1, Vous pouvez ENVOYER tout fichier mais il y a une limite de 20 Mo par fichier. 2, VirSCAN supporte la d&compression Rar/Zip mais il doit y avoir moins de 20 fichiers. 3, VirSCAN peut d&tecter un fichier compress& avec le mot de passe 'infected' ou 'virus'.
Portuguese Brazil
Русский
укра?нська
Nederlands
Espa?ol (Latin America)
Charge du serveur
Informations sur le fichier
Nom de fichier :
(File not down)
Taille du fichier :212966 byte
Type de fichier :application/jar
文件行为分析
Résultats des moteurs
Résultats des moteurs:<font color="#%(3/32)a trouvé un malware !
Temps: <font color="#16-10-01 11:26:18 (CST)
Vers. moteur
Vers. Sig.
Résultats des moteurs
AVL SDK 3.0
Rien n'a été trouvé
9.0.0.4324
9.0.0.4324
Rien n'a été trouvé
Rien n'a été trouvé
Rien n'a été trouvé
4.1.3.52192
Rien n'a été trouvé
Rien n'a été trouvé
bitdefender
Rien n'a été trouvé
Rien n'a été trouvé
5.0.2.3300
Rien n'a été trouvé
23.345, 23.345
Rien n'a été trouvé
6.5.1.5418
Rien n'a été trouvé
V1.32.31.0
Rien n'a été trouvé
Rien n'a été trouvé
Rien n'a été trouvé
Rien n'a été trouvé
Rien n'a été trouvé
Rien n'a été trouvé
9.500-1005
Rien n'a été trouvé
Rien n'a été trouvé
Rien n'a été trouvé
Rien n'a été trouvé
25.76.04.01
25.76.04.01
Rien n'a été trouvé
Rien n'a été trouvé
Rien n'a été trouvé
Rien n'a été trouvé
Rien n'a été trouvé
17.47.17308
1.0.2.2108
Rien n'a été trouvé
3.12.29.3 beta
3.12.29.3 beta
Rien n'a été trouvé
virusbuster
15.0.985.0
Rien n'a été trouvé
■Heuristic/Suspicious ■Exact
Nota Bene : Un malware trouvé par certains analyseurs peut être un faux positif, aussi devez-vous juger par vous-même.
Presse-papier
许可名称信息
android.permission.RECEIVE_WAP_PUSH接收wap push信息
android.permission.RECEIVE_BOOT_COMPLETED接收开机启动广播
android.permission.MODIFY_AUDIO_SETTINGS修改声音设置
android.permission.WRITE_EXTERNAL_STORAGE写外部存储器（如：SD卡）
android.permission.RECEIVE_USER_PRESENT
android.permission.READ_CONTACTS读取联系人信息
android.permission.INTERNET连接网络（2G或3G）
android.permission.READ_PHONE_STATE读取电话状态
android.permission.READ_SMS读取短信
android.permission.WRITE_SETTINGS读写系统设置项
android.permission.VIBRATE允许设备震动
android.permission.RECEIVE_SMS监控接收短信
android.permission.ACCESS_NETWORK_STATE读取网络状态（2G或3G）
android.permission.GET_TASKS获取有关当前或最近运行的任务信息
android.permission.WRITE_SMS写短信
android.permission.SEND_SMS发送短信
android.permission.ACCESS_WIFI_STATE读取wifi网络状态
安全评分 :
包名:com.iekjdx
最低运行环境:Android 2.2.x
版权:Android
行为描述:设置特殊文件夹属性
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
行为描述:隐藏窗口创建进程
详情信息:ImagePath = , CmdLine = &C:\WINDOWS\System32\cmd.exe&
/D /c files.dat -y -pkmsauto
行为描述:创建进程
详情信息:ImagePath = C:\WINDOWS\system32\cmd.exe, CmdLine = &C:\WINDOWS\System32\cmd.exe&
/D /c files.dat -y -pkmsauto
行为描述:创建本地线程
详情信息:TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 2564, ThreadID = 2668, StartAddress = 77DC845A, Parameter =
TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 2564, ThreadID = 2672, StartAddress = 00A01D26, Parameter =
TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 2564, ThreadID = 2676, StartAddress = 7C947EBB, Parameter =
TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 2564, ThreadID = 2680, StartAddress = 7C930230, Parameter =
TargetProcess: setup.exe, InheritedFromPID = 2564, ProcessID = 2944, ThreadID = 2952, StartAddress = 77DC845A, Parameter =
TargetProcess: files.dat, InheritedFromPID = 3000, ProcessID = 3012, ThreadID = 3020, StartAddress = 77C0A341, Parameter = 00980E58
TargetProcess: files.dat, InheritedFromPID = 3000, ProcessID = 3012, ThreadID = 3052, StartAddress = 77C0A341, Parameter =
TargetProcess: files.dat, InheritedFromPID = 3000, ProcessID = 3012, ThreadID = 3056, StartAddress = 77C0A341, Parameter =
TargetProcess: files.dat, InheritedFromPID = 3000, ProcessID = 3012, ThreadID = 3060, StartAddress = 77C0A341, Parameter =
TargetProcess: files.dat, InheritedFromPID = 3000, ProcessID = 3012, ThreadID = 3064, StartAddress = 77C0A341, Parameter =
TargetProcess: files.dat, InheritedFromPID = 3000, ProcessID = 3012, ThreadID = 3068, StartAddress = 77C0A341, Parameter =
TargetProcess: files.dat, InheritedFromPID = 3000, ProcessID = 3012, ThreadID = 3072, StartAddress = 77C0A341, Parameter =
TargetProcess: files.dat, InheritedFromPID = 3000, ProcessID = 3012, ThreadID = 3076, StartAddress = 77C0A341, Parameter =
行为描述:创建新文件进程
详情信息:ImagePath = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsy52.tmp\setup.exe, CmdLine = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsy52.tmp\setup.exe
ImagePath = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsy52.tmp\files\files.dat, CmdLine = files.dat -y -pkmsauto
行为描述:创建文件
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temp\nsy51.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\System.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\inetc.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\1X9kzV5muP
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6P4O8QNJ\launch_reb[1].php
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\B
C:\WINDOWS\system32\vcruntime140.dll
C:\WINDOWS\system32\msvcp140.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\setup16.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\files.dat
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\Configure.xml
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\Uninstall.xml
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\x86\cleanospp.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\x64\cleanospp.exe
行为描述:创建可执行文件
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\System.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\inetc.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\1X9kzV5muP
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\B
C:\WINDOWS\system32\vcruntime140.dll
C:\WINDOWS\system32\msvcp140.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\setup16.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\files.dat
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\x86\cleanospp.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\x64\cleanospp.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\x86\msvcr100.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\x64\msvcr100.dll
行为描述:查找文件
详情信息:FileName = C:\Documents and Settings
FileName = C:\Documents and Settings\Administrator
FileName = C:\Documents and Settings\Administrator\Local Settings
FileName = C:\Documents and Settings\Administrator\Local Settings\Temp
FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsy52.tmp
FileName = C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Connections\Pbk\*.pbk
FileName = C:\WINDOWS\system32\Ras\*.pbk
FileName = C:\Documents and Settings\Administrator\Application Data\Microsoft\Network\Connections\Pbk\*.pbk
FileName = C:\DOCUME~1
FileName = C:\DOCUME~1\ADMINI~1
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsy52.tmp\setup.exe
FileName = C:\WINDOWS\Temp
行为描述:删除文件
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temp\nsy51.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6P4O8QNJ\launch_reb[1].php
行为描述:重命名文件
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\B ---& C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsy52.tmp\setup.exe
行为描述:设置特殊文件夹属性
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
行为描述:修改文件内容
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\System.dll ---& Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\inetc.dll ---& Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\1X9kzV5muP ---& Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\1X9kzV5muP ---& Offset = 8192
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\1X9kzV5muP ---& Offset = 16384
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\1X9kzV5muP ---& Offset = 24576
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\1X9kzV5muP ---& Offset = 32768
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\B ---& Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\B ---& Offset = 32768
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\B ---& Offset = 65536
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\B ---& Offset = 98304
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\B ---& Offset = 131072
C:\WINDOWS\system32\vcruntime140.dll ---& Offset = 0
C:\WINDOWS\system32\msvcp140.dll ---& Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\setup16.exe ---& Offset = 0
行为描述:下载文件
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\1X9kzV5muP
行为描述:连接指定站点
详情信息:InternetConnectA: ServerName = ge****ub, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x
行为描述:打开HTTP连接
详情信息:InternetOpenA: UserAgent: NSIS_Inetc (Mozilla), hSession = 0x00cc0004
行为描述:建立到一个指定的套接字连接
详情信息:URL: ge****ub, IP: **.133.40.**:80, SOCKET = 0x
行为描述:读取网络文件
详情信息:hFile = 0x00cc000c, BytesToRead =8192, BytesRead = 8192.
行为描述:发送HTTP包
详情信息:GET /launch_reb.php?p=sevenzip&tid=&pid=2170&n=T2ZmaWNlIDIwMTMtMjAxNiBDMlIgSW5zdGFsbCA1LjkgKE9mZmljZSBBY3RpdmF0b3IgJiBEb3dubG9hZGVyKQ==&b_typ=pe HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: ge****ub
Connection: Keep-Alive
Cache-Control: no-cache
行为描述:打开HTTP请求
详情信息:HttpOpenRequestA: ge****ub:80/launch_reb.php?p=sevenzip&tid=&pid=2170&n=t2zmawnlidiwmtmtmjaxnibdmligsw5zdgfsbca1ljkgke9mzmljzsbby3rpdmf0b3igjibeb3dubg9hzgvykq==&b_typ=pe, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x
行为描述:按名称获取主机地址
详情信息:GetAddrInfoW: ge****ub
注册表行为
行为描述:修改注册表
详情信息:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings
行为描述:删除注册表键值
详情信息:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL
行为描述:创建互斥体
详情信息:CTF.LBES.MutexDefaultS-*
<part.MutexDefaultS-*
CTF.Asm.MutexDefaultS-*
CTF.Layouts.MutexDefaultS-*
CTF.TMD.MutexDefaultS-*
CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-*
Local\ZonesCounterMutex
Local\ZoneAttributeCacheCounterMutex
Local\ZonesCacheCounterMutex
Local\ZonesLockedCacheCounterMutex
SHIMLIB_LOG_MUTEX
MSCTF.Shared.MUTEX.ELH
行为描述:创建事件对象
详情信息:EventName = DINPUTWINMM
EventName = Global\userenv:
User Profile setup event
行为描述:查找指定窗口
详情信息:NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,]
行为描述:窗口信息
详情信息:Pid = 2944, Hwnd=0x403f0, Text = Install Office, ClassName = Button.
Pid = 2944, Hwnd=0x403e8, Text = Force Remove Office C2R/MSI, ClassName = Button.
Pid = 2944, Hwnd=0x503e6, Text = Word, ClassName = Button(CheckBox).
Pid = 2944, Hwnd=0xa03e2, Text = Excel, ClassName = Button(CheckBox).
Pid = 2944, Hwnd=0x503cc, Text = Access, ClassName = Button(CheckBox).
Pid = 2944, Hwnd=0x903da, Text = Publisher, ClassName = Button(CheckBox).
Pid = 2944, Hwnd=0x303f6, Text = OneDrive for business, ClassName = Button(CheckBox).
Pid = 2944, Hwnd=0x303f8, Text = Project, ClassName = Button(CheckBox).
Pid = 2944, Hwnd=0x303fa, Text = Skype for business, ClassName = Button(CheckBox).
Pid = 2944, Hwnd=0x303fc, Text = OneNote, ClassName = Button(CheckBox).
Pid = 2944, Hwnd=0x603e0, Text = Outlook, ClassName = Button(CheckBox).
Pid = 2944, Hwnd=0xd035a, Text = ProjectPro, ClassName = Button(CheckBox).
Pid = 2944, Hwnd=0x503ec, Text = VisioPro, ClassName = Button(CheckBox).
Pid = 2944, Hwnd=0xd0336, Text = PowerPoint, ClassName = Button(CheckBox).
Pid = 2944, Hwnd=0xd0364, Text = Uninstall Office, ClassName = Button.
行为描述:调整进程token权限
详情信息:SE_LOAD_DRIVER_PRIVILEGE
行为描述:打开事件
详情信息:HookSwitchHookEnabledEvent
_fCanRegisterWithShellService
\SECURITY\LSA_AUTHENTICATION_INITIALIZED
Global\SvcctrlStartEvent_A3752DX
\INSTALLATION_SECURITY_HOLD
CTF.ThreadMIConnectionEvent..00052
CTF.ThreadMarshalInterfaceEvent..00052
MSCTF.SendReceiveConection.Event.ELH.IC
MSCTF.SendReceive.Event.ELH.IC
行为描述:可执行文件签名信息
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\System.dll(签名验证: 未通过)
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\inetc.dll(签名验证: 未通过)
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\1X9kzV5muP(签名验证: 未通过)
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\B(签名验证: 未通过)
C:\WINDOWS\system32\vcruntime140.dll(签名验证: 通过)
C:\WINDOWS\system32\msvcp140.dll(签名验证: 通过)
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\setup16.exe(签名验证: 通过)
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\files.dat(签名验证: 未通过)
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\x86\cleanospp.exe(签名验证: 未通过)
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\x64\cleanospp.exe(签名验证: 未通过)
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\x86\msvcr100.dll(签名验证: 通过)
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\x64\msvcr100.dll(签名验证: 通过)
行为描述:隐藏指定窗口
详情信息:[Window,Class] = [,Static]
[Window,Class] = [,RichEdit20W]
[Window,Class] = [,ComboLBox]
[Window,Class] = [Project,Button]
[Window,Class] = [Visio,Button]
[Window,Class] = [,msctls_progress32]
行为描述:可执行文件MD5
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\System.dll ---& c1a06da581dec
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\inetc.dll ---& c498ae64b4971132bbade1e
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\1X9kzV5muP ---& fe1d0eeee9b28eece31786c
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\B ---& 文件过大!
C:\WINDOWS\system32\vcruntime140.dll ---& ae248cbdf18c9ea1a844f6
C:\WINDOWS\system32\msvcp140.dll ---& d25c3ff7a4cbbffc7c9fff4f659051ce
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\setup16.exe ---& df722d3fa6be7ad0f76f6
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\files.dat ---& bb81e763ab0e673b3c1af2fea2586a9a
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\x86\cleanospp.exe ---& 5fd363d52d04ac200cd24f3bcc903200
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\x64\cleanospp.exe ---& 162ab955cb2f002a73cf
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\x86\msvcr100.dll ---& bf5658cfa3e53fdc7d65
C:\Documents and Settings\Administrator\Local Settings\Temp\nsy52.tmp\files\x64\msvcr100.dll ---& df3ca8d16bded6a64d33
行为描述:打开互斥体
详情信息:ShimCacheMutex
Local\_!MSFTHISTORY!_
Local\c:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Local\c:!documents and settings!administrator!cookies!
Local\c:!documents and settings!administrator!local settings!history!history.ie5!
Local\WininetStartupMutex
Local\WininetConnectionMutex
Local\WininetProxyRegistryMutex
Local\!IETld!Mutex
行为描述:加载新释放的文件
详情信息:Image: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsy52.tmp\System.dll.
Image: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsy52.tmp\inetc.dll.
Activities
活动名类型
com.phone2.stop.activity.MainActivityandroid.intent.action.MAIN
com.phone2.stop.activity.MainActivityandroid.intent.category.LAUNCHER
com.phone2.stop.activity.DeleteActivityandroid.intent.action.DELETE
com.phone2.stop.activity.DeleteActivityandroid.intent.category.DEFAULT
函数名称信息
ContentR->delete删除短信、联系人
ContentR->query读取联系人、短信等数据库
TelephonyM->getDeviceId搜集用户手机IMEI码、电话号码、系统版本号等信息
SmsM->sendTextMessage发送普通短信
java/net/URL;->openConnection连接URL
com.phone.stop.receiver.BootReceiver
com.phone.stop.receiver.BootReceiver网络连接改变时启动服务
com.phone.stop.receiver.BootReceiver应用安装时启动服务
com.phone.stop.receiver.BootReceiver
com.phone.stop.receiver.BootReceiver
com.phone.stop.receiver.BootReceiver
com.phone.stop.receiver.BootReceiver
com.phone.stop.receiver.BootReceiver
com.phone.stop.receiver.BootReceiver
com.phone.stop.receiver.BootReceiver
com.phone.stop.receiver.BootReceiver
com.phone.stop.receiver.BootReceiver
com.phone.stop.receiver.BootReceiver
com.phone.stop.receiver.BootReceiver开机启动服务
com.phone.stop.receiver.SMSReceiver监控短信（收到短信）启动服务
com.phone.stop.receiver.MyDeviceAdminReceiver
许可名称信息
android.permission.RECEIVE_WAP_PUSH接收wap push信息
android.permission.RECEIVE_BOOT_COMPLETED接收开机启动广播
android.permission.MODIFY_AUDIO_SETTINGS修改声音设置
android.permission.WRITE_EXTERNAL_STORAGE写外部存储器（如：SD卡）
android.permission.RECEIVE_USER_PRESENT
android.permission.READ_CONTACTS读取联系人信息
android.permission.INTERNET连接网络（2G或3G）
android.permission.READ_PHONE_STATE读取电话状态
android.permission.READ_SMS读取短信
android.permission.WRITE_SETTINGS读写系统设置项
android.permission.VIBRATE允许设备震动
android.permission.RECEIVE_SMS监控接收短信
android.permission.ACCESS_NETWORK_STATE读取网络状态（2G或3G）
android.permission.GET_TASKS获取有关当前或最近运行的任务信息
android.permission.WRITE_SMS写短信
android.permission.SEND_SMS发送短信
android.permission.ACCESS_WIFI_STATE读取wifi网络状态
com.phone.stop6.service.SecondService
com.phone.stop6.service.BootService
com.phone.stop6.service.SmsService
META-INF/MANIFEST.MF
0x62f5b7af
META-INF/CERT.SF
0xcbbb83c3
META-INF/CERT.RSA
0x329ed9d0
org/apache/harmony/awt/internal/nls/messages.properties
0x5f88eb12
AndroidManifest.xml
0x37af9eb9
mimetypes.default
0x97dd5cdb
com/sun/mail/dsn/mailcap
0x7605dc17
0x1e4e9355
javamail.pop3.provider
res/layout/activity_main.xml
0x19203b2e
mailcap.default
javamail.default.providers
0x45ea1b21
javamail.default.address.map
javamail.smtp.address.map
res/layout/activity_aa.xml
javamail.smtp.provider
0x990c469d
javamail.charset.map
0xad0dfcee
res/drawable-hdpi/icon.png
0xac8b5a00
res/drawable-hdpi/app_logo.png
0x4f9ddbf3
javamail.imap.provider
0x8934555a
resources.arsc
0x3ed5a801
res/xml/devicepolicymanager_permission.xml
0xeab2c16b
classes.dex
0x618b0879
0xd7759e43
File upload
Please not close this windows,
If you do not have to upload response time, make sure you upload files less than 20M
You can view the results of the last scan or rescan}