VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.
4, If your browser cannot upload files, please download VirSCAN uploader to upload.

Language
Server load
Server Load

VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

File information

Scanner results
Scanner results:0%Antivirus software(0/32)found malware!
Behavior analysis report:         Habo file analysis
Time: 2015-03-01 02:13:55 (CST)
Scanner Engine Ver Sig Ver Sig Date Scan result Time
antiy AVL SDK 3.0 1970-01-01 Found nothing 5
asquared 9.0.0.4324 9.0.0.4324 2014-07-03 Found nothing 1
avast 141231-0 4.7.4 2014-12-31 Found nothing 32
avg 2109/8133 10.0.1405 2014-11-26 Found nothing 7
baidu 2.0.1.0 4.1.3.52192 2.0.1.0 Found nothing 5
baidusd 1.0 1.0 2014-04-02 Found nothing 1
bitdefender 7.58469 7.90123 2014-12-25 Found nothing 1
clamav 19745 0.97.5 2014-12-07 Found nothing 1
drweb 5.0.2.3300 5.0.1.1 2014-12-31 Found nothing 43
fortinet 23.345, 23.345 5.1.158 2014-12-08 Found nothing 1
fprot 4.6.2.117 6.5.1.5418 2014-12-31 Found nothing 3
fsecure 2014-04-02-01 9.13 2014-04-02 Found nothing 10
gdata 25.459 25.459 2015-02-28 Found nothing 8
ikarus 1.06.01 V1.32.31.0 2014-12-08 Found nothing 10
jiangmin 16.0.100 1.0.0.0 2014-08-20 Found nothing 34
kaspersky 5.5.33 5.5.33 2014-04-01 Found nothing 39
kingsoft 2.1 2.1 2013-09-22 Found nothing 5
mcafee 7638 5400.1158 2014-11-30 Found nothing 35
nod32 0920 3.0.21 2014-12-23 Found nothing 4
panda 9.05.01 9.05.01 2014-12-31 Found nothing 5
pcc 11.380.07 9.500-1005 2014-12-31 Found nothing 2
qh360 1.0.1 1.0.1 1.0.1 Found nothing 10
qqphone 1.0.0.0 1.0.0.0 2014-12-09 Found nothing 1
quickheal 14.00 14.00 2014-12-31 Found nothing 3
rising 25.46.06.04 25.46.06.04 2014-12-28 Found nothing 1
sophos 5.08 3.55.0 2014-12-01 Found nothing 5
symantec 20141230.001 1.3.0.24 2014-12-30 Found nothing 1
tachyon 9.9.9 9.9.9 2013-12-27 Found nothing 3
thehacker 6.8.0.5 6.8.0.5 2014-12-29 Found nothing 1
tws 17.47.17308 1.0.2.2108 2014-12-08 Found nothing 11
vba 3.12.26.3 3.12.26.3 2014-12-31 Found nothing 23
virusbuster 15.0.985.0 5.5.2.13 2014-12-05 Found nothing 42
权限列表
许可名称 信息
android.permission.INTERNET 连接网络(2G或3G)
android.permission.ACCESS_NETWORK_STATE 读取网络状态(2G或3G)
android.permission.RECEIVE_BOOT_COMPLETED 接收开机启动广播
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.ACCESS_WIFI_STATE 读取wifi网络状态
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.RESTART_PACKAGES 重启其他程序
android.permission.GET_TASKS 获取有关当前或最近运行的任务信息
文件信息
VirSCANVirSCAN
安全评分 :70
基本信息
VirSCANVirSCAN
MD5:fc200d5c4b037917f2473cfdae7e4397
文件大小:5.58MB
上传时间: 2014-09-22 10:36:30 (CST)
包名:com.system.analytics.cpa
最低运行环境:Android 2.2.x
版权:ybn
文件行为
VirSCANVirSCAN
行为描述: 写权限映射文件
详情信息: CiceroSharedMemDefaultS-1-5-21-1482476501-1645522239-1417001333-500
MSCTF.MarshalInterface.FileMap.EAK..ELLFF
MSCTF.MarshalInterface.FileMap.EAK.B.ELLFF
MSCTF.MarshalInterface.FileMap.EAK.C.ELLFF
MSCTF.MarshalInterface.FileMap.EAK.D.ELLFF
MSCTF.MarshalInterface.FileMap.EAK.E.ELLFF
MSCTF.MarshalInterface.FileMap.EAK.F.ELLFF
MSCTF.MarshalInterface.FileMap.EAK.G.ELLFF
其他行为
VirSCANVirSCAN
行为描述: 创建互斥体
详情信息: CTF.LBES.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.Compart.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.Asm.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.Layouts.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.TMD.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.TimListCache.FMPDefaultS-1-5-21-1482476501-1645522239-1417001333-500MUTEX.DefaultS-1-5-21-1482476501-1645522239-1417001333-500
MSCTF.Shared.MUTEX.AEH
行为描述: 查找指定窗口
详情信息: NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,]
行为描述: 窗口信息
详情信息: Pid = 2560, Hwnd=0x10350, Text = 确定, ClassName = Button.
Pid = 2560, Hwnd=0x10354, Text = This system doesn"t have the minimum requirements., ClassName = Static.
Pid = 2560, Hwnd=0x1034c, Text = Installer, ClassName = #32770.
危险函数
VirSCANVirSCAN
函数名称 信息
TelephonyManager;->getDeviceId 搜集用户手机IMEI码、电话号码、系统版本号等信息
TelephonyManager;->getLine1Number 获取手机号
java/net/URL;->openConnection 连接URL
启动方式
VirSCANVirSCAN
名称 信息
com.system.analytics.cpa.reciver.BootBroadcastReceiver 开机启动服务
com.system.analytics.cpa.reciver.BootBroadcastReceiver 网络连接改变时启动服务
com.system.analytics.cpa.reciver.BootBroadcastReceiver 应用安装时启动服务
com.system.analytics.cpa.reciver.BootBroadcastReceiver 应用卸载时启动服务
权限列表
VirSCANVirSCAN
许可名称 信息
android.permission.INTERNET 连接网络(2G或3G)
android.permission.ACCESS_NETWORK_STATE 读取网络状态(2G或3G)
android.permission.RECEIVE_BOOT_COMPLETED 接收开机启动广播
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.ACCESS_WIFI_STATE 读取wifi网络状态
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.RESTART_PACKAGES 重启其他程序
android.permission.GET_TASKS 获取有关当前或最近运行的任务信息
服务列表
VirSCANVirSCAN
名称
com.system.analytics.cpa.service.MyService
文件列表
VirSCANVirSCAN
文件名 校验码
META-INF/MANIFEST.MF 0x280b0140
META-INF/YUEKEY_K.SF 0x4a53b1ea
META-INF/YUEKEY_K.RSA 0xf7cb4cf
AndroidManifest.xml 0x3d8d7030
classes.dex 0x7b69c491
resources.arsc 0x77165b33
运行截图
VirSCANVirSCAN
VirSCAN