× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 7ae857ba54836b686bda4e756beafd16aaf9caa0cbae087a2ad08f2169d41c55
File name: 546342_a0f517_com.crescentmoongames.neonshadow.apk
Detection ratio: 0 / 57
Analysis date: 2016-06-02 00:23:09 UTC ( 2 years, 9 months ago ) View latest
Antivirus Result Update
Ad-Aware 20160601
AegisLab 20160601
AhnLab-V3 20160601
Alibaba 20160601
ALYac 20160601
Antiy-AVL 20160601
Arcabit 20160601
Avast 20160601
AVG 20160602
Avira (no cloud) 20160602
AVware 20160602
Baidu 20160601
Baidu-International 20160601
BitDefender 20160602
Bkav 20160601
CAT-QuickHeal 20160601
ClamAV 20160602
CMC 20160530
Comodo 20160602
Cyren 20160602
DrWeb 20160602
Emsisoft 20160602
ESET-NOD32 20160602
F-Prot 20160602
F-Secure 20160602
Fortinet 20160602
GData 20160602
Ikarus 20160601
Jiangmin 20160602
K7AntiVirus 20160601
K7GW 20160602
Kaspersky 20160602
Kingsoft 20160602
Malwarebytes 20160601
McAfee 20160602
McAfee-GW-Edition 20160602
Microsoft 20160601
eScan 20160602
NANO-Antivirus 20160601
nProtect 20160601
Panda 20160601
Qihoo-360 20160602
Rising 20160602
Sophos AV 20160601
SUPERAntiSpyware 20160602
Symantec 20160601
Tencent 20160602
TheHacker 20160601
TotalDefense 20160601
TrendMicro 20160601
TrendMicro-HouseCall 20160601
VBA32 20160601
VIPRE 20160601
ViRobot 20160601
Yandex 20160601
Zillya 20160601
Zoner 20160601
The file being studied is Android related! APK Android file more specifically. The application's main package name is com.crescentmoongames.neonshadow. The internal version number of the application is 134. The displayed version string of the application is 1.34. The minimum Android API level for the application to run (MinSDKVersion) is 8. The target Android API level for the application to run (TargetSDKVersion) is 21.
Required permissions
android.permission.ACCESS_FINE_LOCATION (fine (GPS) location)
android.permission.READ_EXTERNAL_STORAGE (read from external storage)
android.permission.READ_PHONE_STATE (read phone state and identity)
android.permission.ACCESS_NETWORK_STATE (view network status)
android.permission.WAKE_LOCK (prevent phone from sleeping)
android.permission.ACCESS_WIFI_STATE (view Wi-Fi status)
android.permission.INTERNET (full Internet access)
com.android.vending.CHECK_LICENSE (Unknown permission from android reference)
android.permission.WRITE_EXTERNAL_STORAGE (modify/delete SD card contents)
Activities
com.applovin.adview.AppLovinInterstitialActivity
com.applovin.adview.AppLovinConfirmationActivity
com.CFM.EGPG.GPGSActivity
com.unity3d.player.VideoPlayer
com.unity3d.plugin.downloader.UnityDownloaderActivity
Services
com.unity3d.plugin.downloader.UnityDownloaderService
Receivers
com.unity3d.plugin.downloader.UnityAlarmReceiver
Activity-related intent filters
com.CFM.EGPG.GPGSActivity
actions: android.intent.action.MAIN
categories: android.intent.category.LAUNCHER
Application certificate information
Interesting strings
The file being studied is a compressed stream! Details about the compressed contents follow.
Interesting properties
The studied file contains at least one Portable Executable.
The file under inspection contains at least one ELF file.
Contained files
Compression metadata
Contained files
45
Uncompressed size
45964751
Highest datetime
2015-06-26 10:21:26
Lowest datetime
2015-06-08 12:35:52
Contained files by extension
dll
14
png
9
so
6
xml
5
dex
1
MF
1
RSA
1
SF
1
Contained files by type
Portable Executable
14
unknown
10
PNG
9
ELF
6
XML
5
DEX
1
File identification
MD5 0a6ad3e21453b83d9b3785957ff19b4f
SHA1 4ab62d250e199ab7d604ce512d3568173c07ec83
SHA256 7ae857ba54836b686bda4e756beafd16aaf9caa0cbae087a2ad08f2169d41c55
ssdeep
393216:4kPGLcicKo+jF6i6iaIVJv9nehlumiZPnb2jQq:aLcicNHi6pkvItiRb2sq

File size 16.9 MB ( 17738968 bytes )
File type Android
Magic literal
Zip archive data, at least v2.0 to extract

TrID Android Package (72.9%)
Java Archive (20.1%)
ZIP compressed archive (5.5%)
PrintFox/Pagefox bitmap (var. P) (1.3%)
Tags
apk contains-pe android contains-elf

VirusTotal metadata
First submission 2015-06-27 02:54:58 UTC ( 3 years, 9 months ago )
Last submission 2019-03-01 21:15:13 UTC ( 3 weeks, 1 day ago )
File names 253a360b99e196d47019da96da956ed9df4bdc9041a224e71a59409a0db79d25e70604494e0611435d8cbdd8789bbbcae950fed979727bcaabbda4ef414ede2b
com.crescentmoongames.neonshadow.apk
546341_bbfc02_com.crescentmoongames.neonshadow.apk
7ae857ba54836b686bda4e756beafd16aaf9caa0cbae087a2ad08f2169d41c55
neon-shadow.apk
neonshadow.apk
neon-shadow.apk
filename
26396-neonshadow.apk
415625_9ecf25_com.crescentmoongames.neonshadow.apk
546342_a0f517_com.crescentmoongames.neonshadow.apk
com.crescentmoongames.neonshadow-134.apk
Advanced heuristic and reputation engines
Symantec reputation Suspicious.Insight
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!