Antivirus scan for 7a0b65f3c2cd5155a4bc236978c216a374ed07b126747727e1856f4fbda6cda7 at 2018-10-15 07:28:50 UTC

Antivirus	Result	Update
Ad-Aware		20181015
AegisLab		20181015
AhnLab-V3		20181015
Alibaba		20180921
ALYac		20181015
Antiy-AVL		20181015
Arcabit		20181015
Avast		20181015
Avast-Mobile		20181015
AVG		20181015
Avira (no cloud)		20181014
Babable		20180918
Baidu		20181012
BitDefender		20181015
Bkav		20181014
CAT-QuickHeal		20181013
ClamAV		20181015
CMC		20181014
Comodo		20181015
CrowdStrike Falcon (ML)		20180202
Cybereason		20180308
Cylance		20181015
Cyren		20181015
DrWeb		20181015
eGambit		20181015
Emsisoft		20181015
Endgame		20180730
ESET-NOD32		20181015
F-Prot		20181015
F-Secure		20181015
Fortinet		20181015
GData		20181015
Ikarus		20181014
Sophos ML		20180717
Jiangmin		20181015
K7AntiVirus		20181015
K7GW		20181013
Kaspersky		20181015
Kingsoft		20181015
Malwarebytes		20181015
MAX		20181015
McAfee		20181015
McAfee-GW-Edition		20181015
Microsoft		20181015
eScan		20181015
NANO-Antivirus		20181015
Palo Alto Networks (Known Signatures)		20181015
Panda		20181014
Qihoo-360		20181015
Rising		20181012
SentinelOne (Static ML)		20181011
Sophos AV		20181015
SUPERAntiSpyware		20181015
Symantec		20181015
Symantec Mobile Insight		20181001
TACHYON		20181015
Tencent		20181015
TheHacker		20181011
TotalDefense		20181015
TrendMicro		20181010
TrendMicro-HouseCall		20181010
Trustlook		20181015
VBA32		20181012
VIPRE		20181014
ViRobot		20181015
Webroot		20181015
Yandex		20181012
Zillya		20181012
ZoneAlarm by Check Point		20181015
Zoner		20181014

The file being studied is Android related! APK Android file more specifically. The application's main package name is hu.tagsoft.ttorrent.lite. The internal version number of the application is 10000107. The displayed version string of the application is 1.5.11. The minimum Android API level for the application to run (MinSDKVersion) is 16. The target Android API level for the application to run (TargetSDKVersion) is 22.

Required permissions

android.permission.RECEIVE_BOOT_COMPLETED (automatically start at boot)

android.permission.INTERNET (full Internet access)

android.permission.ACCESS_WIFI_STATE (view Wi-Fi status)

android.permission.WAKE_LOCK (prevent phone from sleeping)

android.permission.ACCESS_NETWORK_STATE (view network status)

android.permission.READ_PHONE_STATE (read phone state and identity)

android.permission.WRITE_EXTERNAL_STORAGE (modify/delete SD card contents)

Activities

com.mopub.mobileads.MoPubActivity

com.mopub.mobileads.MraidActivity

com.mopub.common.MoPubBrowser

com.mopub.mobileads.MraidVideoPlayerActivity

com.facebook.ads.InterstitialAdActivity

com.mobfox.sdk.interstitialads.InterstitialActivity

hu.tagsoft.ttorrent.statuslist.StatusListActivity

hu.tagsoft.ttorrent.statuslist.SplashActivity

hu.tagsoft.ttorrent.details.TorrentDetailsActivity

hu.tagsoft.ttorrent.preferences.TorrentPreferenceActivity

hu.tagsoft.ttorrent.filebrowser.FileBrowserActivity

hu.tagsoft.ttorrent.create.CreateTorrentActivity

hu.tagsoft.ttorrent.filebrowser.FolderPickerActivity

hu.tagsoft.ttorrent.preferences.apppicker.AppPickerActivity

hu.tagsoft.ttorrent.add.AddTorrentActivity

hu.tagsoft.ttorrent.add.AddMagnetActivity

hu.tagsoft.ttorrent.trackers.EditTrackersActivity

hu.tagsoft.ttorrent.serial.SerialActivity

hu.tagsoft.ttorrent.feeds.ui.FeedItemListActivity

hu.tagsoft.ttorrent.feeds.ui.EditFeedActivity

hu.tagsoft.ttorrent.feeds.ui.FeedListActivity

hu.tagsoft.ttorrent.labels.EditLabelActivity

hu.tagsoft.ttorrent.labels.LabelListActivity

hu.tagsoft.ttorrent.FinishActivity

com.facebook.ads.AudienceNetworkActivity

com.google.android.gms.ads.AdActivity

com.google.android.gms.ads.purchase.InAppPurchaseActivity

com.google.android.gms.common.api.GoogleApiActivity

Services

hu.tagsoft.ttorrent.torrentservice.TorrentService

hu.tagsoft.ttorrent.torrentservice.BootCompletedService

hu.tagsoft.ttorrent.feeds.service.FetcherService

Receivers

hu.tagsoft.ttorrent.feeds.service.RefreshBroadcastReceiver

hu.tagsoft.ttorrent.feeds.service.BootCompletedBroadcastReceiver

hu.tagsoft.ttorrent.torrentservice.BootCompletedBroadcastReceiver

Activity-related intent filters

hu.tagsoft.ttorrent.add.AddTorrentActivity
actions: android.intent.action.VIEW
categories: android.intent.category.DEFAULT

hu.tagsoft.ttorrent.statuslist.SplashActivity
actions: android.intent.action.MAIN
categories: android.intent.category.LAUNCHER

hu.tagsoft.ttorrent.add.AddMagnetActivity
actions: android.intent.action.VIEW, android.intent.action.SEND
categories: android.intent.category.DEFAULT, android.intent.category.BROWSABLE

Receiver-related intent filters

hu.tagsoft.ttorrent.feeds.service.RefreshBroadcastReceiver
actions: hu.tagsoft.ttorrent.rssservice.REFRESH_FEEDS

hu.tagsoft.ttorrent.torrentservice.BootCompletedBroadcastReceiver
actions: android.intent.action.BOOT_COMPLETED

hu.tagsoft.ttorrent.feeds.service.BootCompletedBroadcastReceiver
actions: android.intent.action.BOOT_COMPLETED

Application certificate information

Subject
    DN: CN:Gabor Tanka
    CN: Gabor Tanka
validto: 04:27 PM 11/29/2035
serialnumber: 4cfbbd80
thumbprint: b5a3392cc8842a74a8adfe328c70e8a1cc56391f
validfrom: 04:27 PM 12/05/2010
Issuer
    DN: CN:Gabor Tanka
    CN: Gabor Tanka

Interesting strings

http://
http://%s:%d/%s
http://github.com/NanoHttpd/nanohttpd
http://list.iblocklist.com/?list=bt_level1&fileformat=p2p&archiveformat=gz
http://m.facebook.com/ads/ad_choices
http://market.android.com/details?id=
http://psdev.de/LicensesDialog
http://schemas.android.com/apk/lib/com.mobfox.sdk
http://schemas.android.com/apk/lib/hu.tagsoft.ttorrent
http://schemas.android.com/apk/res/android
http://sdk-logs.matomy.com
http://sdk-logs.matomy.com:12201/gelf
http://sdk.starbolt.io/dist/WebViewJavascriptBridge.js
http://sdk.starbolt.io/dist/images/button_close_55x55.png
http://sdk.starbolt.io/dist/images/button_mute_75x75.png
http://sdk.starbolt.io/dist/images/button_play_100x100.png
http://sdk.starbolt.io/dist/images/button_unmute_75x75.png
http://sdk.starbolt.io/dist/mobfox.html
http://sdk.starbolt.io/dist/sdk_videoAndroid.js
http://sdk.starbolt.io/waterfalls.json
http://www.example.com
http://www.facebook.com
http://www.google.com
http://www.libtorrent.org
http://www.openssl.org
http://www.w3.org/ns/ttml#parameter
http://xml.org/sax/features/validation
http://xmlpull.org/v1/doc/features.html#process-namespaces
https://
https://analytics.mopub.com/i/jot/exchange_client_event
https://csi.gstatic.com/csi
https://dmp.starbolt.io/logger.json
https://e.crashlytics.com/spi/v2/events
https://github.com/gosquared/flags
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_banner.js
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_expanded_banner.js
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_interstitial.js
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/native_ads.html
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/native_video_ads.html
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/sdk-core-v40.html
https://graph.%s.facebook.com/network_ads_common
https://graph.facebook.com/network_ads_common
https://pagead2.googlesyndication.com/pagead/gen_204
https://pagead2.googlesyndication.com/pagead/gen_204?id=gmob-apps
https://plus.google.com/
https://settings.crashlytics.com/spi/v2/platforms/android/apps/%s/settings
https://support.google.com/dfp_premium/answer/7160685#push
https://twitter.com/%s/status/%s
https://www.%s.facebook.com
https://www.%s.facebook.com/adnw_logging/
https://www.%s.facebook.com/audience_network/server_side_reward
https://www.facebook.com/
https://www.facebook.com/adnw_logging/
https://www.facebook.com/audience_network/server_side_reward
https://www.google.com/dfp/debugSignals
https://www.google.com/dfp/inAppPreview
https://www.google.com/dfp/linkDevice
https://www.google.com/dfp/sendDebugData
https://www.googleapis.com/auth/games

The file being studied is a compressed stream! Details about the compressed contents follow.

Interesting properties

The file under inspection contains at least one ELF file.

Contained files

This file is a compressed stream containing 1668 files.

[+] org/joda/time/format/messages_en.properties unknown 0 Bytes

[+] AndroidManifest.xml XML 14852 Bytes

[+] META-INF/CERT.RSA unknown 677 Bytes

[+] META-INF/CERT.SF unknown 154471 Bytes

[+] META-INF/MANIFEST.MF unknown 154428 Bytes

[+] assets/crashlytics-build.properties unknown 370 Bytes

[+] res/animator-v21/design_appbar_state_list_animator.xml XML 1228 Bytes

[+] res/color-v23/abc_color_highlight_material.xml XML 548 Bytes

[+] res/color-v23/abc_tint_default.xml XML 1128 Bytes

[+] res/color/abc_btn_colored_borderless_text_material.xml XML 608 Bytes

Compression metadata

Contained files

1668

Uncompressed size

11084604

Highest datetime

1980-00-00 00:00:00

Lowest datetime

1980-00-00 00:00:00

Contained files by extension

png

721

xml

246

txt

dex

RSA

ttf

css

Contained files by type

PNG

721

XML

245

unknown

DEX

ELF

File identification

MD5 739f9e392310e5f16bc71258a16e08f6

SHA1 2d48ea2bffeeeb6c80d4abe6ccd34b4d97e23af4

SHA256 7a0b65f3c2cd5155a4bc236978c216a374ed07b126747727e1856f4fbda6cda7

ssdeep

98304:y0iHnkrYYikRxBuUYPhL1OpQo8x4pt0x8Is0Rr95KSzYBwKyRytco5RsgkJ2ecqg:y0iyYYhTufbzB3Rr9bGyQOo5ROJ2jYk

File size 7.4 MB ( 7785388 bytes )

File type Android

Magic literal

Zip archive data, at least v2.0 to extract

TrID	Android Package (65.6%) Java Archive (18.1%) Mozilla Firefox browser extension (10.0%) ZIP compressed archive (5.0%) PrintFox/Pagefox bitmap (var. P) (1.2%)

VirusTotal metadata

First submission 2017-10-02 06:20:44 UTC ( 1 year, 4 months ago )

Last submission 2018-12-04 04:38:08 UTC ( 2 months, 2 weeks ago )

File names

hu.tagsoft.ttorrent.lite-1.apk
ttorrent-pro-1-5-11.apk
hu.tagsoft.ttorrent.lite-10000107.apk
ttorrent-pro-1-5-11-1.apk
ttorrent-lite-torrent-client-1-5-11.apk
892801_264cdb_hu.tagsoft.ttorrent.lite.apk
ttorrent-lite.apk

SHA256:	7a0b65f3c2cd5155a4bc236978c216a374ed07b126747727e1856f4fbda6cda7
File name:	739f9e392310e5f16bc71258a16e08f6
Detection ratio:	0 / 61
Analysis date:	2018-10-15 07:28:50 UTC ( 4 months ago ) View latest

Ciphered bundle

Required permissions

Activities

Services

Receivers

Activity-related intent filters

Receiver-related intent filters

Application certificate information

Interesting strings

Interesting properties

Contained files

Compression metadata

Contained files by extension

Contained files by type

File identification

VirusTotal metadata

Leave your comment...

Recover your password

Join VirusTotal Community

Sign in