DnpayDemo.apk 3% Antivirus software(1/32) found malware! - VirSCAN.org - Free Multi-Engine Online Virus Scanner v1.02, Supports 47 AntiVirus Engines!

Main Menu

API

uploader for windows(test)

Powered By

File information

File Name :DnpayDemo.apk (File not down)

File Size :165924 byte

File Type :Zip archive data

MD5:f441a7e0c5d746ccfb7942c800674131

SHA1:5001ae9c08a811d8f472710497aabfce96801fc3

SHA256:7db775e3c0d643fb29d213531b8abee650d12792a44fa9228b3cc3046ec358ae

SSDEEP:3072:6QzoN3wwIuZLGr0MlGEaKy5sURtTBvuVDd/lMKRsbnOIzYUNq0k:6g03w4yR8ELwvtTBvUDBXRsbVzW0k

扫描结果
权限
文件行为分析

Scanner results

Scanner results:3%Antivirus software(1/32)found malware!

Behavior analysis report: Habo file analysis

Time: 2017-07-03 11:53:38 (CST)

Scanner	Engine Ver	Sig Ver	Sig Date	Scan result	Time
antiy	AVL SDK 2.0		1970-01-01	Found nothing	5
asquared	9.0.0.4799	9.0.0.4799	2015-03-08	Found nothing	1
avast	170303-1	4.7.4	2017-03-03	Found nothing	60
avg	2109/14122	10.0.1405	2017-06-29	Found nothing	60
baidu	2.0.1.0	4.1.3.52192	2.0.1.0	Found nothing	10
baidusd	1.0	1.0	2017-03-22	Found nothing	1
bitdefender	7.58879	7.90123	2015-01-16	Found nothing	60
clamav	23506	0.97.5	2017-06-25	Found nothing	60
drweb	5.0.2.3300	5.0.1.1	2017-06-18	Found nothing	60
fortinet	49.915, 49.796	5.4.247	2017-07-03	Found nothing	60
fprot	4.6.2.117	6.5.1.5418	2016-02-05	Found nothing	60
fsecure	2015-08-01-02	9.13	2015-08-01	Found nothing	60
gdata	25.13180	25.13180	2017-07-03	Found nothing	11
ikarus	1.06.01	V1.32.31.0	2016-11-28	Found nothing	60
jiangmin	16.0.100	1.0.0.0	2017-07-01	Found nothing	2
kaspersky	5.5.33	5.5.33	2014-04-01	Found nothing	60
kingsoft	2.1	2.1	2017-07-02	Found nothing	4
mcafee	8261	5400.1158	2016-08-18	Found nothing	60
nod32	1777	3.0.21	2015-06-12	Found nothing	60
panda	9.05.01	9.05.01	2017-07-01	Found nothing	4
pcc	13.302.06	9.500-1005	2017-03-27	Found nothing	60
qh360	1.0.1	1.0.1	1.0.1	Found nothing	3
qqphone	1.0.0.0	1.0.0.0	2015-12-30	Found nothing	60
quickheal	14.00	14.00	2017-07-01	Android.Agent.GEN3293	2
rising	26.28.00.01	26.28.00.01	2016-07-18	Found nothing	1
sophos	5.32	3.65.2	2016-10-10	Found nothing	60
symantec	20151230.005	1.3.0.24	2015-12-30	Found nothing	60
tachyon	9.9.9	9.9.9	2013-12-27	Found nothing	3
thehacker	6.8.0.5	6.8.0.5	2017-06-27	Found nothing	1
tws	17.47.17308	1.0.2.2108	2017-07-03	Found nothing	14
vba	3.12.29.5 beta	3.12.29.5 beta	2017-06-30	Found nothing	60
virusbuster	15.0.985.0	5.5.2.13	2014-12-05	Found nothing	60

■Heuristic/Suspicious ■Exact

NOTICE: Results are not 100% accurate and can be reported as a false positive by some scannerswhen and if malware is found. Please judge these results for yourself.

Last Scanned File List

File Name (File Size)	Scan results (Suspicious degree)
001键工作室4.2.6_最新版(16896 )	Found Trojan.Agent.ALKT (34%)
001键U盘磁盘回收工具1.2_最新版(643072 )	Found Trojan/Win32.Wacatac (6%)
001醉经年(420703 )	Found DeepScan:Generic.Mira.CF26E316 (20%)
001路繁花相送(420667 )	Found DeepScan:Generic.Mira.CF26E316 (20%)
001起来看流星雨(420166 )	Found DeepScan:Generic.Mira.CF26E316 (20%)
001诺倾情(939397 )	Found GrayWare/Win32.Kryptik.BQX (8%)
WPS Office.lnk(1216 )	Found nothing
001米***1.0(420653 )	Found DeepScan:Generic.Mira.CF26E316 (22%)
mycca.exe(181760 )	Found HackTool.Swrort (16%)
001生所爱(538488 )	Found nothing
001点就到家(155648 )	Found Trojan[Spy]/Win32.Noon (6%)
001梦江湖(12597261 )	Found Gen:Variant.Zusy.92274 (30%)
gct.8ab***6b958bd29fad0d.js(3033 )	Found nothing
001拳超人(1546031 )	Found RiskWare[RiskTool]/Win32.BitMiner (10%)
001拖多电脑分站调屏软件2.26(932486 )	Found GrayWare/Win32.Kryptik.BQX (8%)
001念永恒(666 )	Found Worm.VBS.AO (26%)
001店通远程查询套件1.0(600364 )	Found Trojan.GenericKD.30594223 (34%)
001品修仙(67584 )	Found Trojan.Peed.Gen (34%)
001吻定情(420150 )	Found DeepScan:Generic.Mira.CF26E316 (22%)
001剑独尊(420657 )	Found DeepScan:Generic.Mira.CF26E316 (22%)

权限列表
许可名称	信息
android.permission.ACCESS_NETWORK_STATE	读取网络状态（2G或3G）
android.permission.ACCESS_WIFI_STATE	读取wifi网络状态
android.permission.INTERNET	连接网络（2G或3G）
android.permission.READ_PHONE_STATE	读取电话状态
android.permission.WRITE_EXTERNAL_STORAGE	写外部存储器（如：SD卡）
android.permission.READ_EXTERNAL_STORAGE	读外部存储器（如：SD卡）
android.permission.READ_SMS	读取短信
android.permission.RECEIVE_SMS	监控接收短信
android.permission.SEND_SMS	发送短信
android.permission.WRITE_SMS	写短信
android.permission.MOUNT_UNMOUNT_FILESYSTEMS	挂载、反挂载外部文件系统
android.permission.SYSTEM_ALERT_WINDOW	显示系统窗口
android.permission.RECEIVE_USER_PRESENT
android.permission.GET_TASKS	获取有关当前或最近运行的任务信息
com.android.launcher.permission.INSTALL_SHORTCUT	创建快捷方式
android.permission.DISABLE_KEYGUARD	禁用键盘锁
android.permission.ACCESS_COARSE_LOCATION	获取粗略的位置（通过wifi、基站）
android.permission.CALL_PHONE	拨打电话
android.permission.ACCESS_FINE_LOCATION	获取精确的位置（通过GPS）
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS	访问额外的定位指令
android.permission.CHANGE_WIFI_STATE	改变WIFI连接状态
com.android.launcher.permission.UNINSTALL_SHORTCUT	删除快捷方式

文件信息

安全评分 :

基本信息
MD5:f441a7e0c5d746ccfb7942c800674131
包名:com.example.dnpaydemo
最低运行环境:Android 2.2.x
版权:Android

关键行为
行为描述:	在桌面创建文件
详情信息:	C:\Documents and Settings\Administrator\桌面\Cain.lnk
行为描述:	获取窗口截图信息
详情信息:	Foreground window Info: HWND = 0x001202f4, DC = 0xa701060c.
	Foreground window Info: HWND = 0x001202f4, DC = 0x52010531.
	Foreground window Info: HWND = 0x001202f4, DC = 0x1a010529.
	Foreground window Info: HWND = 0x001202f4, DC = 0x440105da.

进程行为
行为描述:	创建本地线程
详情信息:	TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 1456, ThreadID = 2328, StartAddress = 00B91AB0, Parameter = 00B940B0

文件行为
行为描述:	创建文件
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temp\GLC51.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLK52.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLB53.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLG54.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLF55.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\~GLH0000.TMP
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLF56.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\~GLH0001.TMP
	C:\WINDOWS\system32\GLBSINST.%$D
	C:\Program Files\Cain\~GLH0002.TMP
	C:\Program Files\Cain\~GLH0003.TMP
	C:\Program Files\Cain\~GLH0004.TMP
	C:\Program Files\Cain\~GLH0005.TMP
	C:\Program Files\Cain\~GLH0006.TMP
	C:\Program Files\Cain\~GLH0007.TMP
行为描述:	在系统敏感位置（如开始菜单等)释放链接或快捷方式
详情信息:	C:\Documents and Settings\Administrator\「开始」菜单\程序\Microsoft Office\Winrtgen.lnk
	C:\Documents and Settings\Administrator\「开始」菜单\程序\Microsoft Office\CA_UserManual.lnk
	C:\Documents and Settings\Administrator\「开始」菜单\程序\Microsoft Office\Cain.lnk
	C:\Documents and Settings\Administrator\「开始」菜单\程序\Microsoft Office\Whatsnew.lnk
	C:\Documents and Settings\Administrator\「开始」菜单\程序\Microsoft Office\Uninstall Cain.lnk
行为描述:	创建可执行文件
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temp\GLC51.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLK52.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\~GLH0000.TMP
	C:\Program Files\Cain\~GLH0002.TMP
	C:\Program Files\Cain\~GLH0003.TMP
	C:\Program Files\Cain\~GLH000a.TMP
	C:\Program Files\Cain\~GLH000b.TMP
	C:\Program Files\Cain\~GLH000d.TMP
	C:\Program Files\Cain\~GLH000f.TMP
	C:\Program Files\Cain\~GLH0011.TMP
	C:\Program Files\Cain\Winrtgen\~GLH0014.TMP
	C:\Program Files\Cain\Driver\~GLH0016.TMP
行为描述:	覆盖已有文件
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temp\GLC51.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLK52.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLG54.tmp
行为描述:	查找文件
详情信息:	FileName = C:\DOCUME~1
	FileName = C:\Documents and Settings\ADMINI~1
	FileName = C:\Documents and Settings\Administrator\LOCALS~1
	FileName = C:\Documents and Settings\Administrator\Local Settings\Temp
	FileName = C:\Documents and Settings\Administrator\Local Settings\Temp\GLF55.tmp
	FileName = C:\Documents and Settings\Administrator\Local Settings\Temp\GLF56.tmp
	FileName = C:\Documents and Settings\Administrator\「开始」菜单\程序\.
	FileName = C:\Documents and Settings\All Users\「开始」菜单\程序\.
	FileName = C:\Program Files
	FileName = C:\Program Files\Cain
	FileName = C:\Program Files\Cain\UNWISE.EXE
	FileName = C:\PROGRA~1\Cain
	FileName = C:\PROGRA~1\Cain\UNWISE.EXE
	FileName = C:\PROGRA~1\Cain\INSTALL.LOG
	FileName = C:\PROGRA~1\Common Files
行为描述:	删除文件
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temp\GLB53.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLF55.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLF56.tmp
	C:\WINDOWS\system32\GLBSINST.%$D
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLG54.tmp
行为描述:	在桌面创建文件
详情信息:	C:\Documents and Settings\Administrator\桌面\Cain.lnk
行为描述:	重命名文件
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temp\~GLH0000.TMP ---> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\GLF55.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\~GLH0001.TMP ---> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\GLF56.tmp
	C:\Program Files\Cain\~GLH0002.TMP ---> C:\Program Files\Cain\UNWISE.EXE
	C:\Program Files\Cain\~GLH0003.TMP ---> C:\PROGRA~1\Cain\Cain.exe
	C:\Program Files\Cain\~GLH0004.TMP ---> C:\PROGRA~1\Cain\Cain.exe.sig
	C:\Program Files\Cain\~GLH0005.TMP ---> C:\PROGRA~1\Cain\Whatsnew.txt
	C:\Program Files\Cain\~GLH0006.TMP ---> C:\PROGRA~1\Cain\charset.txt
	C:\Program Files\Cain\~GLH0007.TMP ---> C:\PROGRA~1\Cain\oui.txt
	C:\Program Files\Cain\Wordlists\~GLH0008.TMP ---> C:\PROGRA~1\Cain\Wordlists\Wordlist.txt
	C:\Program Files\Cain\~GLH0009.TMP ---> C:\PROGRA~1\Cain\CA_UserManual.chm
	C:\Program Files\Cain\~GLH000a.TMP ---> C:\PROGRA~1\Cain\lame_enc.dll
	C:\Program Files\Cain\~GLH000b.TMP ---> C:\PROGRA~1\Cain\Abel.dll
	C:\Program Files\Cain\~GLH000c.TMP ---> C:\PROGRA~1\Cain\Abel.dll.sig
	C:\Program Files\Cain\~GLH000d.TMP ---> C:\PROGRA~1\Cain\Abel.exe
	C:\Program Files\Cain\~GLH000e.TMP ---> C:\PROGRA~1\Cain\Abel.exe.sig
行为描述:	修改文件内容
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temp\GLC51.tmp ---> Offset = 0
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLC51.tmp ---> Offset = 32768
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLC51.tmp ---> Offset = 65536
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLC51.tmp ---> Offset = 98304
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLC51.tmp ---> Offset = 131072
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLK52.tmp ---> Offset = 0
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLG54.tmp ---> Offset = 0
	C:\Documents and Settings\Administrator\Local Settings\Temp\~GLH0000.TMP ---> Offset = 0
	C:\Documents and Settings\Administrator\Local Settings\Temp\~GLH0001.TMP ---> Offset = 0
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLG54.tmp ---> Offset = 208
	C:\Program Files\Cain\~GLH0002.TMP ---> Offset = 0
	C:\Program Files\Cain\~GLH0002.TMP ---> Offset = 32768
	C:\Program Files\Cain\~GLH0002.TMP ---> Offset = 65536
	C:\Program Files\Cain\~GLH0002.TMP ---> Offset = 98304
	C:\Program Files\Cain\~GLH0002.TMP ---> Offset = 131072

注册表行为
行为描述:	修改注册表
详情信息:	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Cain & Abel 4.9.56\DisplayName
	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Cain & Abel 4.9.56\UninstallString
	\REGISTRY\USER\S-*\Software\Cain\Settings\WorkDir

其他行为
行为描述:	创建互斥体
详情信息:	CTF.LBES.MutexDefaultS-*
	CTF.Compart.MutexDefaultS-*
	CTF.Asm.MutexDefaultS-*
	CTF.Layouts.MutexDefaultS-*
	CTF.TMD.MutexDefaultS-*
	CTF.TimListCache.FMPDefaultS-MUTEX.DefaultS-
	MSCTF.Shared.MUTEX.ELH
	MSCTF.Shared.MUTEX.EGE
行为描述:	创建事件对象
详情信息:	EventName = DINPUTWINMM
	EventName = MSCTF.SendReceive.Event.EGE.IC
	EventName = MSCTF.SendReceiveConection.Event.EGE.IC
	EventName = Global\userenv: User Profile setup event
行为描述:	查找指定窗口
详情信息:	NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,]
	NtUserFindWindowEx: [Class,Window] = [CicLoaderWndClass,]
	NtUserFindWindowEx: [Class,Window] = [OleMainThreadWndClass,]
行为描述:	打开事件
详情信息:	HookSwitchHookEnabledEvent
	CTF.ThreadMIConnectionEvent.000007B4.00000000.00000051
	CTF.ThreadMarshalInterfaceEvent.000007B4.00000000.00000051
	MSCTF.SendReceiveConection.Event.ELH.IC
	MSCTF.SendReceive.Event.ELH.IC
	\SECURITY\LSA_AUTHENTICATION_INITIALIZED
	Global\SvcctrlStartEvent_A3752DX
	_fCanRegisterWithShellService
	CTF.ThreadMIConnectionEvent.000007B4.00000000.00000053
	CTF.ThreadMarshalInterfaceEvent.000007B4.00000000.00000053
行为描述:	调整进程token权限
详情信息:	SE_LOAD_DRIVER_PRIVILEGE
行为描述:	窗口信息
详情信息:	Pid = 1456, Hwnd=0x1a0324, Text = Cain & Abel v4.9.56 Installation, ClassName = GLBSInstall.
	Pid = 1456, Hwnd=0x503b2, Text = &Next >, ClassName = Button.
	Pid = 1456, Hwnd=0x1f02fe, Text = Cancel, ClassName = Button.
	Pid = 1456, Hwnd=0x170340, Text = Cain & Abel 4.9.56, ClassName = Static.
	Pid = 1456, Hwnd=0x303d0, Text = This installation program will install Cain & Abel 4.9.56. Press the Next button to start the installation. You can press the Cancel button now if you do not want to install Cain & Abel 4.9.56 at this time., ClassName = Static.
	Pid = 1456, Hwnd=0xb03ba, Text = Cain & Abel 4.9.56 Installation, ClassName = GLBSWizard.
	Pid = 1456, Hwnd=0x1202f4, Text = Cain & Abel v4.9.56 Installation, ClassName = GLBSInstall.
	Pid = 1456, Hwnd=0x403d0, Text = &Next >, ClassName = Button.
	Pid = 1456, Hwnd=0x180340, Text = < &Back, ClassName = Button.
	Pid = 1456, Hwnd=0x110398, Text = &Cancel, ClassName = Button.
	Pid = 1456, Hwnd=0x2002fe, Text = Cain & Abel v4.9.56 Copyright ?2001-2014 Massimiliano Montoro All rights reserved Web: http://www.oxid.it Email: mao@oxid.it, ClassName = Edit.
	Pid = 1456, Hwnd=0x2102fe, Text = &Next >, ClassName = Button.
	Pid = 1456, Hwnd=0xc03ac, Text = < &Back, ClassName = Button.
	Pid = 1456, Hwnd=0x120398, Text = &Cancel, ClassName = Button.
	Pid = 1456, Hwnd=0x503d0, Text = Select Destination Directory, ClassName = Static.
行为描述:	获取窗口截图信息
详情信息:	Foreground window Info: HWND = 0x001202f4, DC = 0xa701060c.
	Foreground window Info: HWND = 0x001202f4, DC = 0x52010531.
	Foreground window Info: HWND = 0x001202f4, DC = 0x1a010529.
	Foreground window Info: HWND = 0x001202f4, DC = 0x440105da.
行为描述:	可执行文件签名信息
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temp\GLC51.tmp(签名验证: 未通过)
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLK52.tmp(签名验证: 未通过)
	C:\Documents and Settings\Administrator\Local Settings\Temp\~GLH0000.TMP(签名验证: 未通过)
	C:\Program Files\Cain\~GLH0002.TMP(签名验证: 未通过)
	C:\Program Files\Cain\~GLH0003.TMP(签名验证: 未通过)
	C:\Program Files\Cain\~GLH000a.TMP(签名验证: 未通过)
	C:\Program Files\Cain\~GLH000b.TMP(签名验证: 未通过)
	C:\Program Files\Cain\~GLH000d.TMP(签名验证: 未通过)
	C:\Program Files\Cain\~GLH000f.TMP(签名验证: 未通过)
	C:\Program Files\Cain\~GLH0011.TMP(签名验证: 未通过)
	C:\Program Files\Cain\Winrtgen\~GLH0014.TMP(签名验证: 未通过)
	C:\Program Files\Cain\Driver\~GLH0016.TMP(签名验证: 通过)
行为描述:	隐藏指定窗口
详情信息:	[Window,Class] = [ ,GLBSInstall]
	[Window,Class] = [,Static]
	[Window,Class] = [Installing,#32770]
	[Window,Class] = [Cancel,Button]
行为描述:	可执行文件MD5
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temp\GLC51.tmp ---> 625214a1c57538359244dab9fac4636f
	C:\Documents and Settings\Administrator\Local Settings\Temp\GLK52.tmp ---> 3df61e5730883b2d338addd7acbe4bc4
	C:\Documents and Settings\Administrator\Local Settings\Temp\~GLH0000.TMP ---> b9b41e50d612e00bf3a49a6405b89d74
	C:\Program Files\Cain\~GLH0002.TMP ---> 443e13846997c537e8f5ed61130ab705
	C:\Program Files\Cain\~GLH0003.TMP ---> 80dfbab8966c81588b7b15704c9ec648
	C:\Program Files\Cain\~GLH000a.TMP ---> c690e721ec638f4377a9c8bb1e906ca6
	C:\Program Files\Cain\~GLH000b.TMP ---> d7e4b380c5afb4bcb5da9b458d51685a
	C:\Program Files\Cain\~GLH000d.TMP ---> ecbcbde87b9837f89600f8f14f6a4914
	C:\Program Files\Cain\~GLH000f.TMP ---> dc0670dc01c6c8fdcd9ad95194fa723e
	C:\Program Files\Cain\~GLH0011.TMP ---> 57fde9c8f2122ced014f83d942f19af8
	C:\Program Files\Cain\Winrtgen\~GLH0014.TMP ---> 7f5c12705c5bd43cadcccfe4d112bfe6
	C:\Program Files\Cain\Driver\~GLH0016.TMP ---> a11a2f0cfe6d0b4c50945989db6360cd
行为描述:	打开互斥体
详情信息:	ShimCacheMutex
行为描述:	加载新释放的文件
详情信息:	Image: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\GLC51.tmp.
	Image: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\GLK52.tmp.
	Image: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\GLF55.tmp.

Activities
活动名	类型
.MainActivity	android.intent.action.MAIN
.MainActivity	android.intent.category.LAUNCHER

危险函数
函数名称	信息
getRuntime	获取命令行环境
java/lang/Runtime;->exec	执行字符串命令
HttpClient;->execute	请求远程服务器
DefaultHttpClient;->execute	发送HTTP请求
java/net/URL;->openConnection	连接URL
TelephonyManager;->getDeviceId	搜集用户手机IMEI码、电话号码、系统版本号等信息

启动方式
名称	信息
com.mn.kt.rs.RsRe	监控短信（收到短信）启动服务
com.mn.kt.rs.RsRe	网络连接改变时启动服务
com.mn.kt.rs.RsRe
com.mn.kt.rs.RsRe
com.mn.kt.rs.RsRe
com.mn.kt.rs.RsRe
com.mn.kt.rs.RsRe
com.mn.kt.rs.RsRe
com.mn.kt.rs.RsRe
com.mn.kt.rs.RsRe	WIFI状态改变时启动服务
com.mn.kt.rs.RsRe
com.mn.kt.rs.RsRe
com.mn.kt.rs.RsRe	开机启动服务
com.mn.kt.rs.RsRe
com.mn.kt.rs.RsRe	屏幕解锁启动服务

权限列表
许可名称	信息
android.permission.ACCESS_NETWORK_STATE	读取网络状态（2G或3G）
android.permission.ACCESS_WIFI_STATE	读取wifi网络状态
android.permission.INTERNET	连接网络（2G或3G）
android.permission.READ_PHONE_STATE	读取电话状态
android.permission.WRITE_EXTERNAL_STORAGE	写外部存储器（如：SD卡）
android.permission.READ_EXTERNAL_STORAGE	读外部存储器（如：SD卡）
android.permission.READ_SMS	读取短信
android.permission.RECEIVE_SMS	监控接收短信
android.permission.SEND_SMS	发送短信
android.permission.WRITE_SMS	写短信
android.permission.MOUNT_UNMOUNT_FILESYSTEMS	挂载、反挂载外部文件系统
android.permission.SYSTEM_ALERT_WINDOW	显示系统窗口
android.permission.RECEIVE_USER_PRESENT
android.permission.GET_TASKS	获取有关当前或最近运行的任务信息
com.android.launcher.permission.INSTALL_SHORTCUT	创建快捷方式
android.permission.DISABLE_KEYGUARD	禁用键盘锁
android.permission.ACCESS_COARSE_LOCATION	获取粗略的位置（通过wifi、基站）
android.permission.CALL_PHONE	拨打电话
android.permission.ACCESS_FINE_LOCATION	获取精确的位置（通过GPS）
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS	访问额外的定位指令
android.permission.CHANGE_WIFI_STATE	改变WIFI连接状态
com.android.launcher.permission.UNINSTALL_SHORTCUT	删除快捷方式

服务列表
名称
com.mn.kt.rs.RsSe

文件列表
文件名	校验码
res/layout/activity_main.xml	0x47e468fe
AndroidManifest.xml	0x19268514
resources.arsc	0x76f7f6f8
res/drawable-hdpi/ic_launcher.png	0xf248df62
res/drawable-mdpi/ic_launcher.png	0x6a84dfd9
res/drawable-xhdpi/ic_launcher.png	0xa227fc8a
res/drawable-xxhdpi/ic_launcher.png	0x2a4a99d1
classes.dex	0x67d678fd
assets/dERlZG	0x44041476
META-INF/MANIFEST.MF	0xdb7ccad3
META-INF/CERT.SF	0xfc7a1644
META-INF/CERT.RSA	0x3b8197e5

运行截图

File information

上传文件