Antivirus scan for 1ec4b43470bb5fd102fae2621ae3c0fc0741c1db67a3d8b52da1502b977d2018 at 2017-09-26 05:23:08 UTC

Antivirus	Result	Update
Ad-Aware		20170926
AegisLab		20170926
AhnLab-V3		20170926
Alibaba		20170911
ALYac		20170926
Antiy-AVL		20170926
Arcabit		20170926
Avast		20170926
Avast-Mobile		20170925
AVG		20170926
Avira (no cloud)		20170926
AVware		20170926
Baidu		20170926
BitDefender		20170926
CAT-QuickHeal		20170925
ClamAV		20170926
CMC		20170920
Comodo		20170926
CrowdStrike Falcon (ML)		20170804
Cylance		20170926
Cyren		20170926
DrWeb		20170926
Emsisoft		20170926
Endgame		20170821
ESET-NOD32		20170926
F-Prot		20170926
F-Secure		20170926
Fortinet		20170926
GData		20170926
Ikarus		20170925
Sophos ML		20170914
Jiangmin		20170926
K7AntiVirus		20170925
K7GW		20170926
Kaspersky		20170926
Kingsoft		20170926
Malwarebytes		20170926
MAX		20170926
McAfee		20170926
McAfee-GW-Edition		20170926
Microsoft		20170925
eScan		20170926
NANO-Antivirus		20170926
nProtect		20170926
Palo Alto Networks (Known Signatures)		20170926
Panda		20170925
Qihoo-360		20170926
Rising		20170926
SentinelOne (Static ML)		20170806
Sophos AV		20170926
SUPERAntiSpyware		20170926
Symantec		20170926
Symantec Mobile Insight		20170926
Tencent		20170926
TheHacker		20170925
TrendMicro		20170926
TrendMicro-HouseCall		20170926
Trustlook		20170926
VBA32		20170925
VIPRE		20170926
ViRobot		20170926
Webroot		20170926
WhiteArmor		20170829
Yandex		20170908
Zillya		20170922
ZoneAlarm by Check Point		20170926
Zoner		20170926

The file being studied is Android related! APK Android file more specifically. The application's main package name is com.fanatee.stop. The internal version number of the application is 563500. The displayed version string of the application is 3.5.0. The minimum Android API level for the application to run (MinSDKVersion) is 16. The target Android API level for the application to run (TargetSDKVersion) is 25.

Required permissions

android.permission.VIBRATE (control vibrator)

android.permission.READ_EXTERNAL_STORAGE (read from external storage)

com.google.android.c2dm.permission.RECEIVE (Unknown permission from android reference)

android.permission.ACCESS_NETWORK_STATE (view network status)

com.fanatee.stop.gcm.permission.C2D_MESSAGE (C2DM permission.)

android.permission.WAKE_LOCK (prevent phone from sleeping)

android.permission.ACCESS_WIFI_STATE (view Wi-Fi status)

android.permission.INTERNET (full Internet access)

android.permission.WRITE_EXTERNAL_STORAGE (modify/delete SD card contents)

com.android.vending.BILLING (Unknown permission from android reference)

Activities

com.fanatee.stop.activity.debug.CascataInterstitialDebugActivity

com.adcolony.sdk.AdColonyInterstitialActivity

com.adcolony.sdk.AdColonyAdViewActivity

com.applovin.adview.AppLovinInterstitialActivity

com.applovin.adview.AppLovinConfirmationActivity

com.chartboost.sdk.CBImpressionActivity

com.mopub.mobileads.MoPubActivity

com.mopub.mobileads.MraidActivity

com.mopub.common.MoPubBrowser

com.mopub.mobileads.MraidVideoPlayerActivity

com.mopub.mobileads.RewardedMraidActivity

com.mdotm.android.view.MdotMActivity

com.mdotm.android.vast.VastInterstitialActivity

com.vungle.publisher.VideoFullScreenAdActivity

com.vungle.publisher.MraidFullScreenAdActivity

com.inmobi.rendering.InMobiAdActivity

com.admarvel.android.ads.AdMarvelActivity

com.admarvel.android.ads.AdMarvelVideoActivity

com.mobfox.sdk.interstitialads.InterstitialActivity

com.mobfox.sdk.interstitial.InterstitialActivity

com.mediabrix.android.service.AdViewActivity

com.fanatee.stop.activity.intro.IntroActivity

com.fanatee.stop.activity.letterspinner.LetterSpinnerActivity

com.fanatee.stop.activity.newgame.NewGameActivity

com.fanatee.stop.activity.matches.LivesDialogActivity

com.fanatee.stop.activity.matches.lifecontrol.LifeControlDialogActivity

com.fanatee.stop.activity.profilecreation.ProfileCreationActivity

com.fanatee.stop.activity.matches.MatchesActivity

com.fanatee.stop.activity.game.GameActivity

com.fanatee.stop.activity.categoryselection.CategorySelectionActivity

com.fanatee.stop.activity.roundresult.RoundResultActivity

com.fanatee.stop.activity.themeselection.ThemeSelectionActivity

com.fanatee.stop.activity.categoryselection.categorypicker.CategoryPickerActivity

com.fanatee.stop.activity.matchresult.MatchResultActivity

com.fanatee.stop.activity.achievements.AchievementsActivity

com.fanatee.stop.activity.friends.FriendsActivity

com.fanatee.stop.activity.countdown.CountdownActivity

com.fanatee.stop.activity.matchextratime.MatchExtraTimeActivity

com.fanatee.stop.activity.tour.TourActivity

com.fanatee.stop.activity.settings.SettingsActivity

com.fanatee.stop.activity.settings.aboutus.AboutUsActivity

com.fanatee.stop.activity.shop.ShopActivity

com.fanatee.stop.activity.profile.ProfileActivity

com.fanatee.stop.activity.profile.ProfilePictureActivity

com.fanatee.stop.activity.chat.ChatActivity

com.fanatee.stop.activity.zenmodeunlock.ZenModeUnlockActivity

com.google.android.gms.ads.AdActivity

com.facebook.FacebookActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.facebook.CustomTabMainActivity

com.google.android.gms.appinvite.PreviewActivity

com.facebook.ads.AudienceNetworkActivity

com.google.android.gms.ads.purchase.InAppPurchaseActivity

com.google.android.gms.common.api.GoogleApiActivity

com.millennialmedia.internal.MMActivity

com.millennialmedia.internal.MMIntentWrapperActivity

Services

com.mobfox.sdk.services.MobFoxService

com.mediabrix.android.service.MediaBrixService

com.fanatee.stop.core.push.PushIntentService

com.fanatee.stop.core.billing.ConsumeProductService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.appsee.AppseeBackgroundUploader

com.google.android.gms.measurement.AppMeasurementService

com.google.firebase.iid.FirebaseInstanceIdService

Receivers

com.inmobi.commons.core.utilities.uid.ImIdShareBroadCastReceiver

com.fanatee.stop.core.push.PushReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.firebase.iid.FirebaseInstanceIdInternalReceiver

Providers

com.facebook.internal.FacebookInitProvider

com.google.firebase.provider.FirebaseInitProvider

Service-related intent filters

com.google.firebase.iid.FirebaseInstanceIdService
actions: com.google.firebase.INSTANCE_ID_EVENT

Activity-related intent filters

com.google.android.gms.appinvite.PreviewActivity
actions: com.google.android.gms.appinvite.ACTION_PREVIEW
categories: android.intent.category.DEFAULT

com.fanatee.stop.activity.intro.IntroActivity
actions: android.intent.action.MAIN, android.intent.action.VIEW
categories: android.intent.category.LAUNCHER, android.intent.category.DEFAULT, android.intent.category.BROWSABLE

Receiver-related intent filters

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver
actions: com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver
actions: com.google.android.c2dm.intent.RECEIVE, com.google.android.c2dm.intent.REGISTRATION
categories: com.fanatee.stop

com.inmobi.commons.core.utilities.uid.ImIdShareBroadCastReceiver
actions: com.inmobi.share.id

com.fanatee.stop.core.push.PushReceiver
actions: com.google.android.c2dm.intent.RECEIVE
categories: com.fanatee.stop.gcm

Application certificate information

Subject
    DN: C:BR, CN:Fanatee
    C: BR
    CN: Fanatee
validto: 04:50 PM 11/16/2039
serialnumber: 5470beea
thumbprint: 9261366fa6f656d538b542c014512ea4287e2607
validfrom: 04:50 PM 11/22/2014
Issuer
    DN: C:BR, CN:Fanatee
    C: BR
    CN: Fanatee

Interesting strings

http://
http://%s:%d/%s
http://admarvel.s3.amazonaws.com/js/admarvel_mraid_v2_complete.js
http://admarvel.s3.amazonaws.com/sdk/admarvel_android_sdk_dynamic_viewport.js
http://admarvel.s3.amazonaws.com/sdk/assets/adm_bmp.zip
http://admarvel.s3.amazonaws.com/sdk/assets/adm_bmp/
http://admarvel.s3.amazonaws.com/sdk/assets/embedded_video_ad_xml_default_format.js
http://ads.admarvel.com/fam/androidGetAd.php
http://baseurl.admarvel.com
http://baseurl.admarvel.com/mraid.js
http://m.facebook.com/ads/ad_choices
http://maps.google
http://market.android.com/
http://play.google.com
http://play.google.com/store/apps/details?id=com.facebook.orca
http://schemas.android.com/apk/lib/com.inmobi.ads
http://schemas.android.com/apk/res-auto
http://schemas.android.com/apk/res/android
http://schemas.applovin.com/android/1.0
http://schemas.microsoft.com/DRM/2007/03/protocols/AcquireLicense
http://sdk-rh.admarvel.com/adhistory/upload?
http://stop-fanatee.com/
http://www.example.com
http://www.facebook.com
https://
https://%s.api.appsee.com
https://.facebook.com
https://a.applovin.com/
https://a.applvn.com/
https://adc3-launch-server-staging.herokuapp.com/v4/launch
https://adc3-launch.adcolony.com/v4/launch
https://ads.api.vungle.com/config
https://api.appsee.com
https://api.vungle.com/api/v4/unfilled
https://csi.gstatic.com/csi
https://d.applovin.com/
https://d.applvn.com/
https://dashboard.appsee.com/3rdparty/crashlytics/
https://facebook.com
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_banner.js
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_expanded_banner.js
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_interstitial.js
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/native_ads.html
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/native_video_ads.html
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/sdk-core-v40.html
https://graph-video.%s
https://graph.%s
https://graph.%s.facebook.com/network_ads_common
https://graph.facebook.com/network_ads_common
https://graph.facebook.com/{0}/picture?width=500&height=500
https://ingest.vungle.com/
https://ingest.vungle.com/api/v1/sdkErrors
https://live.chartboost.com
https://maps.google
https://pagead2.googlesyndication.com/pagead/gen_204
https://play.google.com
https://play.google.com/store/apps/details?id=
https://rt.applovin.com/med
https://rt.applovin.com/pix
https://rt.applvn.com/pix
https://sdk.starbolt.io/
https://sdk.starbolt.io/dist/tagBanner.html
https://sdk.starbolt.io/dist/tagInterstitialAndroid.html
https://sdk.starbolt.io/dist/tagVideoAndroid.html
https://sdk.starbolt.io/dist/waterfall/waterfall.html
https://twitter.com/%s/status/%s
https://vid.applovin.com/,https://pdn.applovin.com/,https://img.applovin.com/,https://d.applovin.com/,https://assets.applovin.com/,https://cdnjs.cloudflare.com/,http://vid.applovin.com/,http://pdn.applovin.com/,http://img.applovin.com/,http://d.applovin.com/,http://assets.applovin.com/,http://cdnjs.cloudflare.com/
https://wd.adcolony.com/logs
https://www.%s.facebook.com
https://www.%s.facebook.com/adnw_logging/
https://www.%s.facebook.com/audience_network/server_side_reward
https://www.facebook.com/
https://www.facebook.com/adnw_logging/
https://www.facebook.com/audience_network/server_side_reward
https://www.google.com/dfp/debugSignals
https://www.google.com/dfp/inAppPreview
https://www.google.com/dfp/linkDevice
https://www.google.com/dfp/sendDebugData
https://www.googleapis.com/auth/appstate
https://www.googleapis.com/auth/datastoremobile
https://www.googleapis.com/auth/drive.appdata
https://www.googleapis.com/auth/drive.file
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/games
https://www.googleapis.com/auth/games.firstparty
https://www.googleapis.com/auth/games_lite
https://www.googleapis.com/auth/plus.login
https://www.googleapis.com/auth/plus.me
https://www.mopub.com/optout/

The file being studied is a compressed stream! Details about the compressed contents follow.

Interesting properties

The file under inspection contains at least one ELF file.

Contained files

This file is a compressed stream containing 1375 files.

[+] AndroidManifest.xml XML 27116 Bytes

[+] META-INF/CERT.RSA unknown 704 Bytes

[+] META-INF/CERT.SF unknown 137129 Bytes

[+] META-INF/MANIFEST.MF unknown 137111 Bytes

[+] assets/aboutus/aboutus_de.html HTML 3791 Bytes

[+] assets/aboutus/aboutus_en_us.html HTML 3400 Bytes

[+] assets/aboutus/aboutus_es.html HTML 3467 Bytes

[+] assets/aboutus/aboutus_es_us.html HTML 3467 Bytes

[+] assets/aboutus/aboutus_pt_br.html HTML 3457 Bytes

[+] assets/aboutus/icon_about_facebook.png PNG 1850 Bytes

Compression metadata

Contained files

1375

Uncompressed size

53503168

Highest datetime

1980-00-00 00:00:00

Lowest datetime

1980-00-00 00:00:00

Contained files by extension

png

866

xml

dex

ttf

RSA

Contained files by type

PNG

866

XML

unknown

ELF

HTML

DEX

File identification

MD5 54cc30c1133e19c859a96779f5cddf91

SHA1 c32a81790409d7d3822ba61d8782ff4017c7d1bf

SHA256 1ec4b43470bb5fd102fae2621ae3c0fc0741c1db67a3d8b52da1502b977d2018

ssdeep

786432:QHLIfs3nEuOs09J27p0/gIWcT2ww8UVDAQyATtE5ODMeFYLlBv:QHLIfs39YG72/JT2x8U9AQVTtOSEBv

File size 37.5 MB ( 39290800 bytes )

File type Android

Magic literal

Zip archive data, at least v2.0 to extract

TrID	Android Package (51.4%) SPSS Extension (29.4%) Java Archive (14.2%) ZIP compressed archive (3.9%) PrintFox/Pagefox bitmap (var. P) (0.9%)

VirusTotal metadata

First submission 2017-09-26 05:23:08 UTC ( 1 year, 4 months ago )

Last submission 2018-12-04 11:18:42 UTC ( 2 months, 2 weeks ago )

File names

stop-categories-word-game.apk
base.apk

SHA256:	1ec4b43470bb5fd102fae2621ae3c0fc0741c1db67a3d8b52da1502b977d2018
File name:	base.apk
Detection ratio:	0 / 61
Analysis date:	2017-09-26 05:23:08 UTC ( 1 year, 4 months ago ) View latest

Ciphered bundle

Required permissions

Activities

Services

Receivers

Providers

Service-related intent filters

Activity-related intent filters

Receiver-related intent filters

Application certificate information

Interesting strings

Interesting properties

Contained files

Compression metadata

Contained files by extension

Contained files by type

File identification

VirusTotal metadata

Leave your comment...

Recover your password

Join VirusTotal Community

Sign in