VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.
4, If your browser cannot upload files, please download VirSCAN uploader to upload.

Language
Server load
Server Load

VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

File information

File Name :qqqq.apk (File not down)
File Size :199036 byte
File Type : application/jar
MD5:b48650f191cbecb065aa3398b884d7bf
SHA1:c24ddfd9d0433f18659f3843eafaff7f329d7926
Scanner results
Scanner results:3%Antivirus software(1/32)found malware!
Behavior analysis report:         Habo file analysis
Time: 2015-10-19 08:32:05 (CST)
Scanner Engine Ver Sig Ver Sig Date Scan result Time
antiy AVL SDK 3.0 1970-01-01 Found nothing 5
asquared 9.0.0.4324 9.0.0.4324 2014-07-03 Found nothing 1
avast 150725-1 4.7.4 2015-07-25 Found nothing 0
avg 2109/8133 10.0.1405 2014-11-26 Found nothing 0
baidu 2.0.1.0 4.1.3.52192 2.0.1.0 Found nothing 5
baidusd 1.0 1.0 2014-04-02 Found nothing 1
bitdefender 7.58469 7.90123 2014-12-25 Found nothing 0
clamav 19861 0.97.5 2014-12-31 Found nothing 0
drweb 5.0.2.3300 5.0.1.1 2014-12-31 Found nothing 0
fortinet 23.345, 23.345 5.1.158 2014-12-08 Found nothing 0
fprot 4.6.2.117 6.5.1.5418 2014-12-31 Found nothing 0
fsecure 2014-04-02-01 9.13 2014-04-02 Found nothing 0
gdata 25.3945 25.3945 2015-10-19 Found nothing 8
ikarus 1.06.01 V1.32.31.0 2014-12-08 Found nothing 0
jiangmin 16.0.100 1.0.0.0 2015-07-25 Found nothing 41
kaspersky 5.5.33 5.5.33 2014-04-01 Found nothing 0
kingsoft 2.1 2.1 2013-09-22 Android.Troj.ya_BqSpy.ya.(kcloud) 4
mcafee 7638 5400.1158 2014-11-30 Found nothing 0
nod32 0920 3.0.21 2014-12-23 Found nothing 0
panda 9.05.01 9.05.01 2015-07-26 Found nothing 4
pcc 11.380.07 9.500-1005 2014-12-31 Found nothing 0
qh360 1.0.1 1.0.1 1.0.1 Found nothing 2
qqphone 1.0.0.0 1.0.0.0 2014-12-09 Found nothing 0
quickheal 14.00 14.00 2015-07-25 Found nothing 2
rising 25.76.04.01 25.76.04.01 2015-07-24 Found nothing 1
sophos 5.08 3.55.0 2014-12-01 Found nothing 0
symantec 20141230.001 1.3.0.24 2014-12-30 Found nothing 0
tachyon 9.9.9 9.9.9 2013-12-27 Found nothing 4
thehacker 6.8.0.5 6.8.0.5 2015-07-23 Found nothing 1
tws 17.47.17308 1.0.2.2108 2014-12-08 Found nothing 12
vba 3.12.26.3 3.12.26.3 2014-12-31 Found nothing 0
virusbuster 15.0.985.0 5.5.2.13 2014-12-05 Found nothing 0
权限列表
许可名称 信息
android.permission.RECEIVE_WAP_PUSH 接收wap push信息
android.permission.RECEIVE_BOOT_COMPLETED 接收开机启动广播
android.permission.MODIFY_AUDIO_SETTINGS 修改声音设置
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.RECEIVE_USER_PRESENT
android.permission.READ_CONTACTS 读取联系人信息
android.permission.INTERNET 连接网络(2G或3G)
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.READ_SMS 读取短信
android.permission.WRITE_SETTINGS 读写系统设置项
android.permission.VIBRATE 允许设备震动
android.permission.RECEIVE_SMS 监控接收短信
android.permission.ACCESS_NETWORK_STATE 读取网络状态(2G或3G)
android.permission.GET_TASKS 获取有关当前或最近运行的任务信息
android.permission.WRITE_SMS 写短信
android.permission.SEND_SMS 发送短信
android.permission.ACCESS_WIFI_STATE 读取wifi网络状态
文件信息
VirSCANVirSCAN
安全评分 :
基本信息
VirSCANVirSCAN
MD5:b48650f191cbecb065aa3398b884d7bf
文件大小:5.58MB
上传时间: 2014-09-22 10:36:30 (CST)
包名:jkiuhi.nynj.jujy
最低运行环境:Android 2.2.x
版权:Android
关键行为
VirSCANVirSCAN
行为描述: 设置启动项
详情信息: C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\e36595fa133c027fc6484fcb4cd80353.exe
行为描述: 利用进程调试属性使系统蓝屏
详情信息: N/A
行为描述: 修改注册表_系统防火墙可信进程列表
详情信息: \REGISTRY\MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Administrator\Local Settings\Temp\windows defender.exe
行为描述: 写权限映射文件
详情信息: Global\Cor_Private_IPCBlock_416
Global\Cor_Public_IPCBlock_416
CiceroSharedMemDefaultS-*
Global\NLS_CodePage_936_3_2_0_0
Global\NLS_00000804_Exception_Table_3_2
Local\UrlZonesSM_Administrator
Global\Cor_Private_IPCBlock_2116
Global\Cor_Public_IPCBlock_2116
AtlDebugAllocator_FileMappingNameStatic3_fa8
Global\netfxcustomperfcounters.1.0.net clr networking
行为描述: 按名称获取主机地址
详情信息: foru1.no-ip.info
行为描述: 修改注册表_启动项
详情信息: \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Run\e36595fa133c027fc6484fcb4cd80353
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\e36595fa133c027fc6484fcb4cd80353
进程行为
VirSCANVirSCAN
行为描述: 设置启动项
详情信息: C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\e36595fa133c027fc6484fcb4cd80353.exe
行为描述: 利用进程调试属性使系统蓝屏
详情信息: N/A
行为描述: 修改注册表_系统防火墙可信进程列表
详情信息: \REGISTRY\MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Administrator\Local Settings\Temp\windows defender.exe
行为描述: 写权限映射文件
详情信息: Global\Cor_Private_IPCBlock_416
Global\Cor_Public_IPCBlock_416
CiceroSharedMemDefaultS-*
Global\NLS_CodePage_936_3_2_0_0
Global\NLS_00000804_Exception_Table_3_2
Local\UrlZonesSM_Administrator
Global\Cor_Private_IPCBlock_2116
Global\Cor_Public_IPCBlock_2116
AtlDebugAllocator_FileMappingNameStatic3_fa8
Global\netfxcustomperfcounters.1.0.net clr networking
行为描述: 按名称获取主机地址
详情信息: foru1.no-ip.info
行为描述: 修改注册表_启动项
详情信息: \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Run\e36595fa133c027fc6484fcb4cd80353
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\e36595fa133c027fc6484fcb4cd80353
文件行为
VirSCANVirSCAN
行为描述: 写权限映射文件
详情信息: Global\Cor_Private_IPCBlock_416
Global\Cor_Public_IPCBlock_416
CiceroSharedMemDefaultS-*
Global\NLS_CodePage_936_3_2_0_0
Global\NLS_00000804_Exception_Table_3_2
Local\UrlZonesSM_Administrator
Global\Cor_Private_IPCBlock_2116
Global\Cor_Public_IPCBlock_2116
AtlDebugAllocator_FileMappingNameStatic3_fa8
Global\netfxcustomperfcounters.1.0.net clr networking
行为描述: 创建可执行文件
详情信息: C:\Documents and Settings\Administrator\Local Settings\Temp\windows defender.exe
C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\e36595fa133c027fc6484fcb4cd80353.exe
行为描述: 查找文件
详情信息: FileName = C:\WINDOWS
FileName = C:\WINDOWS\WinSxS
FileName = C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll
FileName = C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
FileName = C:\DOCUME~1
FileName = C:\DOCUME~1\ADMINI~1
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\%temp%
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\%temp%\1445194157.030874.exe
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\%temp%\996E.INI
FileName = C:/DOCUME~1
FileName = C:/DOCUME~1/ADMINI~1
FileName = C:/DOCUME~1/ADMINI~1/LOCALS~1
FileName = C:/DOCUME~1/ADMINI~1/LOCALS~1/Temp
行为描述: 设置启动项
详情信息: C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\e36595fa133c027fc6484fcb4cd80353.exe
网络行为
VirSCANVirSCAN
行为描述: 按名称获取主机地址
详情信息: foru1.no-ip.info
注册表行为
VirSCANVirSCAN
行为描述: 修改注册表
详情信息: \REGISTRY\USER\S-*\di
\REGISTRY\USER\S-*\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\Documents and Settings\Administrator\Local Settings\Temp\windows defender.exe
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing\FWCFG\EnableFileTracing
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing\FWCFG\EnableConsoleTracing
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing\FWCFG\FileTracingMask
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing\FWCFG\ConsoleTracingMask
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing\FWCFG\MaxFileSize
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing\FWCFG\FileDirectory
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\NAP\Netsh\LogSessionName
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\NAP\Netsh\Active
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\NAP\Netsh\ControlFlags
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\NAP\Netsh\Napmontr\Guid
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\NAP\Netsh\Napmontr\BitNames
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\qagent\LogSessionName
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\qagent\Active
行为描述: 修改注册表_启动项
详情信息: \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Run\e36595fa133c027fc6484fcb4cd80353
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\e36595fa133c027fc6484fcb4cd80353
行为描述: 修改注册表_系统防火墙可信进程列表
详情信息: \REGISTRY\MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Administrator\Local Settings\Temp\windows defender.exe
行为描述: 修改注册表_系统环境变量
详情信息: \REGISTRY\USER\S-*\Environment\SEE_MASK_NOZONECHECKS
其他行为
VirSCANVirSCAN
行为描述: 调用Sleep函数
详情信息: [1]: MilliSeconds = 5000.
[2]: MilliSeconds = 1000.
[3]: MilliSeconds = -1.
行为描述: 创建互斥体
详情信息: CTF.LBES.MutexDefaultS-*
CTF.Compart.MutexDefaultS-*
CTF.Asm.MutexDefaultS-*
CTF.Layouts.MutexDefaultS-*
CTF.TMD.MutexDefaultS-*
CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-*
e36595fa133c027fc6484fcb4cd80353
Local\ZonesCounterMutex
Local\ZoneAttributeCacheCounterMutex
Local\ZonesCacheCounterMutex
Local\ZonesLockedCacheCounterMutex
SHIMLIB_LOG_MUTEX
RasPbFile
Global\.net clr networking
行为描述: 利用进程调试属性使系统蓝屏
详情信息: N/A
行为描述: 获取系统权限
详情信息: SE_LOAD_DRIVER_PRIVILEGE
SE_DEBUG_PRIVILEGE
SE_INC_BASE_PRIORITY_PRIVILEGE
行为描述: 获取TickCount值
详情信息: TickCount = 488531, SleepMilliseconds = 1000.
TickCount = 488625, SleepMilliseconds = 1000.
TickCount = 488640, SleepMilliseconds = 1000.
TickCount = 488750, SleepMilliseconds = 1000.
TickCount = 488765, SleepMilliseconds = 1000.
TickCount = 488781, SleepMilliseconds = 1000.
TickCount = 489031, SleepMilliseconds = 1000.
TickCount = 488051, SleepMilliseconds = 20.
TickCount = 488066, SleepMilliseconds = 20.
TickCount = 488082, SleepMilliseconds = 20.
TickCount = 488113, SleepMilliseconds = 20.
危险行为
VirSCANVirSCAN
行为描述: 发送短信
详情信息: number:18201070143 data:message:软件安装完毕 识别码:357143040944263 型号:sdk; 手机:Lenovo; 系统版本:4.1.2
number:18201070143 data:message:激活成功
动态列表行为
VirSCANVirSCAN
行为描述: 启动服务
详情信息: {"FLAG":0,"COMPONENT_NAME":"ComponentInfo{jkiuhi.nynj.jujy\/com.phone.stop6.service.BootService}"}
行为描述: 获取加密实例
详情信息: [u'DES']
行为描述: 读取URL数据
详情信息: []
行为描述: 添加View
详情信息: [u'android.widget.LinearLayout@41542900', u'WM.LayoutParams{(0,128)(wrapxwrap) gr=#51 ty=2005 fl=#98 fmt=-3 wanim=0x1030004}']
[u'com.android.internal.policy.impl.PhoneWindow$DecorView@414a7b80', u'WM.LayoutParams{(0,0)(fillxfill) ty=1 fl=#1810100 pfl=0x8 fmt=-2 wanim=0x1030000}', u'android.view.CompatibilityInfoHolder@414af988']
[u'android.widget.LinearLayout@414fcca8', u'WM.LayoutParams{(0,128)(wrapxwrap) gr=#51 ty=2005 fl=#98 fmt=-3 wanim=0x1030004}']
行为描述: 获取邮件Session
详情信息: [u'{mail.smtp.host=smtp.163.com, mail.smtp.auth=true, mail.smtp.post=465}']
[u'{mail.smtp.host=smtp.163.com, mail.smtp.auth=true, mail.smtp.post=465}']
[u'{mail.smtp.host=smtp.163.com, mail.smtp.auth=true, mail.smtp.post=465}']
[u'{mail.smtp.host=smtp.163.com, mail.smtp.auth=true, mail.smtp.post=465}']
行为描述: 读取文件
详情信息: path:/data/app/jkiuhi.nynj.jujy-1.apk length:9
path:/data/app/jkiuhi.nynj.jujy-1.apk length:23
path:/data/app/jkiuhi.nynj.jujy-1.apk length:69
path:/data/app/jkiuhi.nynj.jujy-1.apk length:7
path:/data/app/jkiuhi.nynj.jujy-1.apk length:7
行为描述: 激活ActivityForResult
详情信息: {"ACTION":"android.app.action.ADD_DEVICE_ADMIN","FLAG":0,"EXTRAS":{"android.app.extra.DEVICE_ADMIN":"ComponentInfo{jkiuhi.nynj.jujy\/com.phone.stop.receiver.MyDeviceAdminReceiver}","android.app.extra.ADD_EXPLANATION":"提高权限获取保护"}}
行为描述: 登录邮箱
详情信息: host:smtp.163.com,name:18201070143@163.com,password:papabmoxuggkzuwv
host:smtp.163.com,name:18201070143@163.com,password:papabmoxuggkzuwv
host:smtp.163.com,name:18201070143@163.com,password:papabmoxuggkzuwv
host:smtp.163.com,name:18201070143@163.com,password:papabmoxuggkzuwv
行为描述: 注册广播接收器
详情信息: [u'com.phone.stop.receiver.SMSReceiver@415363e8', u'android.content.IntentFilter@4155f470', u'android.permission.BROADCAST_SMS', u'null']
行为描述: 初始化Intent
详情信息: [u'android.app.action.ADD_DEVICE_ADMIN']
[u'android.os.Parcel@414ad1a8']
[u'com.phone2.stop.activity.MainActivity@414c62a8', u'class com.phone.stop6.service.BootService']
[u'android.os.Parcel@414ad1a8']
[]
[u'com.phone.stop6.service.BootService@414f0550', u'class com.phone.stop6.service.SecondService']
[u'android.os.Parcel@414ad1a8']
[u'android.os.Parcel@414adfb8']
[u'android.os.Parcel@414ad168']
[u'android.os.Parcel@414adfb8']
[u'android.os.Parcel@414adf78']
[u'android.os.Parcel@414ad1a8']
[u'android.os.Parcel@414ad168']
[u'android.os.Parcel@414adfb8']
行为描述: 传递附加信息
详情信息: android.app.extra.DEVICE_ADMIN:ComponentInfo{jkiuhi.nynj.jujy/com.phone.stop.receiver.MyDeviceAdminReceiver}
android.app.extra.ADD_EXPLANATION:提高权限获取保护
行为描述: 调用哈希算法
详情信息: SHA1
行为描述: 解析通用资源标识符
详情信息: content://sms
content://sms/inbox
content://sms/conversations/
content://sms/sent
content://sms/3
content://sms
content://com.android.contacts
content://sms/100
content://sms
content://sms/100
行为描述: 注册ContentObserver
详情信息: URI=content://sms
行为描述: 初始化URL
详情信息: [u'file', u'', u'-1', u'/data/app/jkiuhi.nynj.jujy-1.apk', u'null']
[u'jar:file:/data/app/jkiuhi.nynj.jujy-1.apk!/mailcap']
行为描述: 发送短信
详情信息: number:18201070143 data:message:软件安装完毕 识别码:357143040944263 型号:sdk; 手机:Lenovo; 系统版本:4.1.2
number:18201070143 data:message:激活成功
行为描述: 写入文件
详情信息: path:/data/data/jkiuhi.nynj.jujy/shared_prefs/configurations_data.xml length:104
path:/data/data/jkiuhi.nynj.jujy/shared_prefs/configurations_data.xml length:159
path:/data/data/jkiuhi.nynj.jujy/shared_prefs/configurations_data.xml length:187
path:/data/data/jkiuhi.nynj.jujy/shared_prefs/configurations_data.xml length:246
path:/data/data/jkiuhi.nynj.jujy/shared_prefs/configurations_data.xml length:261
path:/data/data/jkiuhi.nynj.jujy/shared_prefs/configurations_data.xml length:261
path:/data/data/jkiuhi.nynj.jujy/shared_prefs/configurations_data.xml length:261
path:/data/data/jkiuhi.nynj.jujy/shared_prefs/configurations_data.xml length:261
path:/data/data/jkiuhi.nynj.jujy/shared_prefs/configurations_data.xml length:261
path:/data/data/jkiuhi.nynj.jujy/shared_prefs/configurations_data.xml length:261
行为描述: 获取设备ID
详情信息: 357143040944263
357143040944263
357143040944263
357143040944263
357143040944263
行为描述: 读取手机短信
详情信息: [u'content://sms/inbox', u'null', u'null', u'null', u'date']
[u'content://sms', u'[_id, address, person, body, date, type, thread_id]', u'null', u'null', u'date']
[u'content://sms', u'[_id, address, person, body, date, type, thread_id]', u'null', u'null', u'date']
行为描述: Toast->makeText弹出提示
详情信息: text:安全控件,请允许激活! duration:1
text:设备不兼容,软件安装失败! duration:1
行为描述: 隐藏桌面快捷图标
详情信息: [u'ComponentInfo{jkiuhi.nynj.jujy/com.phone2.stop.activity.MainActivity}', u'2', u'1']
行为描述: 获取运行service
详情信息: [u'500']
[u'500']
[u'500']
[u'500']
[u'500']
[u'500']
行为描述: 设置组件属性
详情信息: [u'ComponentInfo{jkiuhi.nynj.jujy/com.phone2.stop.activity.MainActivity}', u'2', u'1']
行为描述: 缓冲区读取一行数据
详情信息: #
# @(#)mailcap 1.8 05/04/20
#
# Default mailcap file for the JavaMail System.
#
# JavaMail content-handlers:
#
text/plain;; x-java-content-handler=com.sun.mail.handlers.text_plain
text/html;; x-java-content-handler=com.sun.mail.handlers.text_html
text/xml;; x-java-content-handler=com.sun.mail.handlers.text_xml
multipart/*;; x-java-content-handler=com.sun.mail.handlers.multipart_mixed; x-java-fallback-entry=true
message/rfc822;; x-java-content-handler=com.sun.mail.handlers.message_rfc822
#
# can't support image types because myjava.awt.Toolkit doesn't work on servers
#
#image/gif;; x-java-content-handler=com.sun.mail.handlers.image_gif
#image/jpeg;; x-java-content-handler=com.sun.mail.handlers.image_jpeg
null
行为描述: 查询App共享数据
详情信息: [u'content://sms/inbox', u'null', u'null', u'null', u'date']
[u'content://sms', u'[_id, address, person, body, date, type, thread_id]', u'null', u'null', u'date']
[u'content://com.android.contacts/contacts', u'null', u'null', u'null', u'null']
[u'content://com.android.contacts/data/phones', u'null', u'contact_id=1', u'null', u'null']
[u'content://com.android.contacts/data/phones', u'null', u'contact_id=2', u'null', u'null']
[u'content://com.android.contacts/data/phones', u'null', u'contact_id=3', u'null', u'null']
[u'content://com.android.contacts/data/phones', u'null', u'contact_id=4', u'null', u'null']
[u'content://sms', u'[_id, address, person, body, date, type, thread_id]', u'null', u'null', u'date']
[u'content://com.android.contacts/contacts', u'null', u'null', u'null', u'null']
[u'content://com.android.contacts/data/phones', u'null', u'contact_id=1', u'null', u'null']
[u'content://com.android.contacts/data/phones', u'null', u'contact_id=2', u'null', u'null']
[u'content://com.android.contacts/data/phones', u'null', u'contact_id=3', u'null', u'null']
[u'content://com.android.contacts/data/phones', u'null', u'contact_id=4', u'null', u'null']
行为描述: 循环任务
详情信息: [u'3', u'1009479', u'15000', u'PendingIntent{414de218: android.os.BinderProxy@414e0a58}']
Activities
VirSCANVirSCAN
活动名 类型
com.phone2.stop.activity.MainActivity android.intent.action.MAIN
com.phone2.stop.activity.MainActivity android.intent.category.LAUNCHER
com.phone2.stop.activity.DeleteActivity android.intent.action.DELETE
com.phone2.stop.activity.DeleteActivity android.intent.category.DEFAULT
危险函数
VirSCANVirSCAN
函数名称 信息
ContentResolver;->delete 删除短信、联系人
ContentResolver;->query 读取联系人、短信等数据库
TelephonyManager;->getDeviceId 搜集用户手机IMEI码、电话号码、系统版本号等信息
java/net/URL;->openConnection 连接URL
启动方式
VirSCANVirSCAN
名称 信息
com.phone.stop.receiver.BootReceiver 网络连接改变时启动服务
com.phone.stop.receiver.BootReceiver 应用安装时启动服务
com.phone.stop.receiver.BootReceiver 开机启动服务
com.phone.stop.receiver.SMSReceiver 监控短信(收到短信)启动服务
权限列表
VirSCANVirSCAN
许可名称 信息
android.permission.RECEIVE_WAP_PUSH 接收wap push信息
android.permission.RECEIVE_BOOT_COMPLETED 接收开机启动广播
android.permission.MODIFY_AUDIO_SETTINGS 修改声音设置
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.RECEIVE_USER_PRESENT
android.permission.READ_CONTACTS 读取联系人信息
android.permission.INTERNET 连接网络(2G或3G)
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.READ_SMS 读取短信
android.permission.WRITE_SETTINGS 读写系统设置项
android.permission.VIBRATE 允许设备震动
android.permission.RECEIVE_SMS 监控接收短信
android.permission.ACCESS_NETWORK_STATE 读取网络状态(2G或3G)
android.permission.GET_TASKS 获取有关当前或最近运行的任务信息
android.permission.WRITE_SMS 写短信
android.permission.SEND_SMS 发送短信
android.permission.ACCESS_WIFI_STATE 读取wifi网络状态
服务列表
VirSCANVirSCAN
名称
com.phone.stop6.service.SecondService
com.phone.stop6.service.BootService
com.phone.stop6.service.SmsService
文件列表
VirSCANVirSCAN
文件名 校验码
META-INF/MANIFEST.MF 0x2be05b31
META-INF/CERT.SF 0x1b24bb57
META-INF/CERT.RSA 0x3aed7a7
javamail.smtp.provider 0x990c469d
javamail.default.address.map 0xf20496b
mailcap 0xd7759e43
mimetypes.default 0x97dd5cdb
javamail.imap.provider 0x8934555a
res/drawable-hdpi/app_logo.png 0x68c1f82f
res/xml/devicepolicymanager_permission.xml 0xeab2c16b
resources.arsc 0x5240b5ba
classes.dex 0x8d74d575
javamail.default.providers 0x45ea1b21
mailcap.default 0x6f616b6
AndroidManifest.xml 0xc063d788
javamail.charset.map 0xad0dfcee
res/layout/activity_aa.xml 0x60332653
javamail.smtp.address.map 0xf20496b
res/layout/activity_main.xml 0x19203b2e
res/drawable-hdpi/icon.png 0xac8b5a00
dsn.mf 0x1e4e9355
javamail.pop3.provider 0xa23c9bc
运行截图
VirSCANVirSCAN
VirSCAN