C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\fdd773d38724ef6c975c8403a5df229c.exe ---> 8461888883b6bc29fd00b59d6f1af67e
    行为描述:直接获取CPU时钟
    详情信息:EAX = 0x4749750f, EDX = 0x000000b5
    EAX = 0x49fc748b, EDX = 0x000000b5
    EAX = 0x49fc74d7, EDX = 0x000000b5
    EAX = 0x49fc7523, EDX = 0x000000b5
    EAX = 0x49fc756f, EDX = 0x000000b5
    EAX = 0x49fc75bb, EDX = 0x000000b5
    EAX = 0x4c844544, EDX = 0x000000b5
    EAX = 0x4c844590, EDX = 0x000000b5
    EAX = 0x4c8445dc, EDX = 0x000000b5
    EAX = 0x4c844628, EDX = 0x000000b5
    EAX = 0xe92fc626, EDX = 0x000000b7
    EAX = 0xe92fc672, EDX = 0x000000b7
    EAX = 0xe92fc6be, EDX = 0x000000b7
    EAX = 0xe92fc70a, EDX = 0x000000b7
    EAX = 0xe92fc756, EDX = 0x000000b7
    Activities
    活动名类型
    com.e4a.runtime.android.StartActivityandroid.intent.action.MAIN
    com.e4a.runtime.android.StartActivityandroid.intent.category.DEFAULT
    com.e4a.runtime.android.StartActivityandroid.intent.category.LAUNCHER
    com.e4a.runtime.android.mainActivityandroid.intent.action.MAIN
    com.e4a.runtime.android.mainActivityandroid.intent.category.DEFAULT
    com.tencent.tauth.AuthActivityandroid.intent.action.VIEW
    com.tencent.tauth.AuthActivityandroid.intent.category.DEFAULT
    com.tencent.tauth.AuthActivityandroid.intent.category.BROWSABLE
    权限列表
    许可名称信息
    com.android.launcher.permission.INSTALL_SHORTCUT创建快捷方式
    android.permission.GET_TASKS获取有关当前或最近运行的任务信息
    ACCESS_WIFI_STATE
    android.permission.WRITE_EXTERNAL_STORAGE写外部存储器(如:SD卡)
    android.permission.ACCESS_WIFI_STATE读取wifi网络状态
    android.permission.ACCESS_COARSE_LOCATION获取粗略的位置(通过wifi、基站)
    android.permission.MOUNT_UNMOUNT_FILESYSTEMS挂载、反挂载外部文件系统
    android.permission.READ_PHONE_STATE读取电话状态
    android.permission.SYSTEM_ALERT_WINDOW显示系统窗口
    android.permission.ACCESS_WIFI_STATE.android.permission.READ_PHONE_STATE
    android.permission.INTERNET连接网络(2G或3G)
    android.permission.CHANGE_WIFI_STATE改变WIFI连接状态
    android.permission.ACCESS_LOCATION_EXTRA_COMMANDS访问额外的定位指令
    android.permission.ACCESS_FINE_LOCATION获取精确的位置(通过GPS)
    com.android.launcher.permission.READ_SETTINGS读取快捷方式信息
    android.permission.WAKE_LOCK手机屏幕关闭后后台进程仍运行
    android.permission.ACCESS_NETWORK_STATE读取网络状态(2G或3G)
    android.permission.CHANGE_CONFIGURATION修改当前设置(如:本地化)
    文件列表
    文件名 校验码
    META-INF/MANIFEST.MF 0xbbf9b06c
    META-INF/LANZUAN.SF 0xdfd6478b
    META-INF/LANZUAN.RSA 0xaae6ea4d
    assets/0170727113430_meitu_1.png 0xb214648
    assets/0170727113840_meitu_2.png 0x356ab3ee
    assets/32.png 0xa0a49d7f
    assets/32f.png 0xed33320c
    assets/4f3ea4f8d72a6059293e74f62234349b023bbae6.jpg 0x5fc27838
    assets/Gears_512px_1177846_easyicon.net.png 0x185ebb8d
    assets/Speach_BubbleDialog_512px_1178694_easyicon.net.png 0x6d33cb65
    assets/abs__menu_dropdown_panel_holo_dark.9.png 0xc9d6a42a
    assets/bianjikuangmeihua.jpg 0xb7c08842
    assets/d.png 0xcbacd7ac
    assets/d21fbe096b63f6243305cab78d44ebf81a4ca32e.jpg 0xa3211eba
    assets/lp1.jpg 0x17bf9fff
    assets/q.png 0xc56ca5b
    assets/share_15.532584269663px_1194518_easyicon.net.png 0x9a15b7e7
    assets/z.png 0x5683bd5
    res/anim/dialog_scale_in.xml 0xd1205a18
    res/anim/dialog_scale_out.xml 0xe4110112
    res/anim/error_frame_in.xml 0x6dfac1ce
    res/anim/error_x_in.xml 0x75ae2b72
    res/anim/success_bow_roate.xml 0x868ab202
    res/anim/success_mask_layout.xml 0x803af484
    res/anim/umeng_socialize_fade_in.xml 0xf2e7bdac
    res/anim/umeng_socialize_fade_out.xml 0x19682b1d
    res/anim/umeng_socialize_shareboard_animation_in.xml 0x5b62eaa8
    res/anim/umeng_socialize_shareboard_animation_out.xml 0x100d0f13
    res/anim/umeng_socialize_slide_in_from_bottom.xml 0x72fa759c
    res/anim/umeng_socialize_slide_out_from_bottom.xml 0x62fd58e7
    res/drawable/b.xml 0x1c495d01
    res/drawable/bl.xml 0x388eab0b
    res/drawable/blue_button_background.xml 0x667588f4
    res/drawable/confirm_dialog_bg.xml 0x1d967bfa
    res/drawable/confirm_dialog_cancel_selector.xml 0x2182fcde
    res/drawable/confirm_dialog_ok_selector.xml 0x838435db
    res/drawable/cs.xml 0x94cafd31
    res/drawable/dialog_background.xml 0x4fd129b
    res/drawable/error_center_x.xml 0x1381f6c6
    res/drawable/error_circle.xml 0x4f7dd542
    res/drawable/gray_button_background.xml 0x49ead617
    res/drawable/hei.xml 0xfa0e5558
    res/drawable/icon.png 0x399a5a15
    res/drawable/red_button_background.xml 0x8b2a8fda
    res/drawable/sh.xml 0x89b6bd3
    res/drawable/shihei.xml 0x3457aae7
    res/drawable/sl.xml 0xec89ad17
    res/drawable/success_bow.xml 0x6cb0041
    res/drawable/success_circle.xml 0x8889b17f
    res/drawable/umeng_socialize_more.png 0xd76dd455
    res/drawable/umeng_socialize_qq.png 0x141c5ea2
    res/drawable/umeng_socialize_qzone.png 0xefe76ab3
    res/drawable/umeng_socialize_share_music.png 0x970770da
    res/drawable/umeng_socialize_share_pic.png 0x1b838ca6
    res/drawable/umeng_socialize_share_video.png 0x6eead77a
    res/drawable/umeng_socialize_shareboard_item_background.xml 0x2b6939c4
    res/drawable/umeng_socialize_title_back_bt.xml 0xdeda97d
    res/drawable/umeng_socialize_title_back_bt_normal.png 0xf06342af
    res/drawable/umeng_socialize_title_back_bt_selected.png 0xa372e23a
    res/drawable/umeng_socialize_title_right_bt.xml 0xf9c039df
    res/drawable/umeng_socialize_title_right_bt_normal.png 0x361e32e5
    res/drawable/umeng_socialize_title_right_bt_selected.png 0x3abfd408
    res/drawable/umeng_socialize_window_shadow_pad.xml 0xccbfb7d1
    res/drawable/umeng_socialize_x_button.png 0x12819e5e
    res/drawable/warning_circle.xml 0x95a6aa47
    res/drawable/warning_sigh.xml 0xd0915a0
    res/layout/alert_dialog.xml 0x46874d80
    res/layout/confirm_dialog.xml 0xa1d48735
    res/layout/default_toast_layout.xml 0x346cbe03
    res/layout/error_toast_layout.xml 0x59528051
    res/layout/info_toast_layout.xml 0x2a2574ff
    res/layout/ok_tan_toast_layout.xml 0x5fec8743
    res/layout/success_toast_layout.xml 0xff99c1d
    res/layout/umeng_socialize_oauth_dialog.xml 0x226819a7
    res/layout/umeng_socialize_post_share.xml 0x23369a7e
    res/layout/umeng_socialize_shareboard_item.xml 0x6c04923d
    res/layout/umeng_socialize_titile_bar.xml 0x15081111
    res/layout/warning_toast_layout.xml 0x762ea255
    resources.arsc 0xb504688d
    res/drawable-hdpi/background_toast.xml 0x178e945c
    res/drawable-hdpi/custom_img.jpg 0x5180fa2a
    res/drawable-hdpi/default_toast.xml 0x7a23122d
    res/drawable-hdpi/error_toast.xml 0x868e74ab
    res/drawable-hdpi/info_toast.xml 0xcfbefc80
    res/drawable-hdpi/ok_tan_ic_check_white_48dp.png 0x78b8b463
    res/drawable-hdpi/ok_tan_ic_clear_white_48dp.png 0xf7eea1df
    res/drawable-hdpi/ok_tan_ic_error_outline_white_48dp.png 0x56ed9b8
    res/drawable-hdpi/ok_tan_ic_info_outline_white_48dp.png 0xa8ab301b
    res/drawable-hdpi/ok_tan_toast_frame.9.png 0xbebff272
    res/drawable-hdpi/success_toast.xml 0x810563ca
    res/drawable-hdpi/warning_toast.xml 0xd235369d
    res/drawable-ldpi/ok_tan_toast_frame.9.png 0x65448247
    res/drawable-mdpi/ok_tan_ic_check_white_48dp.png 0x3f5899a3
    res/drawable-mdpi/ok_tan_ic_clear_white_48dp.png 0x63f44d4c
    res/drawable-mdpi/ok_tan_ic_error_outline_white_48dp.png 0xf66e7aa7
    res/drawable-mdpi/ok_tan_ic_info_outline_white_48dp.png 0xd2731dc9
    res/drawable-mdpi/ok_tan_toast_frame.9.png 0x74e74d10
    res/drawable-xhdpi/ok_tan_ic_check_white_48dp.png 0xafbc2097
    res/drawable-xhdpi/ok_tan_ic_clear_white_48dp.png 0xa73cc237
    res/drawable-xhdpi/ok_tan_ic_error_outline_white_48dp.png 0x14a0ab2e
    res/drawable-xhdpi/ok_tan_ic_info_outline_white_48dp.png 0xc36d84ef
    res/drawable-xhdpi/ok_tan_ic_warning_outline_white.png 0x7da93c8d
    res/drawable-xhdpi/ok_tan_ic_warning_white_48dp.png 0x1f7cfe8f
    res/drawable-xhdpi/ok_tan_toast_frame.9.png 0x8b52d8c3
    res/drawable-xxhdpi/ok_tan_ic_check_white_48dp.png 0x97c1e5a3
    res/drawable-xxhdpi/ok_tan_ic_clear_white_48dp.png 0xf601546b
    res/drawable-xxhdpi/ok_tan_ic_error_outline_white_48dp.png 0x1d4f5082
    res/drawable-xxhdpi/ok_tan_ic_info_outline_white_48dp.png 0x751f0aef
    res/drawable-xxhdpi/ok_tan_toast_frame.9.png 0xe131a524
    res/drawable-xxxhdpi/ic_pets_white_48dp.png 0x2011603
    res/drawable-xxxhdpi/ok_tan_ic_check_white_48dp.png 0x36c3700a
    res/drawable-xxxhdpi/ok_tan_ic_clear_white_48dp.png 0x9e538b88
    res/drawable-xxxhdpi/ok_tan_ic_error_outline_white_48dp.png 0xbd2786f2
    res/drawable-xxxhdpi/ok_tan_ic_info_outline_white_48dp.png 0x3d3307e3
    AndroidManifest.xml 0xc338a867
    assets/icon/image_have_icon_x_id_file_png.png 0xb1171999
    assets/icon/image_icon_constructor_encrypted.png 0x7f05bce5
    assets/ijiami.ajm 0x8266800
    assets/ijm_lib/armeabi/libexec.so 0xb8967c15
    assets/ijm_lib/armeabi/libexecmain.so 0xfb0cafea
    assets/ijm_lib/x86/libexec.so 0xa357d30c
    assets/ijm_lib/x86/libexecmain.so 0xae91a5d1
    assets/images/icon_titl_last_encrypted.png 0xc7a14065
    classes.dex 0xda22d11a
    lib/armeabi/libexecmain.so 0x5a1d3fa0
    assets/signed.bin 0x6eef9b64
    assets/af.bin 0x39fd19b3
    运行截图
    VirSCAN

เกี่ยวกับ VirSCAN | ข้อตกลงด้านความเป็นส่วนตัว | ติดต่อเรา | 友情链接 | ช่วยเหลือ VirSCAN
แปลโดย Maethasit Hongmanee, Thailand
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号