VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, VirSCAN can scan compressed files with password 'infected' or 'virus'.

Language
Server load
Server Load

File information
Safety rating:
Behavior list
Basic Information
MD5:e11bb5a1acd793a46ffc4699b425be89
Package names:com.longxk.screentranslator
Minimum operating environment:Android 2.1.x
copyright:
Key behavior
Behavior description:写权限映射文件
details:CiceroSharedMemDefaultS-*
MSCTF.MarshalInterface.FileMap.MFF..ECHGH
MSCTF.MarshalInterface.FileMap.MFF.B.ECHGH
MSCTF.MarshalInterface.FileMap.MFF.C.ECHGH
MSCTF.MarshalInterface.FileMap.MFF.D.ECHGH
MSCTF.MarshalInterface.FileMap.MFF.E.ECHGH
MSCTF.MarshalInterface.FileMap.MFF.F.ECHGH
MSCTF.MarshalInterface.FileMap.MFF.G.ECHGH
MSCTF.Shared.SFM.MFF
Behavior description:隐藏指定窗口
details:[Window,Class] = [Pixart Mouse Commander,#32770]
Process behavior
Behavior description:枚举进程
details:N/A
File behavior
Behavior description:写权限映射文件
details:CiceroSharedMemDefaultS-*
MSCTF.MarshalInterface.FileMap.MFF..ECHGH
MSCTF.MarshalInterface.FileMap.MFF.B.ECHGH
MSCTF.MarshalInterface.FileMap.MFF.C.ECHGH
MSCTF.MarshalInterface.FileMap.MFF.D.ECHGH
MSCTF.MarshalInterface.FileMap.MFF.E.ECHGH
MSCTF.MarshalInterface.FileMap.MFF.F.ECHGH
MSCTF.MarshalInterface.FileMap.MFF.G.ECHGH
MSCTF.Shared.SFM.MFF
Other behavior
Behavior description:查找指定窗口
details:NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,]
NtUserFindWindowEx: [Class,Window] = [CicLoaderWndClass,]
Behavior description:隐藏指定窗口
details:[Window,Class] = [Pixart Mouse Commander,#32770]
Behavior description:创建互斥体
details:CTF.LBES.MutexDefaultS-*
CTF.Compart.MutexDefaultS-*
CTF.Asm.MutexDefaultS-*
CTF.Layouts.MutexDefaultS-*
CTF.TMD.MutexDefaultS-*
CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-*
MSCTF.Shared.MUTEX.ELH
MSCTF.Shared.MUTEX.MFF
Behavior description:获取TickCount值
details:TickCount = 485156, SleepMilliseconds = 500.
TickCount = 495843, SleepMilliseconds = 500.
TickCount = 495875, SleepMilliseconds = 500.
Dynamic list behavior
Behavior description:初始化URL
details:[u'http://r.domob.cn/a/']
[u'http://r.domob.cn/a/']
Behavior description:读取文件
details:path:/proc/meminfo length:69
path:/proc/meminfo length:69
path:/proc/meminfo length:69
path:/proc/meminfo length:69
path:/proc/meminfo length:69
Behavior description:注册广播接收器
details:[u'android.webkit.WebViewClassic$PackageListener@414f87d8', u'android.content.IntentFilter@414a69f0']
[u'android.webkit.WebViewClassic$ProxyReceiver@414ed9c0', u'android.content.IntentFilter@41502748']
[u'android.webkit.WebViewClassic$TrustStorageListener@41507bf8', u'android.content.IntentFilter@415079e8']
[u'cn.domob.android.ads.e@415eb5e8', u'android.content.IntentFilter@415eb670']
[u'android.widget.ViewFlipper$1@4150b9b0', u'android.content.IntentFilter@414c03a8']
Behavior description:访问URL
details:http://r.domob.cn/a/
http://r.domob.cn/a/
Behavior description:读取系统设置
details:[u'android.app.ContextImpl$ApplicationContentResolver@4154d078', u'show_password']
[u'android.app.ContextImpl$ApplicationContentResolver@4154d078', u'show_password']
[u'android.app.ContextImpl$ApplicationContentResolver@4154d078', u'show_password']
[u'android.app.ContextImpl$ApplicationContentResolver@4154d078', u'show_password']
[u'android.app.ContextImpl$ApplicationContentResolver@4154d078', u'show_password']
Behavior description:初始化IntentFilter
details:[u'android.intent.action.PACKAGE_ADDED']
Behavior description:获取用户ID
details:460000043140572
Behavior description:窗口信息
details:{"text": "屏幕词典", "class": "android.widget.TextView"}
{"text": "-- 点击启动屏幕词典 --", "class": "android.widget.TextView"}
{"text": "查词方式:", "class": "android.widget.TextView"}
{"text": "自带本地词典", "class": "android.widget.TextView"}
{"text": "同时复制到剪贴板", "class": "android.widget.CheckBox"}
{"text": "版本:", "class": "android.widget.TextView"}
{"text": "1.1 beta", "class": "android.widget.TextView"}
{"text": " 联系作者 ", "class": "android.widget.TextView"}
{"text": " 给我评价 ", "class": "android.widget.TextView"}
Behavior description:缓冲区读取一行数据
details:f=jsonp&e=UTF-8&pb%5Bidentifier%5D=com.longxk.screentranslator&ts=1439264630265&c=gif%2Cltx%2Cla%2Chv%2Cexpd%2Ciad%2Cspi&so=v&idv=357143040944263%2C460000043140572%2C72c0258c73ad917e&pb%5Bversion%5D=1.1+beta&sd=2.0&l=zh&d%5Bcoord_status%5D=0&sh=1184&cid=&network=wifi&dim=320x50&v=20120604-android-20120321&ipb=56OJz%2Fm4uMx5o0Opwe&pt=1&sv=030002&ua=android%2C%2C4.1.2%2C%2Csdk%2C%E4%B8%AD%E5%9B%BD%E7%A7%BB%E5%8A%A8+4G%2C%2C%2C&rt=1&pb%5Bname%5D=%E5%B1%8F%E5%B9%95%E8%AF%8D%E5%85%B8&sdk=1&apn=&sw=768
null
f=jsonp&e=UTF-8&pb%5Bidentifier%5D=com.longxk.screentranslator&ts=1439264652128&c=gif%2Cltx%2Cla%2Chv%2Cexpd%2Ciad%2Cspi&so=v&idv=357143040944263%2C460000043140572%2C72c0258c73ad917e&pb%5Bversion%5D=1.1+beta&sd=2.0&l=zh&d%5Bcoord_status%5D=0&sh=1184&cid=&network=wifi&dim=320x50&v=20120604-android-20120321&ipb=56OJz%2Fm4uMx5o0Opwe&pt=1&sv=030002&ua=android%2C%2C4.1.2%2C%2Csdk%2C%E4%B8%AD%E5%9B%BD%E7%A7%BB%E5%8A%A8+4G%2C%2C%2C&rt=1&pb%5Bname%5D=%E5%B1%8F%E5%B9%95%E8%AF%8D%E5%85%B8&sdk=1&apn=&sw=768
null
Behavior description:添加View
details:[u'com.android.internal.policy.impl.PhoneWindow$DecorView@4154fe68', u'WM.LayoutParams{(0,0)(fillxfill) sim=#100 ty=1 fl=#8010100 pfl=0x8 wanim=0x1030001}', u'android.view.CompatibilityInfoHolder@414afa90']
Behavior description:写入文件
details:path:/data/data/com.longxk.screentranslator/shared_prefs/preferences.xml length:116
Behavior description:初始化Intent
details:[u'android.os.Parcel@414ad1e8']
Behavior description:获取网络状态信息[*]
details:NetworkInfo: type: WIFI[], state: CONNECTED/CONNECTED, reason: (unspecified), extra: freewifi, roaming: false, failover: false, isAvailable: true
NetworkInfo: type: WIFI[], state: CONNECTED/CONNECTED, reason: (unspecified), extra: freewifi, roaming: false, failover: false, isAvailable: true
NetworkInfo: type: WIFI[], state: CONNECTED/CONNECTED, reason: (unspecified), extra: freewifi, roaming: false, failover: false, isAvailable: true
NetworkInfo: type: WIFI[], state: CONNECTED/CONNECTED, reason: (unspecified), extra: freewifi, roaming: false, failover: false, isAvailable: true
NetworkInfo: type: WIFI[], state: CONNECTED/CONNECTED, reason: (unspecified), extra: freewifi, roaming: false, failover: false, isAvailable: true
NetworkInfo: type: WIFI[], state: CONNECTED/CONNECTED, reason: (unspecified), extra: freewifi, roaming: false, failover: false, isAvailable: true
Behavior description:查询上次位置信息
details:[u'network']
[u'network']
Behavior description:数据库查询
details:[u'formurl', u'null', u'null', u'null', u'null', u'null', u'null']
Behavior description:获取设备ID
details:357143040944263
Activities
Activity nameTypes of
.MainActivityandroid.intent.action.MAIN
.MainActivityandroid.intent.category.LAUNCHER
Dangerous function
Function nameinformation
android/app/NotificationManager;->notify信息通知栏
ContentResolver;->query读取联系人、短信等数据库
java/net/URL;->openConnection连接URL
getRuntime获取命令行环境
java/lang/Runtime;->exec执行字符串命令
java/net/HttpURLConnection;->connect连接URL
LocationManager;->getLastKnownLocation获取地址位置
HttpClient;->execute请求远程服务器
DefaultHttpClient;->execute发送HTTP请求
TelephonyManager;->getDeviceId搜集用户手机IMEI码、电话号码、系统版本号等信息
Advertising information
nameinformation
cn.domob.android多盟
Permission list
License nameinformation
android.permission.SYSTEM_ALERT_WINDOW显示系统窗口
android.permission.INTERNET连接网络(2G或3G)
android.permission.ACCESS_NETWORK_STATE读取网络状态(2G或3G)
android.permission.READ_PHONE_STATE读取电话状态
android.permission.WRITE_EXTERNAL_STORAGE写外部存储器(如:SD卡)
android.permission.ACCESS_COARSE_LOCATION获取粗略的位置(通过wifi、基站)
Service list
name
com.longxk.screentranslator.WordPointerService
File List
file name Check code
assets/bin/mfb 0xaf311bad
assets/bin/msf_gb 0xeb1029b8
assets/bin/msf_ics 0x372a5c3f
assets/bin/shot 0x6c46f1
assets/guide1.html 0x82e6cd83
assets/guide2.html 0x30e3e38b
assets/phonetic.ttf 0x9a6eb23a
assets/pic1.png 0xf7747bec
assets/style.css 0x61a22c3b
res/anim/hide.xml 0xf67f824f
res/anim/reveal.xml 0xb8c1760a
res/drawable/bg.png 0x85dce757
res/drawable/button0.png 0xa95b9289
res/drawable/button1.png 0xdf99058c
res/drawable/more.png 0x86fb607d
res/drawable/pointer.png 0x756fef48
res/drawable/popup_bg.9.png 0x48852a46
res/drawable/start.png 0x96e36f2f
res/drawable/stop.png 0xc7baf5d2
res/drawable/tilebg.xml 0x1f4bd37d
res/layout/firstrun.xml 0x24cc76fb
res/layout/main.xml 0x465c5915
res/layout/notification.xml 0x29802fea
res/layout/pointer.xml 0xdbd4e161
res/layout/popup.xml 0x70de7d33
res/layout/popup_more.xml 0x6143c5e2
AndroidManifest.xml 0xd4ef91fb
resources.arsc 0xbb9da1a0
res/drawable-hdpi/icon.png 0x34cd6db9
res/drawable-ldpi/icon.png 0xb5ffe559
res/drawable-mdpi/icon.png 0x745c38ce
classes.dex 0xbb2dd852
assets/domob.js 0x87ad5d91
assets/domob_banner.png 0x2d824ee
assets/domob_close.png 0xc60adaed
assets/domob_exit.png 0x6e628d21
assets/domob_loading.png 0x48342286
assets/domob_next.png 0xc667afa3
assets/domob_next_off.png 0x72b7a470
assets/domob_out.png 0x75b3379b
assets/domob_preview.png 0xe1ad2a0e
assets/domob_preview_off.png 0x2949548e
assets/domob_refresh.png 0x16696e6a
lib/armeabi/libeng.so 0x5b79c7b0
lib/armeabi/libsun_dict_e2c.idx.gz.so 0x90e22528
lib/armeabi/libtess.so 0xb0ea2e32
lib/armeabi/libsun_dict_e2c.dict.gz.so 0xa18ce328
lib/armeabi/libldict.so 0x707ea15f
META-INF/MANIFEST.MF 0x2a580d86
META-INF/CERT.SF 0xc2b14bbb
META-INF/CERT.RSA 0x9ead8146
Run screenshot
VirSCAN

About VirSCAN | Privacy Policy | Contact us | Links | Help VirSCAN
Translated by Keith Miller, United States
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号