VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.
4, If your browser cannot upload files, please download VirSCAN uploader to upload.

Language
Server load
Server Load

VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

File information

Scanner results
Scanner results:0%Antivirus software(0/32)found malware!
Behavior analysis report:         Habo file analysis
Time: 2017-06-14 08:53:27 (CST)
Scanner Engine Ver Sig Ver Sig Date Scan result Time
antiy AVL SDK 2.0 1970-01-01 Found nothing 5
asquared 9.0.0.4799 9.0.0.4799 2015-03-08 Found nothing 1
avast 170303-1 4.7.4 2017-03-03 Found nothing 60
avg 2109/14048 10.0.1405 2017-06-12 Found nothing 60
baidu 2.0.1.0 4.1.3.52192 2.0.1.0 Found nothing 6
baidusd 1.0 1.0 2017-03-22 Found nothing 1
bitdefender 7.58879 7.90123 2015-01-16 Found nothing 60
clamav 23419 0.97.5 2017-05-26 Found nothing 60
drweb 5.0.2.3300 5.0.1.1 2017-06-06 Found nothing 60
fortinet 49.461, 49.461, 49.461 5.4.233 2017-06-14 Found nothing 60
fprot 4.6.2.117 6.5.1.5418 2016-02-05 Found nothing 60
fsecure 2015-08-01-02 9.13 2015-08-01 Found nothing 60
gdata 25.12818 25.12818 2017-06-12 Found nothing 11
ikarus 1.06.01 V1.32.31.0 2016-11-28 Found nothing 60
jiangmin 16.0.100 1.0.0.0 2017-06-12 Found nothing 2
kaspersky 5.5.33 5.5.33 2014-04-01 Found nothing 60
kingsoft 2.1 2.1 2017-06-13 Found nothing 5
mcafee 8261 5400.1158 2016-08-18 Found nothing 60
nod32 1777 3.0.21 2015-06-12 Found nothing 60
panda 9.05.01 9.05.01 2017-06-12 Found nothing 4
pcc 13.302.06 9.500-1005 2017-03-27 Found nothing 60
qh360 1.0.1 1.0.1 1.0.1 Found nothing 4
qqphone 1.0.0.0 1.0.0.0 2015-12-30 Found nothing 60
quickheal 14.00 14.00 2017-06-13 Found nothing 2
rising 26.28.00.01 26.28.00.01 2016-07-18 Found nothing 1
sophos 5.32 3.65.2 2016-10-10 Found nothing 60
symantec 20151230.005 1.3.0.24 2015-12-30 Found nothing 60
tachyon 9.9.9 9.9.9 2013-12-27 Found nothing 3
thehacker 6.8.0.5 6.8.0.5 2017-06-11 Found nothing 1
tws 17.47.17308 1.0.2.2108 2017-06-13 Found nothing 14
vba 3.12.29.5 beta 3.12.29.5 beta 2017-06-13 Found nothing 60
virusbuster 15.0.985.0 5.5.2.13 2014-12-05 Found nothing 60
权限列表
许可名称 信息
android.permission.INTERNET 连接网络(2G或3G)
android.permission.CHANGE_WIFI_MULTICAST_STATE 变更WIFI多播状态
android.permission.BROADCAST_STICKY 发送持久广播
android.permission.ACCESS_WIFI_STATE 读取wifi网络状态
android.permission.ACCESS_NETWORK_STATE 读取网络状态(2G或3G)
android.permission.CAMERA 访问照相机设备
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.READ_LOGS 读取系统日志
android.permission.WAKE_LOCK 手机屏幕关闭后后台进程仍运行
android.permission.WRITE_SETTINGS 读写系统设置项
android.permission.FLASHLIGHT 访问闪光灯
android.permission.HARDWARE_TEST 硬件测试
文件信息
VirSCANVirSCAN
安全评分 :84
基本信息
VirSCANVirSCAN
MD5:7023b1b7fdaddf9071cc9e74d740e479
文件大小:5.58MB
上传时间: 2014-09-22 10:36:30 (CST)
包名:com.libfetion.ancamera
最低运行环境:Android 2.2.x
版权:
关键行为
VirSCANVirSCAN
行为描述: 写权限映射文件
详情信息: CiceroSharedMemDefaultS-1-5-21-1482476501-1645522239-1417001333-500
MSCTF.MarshalInterface.FileMap.IAK..LIKFF
MSCTF.MarshalInterface.FileMap.IAK.B.LIKFF
MSCTF.MarshalInterface.FileMap.IAK.C.LIKFF
MSCTF.MarshalInterface.FileMap.IAK.D.LIKFF
MSCTF.MarshalInterface.FileMap.IAK.E.LIKFF
MSCTF.MarshalInterface.FileMap.IAK.F.LJKFF
MSCTF.MarshalInterface.FileMap.IAK.G.LJKFF
进程行为
VirSCANVirSCAN
行为描述: 写权限映射文件
详情信息: CiceroSharedMemDefaultS-1-5-21-1482476501-1645522239-1417001333-500
MSCTF.MarshalInterface.FileMap.IAK..LIKFF
MSCTF.MarshalInterface.FileMap.IAK.B.LIKFF
MSCTF.MarshalInterface.FileMap.IAK.C.LIKFF
MSCTF.MarshalInterface.FileMap.IAK.D.LIKFF
MSCTF.MarshalInterface.FileMap.IAK.E.LIKFF
MSCTF.MarshalInterface.FileMap.IAK.F.LJKFF
MSCTF.MarshalInterface.FileMap.IAK.G.LJKFF
文件行为
VirSCANVirSCAN
行为描述: 写权限映射文件
详情信息: CiceroSharedMemDefaultS-1-5-21-1482476501-1645522239-1417001333-500
MSCTF.MarshalInterface.FileMap.IAK..LIKFF
MSCTF.MarshalInterface.FileMap.IAK.B.LIKFF
MSCTF.MarshalInterface.FileMap.IAK.C.LIKFF
MSCTF.MarshalInterface.FileMap.IAK.D.LIKFF
MSCTF.MarshalInterface.FileMap.IAK.E.LIKFF
MSCTF.MarshalInterface.FileMap.IAK.F.LJKFF
MSCTF.MarshalInterface.FileMap.IAK.G.LJKFF
其他行为
VirSCANVirSCAN
行为描述: 查找指定窗口
详情信息: NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,]
行为描述: 创建互斥体
详情信息: SHIMLIB_LOG_MUTEX
CTF.LBES.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.Compart.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.Asm.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.Layouts.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.TMD.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.TimListCache.FMPDefaultS-1-5-21-1482476501-1645522239-1417001333-500MUTEX.DefaultS-1-5-21-1482476501-1645522239-1417001333-500
MSCTF.Shared.MUTEX.AEH
行为描述: 获取系统权限
详情信息: SE_LOAD_DRIVER_PRIVILEGE
SE_DEBUG_PRIVILEGE
动态列表行为
VirSCANVirSCAN
行为描述: 调用哈希算法
详情信息: MD5
行为描述: 写入文件
详情信息: path:/data/data/com.libfetion.ancamera/shared_prefs/mobclick_agent_state_com.libfetion.ancamera.xml length:358
path:/data/data/com.libfetion.ancamera/shared_prefs/mobclick_agent_header_com.libfetion.ancamera.xml length:962
path:unknown length:105
行为描述: 注册广播接收器
详情信息: [u'com.libfetion.ancamera.v@41538b98', u'android.content.IntentFilter@41518ce8']
行为描述: 对指定数据计算哈希
详情信息: 353490061623662
1422776444075502a523852701578a8000012ac216931e0bfb0738fde116ac65dfaa
行为描述: 初始化IntentFilter
详情信息: [u'android.net.wifi.WIFI_STATE_CHANGED']
行为描述: 添加悬浮窗口
详情信息: [u'com.android.internal.policy.impl.PhoneWindow$DecorView@414c2830', u'WM.LayoutParams{(0,0)(fillxfill) sim=#100 ty=1 fl=#1810100 pfl=0x8 wanim=0x10302e0}', u'android.view.CompatibilityInfoHolder@414b1360']
[u'com.android.internal.policy.impl.PhoneWindow$DecorView@414b9d60', u'WM.LayoutParams{(0,0)(fillxfill) sim=#100 ty=1 fl=#1810180 pfl=0x8 wanim=0x10302e0}', u'android.view.CompatibilityInfoHolder@414b1360']
[u'com.android.internal.policy.impl.PhoneWindow$DecorView@41516560', u'WM.LayoutParams{(0,0)(wrapxwrap) gr=#11 sim=#120 ty=2 fl=#1820002 pfl=0x8 fmt=-2 wanim=0x7f070001}', u'android.view.CompatibilityInfoHolder@414b1360']
行为描述: 窗口信息
详情信息: {"text": "打开摄像头设备失败
请关闭占用摄像头的程序
或重启手机来解决这个问题
", "class": "android.widget.TextView"}
{"text": "确认", "class": "android.widget.Button"}
行为描述: 缓冲区读取一行数据
详情信息: Processor : ARMv7 Processor rev 0 (v7l)
行为描述: 初始化Intent
详情信息: [u'com.libfetion.ancamera.Splash@41549670', u'class com.libfetion.ancamera.PreviewActivity']
[u'android.os.Parcel@414aece0']
行为描述: 初始化文件读取
详情信息: [u'/proc/cpuinfo']
行为描述: 激活Activity
详情信息: Intent { cmp=com.libfetion.ancamera/.PreviewActivity }
行为描述: 获取网络状态信息[*]
详情信息: [u'1']
[u'0']
行为描述: 获取设备ID
详情信息: 353490061623662
Activities
VirSCANVirSCAN
活动名 类型
com.libfetion.ancamera.Splash android.intent.action.MAIN
com.libfetion.ancamera.Splash android.intent.category.LAUNCHER
危险函数
VirSCANVirSCAN
函数名称 信息
ContentResolver;->query 读取联系人、短信等数据库
Camera;->open 开启相机
HttpClient;->execute 请求远程服务器
TelephonyManager;->getDeviceId 搜集用户手机IMEI码、电话号码、系统版本号等信息
LocationManager;->getLastKnownLocation 获取地址位置
android/app/NotificationManager;->notify 信息通知栏
java/net/URL;->openConnection 连接URL
java/net/HttpURLConnection;->connect 连接URL
权限列表
VirSCANVirSCAN
许可名称 信息
android.permission.INTERNET 连接网络(2G或3G)
android.permission.CHANGE_WIFI_MULTICAST_STATE 变更WIFI多播状态
android.permission.BROADCAST_STICKY 发送持久广播
android.permission.ACCESS_WIFI_STATE 读取wifi网络状态
android.permission.ACCESS_NETWORK_STATE 读取网络状态(2G或3G)
android.permission.CAMERA 访问照相机设备
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.READ_LOGS 读取系统日志
android.permission.WAKE_LOCK 手机屏幕关闭后后台进程仍运行
android.permission.WRITE_SETTINGS 读写系统设置项
android.permission.FLASHLIGHT 访问闪光灯
android.permission.HARDWARE_TEST 硬件测试
服务列表
VirSCANVirSCAN
名称
com.umeng.common.net.DownloadingService
文件列表
VirSCANVirSCAN
文件名 校验码
res/anim/common_dialog_enter.xml 0x678dcb02
res/anim/common_dialog_exit.xml 0x76e2901d
res/color/setting_item_bg.xml 0x52e04f26
res/drawable/dialog_btn.xml 0x1f165fed
res/drawable/icon.png 0x3d9a83bf
res/layout/activity_help.xml 0x482316a4
res/layout/dialog_alert.xml 0x74d66687
res/layout/main.xml 0x5be11bf
res/layout/splash.xml 0xb8692e7
res/layout/umeng_common_download_notification.xml 0xddeaf751
res/menu/activity_help.xml 0x3a426200
AndroidManifest.xml 0x9043daea
resources.arsc 0xee75a5f5
res/drawable-hdpi/common_background_dialog.9.png 0x647dc610
res/drawable-hdpi/dialog_button_normal.9.png 0x8153ebe5
res/drawable-hdpi/dialog_button_pressed.9.png 0x55a8e9d0
res/drawable-hdpi/ic_action_search.png 0x64275be8
res/drawable-hdpi/ic_launcher.png 0x3d9a83bf
res/drawable-hdpi/ic_menu_preferences.png 0x98be0cee
res/drawable-hdpi/splash.png 0x7c30f58a
res/drawable-hdpi/vbar.9.png 0xf07e885b
res/drawable-ldpi/ic_launcher.png 0x3d9a83bf
res/drawable-mdpi/ic_action_search.png 0xb4091fdc
res/drawable-mdpi/ic_launcher.png 0x3d9a83bf
res/drawable-mdpi/ic_menu_preferences.png 0xf3f998ab
res/drawable-xhdpi/ic_action_search.png 0x3294aee3
classes.dex 0x2e46c045
META-INF/MANIFEST.MF 0x501af7ad
META-INF/CERT.SF 0xc7525478
META-INF/CERT.RSA 0x9f7fe543
运行截图
VirSCANVirSCAN
VirSCAN