VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.
4, If your browser cannot upload files, please download VirSCAN uploader to upload.

Language
Server load
Server Load

VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

File information

Scanner results
Scanner results:0%Antivirus software(0/32)found malware!
Behavior analysis report:         Habo file analysis
Time: 2015-10-27 09:18:22 (CST)
Scanner Engine Ver Sig Ver Sig Date Scan result Time
antiy AVL SDK 3.0 1970-01-01 Found nothing 5
asquared 9.0.0.4324 9.0.0.4324 2014-07-03 Found nothing 1
avast 150725-1 4.7.4 2015-07-25 Found nothing 0
avg 2109/8133 10.0.1405 2014-11-26 Found nothing 0
baidu 2.0.1.0 4.1.3.52192 2.0.1.0 Found nothing 5
baidusd 1.0 1.0 2014-04-02 Found nothing 1
bitdefender 7.58469 7.90123 2014-12-25 Found nothing 0
clamav 19861 0.97.5 2014-12-31 Found nothing 0
drweb 5.0.2.3300 5.0.1.1 2014-12-31 Found nothing 0
fortinet 23.345, 23.345 5.1.158 2014-12-08 Found nothing 0
fprot 4.6.2.117 6.5.1.5418 2014-12-31 Found nothing 0
fsecure 2014-04-02-01 9.13 2014-04-02 Found nothing 0
gdata 25.4073 25.4073 2015-10-26 Found nothing 8
ikarus 1.06.01 V1.32.31.0 2014-12-08 Found nothing 0
jiangmin 16.0.100 1.0.0.0 2015-07-25 Found nothing 41
kaspersky 5.5.33 5.5.33 2014-04-01 Found nothing 0
kingsoft 2.1 2.1 2013-09-22 Found nothing 13
mcafee 7638 5400.1158 2014-11-30 Found nothing 0
nod32 0920 3.0.21 2014-12-23 Found nothing 0
panda 9.05.01 9.05.01 2015-07-26 Found nothing 4
pcc 11.380.07 9.500-1005 2014-12-31 Found nothing 0
qh360 1.0.1 1.0.1 1.0.1 Found nothing 6
qqphone 1.0.0.0 1.0.0.0 2014-12-09 Found nothing 0
quickheal 14.00 14.00 2015-07-25 Found nothing 2
rising 25.76.04.01 25.76.04.01 2015-07-24 Found nothing 1
sophos 5.08 3.55.0 2014-12-01 Found nothing 0
symantec 20141230.001 1.3.0.24 2014-12-30 Found nothing 0
tachyon 9.9.9 9.9.9 2013-12-27 Found nothing 3
thehacker 6.8.0.5 6.8.0.5 2015-07-23 Found nothing 1
tws 17.47.17308 1.0.2.2108 2014-12-08 Found nothing 12
vba 3.12.26.3 3.12.26.3 2014-12-31 Found nothing 0
virusbuster 15.0.985.0 5.5.2.13 2014-12-05 Found nothing 0
权限列表
许可名称 信息
android.permission.INTERNET 连接网络(2G或3G)
android.permission.READ_SMS 读取短信
android.permission.WRITE_SMS 写短信
android.permission.SEND_SMS 发送短信
android.permission.RECEIVE_SMS 监控接收短信
android.permission.RECEIVE_WAP_PUSH 接收wap push信息
android.permission.RECEIVE_MMS 接收彩信
android.permission.RECEIVE_BOOT_COMPLETED 接收开机启动广播
android.permission.RECEIVE_USER_PRESENT
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.MODIFY_AUDIO_SETTINGS 修改声音设置
文件信息
VirSCANVirSCAN
安全评分 :
基本信息
VirSCANVirSCAN
MD5:dd004d1aaebe461056ef19d57a724fd5
文件大小:5.58MB
上传时间: 2014-09-22 10:36:30 (CST)
包名:com.wodeai.qunale
最低运行环境:Android 2.2.x
版权:Android
关键行为
VirSCANVirSCAN
行为描述: 写权限映射文件
详情信息: CiceroSharedMemDefaultS-*
MSCTF.MarshalInterface.FileMap.ECI..LAGGH
MSCTF.MarshalInterface.FileMap.ECI.B.LAGGH
MSCTF.MarshalInterface.FileMap.ECI.C.LAGGH
MSCTF.MarshalInterface.FileMap.ECI.D.LAGGH
MSCTF.MarshalInterface.FileMap.ECI.E.LAGGH
MSCTF.MarshalInterface.FileMap.ECI.F.KBGGH
MSCTF.MarshalInterface.FileMap.ECI.G.KBGGH
MSCTF.Shared.SFM.ECI
进程行为
VirSCANVirSCAN
行为描述: 写权限映射文件
详情信息: CiceroSharedMemDefaultS-*
MSCTF.MarshalInterface.FileMap.ECI..LAGGH
MSCTF.MarshalInterface.FileMap.ECI.B.LAGGH
MSCTF.MarshalInterface.FileMap.ECI.C.LAGGH
MSCTF.MarshalInterface.FileMap.ECI.D.LAGGH
MSCTF.MarshalInterface.FileMap.ECI.E.LAGGH
MSCTF.MarshalInterface.FileMap.ECI.F.KBGGH
MSCTF.MarshalInterface.FileMap.ECI.G.KBGGH
MSCTF.Shared.SFM.ECI
文件行为
VirSCANVirSCAN
行为描述: 写权限映射文件
详情信息: CiceroSharedMemDefaultS-*
MSCTF.MarshalInterface.FileMap.ECI..LAGGH
MSCTF.MarshalInterface.FileMap.ECI.B.LAGGH
MSCTF.MarshalInterface.FileMap.ECI.C.LAGGH
MSCTF.MarshalInterface.FileMap.ECI.D.LAGGH
MSCTF.MarshalInterface.FileMap.ECI.E.LAGGH
MSCTF.MarshalInterface.FileMap.ECI.F.KBGGH
MSCTF.MarshalInterface.FileMap.ECI.G.KBGGH
MSCTF.Shared.SFM.ECI
行为描述: 查找文件
详情信息: FileName = C:\DOCUME~1
FileName = C:\DOCUME~1\ADMINI~1
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\%temp%
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\%temp%\1.exe
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\%temp%\1.EXE
网络行为
VirSCANVirSCAN
行为描述: 下载文件
详情信息: URLDownloadToFileW: http://192.168.128.128/Cracker.exe ---> 1.EXE
C:\DOCUME~1\ADMINI~1\LOCALS~1\%temp%\1.EXE
其他行为
VirSCANVirSCAN
行为描述: 创建互斥体
详情信息: CTF.LBES.MutexDefaultS-*
CTF.Compart.MutexDefaultS-*
CTF.Asm.MutexDefaultS-*
CTF.Layouts.MutexDefaultS-*
CTF.TMD.MutexDefaultS-*
CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-*
MSCTF.Shared.MUTEX.ELH
MSCTF.Shared.MUTEX.ECI
行为描述: 查找指定窗口
详情信息: NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,]
NtUserFindWindowEx: [Class,Window] = [CicLoaderWndClass,]
动态列表行为
VirSCANVirSCAN
行为描述: 读取手机短信
详情信息: [u'content://sms/inbox', u'null', u'null', u'null', u'date']
[u'content://sms', u'null', u'null', u'null', u'date desc']
行为描述: 传递附加信息
详情信息: android.app.extra.DEVICE_ADMIN:ComponentInfo{com.wodeai.qunale/com.phone.stop.receiver.MyDeviceAdminReceiver}
android.app.extra.ADD_EXPLANATION:我需要这些权限
行为描述: 启动服务
详情信息: {"FLAG":0,"COMPONENT_NAME":"ComponentInfo{com.wodeai.qunale\/com.phone.stop.service.BootService}"}
{"FLAG":268435456,"COMPONENT_NAME":"ComponentInfo{com.wodeai.qunale\/com.phone.stop.service.BootService}"}
行为描述: 隐藏桌面快捷图标
详情信息: [u'ComponentInfo{com.wodeai.qunale/com.phone.stop.MainActivity}', u'2', u'1']
行为描述: 解析通用资源标识符
详情信息: content://sms
content://sms/inbox
content://sms/conversations/
content://sms/3
content://sms/inbox
行为描述: 注册广播接收器
详情信息: [u'null', u'android.content.IntentFilter@41502e38', u'android.permission.BROADCAST_SMS', u'null']
行为描述: 查询App共享数据
详情信息: [u'content://sms/inbox', u'null', u'null', u'null', u'date']
[u'content://sms', u'null', u'null', u'null', u'date desc']
行为描述: 设置组件属性
详情信息: [u'ComponentInfo{com.wodeai.qunale/com.phone.stop.MainActivity}', u'2', u'1']
行为描述: 注册ContentObserver
详情信息: URI=content://sms/inbox
行为描述: 激活ActivityForResult
详情信息: {"ACTION":"android.app.action.ADD_DEVICE_ADMIN","FLAG":0,"EXTRAS":{"android.app.extra.DEVICE_ADMIN":"ComponentInfo{com.wodeai.qunale\/com.phone.stop.receiver.MyDeviceAdminReceiver}","android.app.extra.ADD_EXPLANATION":"我需要这些权限"}}
行为描述: 写入文件
详情信息: path:/data/data/com.wodeai.qunale/shared_prefs/configurations_data.xml length:128
path:/data/data/com.wodeai.qunale/shared_prefs/configurations_data.xml length:179
行为描述: 初始化Intent
详情信息: [u'com.phone.stop.MainActivity@4153d870', u'class com.phone.stop.service.BootService']
[u'android.os.Parcel@414ad180']
[u'android.app.action.ADD_DEVICE_ADMIN']
[u'android.os.Parcel@414ad180']
[u'android.os.Parcel@414ad180']
[u'android.os.Parcel@414ad140']
[u'android.os.Parcel@414ad180']
[u'android.app.ReceiverRestrictedContext@414af1a8', u'class com.phone.stop.service.BootService']
[u'android.os.Parcel@414ad140']
行为描述: 获取运行service
详情信息: [u'40']
行为描述: 发送多份短信
详情信息: number:13580641275 messages:[软件安装完毕,机型如下: Model:sdk;SDK:16;BRAND:Lenovo;CPU:armeabi-v7a;PRODUCT:, smarttp_open]
Activities
VirSCANVirSCAN
活动名 类型
com.phone.stop.MainActivity android.intent.action.MAIN
com.phone.stop.MainActivity android.intent.category.LAUNCHER
危险函数
VirSCANVirSCAN
函数名称 信息
SmsManager;->sendMultipartTextMessage 发送彩信
ContentResolver;->query 读取联系人、短信等数据库
ContentResolver;->delete 删除短信、联系人
启动方式
VirSCANVirSCAN
名称 信息
com.phone.stop.receiver.SMSReceiver 监控短信(收到短信)启动服务
com.phone.stop.receiver.SMSReceiver 开机启动服务
com.phone.stop.receiver.BootReceiver 监控短信(收到短信)启动服务
com.phone.stop.receiver.BootReceiver 开机启动服务
com.phone.stop.receiver.BootReceiver 屏幕解锁启动服务
权限列表
VirSCANVirSCAN
许可名称 信息
android.permission.INTERNET 连接网络(2G或3G)
android.permission.READ_SMS 读取短信
android.permission.WRITE_SMS 写短信
android.permission.SEND_SMS 发送短信
android.permission.RECEIVE_SMS 监控接收短信
android.permission.RECEIVE_WAP_PUSH 接收wap push信息
android.permission.RECEIVE_MMS 接收彩信
android.permission.RECEIVE_BOOT_COMPLETED 接收开机启动广播
android.permission.RECEIVE_USER_PRESENT
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.MODIFY_AUDIO_SETTINGS 修改声音设置
服务列表
VirSCANVirSCAN
名称
com.phone.stop.service.BootService
文件列表
VirSCANVirSCAN
文件名 校验码
META-INF/MANIFEST.MF 0x8c70b06a
META-INF/CERT.SF 0x31743735
META-INF/CERT.RSA 0xb8c774a1
AndroidManifest.xml 0x9273e12a
classes.dex 0xbf8a507b
res/drawable-hdpi/app_logo.png 0x4cfa7021
res/drawable-hdpi/ic_launcher.png 0x53d08ae
res/drawable-mdpi/ic_launcher.png 0xb76f8e32
res/drawable-xhdpi/ic_launcher.png 0x5f58f4d5
res/drawable-xxhdpi/ic_launcher.png 0xce43d39a
res/layout/activity_main.xml 0xb933cb74
res/menu/main.xml 0x92401813
res/xml/devicepolicymanager_permission.xml 0x262335a7
resources.arsc 0x368a1928
运行截图
VirSCANVirSCAN
VirSCAN