VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, VirSCAN can scan compressed files with password 'infected' or 'virus'.

Language
Server load
Server Load



File information
File Name : com.termux-0.56.apk (File not down)
File Size :225457 byte
File Type :application/zip
MD5:83fd8b37478bb0829ddcf41061de3e98
SHA1:420d268103cd091315f3041a277abf728dbf4a42
  • 扫描结果
  • 权限
  • 文件行为分析
  • Scanner results
    Scanner results:0%Scanner(s) (0/32)found malware!        Behavior
    Time: 2018-02-22 22:55:14 (CST)
    VirSCANVirSCAN
    Scanner Engine Ver Sig Ver Sig Date Scan result Time
    antiy AVL SDK 2.0 1970-01-01 Found nothing 5
    asquared 9.0.0.4799 9.0.0.4799 2015-03-08 Found nothing 1
    avast 170303-1 4.7.4 2017-03-03 Found nothing 60
    avg 2109/14887 10.0.1405 2018-02-10 Found nothing 60
    baidu 2.0.1.0 4.1.3.52192 2.0.1.0 Found nothing 33
    baidusd 1.0 1.0 2017-03-22 Found nothing 1
    bitdefender 7.58879 7.90123 2015-01-16 Found nothing 60
    clamav 24332 0.97.5 2018-02-20 Found nothing 60
    drweb 5.0.2.3300 5.0.1.1 2018-02-21 Found nothing 60
    fortinet 1.000, 55.281, 55.162, 55.191 5.4.247 2018-02-20 Found nothing 60
    fprot 4.6.2.117 6.5.1.5418 2016-02-05 Found nothing 60
    fsecure 2015-08-01-02 9.13 2015-08-01 Found nothing 60
    gdata 25.16103 25.16103 2018-02-21 Found nothing 14
    ikarus 4.00.06 V1.32.31.0 2018-02-21 Found nothing 60
    jiangmin 16.0.100 1.0.0.0 2017-12-22 Found nothing 2
    kaspersky 5.5.33 5.5.33 2014-04-01 Found nothing 60
    kingsoft 2.1 2.1 2018-02-21 Found nothing 4
    mcafee 8620 5400.1158 2017-08-12 Found nothing 60
    nod32 6936 3.0.21 2018-02-20 Found nothing 60
    panda 9.05.01 9.05.01 2018-02-21 Found nothing 4
    pcc 13.302.06 9.500-1005 2017-03-27 Found nothing 60
    qh360 1.0.1 1.0.1 1.0.1 Found nothing 4
    qqphone 1.0.0.0 1.0.0.0 2015-12-30 Found nothing 60
    quickheal 14.00 14.00 2017-11-18 Found nothing 3
    rising 3252 3252 2017-12-26 Found nothing 2
    sophos 5.32 3.65.2 2016-10-10 Found nothing 60
    symantec 20151230.005 1.3.0.24 2015-12-30 Found nothing 60
    tachyon 9.9.9 9.9.9 2013-12-27 Found nothing 3
    thehacker 6.8.0.5 6.8.0.5 2018-02-19 Found nothing 2
    tws 17.47.17308 1.0.2.2108 2018-02-21 Found nothing 14
    vba 3.12.29.5 beta 3.12.29.5 beta 2018-02-21 Found nothing 60
    virusbuster 15.0.985.0 5.5.2.13 2014-12-05 Found nothing 60
    Heuristic/Suspicious Exact
    NOTICE: Results are not 100% accurate and can be reported as a false positive by some scannerswhen and if malware is found. Please judge these results for yourself.
    Copy to clipboard
  • 权限列表
    许可名称信息
    android.permission.INTERNET连接网络(2G或3G)
    android.permission.WRITE_EXTERNAL_STORAGE写外部存储器(如:SD卡)
    android.permission.WAKE_LOCK手机屏幕关闭后后台进程仍运行
    android.permission.VIBRATE允许设备震动
  • 文件信息
    安全评分 :
    基本信息
    MD5:83fd8b37478bb0829ddcf41061de3e98
    包名:com.termux
    最低运行环境:Android 5.0
    版权:Mobile Pearls
    关键行为
    行为描述:直接调用系统关键API
    详情信息:Index = 0x000000EA, Name: NtQueryInformationProcess, Instruction Address = 0x018B1623
    Index = 0x0000014F, Name: NtSetInformationThread, Instruction Address = 0x018B1623
    注册表行为
    行为描述:修改注册表
    详情信息:\REGISTRY\USER\S-*\Software\Microsoft\Direct3D\MostRecentApplication\Name
    行为描述:删除注册表键值
    详情信息:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Run\BANDICAM
    其他行为
    行为描述:设置对象安全信息
    详情信息:C:\Users\Administrator\Documents\Bandicam
    行为描述:创建互斥体
    详情信息:Local\DirectSound DllMain mutex (0x00000BC8)
    Local\__DDrawExclMode__
    Local\__DDrawCheckExclMode__
    行为描述:检测自身是否被调试
    详情信息:IsDebuggerPresent
    行为描述:直接调用系统关键API
    详情信息:Index = 0x000000EA, Name: NtQueryInformationProcess, Instruction Address = 0x018B1623
    Index = 0x0000014F, Name: NtSetInformationThread, Instruction Address = 0x018B1623
    行为描述:窗口信息
    详情信息:Pid = 3016, Hwnd=0x101ba, Text = 确定, ClassName = Button.
    Pid = 3016, Hwnd=0x101be, Text = Can"t load language file, ClassName = Static.
    Pid = 3016, Hwnd=0x101b8, Text = Bandicam, ClassName = #32770.
    行为描述:打开事件
    详情信息:HookSwitchHookEnabledEvent
    Local\MSCTF.CtfActivated.Default1
    Local\MSCTF.AsmCacheReady.Default1
    行为描述:打开互斥体
    详情信息:Local\MSCTF.Asm.MutexDefault1
    Activities
    活动名类型
    com.termux.app.TermuxActivityandroid.intent.action.MAIN
    com.termux.app.TermuxActivityandroid.intent.category.LAUNCHER
    com.termux.app.TermuxActivityandroid.intent.category.LEANBACK_LAUNCHER
    com.termux.filepicker.TermuxFileReceiverActivityandroid.intent.action.SEND
    com.termux.filepicker.TermuxFileReceiverActivityandroid.intent.action.VIEW
    com.termux.filepicker.TermuxFileReceiverActivityandroid.intent.category.DEFAULT
    com.termux.HomeActivityandroid.intent.action.MAIN
    com.termux.HomeActivityandroid.intent.category.IOT_LAUNCHER
    com.termux.HomeActivityandroid.intent.category.DEFAULT
    危险函数
    函数名称信息
    android/app/NotificationManager;->notify信息通知栏
    getRuntime获取命令行环境
    java/lang/Runtime;->exec执行字符串命令
    ContentResolver;->query读取联系人、短信等数据库
    权限列表
    许可名称信息
    android.permission.INTERNET连接网络(2G或3G)
    android.permission.WRITE_EXTERNAL_STORAGE写外部存储器(如:SD卡)
    android.permission.WAKE_LOCK手机屏幕关闭后后台进程仍运行
    android.permission.VIBRATE允许设备震动
    服务列表
    名称
    com.termux.app.TermuxService
    Providers
    名字信息
    com.termux.filepicker.TermuxDocumentsProvider
    com.termux.app.TermuxOpenReceiver$ContentProvider
    文件列表
    文件名 校验码
    AndroidManifest.xml 0x2b18766b
    META-INF/CERT.RSA 0xb576462e
    META-INF/CERT.SF 0x73c32393
    META-INF/MANIFEST.MF 0x1660650
    META-INF/com.android.support_support-compat.version 0x387581d3
    META-INF/com.android.support_support-core-ui.version 0x387581d3
    classes.dex 0x4ad2528f
    lib/arm64-v8a/libtermux.so 0x2a906d14
    lib/armeabi-v7a/libtermux.so 0x9feafed2
    lib/x86/libtermux.so 0x48ea2bf
    lib/x86_64/libtermux.so 0xe95a24e0
    res/drawable-hdpi-v4/notification_bg_low_normal.9.png 0x378c117e
    res/drawable-hdpi-v4/notification_bg_low_pressed.9.png 0x5059e725
    res/drawable-hdpi-v4/notification_bg_normal.9.png 0xc22cbe9f
    res/drawable-hdpi-v4/notification_bg_normal_pressed.9.png 0xa1d68cd0
    res/drawable-hdpi-v4/notify_panel_notification_icon_bg.png 0x6ed8c1f1
    res/drawable-mdpi-v4/notification_bg_low_normal.9.png 0xd9fa55b7
    res/drawable-mdpi-v4/notification_bg_low_pressed.9.png 0xb80ede38
    res/drawable-mdpi-v4/notification_bg_normal.9.png 0xc135d194
    res/drawable-mdpi-v4/notification_bg_normal_pressed.9.png 0xed1fee6a
    res/drawable-mdpi-v4/notify_panel_notification_icon_bg.png 0x2ea3830b
    res/drawable-v21/notification_action_background.xml 0x9a60b849
    res/drawable-xhdpi-v4/notification_bg_low_normal.9.png 0x3ad03275
    res/drawable-xhdpi-v4/notification_bg_low_pressed.9.png 0xc8900a8e
    res/drawable-xhdpi-v4/notification_bg_normal.9.png 0x9944f31a
    res/drawable-xhdpi-v4/notification_bg_normal_pressed.9.png 0xc29ac558
    res/drawable-xhdpi-v4/notify_panel_notification_icon_bg.png 0x4576501
    res/drawable-xxhdpi-v4/text_select_handle_left_mtrl_alpha.png 0x6869de90
    res/drawable-xxhdpi-v4/text_select_handle_right_mtrl_alpha.png 0x8952a062
    res/drawable/banner.png 0x6c61cc9
    res/drawable/current_session.xml 0xfcb36a10
    res/drawable/ic_new_session.xml 0xad8edf4b
    res/drawable/ic_service_notification.xml 0x77c03b6
    res/drawable/notification_bg.xml 0x4f21bd7f
    res/drawable/notification_bg_low.xml 0x23a5c2f9
    res/drawable/notification_icon_background.xml 0xfb7aad4b
    res/drawable/notification_tile_bg.xml 0x643c8764
    res/drawable/selected_session_background.xml 0x434ebfdb
    res/drawable/session_ripple.xml 0xc8322d53
    res/drawable/terminal_scroll_shape.xml 0x6a0affb7
    res/drawable/text_select_handle_left_material.xml 0xd6d2ad87
    res/drawable/text_select_handle_right_material.xml 0x51b50cee
    res/layout-v21/notification_action.xml 0x33eb7eed
    res/layout-v21/notification_action_tombstone.xml 0x6aef8a40
    res/layout-v21/notification_template_custom_big.xml 0x32945a6b
    res/layout-v21/notification_template_icon_group.xml 0xddcc5920
    res/layout/drawer_layout.xml 0xf6850aab
    res/layout/extra_keys_main.xml 0xff0ca23d
    res/layout/extra_keys_right.xml 0x5e849fde
    res/layout/line_in_drawer.xml 0xd5887cf0
    res/layout/notification_template_part_chronometer.xml 0xacc6289e
    res/layout/notification_template_part_time.xml 0xfe918c9
    res/mipmap-hdpi-v4/ic_launcher.png 0xfd3e207a
    res/mipmap-hdpi-v4/ic_launcher_round.png 0x366f3425
    res/mipmap-mdpi-v4/ic_launcher.png 0x3a9ac1
    res/mipmap-mdpi-v4/ic_launcher_round.png 0x9959aabf
    res/mipmap-xhdpi-v4/ic_launcher.png 0xf82f9eba
    res/mipmap-xhdpi-v4/ic_launcher_round.png 0x2d3543eb
    res/mipmap-xxhdpi-v4/ic_launcher.png 0x85cac9e9
    res/mipmap-xxhdpi-v4/ic_launcher_round.png 0x1541007a
    res/mipmap-xxxhdpi-v4/ic_launcher.png 0x9350c910
    res/mipmap-xxxhdpi-v4/ic_launcher_round.png 0xf413c171
    res/raw/bell.ogg 0xe5dd6711
    res/xml-v22/shortcuts.xml 0x7ddf9ec6
    res/xml/backupscheme.xml 0xe86b92c0
    res/xml/shortcuts.xml 0x8348ad65
    resources.arsc 0x465a9b78
    运行截图
    VirSCAN

About VirSCAN | Privacy Policy | Contact us | link | Help VirSCAN
Translated by Keith Miller, United States
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号