VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load

  Main Menu
VirSCAN  HOME VirSCAN  go Virscan.org VirSCAN  Report VirSCAN  Virus report VirSCAN  Behavior report VirSCAN  Help VirSCAN VirSCAN  Submit Bugs VirSCAN  Contact us VirSCAN  URL detection VirSCAN  API VirSCAN  uploader for windows(test)
Powered By
安博士V3
AntiVir
安天
Arcabit
AVAST!
AVG
baidu
BitDefender
ClamAV
Comodo
CP Secure
Cyren
Dr.Web
Defenx
a-squared
ESTsecurity
F-Prot
F-Secure
费尔
飞塔
GData
ViRobot
Ikarus
江民杀毒
卡巴斯基
金山毒霸
K7
Microsoft
NOD32
Norman
Nano
熊猫卫士
趋势科技
Quick Heal
瑞星
Sophos
Sunbelt
赛门铁克
深信服
Systweak
nProtect
The Hacker
The Hunter
VBA32
VirusBuster
qqphone
360
xvirus
habo
threatbook
hybrid
 
File information
File Name :hongbao.apk (File not down)
File Size :2441504 byte
File Type :application/zip
MD5:b6cca0dc37066ceb55b57c1e08d28b84
SHA1:89f95cef15ab29578d6d713e3c9ab3f64ee1864e
  • 扫描结果
  • 权限
  • 文件行为分析
  • Scanner results
    Scanner results:0%Scanner(s) (0/32)found malware!
    Behavior analysis report:         Habo file analysis
    Time: 2016-08-17 13:14:28 (CST)
    VirSCANVirSCAN
    Scanner Engine Ver Sig Ver Sig Date Scan result Time
    antiy AVL SDK 3.0 1970-01-01 Found nothing 5
    asquared 9.0.0.4324 9.0.0.4324 2014-07-03 Found nothing 1
    avast 150725-1 4.7.4 2015-07-25 Found nothing 60
    avg 2109/8133 10.0.1405 2014-11-26 Found nothing 60
    baidu 2.0.1.0 4.1.3.52192 2.0.1.0 Found nothing 5
    baidusd 1.0 1.0 2014-04-02 Found nothing 1
    bitdefender 7.58469 7.90123 2014-12-25 Found nothing 60
    clamav 19861 0.97.5 2014-12-31 Found nothing 60
    drweb 5.0.2.3300 5.0.1.1 2014-12-31 Found nothing 60
    fortinet 23.345, 23.345 5.1.158 2014-12-08 Found nothing 60
    fprot 4.6.2.117 6.5.1.5418 2014-12-31 Found nothing 60
    fsecure 2014-04-02-01 9.13 2014-04-02 Found nothing 60
    gdata 25.7912 25.7912 2016-08-17 Found nothing 11
    ikarus 1.06.01 V1.32.31.0 2014-12-08 Found nothing 60
    jiangmin 16.0.100 1.0.0.0 2015-07-25 Found nothing 44
    kaspersky 5.5.33 5.5.33 2014-04-01 Found nothing 60
    kingsoft 2.1 2.1 2013-09-22 Found nothing 7
    mcafee 7638 5400.1158 2014-11-30 Found nothing 60
    nod32 0920 3.0.21 2014-12-23 Found nothing 60
    panda 9.05.01 9.05.01 2015-07-26 Found nothing 4
    pcc 11.380.07 9.500-1005 2014-12-31 Found nothing 60
    qh360 1.0.1 1.0.1 1.0.1 Found nothing 5
    qqphone 1.0.0.0 1.0.0.0 2014-12-09 Found nothing 60
    quickheal 14.00 14.00 2015-07-25 Found nothing 3
    rising 25.76.04.01 25.76.04.01 2015-07-24 Found nothing 4
    sophos 5.08 3.55.0 2014-12-01 Found nothing 60
    symantec 20141230.001 1.3.0.24 2014-12-30 Found nothing 60
    tachyon 9.9.9 9.9.9 2013-12-27 Found nothing 7
    thehacker 6.8.0.5 6.8.0.5 2015-07-23 Found nothing 3
    tws 17.47.17308 1.0.2.2108 2014-12-08 Found nothing 15
    vba 3.12.26.3 3.12.26.3 2014-12-31 Found nothing 60
    virusbuster 15.0.985.0 5.5.2.13 2014-12-05 Found nothing 60
    ■Heuristic/Suspicious ■Exact
    NOTICE: Results are not 100% accurate and can be reported as a false positive by some scannerswhen and if malware is found. Please judge these results for yourself.
  • 权限列表
    许可名称信息
    com.ciyun.tiantianhongbao.permission.JPUSH_MESSAGE
    android.permission.RECEIVE_USER_PRESENT
    android.permission.WRITE_SETTINGS读写系统设置项
    android.permission.WRITE_EXTERNAL_STORAGE写外部存储器（如：SD卡）
    android.permission.ACCESS_NETWORK_STATE读取网络状态（2G或3G）
    android.permission.ACCESS_COARSE_LOCATION获取粗略的位置（通过wifi、基站）
    android.permission.ACCESS_WIFI_STATE读取wifi网络状态
    android.permission.READ_EXTERNAL_STORAGE读外部存储器（如：SD卡）
    android.permission.INTERNET连接网络（2G或3G）
    android.permission.GET_TASKS获取有关当前或最近运行的任务信息
    android.permission.READ_PHONE_STATE读取电话状态
    android.permission.WAKE_LOCK手机屏幕关闭后后台进程仍运行
    android.permission.SYSTEM_ALERT_WINDOW显示系统窗口
    android.permission.VIBRATE允许设备震动
    android.permission.RESTART_PACKAGES重启其他程序
    android.permission.ACCESS_FINE_LOCATION获取精确的位置（通过GPS）
    com.android.launcher.permission.INSTALL_SHORTCUT创建快捷方式
    android.permission.MOUNT_UNMOUNT_FILESYSTEMS挂载、反挂载外部文件系统
    android.permission.CHANGE_WIFI_STATE改变WIFI连接状态
    android.permission.READ_LOGS读取系统日志
    android.permission.BLUETOOTH连接蓝牙设备
    android.permission.ACCESS_LOCATION_EXTRA_COMMANDS访问额外的定位指令
    android.permission.CHANGE_NETWORK_STATE变更网络状态
    android.permission.MANAGE_ACCOUNTS管理账户
    android.permission.GET_ACCOUNTS访问账户列表
    android.permission.DISABLE_KEYGUARD禁用键盘锁
    android.permission.SET_DEBUG_APP调试程序
    android.permission.USE_CREDENTIALS获取认证令牌
  • 文件信息
    安全评分 :
    基本信息
    MD5:b6cca0dc37066ceb55b57c1e08d28b84
    包名:com.ciyun.tiantianhongbao
    最低运行环境:Android 2.2.x
    版权:tianci
    关键行为
    行为描述:设置特殊文件夹属性
    详情信息:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
    C:\Documents and Settings\Administrator\Local Settings\History
    C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
    C:\Documents and Settings\Administrator\Cookies
    C:\Documents and Settings\Administrator\IETldCache
    行为描述:查询注册表_检测虚拟机相关
    详情信息:\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion
    行为描述:获取TickCount值
    详情信息:TickCount = 5352015, SleepMilliseconds = 500.
    TickCount = 5351709, SleepMilliseconds = 100.
    TickCount = 5351756, SleepMilliseconds = 100.
    TickCount = 5351771, SleepMilliseconds = 100.
    TickCount = 5351787, SleepMilliseconds = 100.
    TickCount = 5351818, SleepMilliseconds = 100.
    TickCount = 5351850, SleepMilliseconds = 100.
    TickCount = 5351865, SleepMilliseconds = 100.
    TickCount = 5351881, SleepMilliseconds = 100.
    TickCount = 5352296, SleepMilliseconds = 500.
    TickCount = 5352312, SleepMilliseconds = 500.
    TickCount = 5352375, SleepMilliseconds = 500.
    TickCount = 5352390, SleepMilliseconds = 500.
    TickCount = 5351990, SleepMilliseconds = 100.
    TickCount = 5352006, SleepMilliseconds = 100.
    行为描述:杀掉进程
    详情信息:C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe
    进程行为
    行为描述:创建进程
    详情信息:ImagePath = C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe, CmdLine = "C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe" /_ShowProgress
    ImagePath = C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe, CmdLine = "C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe" /_ShowProgress /PrTxt:TG9hZGluZy4uLg==
    行为描述:创建本地线程
    详情信息:TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 1472, ThreadID = 896, StartAddress = 00F88260, Parameter = 011D3510
    TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 1472, ThreadID = 1552, StartAddress = 00F88260, Parameter = 011D36D0
    TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 1472, ThreadID = 1384, StartAddress = 00F88260, Parameter = 011D3710
    TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 1472, ThreadID = 792, StartAddress = 00F88260, Parameter = 011D37D0
    TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 1472, ThreadID = 388, StartAddress = 00F88260, Parameter = 011D3810
    TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 1472, ThreadID = 444, StartAddress = 00F88260, Parameter = 011D3890
    TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 1472, ThreadID = 252, StartAddress = 00F88260, Parameter = 011D3850
    TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 1472, ThreadID = 1012, StartAddress = 77DC845A, Parameter = 00000000
    TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 1472, ThreadID = 1360, StartAddress = 00F88260, Parameter = 011D3950
    TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 1472, ThreadID = 1856, StartAddress = 00F95B60, Parameter = 011E90D0
    TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 1472, ThreadID = 744, StartAddress = 7C947EBB, Parameter = 00000000
    TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 1472, ThreadID = 2044, StartAddress = 7C930230, Parameter = 00000000
    TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 1472, ThreadID = 1808, StartAddress = 6302B849, Parameter = 001ACE70
    TargetProcess: %temp%\****.exe, InheritedFromPID = 1472, ProcessID = 1372, ThreadID = 156, StartAddress = 00F88260, Parameter = 011D3510
    TargetProcess: %temp%\****.exe, InheritedFromPID = 1944, ProcessID = 1472, ThreadID = 1568, StartAddress = 00F95B60, Parameter = 011E9100
    行为描述:枚举进程
    详情信息:N/A
    行为描述:杀掉进程
    详情信息:C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe
    文件行为
    行为描述:创建文件
    详情信息:C:\Documents and Settings\Administrator\Local Settings\Temp\0051A5EA.log
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\ie6_main.css
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\main.css
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\browse.css
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\button.css
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\checkbox.css
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\images\button-bg.png
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\images\progress-bg-corner.png
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\images\progress-bg.png
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\images\progress-bg2.png
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\progress-bar.css
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\csshover3.htc
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\form.bmp.Mask
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\images\BGR.png
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\images\BGW.png
    行为描述:删除文件
    详情信息:C:\Documents and Settings\Administrator\Local Settings\Temp\0051A5EA.log
    C:\Documents and Settings\Administrator\Local Settings\Temp\0051AA4F.log
    C:\Documents and Settings\Administrator\Local Settings\Temp\0051A91D.log
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6P4O8QNJ\wpad[1].dat
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\bootstrap_41385.html
    C:\Documents and Settings\Administrator\Local Settings\Temp\in0B6E0CB6\0026824A.tmp
    C:\Documents and Settings\Administrator\Local Settings\Temp\00522B6B.log
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\ie6_main.css
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\main.css
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\browse.css
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\button.css
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\checkbox.css
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\images\button-bg.png
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\images\progress-bg-corner.png
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\images\progress-bg.png
    行为描述:设置特殊文件夹属性
    详情信息:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
    C:\Documents and Settings\Administrator\Local Settings\History
    C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
    C:\Documents and Settings\Administrator\Cookies
    C:\Documents and Settings\Administrator\IETldCache
    行为描述:修改文件内容
    详情信息:C:\Documents and Settings\Administrator\Local Settings\Temp\0051A5EA.log ---> Offset = 0
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\ie6_main.css ---> Offset = 0
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\main.css ---> Offset = 0
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\browse.css ---> Offset = 0
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\button.css ---> Offset = 0
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\checkbox.css ---> Offset = 0
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\images\button-bg.png ---> Offset = 0
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\images\progress-bg-corner.png ---> Offset = 0
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\images\progress-bg.png ---> Offset = 0
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\images\progress-bg2.png ---> Offset = 0
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\css\sdk-ui\progress-bar.css ---> Offset = 0
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\csshover3.htc ---> Offset = 0
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\form.bmp.Mask ---> Offset = 0
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\images\BGR.png ---> Offset = 0
    C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\images\BGW.png ---> Offset = 0
    行为描述:查找文件
    详情信息:FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\inH53509068445
    FileName = C:\Program Files\Internet Explorer\IEXPLORE.EXE
    FileName = C:\Documents and Settings
    FileName = C:\Documents and Settings\Administrator
    FileName = C:\Documents and Settings\Administrator\Local Settings
    FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe
    FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\inH53509068445\bootstrap_41385.html
    FileName = C:\Documents and Settings\Administrator\Local Settings\Temp
    FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%
    FileName = C:\DOCUME~1
    FileName = C:\Documents and Settings\ADMINI~1
    FileName = C:\Documents and Settings\Administrator\LOCALS~1
    FileName = C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445
    FileName = C:\Documents and Settings\Administrator\Local Settings\Temp\inH53509068445\bootstrap_41385.html
    FileName = C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Connections\Pbk\*.pbk
    网络行为
    行为描述:联网打开网址
    详情信息:InternetOpenUrlA: http://**.133.40.**:128/wpad.dat, hInternet = 0x00cc0010, Flags = 0x00000010
    行为描述:连接指定站点
    详情信息:InternetConnectA: ServerName = rp****om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x00000000
    InternetConnectA: ServerName = **.133.40.**, PORT = 128, UserName = , Password = , hSession = 0x00cc0010, hConnect = 0x00cc0014, Flags = 0x00000010
    InternetConnectA: ServerName = in****om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x00000000
    行为描述:打开HTTP连接
    详情信息:InternetOpenA: UserAgent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0), hSession = 0x00cc0004
    InternetOpenA: UserAgent: Mozilla/4.0 (compatible; MSIE 8.0; Win32; Trident/4.0), hSession = 0x00cc0010
    行为描述:建立到一个指定的套接字连接
    详情信息:URL: wpad, IP: **.133.40.**:128, SOCKET = 0x000003ac
    URL: rp****om, IP: **.133.40.**:80, SOCKET = 0x00000394
    URL: rp****om, IP: **.133.40.**:80, SOCKET = 0x000003ac
    URL: rp****om, IP: **.133.40.**:80, SOCKET = 0x000002d8
    URL: rp****om, IP: **.133.40.**:80, SOCKET = 0x00000420
    URL: in****om, IP: **.133.40.**:80, SOCKET = 0x000002f8
    URL: rp****om, IP: **.133.40.**:80, SOCKET = 0x000002ec
    URL: in****om, IP: **.133.40.**:80, SOCKET = 0x000002dc
    URL: rp****om, IP: **.133.40.**:80, SOCKET = 0x00000310
    行为描述:读取网络文件
    详情信息:hFile = 0x00cc0018, BytesToRead =4010, BytesRead = 4010.
    hFile = 0x00cc000c, BytesToRead =20480, BytesRead = 20480.
    行为描述:发送HTTP包
    详情信息:GET /wpad.dat HTTP/1.1 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32; Trident/4.0) Host: **.133.40.**:128
    POST /?v=2.0&subver=6.21&pcrc=1793293888 HTTP/1.1 Accept: */* Host: rp****om User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0) Content-Length: 1760 Cache-Control: no-cache
    POST /?v=2.0&subver=6.21&pcrc=933759592 HTTP/1.1 Accept: */* Host: rp****om User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0) Content-Length: 1776 Cache-Control: no-cache
    POST /?v=2.0&subver=6.21&pcrc=2088256590 HTTP/1.1 Accept: */* Host: rp****om User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0) Content-Length: 2656 Cache-Control: no-cache
    POST /?v=2.0&subver=6.21&pcrc=295643027 HTTP/1.1 Accept: */* Host: rp****om User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0) Content-Length: 2656 Cache-Control: no-cache
    POST /?v=1.03&c=31cdd1cd&at=56151696&cntr=1 HTTP/1.1 Accept: */* Host: in****om User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0) Content-Length: 152 Cache-Control: no-cache 30nF+X7j0wUkJIAFlwLGppV63mamfTJv2hhAqg7SM0IrWK3cSz6vCOQ3Swjd9//NP4tkzn56S51q2e1pclrz65EQCvkMBQpvmMCC1Vz2Ec1J/mDICrLf9dhOP7JlRPMJOysLOVMguMXZ3MI6l5zT0g==
    POST /?v=2.0&subver=6.21&pcrc=80519980 HTTP/1.1 Accept: */* Host: rp****om User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0) Content-Length: 2480 Cache-Control: no-cache
    POST /?v=2.0&subver=6.21&pcrc=1204512210 HTTP/1.1 Accept: */* Host: rp****om User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0) Content-Length: 2496 Cache-Control: no-cache
    POST /?v=1.03&c=31cdd1cd&at=56151696&cntr=2 HTTP/1.1 Accept: */* Host: in****om User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0) Content-Length: 152 Cache-Control: no-cache 30nF+X7j0wUkJIAFlwLGppV63mamfTJv2hhAqg7SM0IrWK3cSz6vCOQ3Swjd9//NP4tkzn56S51q2e1pclrz65EQCvkMBQpvmMCC1Vz2Ec1J/mDICrLf9dhOP7JlRPMJOysLOVMguMXZ3MI6l5zT0g==
    POST /?v=2.0&subver=6.21&pcrc=488893189 HTTP/1.1 Accept: */* Host: rp****om User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0) Content-Length: 2496 Cache-Control: no-cache
    POST /?v=2.0&subver=6.21&pcrc=1248663891 HTTP/1.1 Accept: */* Host: rp****om User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0) Content-Length: 2512 Cache-Control: no-cache
    行为描述:打开HTTP请求
    详情信息:HttpOpenRequestA: rp****om:80/?v=2.0&subver=6.21&pcrc=1793293888, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: POST, Referer: , Flags = 0x04080000
    HttpOpenRequestA: **.133.40.**:128/wpad.dat, hConnect = 0x00cc0014, hRequest = 0x00cc0018, Verb: GET, Referer: , Flags = 0x00000010
    HttpOpenRequestA: rp****om:80/?v=2.0&subver=6.21&pcrc=933759592, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: POST, Referer: , Flags = 0x04080000
    HttpOpenRequestA: in****om:80/?v=1.03&c=31cdd1cd&at=56151696&cntr=0, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: POST, Referer: , Flags = 0x04080000
    HttpOpenRequestA: rp****om:80/?v=2.0&subver=6.21&pcrc=2088256590, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: POST, Referer: , Flags = 0x04080000
    HttpOpenRequestA: rp****om:80/?v=2.0&subver=6.21&pcrc=295643027, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: POST, Referer: , Flags = 0x04080000
    HttpOpenRequestA: in****om:80/?v=1.03&c=31cdd1cd&at=56151696&cntr=1, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: POST, Referer: , Flags = 0x04080000
    HttpOpenRequestA: rp****om:80/?v=2.0&subver=6.21&pcrc=80519980, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: POST, Referer: , Flags = 0x04080000
    HttpOpenRequestA: rp****om:80/?v=2.0&subver=6.21&pcrc=1204512210, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: POST, Referer: , Flags = 0x04080000
    HttpOpenRequestA: in****om:80/?v=1.03&c=31cdd1cd&at=56151696&cntr=2, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: POST, Referer: , Flags = 0x04080000
    HttpOpenRequestA: rp****om:80/?v=2.0&subver=6.21&pcrc=488893189, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: POST, Referer: , Flags = 0x04080000
    HttpOpenRequestA: rp****om:80/?v=2.0&subver=6.21&pcrc=1248663891, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: POST, Referer: , Flags = 0x04080000
    行为描述:按名称获取主机地址
    详情信息:GetAddrInfoW: computer
    GetAddrInfoW: wpad
    GetAddrInfoW: rp****om
    GetAddrInfoW: in****om
    注册表行为
    行为描述:修改注册表
    详情信息:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\ESENT\Process\996E\DEBUG\Trace Level
    行为描述:删除注册表键值
    详情信息:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer
    \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\ESENT\Process\996E\DEBUG\Trace Level
    行为描述:查询注册表_检测虚拟机相关
    详情信息:\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion
    其他行为
    行为描述:获取光标位置
    详情信息:CursorPos = (71,18468), SleepMilliseconds = 500.
    CursorPos = (6364,26501), SleepMilliseconds = 100.
    CursorPos = (19199,15725), SleepMilliseconds = 100.
    CursorPos = (11508,29359), SleepMilliseconds = 100.
    CursorPos = (26992,24465), SleepMilliseconds = 100.
    CursorPos = (5735,28146), SleepMilliseconds = 500.
    CursorPos = (23311,16828), SleepMilliseconds = 500.
    CursorPos = (9991,492), SleepMilliseconds = 100.
    CursorPos = (3025,11943), SleepMilliseconds = 100.
    CursorPos = (4857,5437), SleepMilliseconds = 500.
    CursorPos = (32421,14605), SleepMilliseconds = 500.
    CursorPos = (3932,154), SleepMilliseconds = 10.
    CursorPos = (322,12383), SleepMilliseconds = 10.
    CursorPos = (17451,18717), SleepMilliseconds = 100.
    CursorPos = (19748,19896), SleepMilliseconds = 100.
    行为描述:创建互斥体
    详情信息:CTF.LBES.MutexDefaultS-*
    CTF.Compart.MutexDefaultS-*
    CTF.Asm.MutexDefaultS-*
    CTF.Layouts.MutexDefaultS-*
    CTF.TMD.MutexDefaultS-*
    CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-*
    Local\ZonesCounterMutex
    Local\ZoneAttributeCacheCounterMutex
    Local\ZonesCacheCounterMutex
    Local\ZonesLockedCacheCounterMutex
    RasPbFile
    Local\!PrivacIE!SharedMemory!Mutex
    MSCTF.Shared.MUTEX.ELH
    MSIMGSIZECacheMutex
    MSCTF.Shared.MUTEX.AEC
    行为描述:隐藏指定窗口
    详情信息:[Window,Class] = [,THtmlUIForm]
    [Window,Class] = [IDG Downloader,THtmlUIForm]
    行为描述:窗口信息
    详情信息:Pid = 1472, Hwnd=0xa038e, Text = 确定, ClassName = Button.
    Pid = 1472, Hwnd=0x12034c, Text = Product configuration is missing!, ClassName = Static.
    Pid = 1472, Hwnd=0x10039e, Text = Information, ClassName = #32770.
    Pid = 1472, Hwnd=0x803ba, Text = IDG Downloader, ClassName = THtmlUIForm.
    行为描述:查找指定窗口
    详情信息:NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,]
    NtUserFindWindowEx: [Class,Window] = [MS_AutodialMonitor,]
    NtUserFindWindowEx: [Class,Window] = [MS_WebCheckMonitor,]
    NtUserFindWindowEx: [Class,Window] = [CicLoaderWndClass,]
    行为描述:打开事件
    详情信息:HookSwitchHookEnabledEvent
    Global\SvcctrlStartEvent_A3752DX
    \SECURITY\LSA_AUTHENTICATION_INITIALIZED
    _fCanRegisterWithShellService
    \INSTALLATION_SECURITY_HOLD
    Global\crypt32LogoffEvent
    MSFT.VSA.COM.DISABLE.1472
    MSFT.VSA.IEC.STATUS.6c736db0
    CTF.ThreadMIConnectionEvent.000007B4.00000000.00000040
    CTF.ThreadMarshalInterfaceEvent.000007B4.00000000.00000040
    MSCTF.SendReceiveConection.Event.ELH.IC
    MSCTF.SendReceive.Event.ELH.IC
    CTF.ThreadMIConnectionEvent.000007B4.00000000.00000041
    CTF.ThreadMarshalInterfaceEvent.000007B4.00000000.00000041
    CTF.ThreadMIConnectionEvent.000007B4.00000000.00000042
    行为描述:获取TickCount值
    详情信息:TickCount = 5352015, SleepMilliseconds = 500.
    TickCount = 5351709, SleepMilliseconds = 100.
    TickCount = 5351756, SleepMilliseconds = 100.
    TickCount = 5351771, SleepMilliseconds = 100.
    TickCount = 5351787, SleepMilliseconds = 100.
    TickCount = 5351818, SleepMilliseconds = 100.
    TickCount = 5351850, SleepMilliseconds = 100.
    TickCount = 5351865, SleepMilliseconds = 100.
    TickCount = 5351881, SleepMilliseconds = 100.
    TickCount = 5352296, SleepMilliseconds = 500.
    TickCount = 5352312, SleepMilliseconds = 500.
    TickCount = 5352375, SleepMilliseconds = 500.
    TickCount = 5352390, SleepMilliseconds = 500.
    TickCount = 5351990, SleepMilliseconds = 100.
    TickCount = 5352006, SleepMilliseconds = 100.
    行为描述:调整进程token权限
    详情信息:SE_SHUTDOWN_PRIVILEGE
    SE_LOAD_DRIVER_PRIVILEGE
    行为描述:枚举窗口
    详情信息:N/A
    行为描述:调用Sleep函数
    详情信息:[1]: MilliSeconds = 500.
    [2]: MilliSeconds = 100.
    [3]: MilliSeconds = 100.
    [4]: MilliSeconds = 100.
    [5]: MilliSeconds = 500.
    [6]: MilliSeconds = 100.
    [7]: MilliSeconds = 100.
    [8]: MilliSeconds = 500.
    [9]: MilliSeconds = 100.
    [10]: MilliSeconds = 100.
    行为描述:创建事件对象
    详情信息:EventName = DINPUTWINMM
    EventName = Global\userenv: User Profile setup event
    EventName = Global\crypt32LogoffEvent
    EventName = MSCTF.SendReceive.Event.AEC.IC
    EventName = MSCTF.SendReceiveConection.Event.AEC.IC
    行为描述:打开互斥体
    详情信息:ShimCacheMutex
    Local\!IETld!Mutex
    Local\_!MSFTHISTORY!_
    Local\c:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
    Local\c:!documents and settings!administrator!cookies!
    Local\c:!documents and settings!administrator!local settings!history!history.ie5!
    Local\WininetStartupMutex
    Local\WininetConnectionMutex
    Local\WininetProxyRegistryMutex
    RasPbFile
    CtfmonInstMutexDefaultS-*
    Local\c:!documents and settings!administrator!ietldcache!
    Activities
    活动名类型
    com.ciyun.tiantianhongbao.act.ActWelcomeandroid.intent.action.MAIN
    com.ciyun.tiantianhongbao.act.ActWelcomeandroid.intent.category.LAUNCHER
    com.tencent.tauth.AuthActivityandroid.intent.action.VIEW
    com.tencent.tauth.AuthActivityandroid.intent.category.DEFAULT
    com.tencent.tauth.AuthActivityandroid.intent.category.BROWSABLE
    cn.jpush.android.ui.PushActivitycn.jpush.android.ui.PushActivity
    cn.jpush.android.ui.PushActivityandroid.intent.category.DEFAULT
    cn.jpush.android.ui.PushActivitycom.ciyun.tiantianhongbao
    危险函数
    函数名称信息
    getRuntime获取命令行环境
    java/lang/Runtime;->exec执行字符串命令
    启动方式
    名称信息
    cn.jpush.android.service.PushReceiver
    cn.jpush.android.service.PushReceiver屏幕解锁启动服务
    cn.jpush.android.service.PushReceiver网络连接改变时启动服务
    cn.jpush.android.service.PushReceiver应用安装时启动服务
    cn.jpush.android.service.PushReceiver应用卸载时启动服务
    com.ciyun.tiantianhongbao.receive.MyReceiver
    com.ciyun.tiantianhongbao.receive.MyReceiver
    com.ciyun.tiantianhongbao.receive.MyReceiver
    com.ciyun.tiantianhongbao.receive.MyReceiver
    com.ciyun.tiantianhongbao.receive.MyReceiver
    com.ciyun.tiantianhongbao.receive.MyReceiver
    com.ciyun.tiantianhongbao.receive.MyReceiver
    com.lb.lbsdkwall.service.ReplaceBroadcastReceiver应用安装时启动服务
    com.lb.lbsdkwall.service.ReplaceBroadcastReceiver
    com.lb.lbsdkwall.service.DateReceiver
    com.lb.lbsdkwall.service.DateReceiver
    广告信息
    名称信息
    com.baidu百度
    权限列表
    许可名称信息
    com.ciyun.tiantianhongbao.permission.JPUSH_MESSAGE
    android.permission.RECEIVE_USER_PRESENT
    android.permission.WRITE_SETTINGS读写系统设置项
    android.permission.WRITE_EXTERNAL_STORAGE写外部存储器（如：SD卡）
    android.permission.ACCESS_NETWORK_STATE读取网络状态（2G或3G）
    android.permission.ACCESS_COARSE_LOCATION获取粗略的位置（通过wifi、基站）
    android.permission.ACCESS_WIFI_STATE读取wifi网络状态
    android.permission.READ_EXTERNAL_STORAGE读外部存储器（如：SD卡）
    android.permission.INTERNET连接网络（2G或3G）
    android.permission.GET_TASKS获取有关当前或最近运行的任务信息
    android.permission.READ_PHONE_STATE读取电话状态
    android.permission.WAKE_LOCK手机屏幕关闭后后台进程仍运行
    android.permission.SYSTEM_ALERT_WINDOW显示系统窗口
    android.permission.VIBRATE允许设备震动
    android.permission.RESTART_PACKAGES重启其他程序
    android.permission.ACCESS_FINE_LOCATION获取精确的位置（通过GPS）
    com.android.launcher.permission.INSTALL_SHORTCUT创建快捷方式
    android.permission.MOUNT_UNMOUNT_FILESYSTEMS挂载、反挂载外部文件系统
    android.permission.CHANGE_WIFI_STATE改变WIFI连接状态
    android.permission.READ_LOGS读取系统日志
    android.permission.BLUETOOTH连接蓝牙设备
    android.permission.ACCESS_LOCATION_EXTRA_COMMANDS访问额外的定位指令
    android.permission.CHANGE_NETWORK_STATE变更网络状态
    android.permission.MANAGE_ACCOUNTS管理账户
    android.permission.GET_ACCOUNTS访问账户列表
    android.permission.DISABLE_KEYGUARD禁用键盘锁
    android.permission.SET_DEBUG_APP调试程序
    android.permission.USE_CREDENTIALS获取认证令牌
    服务列表
    名称
    com.ciyun.tiantianhongbao.service.DownloadService
    com.weijialbb.DevNativeService
    cn.jpush.android.service.DownloadService
    cn.jpush.android.service.PushService
    com.lb.lbsdkwall.service.LbWallCheckService
    文件列表
    文件名 校验码
    META-INF/MANIFEST.MF 0xac41b736
    META-INF/XSZ.SF 0xdc471a99
    META-INF/XSZ.RSA 0x21f83595
    META-INF/channel_info 0xb8123d5c
    AndroidManifest.xml 0xc30cd9fe
    assets/com.tencent.open.config.json 0xb3d4a81a
    assets/ijiami.dat 0xfe473ef7
    assets/ijm_lib/armeabi/libexec.so 0x671823c9
    assets/ijm_lib/armeabi/libexecmain.so 0xdbf92e83
    assets/ijm_lib/x86/libexec.so 0xf702d413
    assets/ijm_lib/x86/libexecmain.so 0x7c866895
    assets/jpush_close.png 0x7f86f01f
    classes.dex 0x1a6c4db6
    lib/armeabi/libjpush170.so 0x3ff2a463
    lib/armeabi/liblb_wall.so 0xeeff3ef9
    lib/armeabi/libweijialbbc.so 0xb662f44a
    lib/armeabi/libweijialbbe.so 0x5c189563
    res/anim/push_bottom_in.xml 0xb7a0e49a
    res/anim/push_bottom_out.xml 0x40d137a3
    res/anim/umeng_fb_audio_play_anim.xml 0x7bc460a5
    res/anim/umeng_fb_dialog_enter_anim.xml 0x4103d130
    res/anim/umeng_fb_dialog_exit_anim.xml 0xba9f068f
    res/drawable-v11/umeng_fb_help_tab_bg.xml 0x47c5a47
    res/drawable/btn_bt_gift.xml 0xdb41403f
    res/drawable/btn_bt_home.xml 0x96939ea9
    res/drawable/btn_bt_me.xml 0x938e2c4b
    res/drawable/btn_bt_task.xml 0x50ce5d8c
    res/drawable/btn_dotask_selector.xml 0xa56c568
    res/drawable/button_dotask_normal.xml 0x3975d27
    res/drawable/button_dotask_normal1.xml 0xf4d3f1f5
    res/drawable/button_dotask_selector.xml 0x4d5fca2e
    res/drawable/button_dotask_selector1.xml 0x9906cb4d
    res/drawable/button_dotask_tap.xml 0xcf2641ad
    res/drawable/button_dotask_tap1.xml 0x91ae30ae
    res/drawable/circle_bg.xml 0x6731e0de
    res/drawable/circle_w.xml 0xebe381
    res/drawable/coin_bg.xml 0x4c65eed9
    res/drawable/corner_gray.xml 0x6c4a77f5
    res/drawable/corner_invite.xml 0xf60a6921
    res/drawable/corner_red.xml 0xcbb56d42
    res/drawable/corner_white.xml 0x1b59b0aa
    res/drawable/dialog_cancel.xml 0xacd3f8cf
    res/drawable/dialog_cancel_tap.xml 0xd29b4228
    res/drawable/dialog_sure.xml 0xf84a36f4
    res/drawable/dialog_sure2.xml 0x760887ca
    res/drawable/dialog_sure_normal.xml 0x82055a6e
    res/drawable/dialog_sure_tap.xml 0x241f9b15
    res/drawable/dialog_sure_tap2.xml 0xb4cf7ea0
    res/drawable/fb_send_btn_bg.xml 0xeac98cac
    res/drawable/qhb_notime_selector1.xml 0x678fcb15
    res/drawable/qianghongbao_selector.xml 0x81bd6280
    res/drawable/rect_ping.xml 0x3488d429
    res/drawable/rect_red_normal.xml 0xcb63d8
    res/drawable/rect_red_press.xml 0x2f18c6ff
    res/drawable/umeng_fb_help_tab_bg.xml 0x840f8f04
    res/drawable/umeng_fb_round_white_bg.xml 0x25a5a0e0
    res/drawable/umeng_update_button_cancel_normal.xml 0xa5123acb
    res/drawable/umeng_update_button_cancel_selector.xml 0x3ef1c538
    res/drawable/umeng_update_button_cancel_tap.xml 0x9ebb6970
    res/drawable/umeng_update_button_ok_normal.xml 0xc191aa60
    res/drawable/umeng_update_button_ok_selector.xml 0x2a7407e9
    res/drawable/umeng_update_button_ok_tap.xml 0x868a391e
    res/drawable/umeng_update_dialog_bg.xml 0xcecaeba7
    res/layout-v17/umeng_fb_contact.xml 0xa31f26ee
    res/layout-v17/umeng_fb_input_contact.xml 0x545abf4a
    res/layout/app_sign.xml 0xe4b623c8
    res/layout/exc_record.xml 0x41cf47e1
    res/layout/feedback.xml 0xf47ab29c
    res/layout/imagegalleryitem.xml 0x72a9af73
    res/layout/invite_gonglue.xml 0x408a817c
    res/layout/main.xml 0x43af7531
    res/layout/profession_layout.xml 0xb58147e7
    res/layout/qudao_item2.xml 0x75e9fa73
    res/layout/umeng_fb_activity_conversation.xml 0x715d762d
    res/layout/umeng_fb_activity_help.xml 0x46b387cf
    res/layout/umeng_fb_audio_dialog.xml 0x7c93d300
    res/layout/umeng_fb_contact.xml 0xa6d8a226
    res/layout/umeng_fb_contact_spinner.xml 0xfef4d90e
    res/layout/umeng_fb_fragment_question.xml 0xb840a619
    res/layout/umeng_fb_image_dialog.xml 0x7968ca83
    res/layout/umeng_fb_input_contact.xml 0x800d00b5
    res/layout/umeng_fb_input_conversation.xml 0x5a836ed9
    res/layout/webview.xml 0x23f91610
    res/layout/wel.xml 0xdc46c693
    org/apache/http/entity/mime/version.properties 0x53e10a06
    res/drawable-xxhdpi-v4/ic_launcher.png 0xa3422c0a
    res/drawable-xhdpi-v4/fb_dev_reply_bg.9.png 0x4d615e2c
    res/drawable-xhdpi-v4/fb_input_bg.9.png 0x10d48b59
    res/drawable-xhdpi-v4/fb_send_btn_pressed.png 0xbe553f2e
    res/drawable-xhdpi-v4/fb_send_btn_unpressed.png 0x66693e22
    res/drawable-xhdpi-v4/fb_user_reply_bg.9.png 0x6c14f208
    res/drawable-xhdpi-v4/ic_launcher.png 0x2fadf57f
    res/drawable-xhdpi-v4/logo_qq.png 0xe5a8e859
    res/drawable-xhdpi-v4/logo_qzone.png 0xa4969f5b
    res/drawable-xhdpi-v4/logo_shortmessage.png 0x84adaa47
    res/drawable-xhdpi-v4/logo_sinaweibo.png 0xe41d6652
    res/drawable-xhdpi-v4/logo_wechat.png 0xcbd128e
    res/drawable-xhdpi-v4/logo_wechatmoments.png 0x4d2c0f7c
    res/drawable-xhdpi-v4/umeng_fb_audio_dialog_cancel.png 0x8091cf95
    res/drawable-xhdpi-v4/umeng_fb_audio_dialog_content.png 0xc499a316
    res/drawable-xhdpi-v4/umeng_fb_audio_play_01.png 0x420e78f2
    res/drawable-xhdpi-v4/umeng_fb_audio_play_02.png 0x2361a357
    res/drawable-xhdpi-v4/umeng_fb_audio_play_03.png 0x6b3bc1ba
    res/drawable-xhdpi-v4/umeng_fb_audio_play_bg.9.png 0x38918ad8
    res/drawable-xhdpi-v4/umeng_fb_keyboard.png 0xa8b11bf9
    res/drawable-xhdpi-v4/umeng_fb_plus.png 0x6b14efca
    res/drawable-xhdpi-v4/umeng_fb_record.png 0x415f67f5
    res/drawable-xhdpi-v4/umeng_socialize_qq_off.png 0x7bdd3319
    res/drawable-xhdpi-v4/umeng_socialize_qq_on.png 0x1c72a73
    res/drawable-xhdpi-v4/umeng_socialize_qzone_off.png 0x9058e27f
    res/drawable-xhdpi-v4/umeng_socialize_qzone_on.png 0x9a0765c4
    res/drawable-xhdpi-v4/umeng_socialize_sms_off.png 0x8225fc4a
    res/drawable-xhdpi-v4/umeng_socialize_sms_on.png 0x3febfef5
    res/drawable-xhdpi-v4/umeng_socialize_wechat.png 0xdb75721e
    res/drawable-xhdpi-v4/umeng_socialize_wechat_gray.png 0xb960e5cb
    res/drawable-xhdpi-v4/umeng_socialize_wxcircle.png 0xb71e1c46
    res/drawable-xhdpi-v4/umeng_socialize_wxcircle_gray.png 0x445beb69
    res/drawable-mdpi-v4/ic_launcher.png 0x5323d773
    res/drawable-ldpi-v4/ic_launcher.png 0x15173901
    res/drawable/umeng_fb_action_replay.png 0xaa74362b
    res/drawable/umeng_fb_arrow_right.png 0xd0df691e
    res/drawable-hdpi-v4/arrow.png 0xf3e69e4e
    res/drawable-hdpi-v4/banner1.png 0x36d7788
    res/drawable-hdpi-v4/banner2.png 0x49a2f427
    res/drawable-hdpi-v4/bg.png 0x5c47f4fa
    res/drawable-hdpi-v4/btn_back.png 0xd8ba983a
    res/drawable-hdpi-v4/duobaobeijing2.png 0x7cd1d82
    res/drawable-hdpi-v4/erw.png 0x94c08dd8
    res/drawable-hdpi-v4/erweima.png 0x9d7d8562
    res/drawable-hdpi-v4/exc_qq.png 0xe2f18d8d
    res/drawable-hdpi-v4/exc_shoujichongzhi.png 0xef5a54c4
    res/drawable-hdpi-v4/exc_zhifubao.png 0x5be76d41
    res/drawable-hdpi-v4/fb_default_dev_portrait.png 0xd9a68c83
    res/drawable-hdpi-v4/fb_default_user_portrait.png 0x7243c04e
    res/drawable-hdpi-v4/fb_msg_tip.png 0xfa4d0454
    res/drawable-hdpi-v4/fenxiang_bg.png 0xf8726888
    res/drawable-hdpi-v4/fenxiang_bg2.png 0x198bd222
    res/drawable-hdpi-v4/gonglue1.png 0xba1e97cd
    res/drawable-hdpi-v4/home_head_bg.png 0x7b0b1b93
    res/drawable-hdpi-v4/ic_launcher.png 0xbca9cd79
    res/drawable-hdpi-v4/ic_stub.png 0xc7cb6db1
    res/drawable-hdpi-v4/icon_aboutme_on.png 0xf781218e
    res/drawable-hdpi-v4/icon_aboutme_over.png 0x89167109
    res/drawable-hdpi-v4/icon_chaihongbao.png 0xe578a066
    res/drawable-hdpi-v4/icon_close.png 0xc307004
    res/drawable-hdpi-v4/icon_close_taskapp.png 0x5f790d54
    res/drawable-hdpi-v4/icon_dianhua.png 0x9e1a7fb0
    res/drawable-hdpi-v4/icon_dianzhi.png 0x900846b7
    res/drawable-hdpi-v4/icon_duobaoguize.png 0xd77763a5
    res/drawable-hdpi-v4/icon_duobaoshouyi.png 0x23439e20
    res/drawable-hdpi-v4/icon_exchange_on.png 0x8c507a0d
    res/drawable-hdpi-v4/icon_exchange_over.png 0x124af0f9
    res/drawable-hdpi-v4/icon_excrecord.png 0xfabd4b77
    res/drawable-hdpi-v4/icon_fahongbao.png 0x29241f80
    res/drawable-hdpi-v4/icon_fanhui.png 0x348c3386
    res/drawable-hdpi-v4/icon_fanhui2.png 0x49cfe37d
    res/drawable-hdpi-v4/icon_feedback.png 0xae976a88
    res/drawable-hdpi-v4/icon_fenx.png 0x26e87639
    res/drawable-hdpi-v4/icon_fenxiang.png 0x8cf46f28
    res/drawable-hdpi-v4/icon_fenxianghb.png 0xc448828a
    res/drawable-hdpi-v4/icon_home_on.png 0x4258c411
    res/drawable-hdpi-v4/icon_home_over.png 0x98886d30
    res/drawable-hdpi-v4/icon_home_yue.png 0xc99a3350
    res/drawable-hdpi-v4/icon_hongbao_me.png 0x98ace9d0
    res/drawable-hdpi-v4/icon_hongbaotongji.png 0xa5d906c8
    res/drawable-hdpi-v4/icon_jianchagengxin.png 0x47789ff0
    res/drawable-hdpi-v4/icon_notice.png 0x65d4442
    res/drawable-hdpi-v4/icon_qianghongbao.png 0x9565ed2
    res/drawable-hdpi-v4/icon_shouqizuijia.png 0x8ccfcfeb
    res/drawable-hdpi-v4/icon_task_sign.png 0xd9fcf8b2
    res/drawable-hdpi-v4/icon_tengxunqq.png 0x60e374d8
    res/drawable-hdpi-v4/icon_wodeziliao.png 0xf549cb0a
    res/drawable-hdpi-v4/icon_xingming.png 0x29cb8425
    res/drawable-hdpi-v4/icon_yaoqinghaoyou.png 0x828202d
    res/drawable-hdpi-v4/icon_yingyongxiazai.png 0xef5cfb63
    res/drawable-hdpi-v4/icon_zhuanqian_on.png 0xc5fc2abe
    res/drawable-hdpi-v4/icon_zhuanqian_over.png 0x5ae5ab2d
    res/drawable-hdpi-v4/icon_zhuanqu.png 0x6689ba73
    res/drawable-hdpi-v4/invite_gl1.png 0x2a8795d2
    res/drawable-hdpi-v4/invite_gl2.png 0xb6b90b8
    res/drawable-hdpi-v4/invite_gl3.png 0xf793a6b
    res/drawable-hdpi-v4/jiantou.png 0x62c8f468
    res/drawable-hdpi-v4/kuang.png 0xea52eef4
    res/drawable-hdpi-v4/kuang1.png 0xea52eef4
    res/drawable-hdpi-v4/list_divider.png 0x4fdf46a7
    res/drawable-hdpi-v4/list_divider2.png 0x966e196a
    res/drawable-hdpi-v4/loading1.png 0xccafe52
    res/drawable-hdpi-v4/loading2.png 0xa6073e0c
    res/drawable-hdpi-v4/loading3.png 0x7d061da3
    res/drawable-hdpi-v4/loading4.png 0x9594a982
    res/drawable-hdpi-v4/loading5.png 0xba30cff6
    res/drawable-hdpi-v4/loading6.png 0xb95579d3
    res/drawable-hdpi-v4/loading7.png 0x207c70d8
    res/drawable-hdpi-v4/loading8.png 0x626679c6
    res/drawable-hdpi-v4/login_bg.png 0x4019ac1b
    res/drawable-hdpi-v4/login_bg2.png 0xa5e76fe7
    res/drawable-hdpi-v4/login_qq.png 0xa0ec3249
    res/drawable-hdpi-v4/login_wx.png 0xb414aff
    res/drawable-hdpi-v4/qhb_close.png 0xc78010f6
    res/drawable-hdpi-v4/qhb_default.png 0x8c5fb621
    res/drawable-hdpi-v4/qhb_list_head.png 0x13185f58
    res/drawable-hdpi-v4/qiangh_bg.png 0xd718acd6
    res/drawable-hdpi-v4/qianghongbao_normal.png 0x17c09d24
    res/drawable-hdpi-v4/qianghongbao_press.png 0xaf44b9ee
    res/drawable-hdpi-v4/renwu.png 0xb2bfe8bb
    res/drawable-hdpi-v4/selfapploading.png 0xd5140e35
    res/drawable-hdpi-v4/setting_item_rule.png 0x7655930d
    res/drawable-hdpi-v4/share_circle.png 0x83347707
    res/drawable-hdpi-v4/share_copy.png 0xe019f86
    res/drawable-hdpi-v4/share_weixin.png 0x9a6ce2c8
    res/drawable-hdpi-v4/welcome_bg.png 0xbbd067c6
    res/drawable-hdpi-v4/x_dot_blur.png 0x71a8dffd
    res/drawable-hdpi-v4/x_dot_focus.png 0xa4506d01
    res/drawable-hdpi-v4/xuxian.png 0xcc456b40
    res/drawable-hdpi-v4/yaoqingbeijing.png 0x55cb2cc5
    res/anim/loading.xml 0xae0c43c
    res/drawable/wheel_bg.xml 0xa67deee1
    res/layout-v17/activity_custom.xml 0x51c76ba5
    res/layout-v17/exc_items.xml 0x56fca212
    res/layout-v17/umeng_fb_input_conversation.xml 0xd6be7340
    res/layout-v17/umeng_fb_input_conversation_audio.xml 0x4534ed39
    res/layout-v17/umeng_fb_reply_item_audio.xml 0x3b729f40
    res/layout-v17/umeng_fb_reply_item_image.xml 0xcd752212
    res/layout-v17/umeng_fb_reply_item_text.xml 0xbcc6d735
    res/layout-v17/umeng_fb_welcome_item.xml 0x40e1804b
    res/layout/activity_custom.xml 0xd126632
    res/layout/chb_list.xml 0x5e5cf19c
    res/layout/choujiangfail.xml 0x7cd7fb98
    res/layout/choujiangsuc.xml 0xe7d376a6
    res/layout/custom_fb_dev_reply.xml 0x322aea99
    res/layout/custom_fb_user_reply.xml 0xd46fc076
    res/layout/day_task.xml 0x5aabbbd4
    res/layout/duobaoguize.xml 0xf74a343a
    res/layout/editinfo.xml 0xf79c73e
    res/layout/exc_items.xml 0xfc97fca2
    res/layout/exchange.xml 0xd7d9bd0c
    res/layout/footer.xml 0x3bdaded3
    res/layout/gonglue.xml 0xe2b19282
    res/layout/header_in2.xml 0x391b476d
    res/layout/home.xml 0x559f16e0
    res/layout/hongbaoguize.xml 0x415eda7f
    res/layout/login.xml 0x19a964d6
    res/layout/me.xml 0x27603b66
    res/layout/my_qrcode.xml 0x39cd779
    res/layout/notitledialog.xml 0x858f9db5
    res/layout/notitledialog2.xml 0xcad9527e
    res/layout/qhb_list.xml 0x38be9d8c
    res/layout/qhb_list_item.xml 0x22a810e4
    res/layout/qianghongbao.xml 0x640b63fa
    res/layout/qianghongbao2.xml 0xfbfa9d13
    res/layout/qrcode.xml 0xfdc2da7d
    res/layout/qudao.xml 0x90676c51
    res/layout/qudao_item.xml 0xb3626e0e
    res/layout/selfapplist_item.xml 0x5e8f1726
    res/layout/sex_layout.xml 0xe2e05f94
    res/layout/shareapp.xml 0xd2f71cf4
    res/layout/shareapp2.xml 0x52625190
    res/layout/task_app_detail.xml 0x353605e7
    res/layout/task_appsign_nav_item.xml 0x71112f31
    res/layout/task_nav_item.xml 0xbaab890
    res/layout/time_layout.xml 0x283f8d99
    res/layout/tongji.xml 0x67ff2dcc
    res/layout/umeng_fb_fragment.xml 0x862fac31
    res/layout/umeng_fb_input_conversation_audio.xml 0x21ee416
    res/layout/umeng_fb_reply_item_audio.xml 0x57971966
    res/layout/umeng_fb_reply_item_image.xml 0xfa2755ff
    res/layout/umeng_fb_reply_item_text.xml 0x14d550cf
    res/layout/umeng_fb_welcome_item.xml 0x2ec9e421
    res/layout/update_dialog.xml 0x179102ce
    res/layout/withdraw.xml 0x2bfbe032
    res/layout/wodeziliao.xml 0x108f6357
    res/layout/zhuanqian.xml 0x837aa08
    resources.arsc 0xc6828c1d
    assets/libwbsafeedit 0xb05a63a9
    assets/biduad_plugin/__pasys_remote_offer_wall.jar 0xa52110d8
    assets/signed.bin 0x8e6636cb
    assets/sdata.bin 0xa855cbad
    assets/af.bin 0x0
    运行截图
    VirSCAN

About VirSCAN | Privacy Policy | Contact us | Links | Help VirSCAN
Powered By CentOSpol

京ICP备11007605号-12

 pol

京公网安备 11010802020746号