Antivirus scan for 3ef3c9f58147878f0fdebc8b78647f83cce06479f6e506fce2a93e5b278868c9 at 2016-08-17 02:41:02 UTC

Antivirus	Result	Update
Bkav	Android.Adware.Appsgeyser.3A47	20160816
Cyren	AndroidOS/GenPua.234139B3!Olympus	20160817
ESET-NOD32	a variant of Android/Inmobi.C potentially unsafe	20160817
NANO-Antivirus	Trojan.Android.Siggen.dzuzis	20160817
Ad-Aware		20160817
AegisLab		20160816
AhnLab-V3		20160816
Alibaba		20160816
ALYac		20160816
Antiy-AVL		20160817
Arcabit		20160817
Avast		20160817
AVG		20160817
Avira (no cloud)		20160816
AVware		20160817
Baidu		20160816
BitDefender		20160817
CAT-QuickHeal		20160816
ClamAV		20160817
CMC		20160816
Comodo		20160816
DrWeb		20160817
Emsisoft		20160817
F-Prot		20160817
F-Secure		20160817
Fortinet		20160817
GData		20160817
Ikarus		20160816
Jiangmin		20160817
K7AntiVirus		20160816
K7GW		20160817
Kaspersky		20160817
Kingsoft		20160817
Malwarebytes		20160817
McAfee		20160817
McAfee-GW-Edition		20160816
Microsoft		20160817
eScan		20160817
nProtect		20160812
Panda		20160816
Qihoo-360		20160817
Sophos AV		20160816
SUPERAntiSpyware		20160817
Symantec		20160817
Tencent		20160817
TheHacker		20160816
TrendMicro		20160817
TrendMicro-HouseCall		20160817
VBA32		20160816
VIPRE		20160817
ViRobot		20160816
Yandex		20160816
Zillya		20160816
Zoner		20160816

The file being studied is Android related! APK Android file more specifically. The application's main package name is com.music.winamp.player.mp3. The internal version number of the application is 1459888784. The displayed version string of the application is 0.1. The minimum Android API level for the application to run (MinSDKVersion) is 9. The target Android API level for the application to run (TargetSDKVersion) is 23.

Required permissions

android.permission.RECEIVE_BOOT_COMPLETED (automatically start at boot)

android.permission.INTERNET (full Internet access)

android.permission.SYSTEM_ALERT_WINDOW (display system-level alerts)

com.google.android.c2dm.permission.RECEIVE (Unknown permission from android reference)

android.permission.ACCESS_NETWORK_STATE (view network status)

android.permission.WAKE_LOCK (prevent phone from sleeping)

com.music.winamp.player.mp3.permission.C2D_MESSAGE (C2DM permission.)

android.permission.READ_PHONE_STATE (read phone state and identity)

Activities

com.music.winamp.player.mp3.MainNavigationActivity

com.music.winamp.player.mp3.VideoPlayerActivity

com.music.winamp.player.mp3.ads.vast.VideoAdsLoaderActivity

org.nexage.sourcekit.vast.activity.VASTActivity

com.music.winamp.player.mp3.MessageViewer

com.google.android.gms.ads.AdActivity

com.music.winamp.player.mp3.BrowserActivity

com.inmobi.rendering.InMobiAdActivity

com.chartboost.sdk.CBImpressionActivity

com.jirbo.adcolony.AdColonyOverlay

com.jirbo.adcolony.AdColonyFullscreen

com.jirbo.adcolony.AdColonyBrowser

Services

com.music.winamp.player.mp3.push.PushGCMIntentService

com.inmobi.commons.internal.ActivityRecognitionManager

com.music.winamp.player.mp3.notification.NotificationService

Receivers

com.google.android.gcm.GCMBroadcastReceiver

com.music.winamp.player.mp3.pull.PullServerController

com.music.winamp.player.mp3.Utils.CampaignReceiver

com.inmobi.commons.core.utilities.uid.ImIdShareBroadCastReceiver

com.music.winamp.player.mp3.notification.NotificationCheckerBootReciever

com.music.winamp.player.mp3.notification.NotificationChecker

Activity-related intent filters

com.music.winamp.player.mp3.MainNavigationActivity
actions: android.intent.action.MAIN
categories: android.intent.category.LAUNCHER, android.intent.category.DEFAULT

Receiver-related intent filters

com.music.winamp.player.mp3.notification.NotificationCheckerBootReciever
actions: android.intent.action.BOOT_COMPLETED

com.music.winamp.player.mp3.pull.PullServerController
actions: android.intent.action.BOOT_COMPLETED

com.google.android.gcm.GCMBroadcastReceiver
actions: com.google.android.c2dm.intent.RECEIVE, com.google.android.c2dm.intent.REGISTRATION
categories: com.music.winamp.player.mp3

com.inmobi.commons.core.utilities.uid.ImIdShareBroadCastReceiver
actions: com.inmobi.share.id

com.music.winamp.player.mp3.Utils.CampaignReceiver
actions: com.android.vending.INSTALL_REFERRER

Application certificate information

Subject
    DN: C:US, CN:DigiCert Timestamp Responder, O:DigiCert
    C: US
    CN: DigiCert Timestamp Responder
    O: DigiCert
validto: 12:00 AM 10/22/2024
serialnumber: 3019a023aff58b16bd6d5eae617f066
thumbprint: 614d271d9102e30169822487fde5de00a352b01d
validfrom: 12:00 AM 10/22/2014
Issuer
    DN: C:US, CN:DigiCert Assured ID CA-1, O:DigiCert Inc, OU:www.digicert.com
    C: US
    CN: DigiCert Assured ID CA-1
    O: DigiCert Inc
    OU: www.digicert.com

Interesting strings

http://
http://apache.org/xml/features/
http://apache.org/xml/features/allow-java-encodings
http://apache.org/xml/features/continue-after-fatal-error
http://apache.org/xml/features/create-cdata-nodes
http://apache.org/xml/features/disallow-doctype-decl
http://apache.org/xml/features/dom/create-entity-ref-nodes
http://apache.org/xml/features/dom/defer-node-expansion
http://apache.org/xml/features/dom/include-ignorable-whitespace
http://apache.org/xml/features/generate-synthetic-annotations
http://apache.org/xml/features/honour-all-schemaLocations
http://apache.org/xml/features/include-comments
http://apache.org/xml/features/internal/parser-settings
http://apache.org/xml/features/internal/strings-interned
http://apache.org/xml/features/internal/tolerate-duplicates
http://apache.org/xml/features/internal/validation/schema/use-grammar-pool-only
http://apache.org/xml/features/namespace-growth
http://apache.org/xml/features/nonvalidating/load-external-dtd
http://apache.org/xml/features/scanner/notify-builtin-refs
http://apache.org/xml/features/scanner/notify-char-refs
http://apache.org/xml/features/standard-uri-conformant
http://apache.org/xml/features/validate-annotations
http://apache.org/xml/features/validation/balance-syntax-trees
http://apache.org/xml/features/validation/dynamic
http://apache.org/xml/features/validation/id-idref-checking
http://apache.org/xml/features/validation/identity-constraint-checking
http://apache.org/xml/features/validation/schema
http://apache.org/xml/features/validation/schema-full-checking
http://apache.org/xml/features/validation/schema/augment-psvi
http://apache.org/xml/features/validation/schema/element-default
http://apache.org/xml/features/validation/schema/ignore-xsi-type-until-elemdecl
http://apache.org/xml/features/validation/schema/normalized-value
http://apache.org/xml/features/validation/unparsed-entity-checking
http://apache.org/xml/features/validation/warn-on-duplicate-attdef
http://apache.org/xml/features/validation/warn-on-undeclared-elemdef
http://apache.org/xml/features/warn-on-duplicate-entitydef
http://apache.org/xml/features/xinclude
http://apache.org/xml/features/xinclude/fixup-base-uris
http://apache.org/xml/features/xinclude/fixup-language
http://apache.org/xml/properties/
http://apache.org/xml/properties/dom/current-element-node
http://apache.org/xml/properties/dom/document-class-name
http://apache.org/xml/properties/input-buffer-size
http://apache.org/xml/properties/internal/datatype-validator-factory
http://apache.org/xml/properties/internal/document-scanner
http://apache.org/xml/properties/internal/dtd-processor
http://apache.org/xml/properties/internal/dtd-scanner
http://apache.org/xml/properties/internal/entity-manager
http://apache.org/xml/properties/internal/entity-resolver
http://apache.org/xml/properties/internal/error-handler
http://apache.org/xml/properties/internal/error-reporter
http://apache.org/xml/properties/internal/grammar-pool
http://apache.org/xml/properties/internal/namespace-binder
http://apache.org/xml/properties/internal/namespace-context
http://apache.org/xml/properties/internal/symbol-table
http://apache.org/xml/properties/internal/validation-manager
http://apache.org/xml/properties/internal/validation/schema/dv-factory
http://apache.org/xml/properties/internal/validator/dtd
http://apache.org/xml/properties/internal/validator/schema
http://apache.org/xml/properties/internal/xinclude-handler
http://apache.org/xml/properties/internal/xpointer-handler
http://apache.org/xml/properties/locale
http://apache.org/xml/properties/schema/external-noNamespaceSchemaLocation
http://apache.org/xml/properties/schema/external-schemaLocation
http://apache.org/xml/properties/security-manager
http://apache.org/xml/properties/validation/schema/root-element-declaration
http://apache.org/xml/properties/validation/schema/root-type-definition
http://apache.org/xml/serializer
http://config.inmobi.com/config-server/v1/config/secure.cfg
http://dock.inmobi.com/carb/v1/i
http://dock.inmobi.com/carb/v1/o
http://google.com/complete/search?output=toolbar&q=
http://i.w.inmobi.com/showad.asm
http://java.sun.com/jaxp/xpath/dom
http://java.sun.com/xml/jaxp/properties/
http://java.sun.com/xml/jaxp/properties/schemaLanguage
http://java.sun.com/xml/jaxp/properties/schemaSource
http://javax.xml.XMLConstants/feature/secure-processing
http://javax.xml.transform
http://javax.xml.transform.dom.DOMResult/feature
http://javax.xml.transform.dom.DOMSource/feature
http://javax.xml.transform.sax.SAXResult/feature
http://javax.xml.transform.sax.SAXSource/feature
http://javax.xml.transform.sax.SAXTransformerFactory/feature
http://javax.xml.transform.sax.SAXTransformerFactory/feature/xmlfilter
http://javax.xml.transform.stax.StAXResult/feature
http://javax.xml.transform.stax.StAXSource/feature
http://javax.xml.transform.stream.StreamResult/feature
http://javax.xml.transform.stream.StreamSource/feature
http://market.android.com/
http://nwalsh.com/xcatalog/1.0
http://plus.google.com/
http://relaxng.org/ns/structure/1.0
http://schemas.android.com/apk/lib/com.inmobi.ads
http://tm.inmobi.com/telemetry-collector/v1/collect
http://twitter.com/home?status=
http://www.appsgeyser.com
http://www.google.com
http://www.inmobi.com/products/sdk/#downloads
http://www.oasis-open.org/committees/entity/release/1.0/catalog.dtd
http://www.oasis-open.org/committees/entity/release/1.0/catalog.rng
http://www.oasis-open.org/committees/entity/release/1.0/catalog.xsd
http://www.w3.org/1999/XSL/Transform
http://www.w3.org/1999/xhtml
http://www.w3.org/2000/xmlns/
http://www.w3.org/2001/XInclude
http://www.w3.org/2001/XMLSchema
http://www.w3.org/2001/XMLSchema-instance
http://www.w3.org/2003/11/xpath-datatypes
http://www.w3.org/TR/1998/REC-xml-19980210
http://www.w3.org/TR/1999/REC-xml-names-19990114
http://www.w3.org/TR/REC-xml
http://www.w3.org/TR/XPTR
http://www.w3.org/TR/html4/strict.dtd
http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd
http://www.w3.org/TR/xinclude
http://www.w3.org/TR/xml-schema-1
http://www.w3.org/XML/1998/namespace
http://www.w3.org/dom/DOMTR
http://xml.org/sax/features/
http://xml.org/sax/features/allow-dtd-events-after-endDTD
http://xml.org/sax/features/external-general-entities
http://xml.org/sax/features/external-parameter-entities
http://xml.org/sax/features/namespace-prefixes
http://xml.org/sax/features/namespaces
http://xml.org/sax/features/string-interning
http://xml.org/sax/features/use-entity-resolver2
http://xml.org/sax/features/validation
http://xml.org/sax/properties/
http://xml.org/sax/properties/declaration-handler
http://xml.org/sax/properties/dom-node
http://xml.org/sax/properties/lexical-handler
http://xml.org/sax/properties/xml-string
https://
https://accounts.google.com
https://androidads23.adcolony.com/configure
https://csi.gstatic.com/csi
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_banner.js
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_expanded_banner.js
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_interstitial.js
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/sdk-core-v40.html
https://inmobisdk-a.akamaihd.net/sdk/500/android/mraid.js
https://live.chartboost.com
https://login.live.com
https://login.yahoo.com
https://m.google.com/app/plus/x/?v=compose&content=
https://sdkm.w.inmobi.com/user/e.asm
https://twitter.com
https://www.facebook.com
https://www.facebook.com/dialog/feed?app_id=181821551957328&link=
https://www.googleapis.com/auth/appstate
https://www.googleapis.com/auth/datastoremobile
https://www.googleapis.com/auth/drive.appdata
https://www.googleapis.com/auth/drive.file
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/games
https://www.googleapis.com/auth/plus.login
https://www.googleapis.com/auth/plus.me
https://www.googleapis.com/auth/plus.moments.write
https://www.linkedin.com
https://www.paypal.com

The file being studied is a compressed stream! Details about the compressed contents follow.

Contained files

This file is a compressed stream containing 545 files.

[+] META-INF/MANIFEST.MF unknown 55042 Bytes

[+] META-INF/DESKTOPI.SF unknown 55163 Bytes

[+] META-INF/DESKTOPI.RSA unknown 4794 Bytes

[+] AndroidManifest.xml XML 10216 Bytes

[+] res/anim/slide_down.xml XML 508 Bytes

[+] res/anim/slide_up.xml XML 508 Bytes

[+] res/anim/slider_handle_animation.xml XML 596 Bytes

[+] res/anim/slider_handle_hide_animation.xml XML 512 Bytes

[+] assets/error.html HTML 202 Bytes

[+] assets/run_custom_script.js JavaScript 149 Bytes

Compression metadata

Contained files

545

Uncompressed size

8872182

Highest datetime

2016-04-05 20:40:12

Lowest datetime

2016-04-05 20:39:44

Contained files by extension

png

328

xml

173

txt

dex

src

res

RSA

xsd

Contained files by type

PNG

326

XML

174

unknown

HTML

DEX

JavaScript

File identification

MD5 234139b3f6e5925bc512e57e0deb89a5

SHA1 efb0629e1794bc625ee775874b1091d782dfa375

SHA256 3ef3c9f58147878f0fdebc8b78647f83cce06479f6e506fce2a93e5b278868c9

ssdeep

98304:0vlGzDR7+/ngObtN+8VcYbZabWJ4QIHO6IfWl964+/gB/d:YwU/gOB3bZCWJ4rHO6I+l96r/SV

File size 3.8 MB ( 3938700 bytes )

File type Android

Magic literal

Zip archive data, at least v2.0 to extract

TrID	Android Package (66.4%) Java Archive (18.3%) Mozilla Archive Format (gen) (8.8%) ZIP compressed archive (5.0%) PrintFox/Pagefox bitmap (var. P) (1.2%)

VirusTotal metadata

First submission 2016-04-09 03:16:59 UTC ( 3 years ago )

Last submission 2016-08-17 02:41:02 UTC ( 2 years, 8 months ago )

File names

com.music.winamp.player.mp3.apk

SHA256:	3ef3c9f58147878f0fdebc8b78647f83cce06479f6e506fce2a93e5b278868c9
File name:	com.music.winamp.player.mp3.apk
Detection ratio:	4 / 54
Analysis date:	2016-08-17 02:41:02 UTC ( 2 years, 8 months ago ) View latest

Ciphered bundle

Required permissions

Activities

Services

Receivers

Activity-related intent filters

Receiver-related intent filters

Application certificate information

Interesting strings

Contained files

Compression metadata

Contained files by extension

Contained files by type

File identification

VirusTotal metadata

Leave your comment...

Recover your password

Join VirusTotal Community

Sign in