Antivirus scan for dc33cc71e29fece581cab5062fb5276d004b283f0aa3f3c19f2cbf76b4c13d69 at 2016-02-22 09:51:07 UTC

Antivirus	Result	Update
Ad-Aware		20160222
AegisLab		20160222
Yandex		20160221
AhnLab-V3		20160222
Alibaba		20160222
ALYac		20160222
Antiy-AVL		20160222
Arcabit		20160222
Avast		20160222
AVG		20160222
Avira (no cloud)		20160222
AVware		20160222
Baidu-International		20160221
BitDefender		20160222
Bkav		20160222
ByteHero		20160222
CAT-QuickHeal		20160222
ClamAV		20160222
CMC		20160222
Comodo		20160222
Cyren		20160222
DrWeb		20160222
Emsisoft		20160222
ESET-NOD32		20160222
F-Prot		20160221
F-Secure		20160222
Fortinet		20160222
GData		20160222
Ikarus		20160222
Jiangmin		20160222
K7AntiVirus		20160222
K7GW		20160222
Kaspersky		20160222
Malwarebytes		20160222
McAfee		20160222
McAfee-GW-Edition		20160222
Microsoft		20160222
eScan		20160222
NANO-Antivirus		20160222
nProtect		20160222
Panda		20160222
Qihoo-360		20160222
Rising		20160222
Sophos AV		20160222
SUPERAntiSpyware		20160222
Symantec		20160222
Tencent		20160222
TheHacker		20160222
TotalDefense		20160222
TrendMicro-HouseCall		20160222
VBA32		20160222
VIPRE		20160222
ViRobot		20160222
Zoner		20160222

The file being studied is Android related! APK Android file more specifically. The application's main package name is to.pho.visagelab. The internal version number of the application is 22. The displayed version string of the application is 2.22. The minimum Android API level for the application to run (MinSDKVersion) is 16. The target Android API level for the application to run (TargetSDKVersion) is 21.

Required permissions

android.permission.INTERNET (full Internet access)

android.permission.WRITE_EXTERNAL_STORAGE (modify/delete SD card contents)

android.permission.ACCESS_NETWORK_STATE (view network status)

android.permission.ACCESS_WIFI_STATE (view Wi-Fi status)

Activities

to.pho.visagelab.ProBannerActivity

com.google.android.gms.ads.AdActivity

to.pho.visagelab.MainActivity

to.pho.visagelab.FaqActivity

to.pho.visagelab.ProBannerActivity

to.pho.visagelab.ProcessingActivity

to.pho.visagelab.ErrorActivity

to.pho.visagelab.InfoAtivity

to.pho.visagelab.ShareActivity

to.pho.visagelab.ResultActivity

Services

to.pho.visagelab.services.VisageUploader

to.pho.visagelab.services.DownloadToGallery

Activity-related intent filters

to.pho.visagelab.MainActivity
actions: android.intent.action.MAIN
categories: android.intent.category.LAUNCHER

Application certificate information

Subject
    DN: C:Russia, OU:VicmanLLC, L:Moscow, O:Vicman, CN:Kucheryavaya Lyudmila
    C: Russia
    CN: Kucheryavaya Lyudmila
    L: Moscow
    O: Vicman
    OU: VicmanLLC
validto: 07:30 AM 03/19/2038
serialnumber: 102fadbd
thumbprint: 07804fefb8dd0ece6d951d31d48fa998b25f5a2c
validfrom: 07:30 AM 03/25/2013
Issuer
    DN: C:Russia, OU:VicmanLLC, L:Moscow, O:Vicman, CN:Kucheryavaya Lyudmila
    C: Russia
    CN: Kucheryavaya Lyudmila
    L: Moscow
    O: Vicman
    OU: VicmanLLC

Interesting strings

http://
http://api.share.pho.to/v1/images
http://hostname/?
http://ope-api.pho.to/settings/visage_lab/models/man.jpg
http://ope-api.pho.to/settings/visage_lab/models/woman.png
http://opeapi.ws.pho.to
http://pinterest.com/pin/create/button/?url=
http://plus.google.com/
http://schema.org/AddAction
http://schema.org/BookmarkAction
http://schema.org/LikeAction
http://schema.org/ListenAction
http://schema.org/ViewAction
http://schema.org/WantAction
http://schema.org/WatchAction
http://schemas.android.com/apk/lib/com.google.android.gms.plus
http://temp.ws.pho.to/upload.php?no_resize=1
http://worker-images.s3.amazonaws.com/i1/26F43E49-C5F8-46C3-8A34-E9D98615F07E.jpg
http://worker-images.s3.amazonaws.com/i1/8E2ECB58-1280-4199-98DE-3CF68A05724C.jpg
http://www.facebook.com/Pho.to.Editor
http://www.facebook.com/sharer/sharer.php?u=
http://www.google-analytics.com/collect
http://www.google.com
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_banner.js
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_expanded_banner.js
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_interstitial.js
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/native_ads.html
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/sdk-core-v40.html
https://googleads.g.doubleclick.net/mads/static/sdk/native/sdk-core-v40.html
https://play.google.com/store/apps/details?id=
https://play.google.com/store/apps/developer?id=VicMan++LLC&hl=en
https://ssl.google-analytics.com
https://ssl.google-analytics.com/collect
https://twitter.com/intent/tweet?text= 
https://twitter.com/pho_to
https://www.googleapis.com/auth/appstate
https://www.googleapis.com/auth/datastoremobile
https://www.googleapis.com/auth/drive
https://www.googleapis.com/auth/drive.appdata
https://www.googleapis.com/auth/drive.apps
https://www.googleapis.com/auth/drive.file
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/games
https://www.googleapis.com/auth/games.firstparty
https://www.googleapis.com/auth/plus.login
https://www.googleapis.com/auth/plus.me
https://www.googletagmanager.com

The file being studied is a compressed stream! Details about the compressed contents follow.

Contained files

This file is a compressed stream containing 518 files.

[+] AndroidManifest.xml XML 5288 Bytes

[+] assets/faqs/FAQ_DE.html unknown 2740 Bytes

[+] assets/faqs/FAQ_EN.html HTML 2438 Bytes

[+] assets/faqs/FAQ_ES.html unknown 2600 Bytes

[+] assets/faqs/FAQ_FR.html unknown 3002 Bytes

[+] assets/faqs/FAQ_IT.html unknown 2548 Bytes

[+] assets/faqs/FAQ_JA.html HTML 3258 Bytes

[+] assets/faqs/FAQ_KO.html HTML 2937 Bytes

[+] assets/faqs/FAQ_RU.html unknown 4371 Bytes

[+] assets/faqs/FAQ_SC.html HTML 2358 Bytes

Compression metadata

Contained files

518

Uncompressed size

10931754

Highest datetime

2015-03-12 10:48:32

Lowest datetime

2015-03-12 10:42:18

Contained files by extension

png

401

jpg

xml

dex

RSA

Contained files by type

PNG

401

JPG

XML

unknown

HTML

DEX

File identification

MD5 210ec80a01a45a942baa69b4048451fd

SHA1 69176e14799c9539f2b8719490a4e17e84e7c51e

SHA256 dc33cc71e29fece581cab5062fb5276d004b283f0aa3f3c19f2cbf76b4c13d69

ssdeep

196608:OISmQGkSVHINSedMAw+qlcn64UTRWLWjp+9CA1K3:ObzG/1INS/xlc64PWjp7AY

File size 7.5 MB ( 7894714 bytes )

File type Android

Magic literal

Zip archive data, at least v2.0 to extract

TrID	Android Package (67.3%) Java Archive (18.5%) Mozilla Archive Format (gen) (8.9%) ZIP compressed archive (5.1%)

VirusTotal metadata

First submission 2015-03-24 07:21:49 UTC ( 3 years, 11 months ago )

Last submission 2018-02-19 11:03:59 UTC ( 12 months ago )

File names

visage-lab-a-face-retouch.apk
to.pho.visagelab.apk
Visage Lab – face retouch v2.22.apk
visage-lab-a-face-retouch.apk
filename
visage-lab-a-face-retouch.apk
cc60177a5a54df5b87fe9224fbca5d81db43d6713ff627ff8c72c13b77913ea01e172946252e694b0a7b07d890ec73a66124f80f22e58cb1ce10e04f280c8f62
to.pho.visagelab.apk

SHA256:	dc33cc71e29fece581cab5062fb5276d004b283f0aa3f3c19f2cbf76b4c13d69
File name:	210ec80a01a45a942baa69b4048451fd
Detection ratio:	0 / 54
Analysis date:	2016-02-22 09:51:07 UTC ( 2 years, 12 months ago ) View latest

Ciphered bundle

Required permissions

Activities

Services

Activity-related intent filters

Application certificate information

Interesting strings

Contained files

Compression metadata

Contained files by extension

Contained files by type

File identification

VirusTotal metadata

Leave your comment...

Recover your password

Join VirusTotal Community

Sign in