VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load

File information
File Name :cn.wxhyi.usagetime.apk (File not down)
File Size :8278035 byte
File Type :application/zip
MD5:e68f4c5fe26c881271ca93b3817b3677
SHA1:3ace5328eb44cd89c4da9a7236857cd32cbec953
  • 扫描结果
  • 权限
  • 文件行为分析
  • Scanner results
    Scanner results:12%Scanner(s) (4/32)found malware!
    Behavior analysis report:         Habo file analysis
    Time: 2019-03-24 18:27:46 (CST)
    VirSCANVirSCAN
    Scanner Engine Ver Sig Ver Sig Date Scan result Time
    antiy AVL SDK 3.0 AVL SDK 3.0 2019-03-23 Found nothing 1
    avast 18.4.3895.0 18.4.3895.0 2019-03-24 Found nothing 4
    avg 10.0.1405 10.0.1405 2019-03-24 Found nothing 1
    baidu 2.0.1.0 4.1.3.52192 2.0.1.0 Found nothing 1
    baidusd 1.0 1.0 2019-03-23 Found nothing 1
    bitdefender 7.141118 7.141118 2019-03-23 Found nothing 7
    clamav 25396 0.100.2 2019-03-22 Found nothing 20
    drweb 5.0.2.3300 5.0.1.1 2019-02-23 Found nothing 14
    emsisoft 9.0.0.4324 9.0.0.4324 2014-07-03 Found nothing 14
    fortinet 1.000, 67.240, 67.171, 67.028 5.4.247 2019-03-24 Found nothing 3
    fprot 4.6.2.117 6.5.1.5418 2014-12-31 W32/Felix:EX:010!Eldorado 2
    fsecure 2015-08-01-02 9.13 2019-03-24 Found nothing 11
    gdata 25.21233 25.21233 2019-03-23 Found nothing 16
    ikarus 5.01.05 V1.32.39.0 2019-03-23 Unsafe.Adware.AndroidOS 6
    jiangmin 16.0.100 1.0.0.0 2019-03-23 Found nothing 4
    kaspersky 5.5.33 5.5.33 2019-03-23 Found nothing 25
    kingsoft 2.1 2.1 2013-09-22 Found nothing 17
    mcafee 8974 5400.1158 2018-08-03 Found nothing 15
    nod32 9075 3.0.21 2019-03-23 a variant of Android/Packed.Jiagu.D application 1
    panda 9.05.01 9.05.01 2017-03-30 Found nothing 4
    pcc 13.302.06 9.500-1005 2019-03-23 Found nothing 3
    qh360 1.0.1 1.0.1 2019-03-23 Found nothing 3
    qqphone 2.0.0.0 2.0.0.0 2019-03-23 Found nothing 1
    quickheal 14.00 14.00 2019-02-10 Android.Wapron.GEN24505 (PUP) 4
    rising 4813 4813 2019-03-23 Found nothing 8
    sophos 4.62 3.16.1 2016-09-20 Found nothing 60
    symantec 20151230.005 1.3.0.24 2015-12-30 Found nothing 1
    tachyon 9.9.9 9.9.9 2013-12-27 Found nothing 5
    thehacker 6.8.0.5 6.8.0.5 2017-03-30 Found nothing 7
    tws 17.47.17308 1.0.2.2108 2019-03-23 Found nothing 11
    vba 4.0.0 4.0.0 2019-03-22 Found nothing 6
    virusbuster 15.0.985.0 5.5.2.13 2014-12-05 Found nothing 5
    Heuristic/Suspicious Exact
    NOTICE: Results are not 100% accurate and can be reported as a false positive by some scannerswhen and if malware is found. Please judge these results for yourself.
  • 权限列表
    许可名称信息
    android.permission.PACKAGE_USAGE_STATS
    android.permission.WRITE_EXTERNAL_STORAGE写外部存储器(如:SD卡)
    android.permission.INTERNET连接网络(2G或3G)
    android.permission.ACCESS_NETWORK_STATE读取网络状态(2G或3G)
    android.permission.READ_PHONE_STATE读取电话状态
    android.permission.ACCESS_WIFI_STATE读取wifi网络状态
    android.permission.BLUETOOTH连接蓝牙设备
    android.permission.READ_LOGS读取系统日志
    android.permission.SYSTEM_ALERT_WINDOW显示系统窗口
    android.permission.ACCESS_COARSE_LOCATION获取粗略的位置(通过wifi、基站)
    android.permission.BIND_VPN_SERVICE绑定VPN
    android.permission.REQUEST_INSTALL_PACKAGES
    android.permission.CHANGE_WIFI_STATE改变WIFI连接状态
    android.permission.ACCESS_LOCATION_EXTRA_COMMANDS访问额外的定位指令
    android.permission.BLUETOOTH_ADMIN搜寻蓝牙设备
    com.android.alarm.permission.SET_ALARM设置闹铃提醒
    android.permission.GET_TASKS获取有关当前或最近运行的任务信息
    android.permission.FOREGROUND_SERVICE
    android.permission.READ_EXTERNAL_STORAGE读外部存储器(如:SD卡)
  • 文件信息
    安全评分 :
    基本信息
    MD5:e68f4c5fe26c881271ca93b3817b3677
    包名:cn.wxhyi.usagetime
    最低运行环境:Unknown
    版权:China
    关键行为
    行为描述:修改原系统的EXE文件
    详情信息:C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\ARPPRODUCTICON.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut1_EDD4ABB1C1B34A9D84CE33FBFB5D3639.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut2_E88611396FF84AFCB2EE5C1594058E02.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut311_0951773981FA4AB2BC21B7DCEC95892A.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut31_2F252077BA3F4362913955273A708467.exe
    C:\Documents and Settings\Administrator\Application Data\SogouExplorer\Extension\com.sogou.snapTaker\0.4.2\npprintscreen.dll
    行为描述:跨进程写入数据
    详情信息:TargetProcess = C:\WINDOWS\system32\smss.exe, WriteAddress = 0x20060000, Size = 0x0000b000 TargetPID = 0x00000208
    TargetProcess = C:\WINDOWS\system32\smss.exe, WriteAddress = 0x00310000, Size = 0x00000233 TargetPID = 0x00000208
    TargetProcess = C:\WINDOWS\system32\smss.exe, WriteAddress = 0x00320000, Size = 0x000000df TargetPID = 0x00000208
    TargetProcess = C:\WINDOWS\system32\smss.exe, WriteAddress = 0x00330000, Size = 0x00000030 TargetPID = 0x00000208
    TargetProcess = C:\WINDOWS\system32\smss.exe, WriteAddress = 0x00340000, Size = 0x00000084 TargetPID = 0x00000208
    TargetProcess = C:\WINDOWS\system32\csrss.exe, WriteAddress = 0x20060000, Size = 0x0000b000 TargetPID = 0x00000248
    TargetProcess = C:\WINDOWS\system32\csrss.exe, WriteAddress = 0x03c90000, Size = 0x00000233 TargetPID = 0x00000248
    TargetProcess = C:\WINDOWS\system32\csrss.exe, WriteAddress = 0x03ca0000, Size = 0x000000df TargetPID = 0x00000248
    TargetProcess = C:\WINDOWS\system32\csrss.exe, WriteAddress = 0x03cb0000, Size = 0x00000030 TargetPID = 0x00000248
    TargetProcess = C:\WINDOWS\system32\csrss.exe, WriteAddress = 0x03cc0000, Size = 0x00000084 TargetPID = 0x00000248
    TargetProcess = C:\WINDOWS\system32\ieuser.exe, WriteAddress = 0x7ffd4200, Size = 0x00000004 TargetPID = 0x00000a5c
    TargetProcess = C:\WINDOWS\system32\%temp%\****.exe, WriteAddress = 0x0012f2ec, Size = 0x00000004 TargetPID = 0x00000a50
    TargetProcess = C:\WINDOWS\system32\winlogon.exe, WriteAddress = 0x20060000, Size = 0x0000b000 TargetPID = 0x00000260
    TargetProcess = C:\WINDOWS\system32\winlogon.exe, WriteAddress = 0x00e40000, Size = 0x00000233 TargetPID = 0x00000260
    TargetProcess = C:\WINDOWS\system32\winlogon.exe, WriteAddress = 0x010d0000, Size = 0x000000df TargetPID = 0x00000260
    行为描述:插入APC(异步过程调用)
    详情信息:C:\Program Files\Internet Explorer\iexplore.exe
    行为描述:创建远程线程
    详情信息:TargetProcess: smss.exe, InheritedFromPID = 4, ProcessID = 520, ThreadID = 2648, StartAddress = 00340000, Parameter = 00330000
    TargetProcess: csrss.exe, InheritedFromPID = 520, ProcessID = 584, ThreadID = 2660, StartAddress = 03CC0000, Parameter = 03CB0000
    TargetProcess: winlogon.exe, InheritedFromPID = 520, ProcessID = 608, ThreadID = 2676, StartAddress = 010F0000, Parameter = 010E0000
    TargetProcess: services.exe, InheritedFromPID = 608, ProcessID = 652, ThreadID = 2688, StartAddress = 00BD0000, Parameter = 00BC0000
    TargetProcess: lsass.exe, InheritedFromPID = 608, ProcessID = 664, ThreadID = 2700, StartAddress = 00DE0000, Parameter = 00DD0000
    TargetProcess: svchost.exe, InheritedFromPID = 652, ProcessID = 872, ThreadID = 2712, StartAddress = 025D0000, Parameter = 025C0000
    TargetProcess: svchost.exe, InheritedFromPID = 652, ProcessID = 936, ThreadID = 2720, StartAddress = 00E90000, Parameter = 00E80000
    TargetProcess: svchost.exe, InheritedFromPID = 652, ProcessID = 976, ThreadID = 2728, StartAddress = 05A70000, Parameter = 05A60000
    TargetProcess: svchost.exe, InheritedFromPID = 652, ProcessID = 1060, ThreadID = 2744, StartAddress = 007D0000, Parameter = 007C0000
    TargetProcess: svchost.exe, InheritedFromPID = 652, ProcessID = 1092, ThreadID = 2752, StartAddress = 01150000, Parameter = 01140000
    TargetProcess: spoolsv.exe, InheritedFromPID = 652, ProcessID = 1180, ThreadID = 2772, StartAddress = 015C0000, Parameter = 015B0000
    TargetProcess: jqs.exe, InheritedFromPID = 652, ProcessID = 1304, ThreadID = 2816, StartAddress = 013D0000, Parameter = 013C0000
    TargetProcess: alg.exe, InheritedFromPID = 652, ProcessID = 1624, ThreadID = 2856, StartAddress = 00D80000, Parameter = 00CB0000
    TargetProcess: explorer.exe, InheritedFromPID = 1932, ProcessID = 2000, ThreadID = 2864, StartAddress = 03400000, Parameter = 026B0000
    TargetProcess: reader_sl.exe, InheritedFromPID = 2000, ProcessID = 220, ThreadID = 2872, StartAddress = 00AD0000, Parameter = 00AC0000
    行为描述:获取TickCount值
    详情信息:TickCount = 221578, SleepMilliseconds = 5000.
    行为描述:设置启动项
    详情信息:C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\htxueaht.exe
    行为描述:设置特殊文件属性
    详情信息:C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\htxueaht.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\ARPPRODUCTICON.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut1_EDD4ABB1C1B34A9D84CE33FBFB5D3639.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut2_E88611396FF84AFCB2EE5C1594058E02.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut311_0951773981FA4AB2BC21B7DCEC95892A.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut31_2F252077BA3F4362913955273A708467.exe
    行为描述:在根目录创建自运行文件
    详情信息:C:\DiskX\autorun.inf
    行为描述:设置特殊文件夹属性
    详情信息:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
    C:\Documents and Settings\Administrator\Local Settings\History
    C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
    C:\Documents and Settings\Administrator\Cookies
    C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
    C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
    C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds Cache
    C:\Documents and Settings\Administrator\IECompatCache
    行为描述:直接调用系统关键API
    详情信息:Index = 0x00000115, Name: NtWriteVirtualMemory, Instruction Address = 0x0040296C
    Index = 0x0000009A, Name: NtQueryInformationProcess, Instruction Address = 0x004019BF
    行为描述:查找文件方式探测虚拟机
    详情信息:FindFirstFileEx: FileName = C:\Documents and Settings\Administrator\「开始」菜单\程序\Oracle VM VirtualBox Guest Additions\*.*
    进程行为
    行为描述:创建进程
    详情信息:[0x00000a18]ImagePath = C:\Program Files\Internet Explorer\iexplore.exe, CmdLine = "C:\Program Files\Internet Explorer\IEXPLORE.EXE"
    [0x00000a2c]ImagePath = C:\Program Files\Internet Explorer\iexplore.exe, CmdLine = "C:\Program Files\Internet Explorer\IEXPLORE.EXE"
    [0x00000ca0]ImagePath = C:\Program Files\Internet Explorer\iexplore.exe, CmdLine = "C:\Program Files\Internet Explorer\IEXPLORE.EXE" http://www.yixun.com/
    [0x00000cec]ImagePath = C:\Program Files\Internet Explorer\iexplore.exe, CmdLine = "C:\Program Files\Internet Explorer\IEXPLORE.EXE" SCODEF:3232 CREDAT:79873
    行为描述:创建本地线程
    详情信息:TargetProcess: iexplore.exe, InheritedFromPID = 2536, ProcessID = 2604, ThreadID = 2624, StartAddress = 20057268, Parameter = 00000000
    TargetProcess: iexplore.exe, InheritedFromPID = 2536, ProcessID = 2604, ThreadID = 2628, StartAddress = 20057195, Parameter = 00000000
    TargetProcess: iexplore.exe, InheritedFromPID = 2536, ProcessID = 2604, ThreadID = 2632, StartAddress = 2005716E, Parameter = 00000000
    TargetProcess: csrss.exe, InheritedFromPID = 520, ProcessID = 584, ThreadID = 2664, StartAddress = 20067268, Parameter = 00000000
    TargetProcess: csrss.exe, InheritedFromPID = 520, ProcessID = 584, ThreadID = 2668, StartAddress = 20067195, Parameter = 00000000
    TargetProcess: winlogon.exe, InheritedFromPID = 520, ProcessID = 608, ThreadID = 2680, StartAddress = 20067268, Parameter = 00000000
    TargetProcess: winlogon.exe, InheritedFromPID = 520, ProcessID = 608, ThreadID = 2684, StartAddress = 20067195, Parameter = 00000000
    TargetProcess: services.exe, InheritedFromPID = 608, ProcessID = 652, ThreadID = 2692, StartAddress = 20067268, Parameter = 00000000
    TargetProcess: services.exe, InheritedFromPID = 608, ProcessID = 652, ThreadID = 2696, StartAddress = 20067195, Parameter = 00000000
    TargetProcess: lsass.exe, InheritedFromPID = 608, ProcessID = 664, ThreadID = 2704, StartAddress = 20067268, Parameter = 00000000
    TargetProcess: lsass.exe, InheritedFromPID = 608, ProcessID = 664, ThreadID = 2708, StartAddress = 20067195, Parameter = 00000000
    TargetProcess: svchost.exe, InheritedFromPID = 652, ProcessID = 872, ThreadID = 2716, StartAddress = 20067268, Parameter = 00000000
    TargetProcess: svchost.exe, InheritedFromPID = 652, ProcessID = 936, ThreadID = 2724, StartAddress = 20067268, Parameter = 00000000
    TargetProcess: svchost.exe, InheritedFromPID = 652, ProcessID = 976, ThreadID = 2732, StartAddress = 20067268, Parameter = 00000000
    TargetProcess: svchost.exe, InheritedFromPID = 652, ProcessID = 936, ThreadID = 2736, StartAddress = 20067195, Parameter = 00000000
    行为描述:创建远程线程
    详情信息:TargetProcess: smss.exe, InheritedFromPID = 4, ProcessID = 520, ThreadID = 2648, StartAddress = 00340000, Parameter = 00330000
    TargetProcess: csrss.exe, InheritedFromPID = 520, ProcessID = 584, ThreadID = 2660, StartAddress = 03CC0000, Parameter = 03CB0000
    TargetProcess: winlogon.exe, InheritedFromPID = 520, ProcessID = 608, ThreadID = 2676, StartAddress = 010F0000, Parameter = 010E0000
    TargetProcess: services.exe, InheritedFromPID = 608, ProcessID = 652, ThreadID = 2688, StartAddress = 00BD0000, Parameter = 00BC0000
    TargetProcess: lsass.exe, InheritedFromPID = 608, ProcessID = 664, ThreadID = 2700, StartAddress = 00DE0000, Parameter = 00DD0000
    TargetProcess: svchost.exe, InheritedFromPID = 652, ProcessID = 872, ThreadID = 2712, StartAddress = 025D0000, Parameter = 025C0000
    TargetProcess: svchost.exe, InheritedFromPID = 652, ProcessID = 936, ThreadID = 2720, StartAddress = 00E90000, Parameter = 00E80000
    TargetProcess: svchost.exe, InheritedFromPID = 652, ProcessID = 976, ThreadID = 2728, StartAddress = 05A70000, Parameter = 05A60000
    TargetProcess: svchost.exe, InheritedFromPID = 652, ProcessID = 1060, ThreadID = 2744, StartAddress = 007D0000, Parameter = 007C0000
    TargetProcess: svchost.exe, InheritedFromPID = 652, ProcessID = 1092, ThreadID = 2752, StartAddress = 01150000, Parameter = 01140000
    TargetProcess: spoolsv.exe, InheritedFromPID = 652, ProcessID = 1180, ThreadID = 2772, StartAddress = 015C0000, Parameter = 015B0000
    TargetProcess: jqs.exe, InheritedFromPID = 652, ProcessID = 1304, ThreadID = 2816, StartAddress = 013D0000, Parameter = 013C0000
    TargetProcess: alg.exe, InheritedFromPID = 652, ProcessID = 1624, ThreadID = 2856, StartAddress = 00D80000, Parameter = 00CB0000
    TargetProcess: explorer.exe, InheritedFromPID = 1932, ProcessID = 2000, ThreadID = 2864, StartAddress = 03400000, Parameter = 026B0000
    TargetProcess: reader_sl.exe, InheritedFromPID = 2000, ProcessID = 220, ThreadID = 2872, StartAddress = 00AD0000, Parameter = 00AC0000
    行为描述:枚举进程
    详情信息:N/A
    行为描述:跨进程写入数据
    详情信息:TargetProcess = C:\WINDOWS\system32\smss.exe, WriteAddress = 0x20060000, Size = 0x0000b000 TargetPID = 0x00000208
    TargetProcess = C:\WINDOWS\system32\smss.exe, WriteAddress = 0x00310000, Size = 0x00000233 TargetPID = 0x00000208
    TargetProcess = C:\WINDOWS\system32\smss.exe, WriteAddress = 0x00320000, Size = 0x000000df TargetPID = 0x00000208
    TargetProcess = C:\WINDOWS\system32\smss.exe, WriteAddress = 0x00330000, Size = 0x00000030 TargetPID = 0x00000208
    TargetProcess = C:\WINDOWS\system32\smss.exe, WriteAddress = 0x00340000, Size = 0x00000084 TargetPID = 0x00000208
    TargetProcess = C:\WINDOWS\system32\csrss.exe, WriteAddress = 0x20060000, Size = 0x0000b000 TargetPID = 0x00000248
    TargetProcess = C:\WINDOWS\system32\csrss.exe, WriteAddress = 0x03c90000, Size = 0x00000233 TargetPID = 0x00000248
    TargetProcess = C:\WINDOWS\system32\csrss.exe, WriteAddress = 0x03ca0000, Size = 0x000000df TargetPID = 0x00000248
    TargetProcess = C:\WINDOWS\system32\csrss.exe, WriteAddress = 0x03cb0000, Size = 0x00000030 TargetPID = 0x00000248
    TargetProcess = C:\WINDOWS\system32\csrss.exe, WriteAddress = 0x03cc0000, Size = 0x00000084 TargetPID = 0x00000248
    TargetProcess = C:\WINDOWS\system32\ieuser.exe, WriteAddress = 0x7ffd4200, Size = 0x00000004 TargetPID = 0x00000a5c
    TargetProcess = C:\WINDOWS\system32\%temp%\****.exe, WriteAddress = 0x0012f2ec, Size = 0x00000004 TargetPID = 0x00000a50
    TargetProcess = C:\WINDOWS\system32\winlogon.exe, WriteAddress = 0x20060000, Size = 0x0000b000 TargetPID = 0x00000260
    TargetProcess = C:\WINDOWS\system32\winlogon.exe, WriteAddress = 0x00e40000, Size = 0x00000233 TargetPID = 0x00000260
    TargetProcess = C:\WINDOWS\system32\winlogon.exe, WriteAddress = 0x010d0000, Size = 0x000000df TargetPID = 0x00000260
    文件行为
    行为描述:创建文件
    详情信息:C:\Program Files\Internet Explorer\dmlconf.dat
    C:\DiskX\RECYCLER\S-8-8-83-8445484737-1042040575-140614156-4407\QjvEHePp.exe
    C:\DiskX\RECYCLER\S-8-8-83-8445484737-1042040575-140614156-4407\fbbVILfW.cpl
    C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\RecoveryStore.{3B80C100-4E2A-11E9-91C0-7B****28}.dat
    C:\Documents and Settings\Administrator\Local Settings\Temp\~DF20C8.tmp
    C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{3B80C101-4E2A-11E9-91C0-7B****28}.dat
    C:\Documents and Settings\Administrator\Local Settings\Temp\~DF3130.tmp
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\yixun_com[1]
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\favicon[1].ico
    C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Protect\S-*\5282e7f2-6015-4d4d-b96e-fb6da75a1a9c
    行为描述:修改原系统的EXE文件
    详情信息:C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\ARPPRODUCTICON.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut1_EDD4ABB1C1B34A9D84CE33FBFB5D3639.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut2_E88611396FF84AFCB2EE5C1594058E02.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut311_0951773981FA4AB2BC21B7DCEC95892A.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut31_2F252077BA3F4362913955273A708467.exe
    C:\Documents and Settings\Administrator\Application Data\SogouExplorer\Extension\com.sogou.snapTaker\0.4.2\npprintscreen.dll
    行为描述:创建可执行文件
    详情信息:C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\htxueaht.exe
    C:\DiskX\RECYCLER\S-8-8-83-8445484737-1042040575-140614156-4407\QjvEHePp.exe
    C:\DiskX\RECYCLER\S-8-8-83-8445484737-1042040575-140614156-4407\fbbVILfW.cpl
    C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
    行为描述:删除文件
    详情信息:C:\Documents and Settings\Administrator\Local Settings\Temp\~DF20C8.tmp
    C:\Documents and Settings\Administrator\Local Settings\Temp\~DF3130.tmp
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\favicon[1].ico
    C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
    行为描述:覆盖已有文件
    详情信息:C:\Program Files\Internet Explorer\dmlconf.dat
    行为描述:复制文件
    详情信息:C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe ---> C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\htxueaht.exe
    行为描述:设置启动项
    详情信息:C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\htxueaht.exe
    行为描述:内存映射方式修改可执行文件
    详情信息:C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\ARPPRODUCTICON.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut1_EDD4ABB1C1B34A9D84CE33FBFB5D3639.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut2_E88611396FF84AFCB2EE5C1594058E02.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut311_0951773981FA4AB2BC21B7DCEC95892A.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut31_2F252077BA3F4362913955273A708467.exe
    C:\Documents and Settings\Administrator\Application Data\SogouExplorer\Extension\com.sogou.snapTaker\0.4.2\npprintscreen.dll
    行为描述:设置特殊文件属性
    详情信息:C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\htxueaht.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\ARPPRODUCTICON.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut1_EDD4ABB1C1B34A9D84CE33FBFB5D3639.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut2_E88611396FF84AFCB2EE5C1594058E02.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut311_0951773981FA4AB2BC21B7DCEC95892A.exe
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut31_2F252077BA3F4362913955273A708467.exe
    行为描述:查找文件
    详情信息:FileName = C:\Program Files\Internet Explorer\IEXPLORE.EXE
    FileName = C:\Program Files\Internet Explorer\iexplore.exe
    FileName = C:\*.*
    FileName = C:\Documents and Settings\Administrator\「开始」菜单\*.*
    FileName = C:\Documents and Settings\All Users\「开始」菜单\*.*
    FileName = C:\Documents and Settings\Administrator\「开始」菜单\程序\*.*
    FileName = C:\Documents and Settings\All Users\「开始」菜单\程序\*.*
    FileName = C:\Documents and Settings\Administrator\桌面\*.*
    FileName = C:\Documents and Settings\All Users\桌面\*.*
    FileName = C:\Documents and Settings\Administrator\「开始」菜单\程序\Microsoft Office\*.*
    FileName = C:\Documents and Settings\Administrator\「开始」菜单\程序\WinRAR\*.*
    FileName = C:\Documents and Settings\Administrator\「开始」菜单\程序\附件\*.*
    FileName = C:\Documents and Settings\Administrator\「开始」菜单\程序\附件\辅助工具\*.*
    FileName = C:\Documents and Settings\Administrator\「开始」菜单\程序\附件\系统工具\*.*
    FileName = C:\Documents and Settings
    行为描述:在根目录创建自运行文件
    详情信息:C:\DiskX\autorun.inf
    行为描述:设置特殊文件夹属性
    详情信息:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
    C:\Documents and Settings\Administrator\Local Settings\History
    C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
    C:\Documents and Settings\Administrator\Cookies
    C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
    C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
    C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds Cache
    C:\Documents and Settings\Administrator\IECompatCache
    行为描述:修改文件内容
    详情信息:C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\htxueaht.exe ---> Offset = 0
    C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\htxueaht.exe ---> Offset = 65536
    C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\htxueaht.exe ---> Offset = 4096
    C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\htxueaht.exe ---> Offset = 8192
    C:\Program Files\Internet Explorer\dmlconf.dat ---> Offset = 0
    C:\WINDOWS\system32\CatRoot2\dberr.txt ---> Offset = 5382
    C:\DiskX\RECYCLER\S-8-8-83-8445484737-1042040575-140614156-4407\QjvEHePp.exe ---> Offset = 0
    C:\DiskX\autorun.inf ---> Offset = 0
    C:\DiskX\autorun.inf ---> Offset = 3
    C:\DiskX\autorun.inf ---> Offset = 5278
    C:\DiskX\autorun.inf ---> Offset = 5619
    C:\DiskX\RECYCLER\S-8-8-83-8445484737-1042040575-140614156-4407\fbbVILfW.cpl ---> Offset = 0
    C:\WINDOWS\system32\CatRoot2\dberr.txt ---> Offset = 5712
    C:\WINDOWS\system32\CatRoot2\dberr.txt ---> Offset = 6042
    C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\RecoveryStore.{3B80C100-4E2A-11E9-91C0-7B****28}.dat ---> Offset = 512
    网络行为
    行为描述:下载文件
    详情信息:URLDownloadToFileW: http://ww****om/favicon.ico ---> C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
    C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
    行为描述:连接指定站点
    详情信息:InternetConnectA: ServerName = ww****om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x00000000
    InternetConnectA: ServerName = ur****om, PORT = 443, UserName = , Password = , hSession = 0x00cc0010, hConnect = 0x00cc0014, Flags = 0x00000200
    行为描述:打开HTTP连接
    详情信息:InternetOpenA: UserAgent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; KB974489), hSession = 0x00cc0004
    InternetOpenA: UserAgent: VCSoapClient, hSession = 0x00cc0010
    行为描述:建立到一个指定的套接字连接
    详情信息:URL: su****om, IP: **.133.40.**:447, SOCKET = 0x000000c0
    URL: go****om, IP: **.133.40.**:80, SOCKET = 0x000000bc
    URL: tv****om, IP: **.133.40.**:447, SOCKET = 0x00000104
    URL: ww****om, IP: **.133.40.**:80, SOCKET = 0x0000045c
    URL: ww****om, IP: **.133.40.**:80, SOCKET = 0x000005a0
    URL: ur****om, IP: **.133.40.**:443, SOCKET = 0x000005ac
    URL: rt****om, IP: **.133.40.**:447, SOCKET = 0x00000110
    URL: wq****om, IP: **.133.40.**:447, SOCKET = 0x00000104
    行为描述:读取网络文件
    详情信息:hFile = 0x00cc000c, BytesToRead =2048, BytesRead = 2048.
    hFile = 0x00cc0018, BytesToRead =4095, BytesRead = 4095.
    行为描述:发送HTTP包
    详情信息:GET / HTTP/1.1 Accept: */* Accept-Language: zh-cn User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; KB974489) Accept-Encoding: gzip, deflate Host: ww****om Connection: Keep-Alive
    GET /favicon.ico HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; KB974489) Host: ww****om Connection: Keep-Alive
    行为描述:打开HTTP请求
    详情信息:HttpOpenRequestA: ww****om:80/, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x00400200
    HttpOpenRequestA: ww****om:80/favicon.ico, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x00600010
    HttpOpenRequestA: ur****om:443/urs.asmx?msurs-client-key=g2uwd2d6egjfjt6fehywwg%3d%3d&msurs-patented-lock=enzqfuobmxk%3d, hConnect = 0x00cc0014, hRequest = 0x00cc0018, Verb: POST, Referer: , Flags = 0x04880300
    行为描述:按名称获取主机地址
    详情信息:gethostbyname: go****om
    gethostbyname: su****om
    GetAddrInfoW: ww****om
    gethostbyname: tv****om
    GetAddrInfoW: ur****om
    gethostbyname: rt****om
    gethostbyname: wq****om
    注册表行为
    行为描述:修改注册表
    详情信息:\REGISTRY\MACHINE\SAM\SAM\Domains\Account\Users\000001F4\F
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-*\RefCount
    \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher\TracesProcessed
    \REGISTRY\USER\S-*\SessionInformation\ProgramCount
    \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings
    \REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\Recovery\Active\{3B80C100-4E2A-11E9-91C0-7B****28}
    \REGISTRY\USER\S-*\Software\Microsoft\CTF\TIP\{1188450c-fdab-47ae-80d8-c9633f71be64}\LanguageProfile\0x00000000\{63800dac-e7ca-4df9-9a5c-20765055488d}\Enable
    \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{1EA4DBF0-3C3B-11CF-810C-00AA00389B71}\1.1\0\win32\
    \REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\Main\Window_Placement
    \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\iexplore\Count
    \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\iexplore\Time
    \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\iexplore\LoadTime
    \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\iexplore\LoadTimeCount
    \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore\Count
    \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore\Time
    行为描述:删除注册表键值
    详情信息:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer
    \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride
    \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL
    行为描述:删除注册表键
    详情信息:\REGISTRY\USER\S-*\Software\Microsoft\CTF\TIP\{1188450c-fdab-47ae-80d8-c9633f71be64}\LanguageProfile\0x00000000\{63800dac-e7ca-4df9-9a5c-20765055488d}\
    \REGISTRY\USER\S-*\Software\Microsoft\CTF\TIP\{1188450c-fdab-47ae-80d8-c9633f71be64}\LanguageProfile\0x00000000\
    \REGISTRY\USER\S-*\Software\Microsoft\CTF\TIP\{1188450c-fdab-47ae-80d8-c9633f71be64}\LanguageProfile\
    \REGISTRY\USER\S-*\Software\Microsoft\CTF\TIP\{1188450c-fdab-47ae-80d8-c9633f71be64}\
    \REGISTRY\USER\S-*_CLASSES\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\InprocServer32\
    \REGISTRY\USER\S-*_CLASSES\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\
    \REGISTRY\USER\S-*_CLASSES\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}\InprocServer32\
    \REGISTRY\USER\S-*_CLASSES\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}\
    \REGISTRY\USER\S-*_CLASSES\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}\InprocServer32\
    \REGISTRY\USER\S-*_CLASSES\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}\
    \REGISTRY\USER\S-*_CLASSES\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}\InprocServer32\
    \REGISTRY\USER\S-*_CLASSES\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}\
    \REGISTRY\USER\S-*_CLASSES\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\InprocServer32\
    \REGISTRY\USER\S-*_CLASSES\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\
    \REGISTRY\USER\S-*_CLASSES\JavaPlugin.1000\CLSID\
    其他行为
    行为描述:创建互斥体
    详情信息:{2872BAEB-CECA-E562-CC5C-4F1A2BD10E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A35FD0E1C}
    {2872C0E2-CECA-E562-CC5C-4F1A2BD10E1C}
    {2872CC2C-CECA-E562-CC5C-4F1A2BD10E1C}
    {2872CC2C-CECA-E562-CC5C-4F1A2BD50E1C}
    {2872CC2C-CECA-E562-CC5C-4F1A2DD90E1C}
    {2872CC2C-CECA-E562-CC5C-4F1A2E190E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A2E190E1C}
    {2872CC2C-CECA-E562-CC5C-4F1A2E310E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A2E310E1C}
    {2872CC2C-CECA-E562-CC5C-4F1A2E5D0E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A35E90E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A2E5D0E1C}
    {2872CC2C-CECA-E562-CC5C-4F1A2E690E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A2E690E1C}
    行为描述:创建事件对象
    详情信息:EventName = Isolation Signal Registry Event (3B80C0FD-4E2A-11E9-91C0-7B****28, 0)
    EventName = IE_EarlyTabStart_0xca4
    EventName = Isolation Signal Registry Event (3B80C0FE-4E2A-11E9-91C0-7B****28, 0)
    EventName = DINPUTWINMM
    EventName = Global\userenv: User Profile setup event
    EventName = MSCTF.SendReceive.Event.ANB.IC
    EventName = MSCTF.SendReceive.Event.ENH.IC
    EventName = MSCTF.SendReceiveConection.Event.ENH.IC
    EventName = MSCTF.SendReceiveConection.Event.ANB.IC
    EventName = MSCTF.SendReceive.Event.EOD.IC
    EventName = MSCTF.SendReceiveConection.Event.EOD.IC
    EventName = MSCTF.SendReceive.Event.MJ.IC
    EventName = MSCTF.SendReceiveConection.Event.MJ.IC
    EventName = MSCTF.SendReceive.Event.MLE.IC
    EventName = MSCTF.SendReceiveConection.Event.MLE.IC
    行为描述:直接调用系统关键API
    详情信息:Index = 0x00000115, Name: NtWriteVirtualMemory, Instruction Address = 0x0040296C
    Index = 0x0000009A, Name: NtQueryInformationProcess, Instruction Address = 0x004019BF
    行为描述:修改后的可执行文件MD5
    详情信息:C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\ARPPRODUCTICON.exe ---> a641c993e285e3943c41fa72c54708ae
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut1_EDD4ABB1C1B34A9D84CE33FBFB5D3639.exe ---> b36bfd8548c99fa4cfdd5190cccb9169
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut2_E88611396FF84AFCB2EE5C1594058E02.exe ---> 14f96959e2e034679cf90819cd20e9f1
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut311_0951773981FA4AB2BC21B7DCEC95892A.exe ---> c67b8f8983b08acc2f2e1e8b401d4cdb
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut31_2F252077BA3F4362913955273A708467.exe ---> d1d1080078758cf2ccbfa014e81b533a
    C:\Documents and Settings\Administrator\Application Data\SogouExplorer\Extension\com.sogou.snapTaker\0.4.2\npprintscreen.dll ---> 8021cf2b32fc164d198b655f0cad1e90
    行为描述:打开事件
    详情信息:Global\SvcctrlStartEvent_A3752DX
    _fCanRegisterWithShellService
    \SECURITY\LSA_AUTHENTICATION_INITIALIZED
    HookSwitchHookEnabledEvent
    Isolation Signal Registry Event (3B80C0FD-4E2A-11E9-91C0-7B****28, 0)
    \INSTALLATION_SECURITY_HOLD
    MSFT.VSA.COM.DISABLE.3232
    MSFT.VSA.IEC.STATUS.6c736db0
    Isolation Signal Registry Event (3B80C0FE-4E2A-11E9-91C0-7B****28, 0)
    IE_EarlyTabStart_0xca4
    MSCTF.SendReceiveConection.Event.ENH.IC
    MSCTF.SendReceive.Event.ENH.IC
    MSCTF.SendReceiveConection.Event.ANB.IC
    MSCTF.SendReceive.Event.ANB.IC
    MSCTF.SendReceiveConection.Event.EOD.IC
    行为描述:获取TickCount值
    详情信息:TickCount = 221578, SleepMilliseconds = 5000.
    行为描述:调整进程token权限
    详情信息:SE_DEBUG_PRIVILEGE
    SE_AUDIT_PRIVILEGE
    SE_LOAD_DRIVER_PRIVILEGE
    SE_CHANGE_NOTIFY_PRIVILEGE
    SE_INC_BASE_PRIORITY_PRIVILEGE
    行为描述:枚举窗口
    详情信息:N/A
    行为描述:插入APC(异步过程调用)
    详情信息:C:\Program Files\Internet Explorer\iexplore.exe
    行为描述:修改后的可执行文件签名信息
    详情信息:C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\ARPPRODUCTICON.exe(签名验证: 未通过)
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut1_EDD4ABB1C1B34A9D84CE33FBFB5D3639.exe(签名验证: 未通过)
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut2_E88611396FF84AFCB2EE5C1594058E02.exe(签名验证: 未通过)
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut311_0951773981FA4AB2BC21B7DCEC95892A.exe(签名验证: 未通过)
    C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}\NewShortcut31_2F252077BA3F4362913955273A708467.exe(签名验证: 未通过)
    C:\Documents and Settings\Administrator\Application Data\SogouExplorer\Extension\com.sogou.snapTaker\0.4.2\npprintscreen.dll(签名验证: 未通过)
    行为描述:可执行文件签名信息
    详情信息:C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\htxueaht.exe(签名验证: 未通过)
    C:\DiskX\RECYCLER\S-8-8-83-8445484737-1042040575-140614156-4407\QjvEHePp.exe(签名验证: 未通过)
    C:\DiskX\RECYCLER\S-8-8-83-8445484737-1042040575-140614156-4407\fbbVILfW.cpl(签名验证: 未通过)
    C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico(签名验证: 未通过)
    行为描述:调用Sleep函数
    详情信息:[1]: MilliSeconds = 5000.
    行为描述:隐藏指定窗口
    详情信息:[Window,Class] = [,BrowserFrameGripperClass]
    [Window,Class] = [缩放级别,ToolbarWindow32]
    [Window,Class] = [,msctls_progress32]
    [Window,Class] = [,SysLink]
    [Window,Class] = [,Static]
    [Window,Class] = [文件大小未知,Static]
    [Window,Class] = [http://www.yixun.com/ - Windows Internet Explorer,IEFrame]
    [Window,Class] = [打开此类文件前总是询问(&W),Button]
    [Window,Class] = [发行者:,Static]
    [Window,Class] = [,UniversalSearchBand]
    [Window,Class] = [,TravelBand]
    [Window,Class] = [,CommandBarClass]
    [Window,Class] = [,ReBarWindow32]
    [Window,Class] = [,TabBandClass]
    行为描述:可执行文件MD5
    详情信息:C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\htxueaht.exe ---> dfb5daabb95dcfad1a5faf9ab1437076
    C:\DiskX\RECYCLER\S-8-8-83-8445484737-1042040575-140614156-4407\QjvEHePp.exe ---> dfb5daabb95dcfad1a5faf9ab1437076
    C:\DiskX\RECYCLER\S-8-8-83-8445484737-1042040575-140614156-4407\fbbVILfW.cpl ---> f562924d239a46eb60fad3c06777bdff
    C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico ---> fe1d0ee5901dd167ee9b28eece31786c
    行为描述:打开互斥体
    详情信息:ShimCacheMutex
    {2872C0E2-CECA-E562-CC5C-4F1A2BD10E1C}
    {2872BDC8-CECA-E562-CC5C-4F1A2BD10E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A2BD10E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A2BD50E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A2DD90E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A2E190E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A2E310E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A2E5D0E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A2E690E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A2F050E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A2F110E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A2F390E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A2F790E1C}
    {2872C6F9-CECA-E562-CC5C-4F1A2FA10E1C}
    行为描述:查找指定窗口
    详情信息:NtUserFindWindowEx: [Class,Window] = [Acrobat Viewer,]
    NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,]
    NtUserFindWindowEx: [Class,Window] = [,GINA Logon]
    NtUserFindWindowEx: [Class,Window] = [TXGuiFoundation,QQ2013]
    NtUserFindWindowEx: [Class,Window] = [CTXOPConntion_Class,OP_2269840561]
    NtUserFindWindowEx: [Class,Window] = [CicLoaderWndClass,]
    NtUserFindWindowEx: [Class,Window] = [Static,]
    NtUserFindWindowEx: [Class,Window] = [MS_AutodialMonitor,]
    NtUserFindWindowEx: [Class,Window] = [MS_WebCheckMonitor,]
    行为描述:查找文件方式探测虚拟机
    详情信息:FindFirstFileEx: FileName = C:\Documents and Settings\Administrator\「开始」菜单\程序\Oracle VM VirtualBox Guest Additions\*.*
    Activities
    活动名类型
    cn.wxhyi.usagetime.activity.SplashActivityandroid.intent.action.MAIN
    cn.wxhyi.usagetime.activity.SplashActivityandroid.intent.category.LAUNCHER
    com.tencent.tauth.AuthActivityandroid.intent.action.VIEW
    com.tencent.tauth.AuthActivityandroid.intent.category.DEFAULT
    com.tencent.tauth.AuthActivityandroid.intent.category.BROWSABLE
    启动方式
    名称信息
    cn.wxhyi.usagetime.widget.WidgetUsagetime22更新应用小部件时启动服务
    权限列表
    许可名称信息
    android.permission.PACKAGE_USAGE_STATS
    android.permission.WRITE_EXTERNAL_STORAGE写外部存储器(如:SD卡)
    android.permission.INTERNET连接网络(2G或3G)
    android.permission.ACCESS_NETWORK_STATE读取网络状态(2G或3G)
    android.permission.READ_PHONE_STATE读取电话状态
    android.permission.ACCESS_WIFI_STATE读取wifi网络状态
    android.permission.BLUETOOTH连接蓝牙设备
    android.permission.READ_LOGS读取系统日志
    android.permission.SYSTEM_ALERT_WINDOW显示系统窗口
    android.permission.ACCESS_COARSE_LOCATION获取粗略的位置(通过wifi、基站)
    android.permission.BIND_VPN_SERVICE绑定VPN
    android.permission.REQUEST_INSTALL_PACKAGES
    android.permission.CHANGE_WIFI_STATE改变WIFI连接状态
    android.permission.ACCESS_LOCATION_EXTRA_COMMANDS访问额外的定位指令
    android.permission.BLUETOOTH_ADMIN搜寻蓝牙设备
    com.android.alarm.permission.SET_ALARM设置闹铃提醒
    android.permission.GET_TASKS获取有关当前或最近运行的任务信息
    android.permission.FOREGROUND_SERVICE
    android.permission.READ_EXTERNAL_STORAGE读外部存储器(如:SD卡)
    服务列表
    名称
    cn.wxhyi.usagetime.activity.UsageTimeService
    cn.wxhyi.usagetime.vpn.AdVpnService
    com.qq.e.comm.DownloadService
    com.amap.api.location.APSService
    com.tencent.bugly.beta.tinker.TinkerResultService
    Providers
    名字信息
    android.support.v4.content.FileProvider
    com.tencent.bugly.beta.utils.BuglyFileProvider
    文件列表
    文件名 校验码
    META-INF/CHANGES 0xac0e55c8
    META-INF/DEPENDENCIES 0x900c16be
    META-INF/README.md 0x7ebf3d29
    META-INF/android.arch.core_runtime.version 0x5cd9fe4c
    META-INF/android.arch.lifecycle_livedata-core.version 0x5cd9fe4c
    META-INF/android.arch.lifecycle_livedata.version 0x5cd9fe4c
    META-INF/android.arch.lifecycle_runtime.version 0x5cd9fe4c
    META-INF/android.arch.lifecycle_viewmodel.version 0x5cd9fe4c
    META-INF/android.support.design_material.version 0x1eea3e84
    META-INF/androidx.appcompat_appcompat.version 0xfd7ea868
    META-INF/androidx.asynclayoutinflater_asynclayoutinflater.version 0xfd7ea868
    META-INF/androidx.cardview_cardview.version 0xfd7ea868
    META-INF/androidx.coordinatorlayout_coordinatorlayout.version 0xfd7ea868
    META-INF/androidx.core_core.version 0xfd7ea868
    META-INF/androidx.cursoradapter_cursoradapter.version 0xfd7ea868
    META-INF/androidx.customview_customview.version 0xfd7ea868
    META-INF/androidx.documentfile_documentfile.version 0xfd7ea868
    META-INF/androidx.drawerlayout_drawerlayout.version 0xfd7ea868
    META-INF/androidx.fragment_fragment.version 0xfd7ea868
    META-INF/androidx.interpolator_interpolator.version 0xfd7ea868
    META-INF/androidx.legacy_legacy-support-core-ui.version 0xfd7ea868
    META-INF/androidx.legacy_legacy-support-core-utils.version 0xfd7ea868
    META-INF/androidx.legacy_legacy-support-v4.version 0xfd7ea868
    META-INF/androidx.loader_loader.version 0xfd7ea868
    META-INF/androidx.localbroadcastmanager_localbroadcastmanager.version 0xfd7ea868
    META-INF/androidx.media_media.version 0xfd7ea868
    META-INF/androidx.print_print.version 0xfd7ea868
    META-INF/androidx.recyclerview_recyclerview.version 0xfd7ea868
    META-INF/androidx.slidingpanelayout_slidingpanelayout.version 0xfd7ea868
    META-INF/androidx.swiperefreshlayout_swiperefreshlayout.version 0xfd7ea868
    META-INF/androidx.transition_transition.version 0xfd7ea868
    META-INF/androidx.vectordrawable_vectordrawable-animated.version 0xfd7ea868
    META-INF/androidx.vectordrawable_vectordrawable.version 0xfd7ea868
    META-INF/androidx.versionedparcelable_versionedparcelable.version 0xfd7ea868
    META-INF/androidx.viewpager_viewpager.version 0xfd7ea868
    META-INF/com.google.android.material_material.version 0xcd30e42
    META-INF/proguard/androidx-annotations.pro 0x3c5c86e2
    META-INF/services/javax.ws.rs.ext.MessageBodyReader 0x963aefaa
    META-INF/services/javax.ws.rs.ext.MessageBodyWriter 0x963aefaa
    META-INF/services/javax.ws.rs.ext.Providers 0x963aefaa
    META-INF/services/org.glassfish.jersey.internal.spi.AutoDiscoverable 0x24b67b96
    META-INF/services/sun.net.spi.nameservice.NameServiceDescriptor 0xd7ca5a4a
    assets/.appkey 0xbb61ef4e
    assets/appinfo/usagetime_db_ut_appinfo 0x425f5854
    assets/appinfo/usagetime_db_ut_apptype 0xf3c0c896
    assets/background.9.png 0x2b654113
    assets/buttonNegt.png 0xbf8691b8
    assets/buttonPost.png 0x6231c3b4
    assets/button_green.9.png 0xab4b0557
    assets/button_red.9.png 0xded221c2
    assets/com.tencent.open.config.json 0xb3d4a81a
    assets/com.tencent.plus.bar.png 0x5fd36d43
    assets/com.tencent.plus.blue_disable.png 0xf0e0db56
    assets/com.tencent.plus.blue_down.png 0xb6bdc1b
    assets/com.tencent.plus.blue_normal.png 0x18382c6e
    assets/com.tencent.plus.gray_disable.png 0x9375206c
    assets/com.tencent.plus.gray_down.png 0xcbe30e37
    assets/com.tencent.plus.gray_normal.png 0xbf8cba3
    assets/com.tencent.plus.ic_error.png 0xed6b2186
    assets/com.tencent.plus.ic_success.png 0x20ea665b
    assets/com.tencent.plus.logo.png 0x91dff5be
    assets/config.properties 0xc738f322
    assets/gdt_plugin/gdtadv2.jar 0xc02cc863
    assets/libjiagu.so 0xb9f22286
    assets/libwbsafeedit 0xb05a63a9
    assets/libwbsafeedit_64 0xf8f2144
    assets/libwbsafeedit_x86 0xfc7f4f0b
    assets/libwbsafeedit_x86_64 0xf630540c
    assets/settings.json 0x8afbc1a
    assets/yyb_appdetail_bg_floatingwindow.9.png 0x2e9abd8b
    assets/yyb_appdetail_showmore.png 0xcfd41321
    assets/yyb_friends.png 0xf969c41e
    assets/yyb_icon_back.png 0x58d07682
    assets/yyb_qq.png 0xa289050d
    assets/yyb_qzone.png 0x20e15be3
    assets/yyb_topbar.9.png 0x410133f6
    assets/yyb_weixin.png 0x3402b818
    classes.dex 0x5da78b6a
    com/sun/jna/aix-ppc/libjnidispatch.a 0x6cf1801c
    com/sun/jna/darwin/libjnidispatch.jnilib 0xc3488d14
    com/sun/jna/w32ce-arm/jnidispatch.dll 0x89b57c4a
    com/sun/jna/win32-x86-64/jnidispatch.dll 0x3cbccab6
    com/sun/jna/win32-x86/jnidispatch.dll 0x74c26b4c
    google/protobuf/any.proto 0x8c0112fb
    google/protobuf/api.proto 0x78dd1999
    google/protobuf/compiler/plugin.proto 0x313a60f0
    google/protobuf/descriptor.proto 0xcf0f7ac5
    google/protobuf/duration.proto 0xf0608173
    google/protobuf/empty.proto 0x40c3ddd1
    google/protobuf/field_mask.proto 0xf5d47937
    google/protobuf/source_context.proto 0x15273313
    google/protobuf/struct.proto 0xa17eb6dc
    google/protobuf/timestamp.proto 0x4949f8a5
    google/protobuf/type.proto 0xee4581e7
    google/protobuf/wrappers.proto 0xd42cba8d
    javax/annotation/CheckForNull.java 0x266f00ba
    javax/annotation/CheckForSigned.java 0xd9242abc
    javax/annotation/CheckReturnValue.java 0x2d5e946b
    javax/annotation/Detainted.java 0xbebcf69b
    javax/annotation/MatchesPattern.java 0x3a10a830
    javax/annotation/Nonnegative.java 0x630fc0ad
    javax/annotation/Nonnull.java 0xbd70703e
    javax/annotation/Nullable.java 0xcf5709c7
    javax/annotation/OverridingMethodsMustInvokeSuper.java 0xa55047d6
    javax/annotation/ParametersAreNonnullByDefault.java 0xd23838e1
    javax/annotation/PropertyKey.java 0x51b3e48d
    javax/annotation/RegEx.java 0xec08bc6d
    javax/annotation/Signed.java 0xecb7c8ff
    javax/annotation/Syntax.java 0x6b3a95b9
    javax/annotation/Tainted.java 0x962f9703
    javax/annotation/Untainted.java 0xf8f1fd96
    javax/annotation/WillClose.java 0x5b1f36c4
    javax/annotation/WillCloseWhenClosed.java 0xf43391b5
    javax/annotation/WillNotClose.java 0x5f4d4d6c
    javax/annotation/concurrent/GuardedBy.java 0xc452be6e
    javax/annotation/concurrent/Immutable.java 0x4202ab7b
    javax/annotation/concurrent/NotThreadSafe.java 0x4615fb21
    javax/annotation/concurrent/ThreadSafe.java 0x7d7bccd8
    javax/annotation/meta/Exclusive.java 0x82acf1be
    javax/annotation/meta/Exhaustive.java 0x3164434
    javax/annotation/meta/TypeQualifier.java 0xad98b559
    javax/annotation/meta/TypeQualifierDefault.java 0x7a82ac0f
    javax/annotation/meta/TypeQualifierNickname.java 0xdf8746b1
    javax/annotation/meta/TypeQualifierValidator.java 0x6f83af50
    javax/annotation/meta/When.java 0x83bb6837
    lib/armeabi/libBugly.so 0xc8b00a4c
    lib/armeabi/libX86Bridge.so 0x313030ea
    org/apache/commons/codec/language/bm/ash_approx_any.txt 0x938cd9eb
    org/apache/commons/codec/language/bm/ash_approx_common.txt 0x505504a5
    org/apache/commons/codec/language/bm/ash_approx_cyrillic.txt 0xfe8ffc5f
    org/apache/commons/codec/language/bm/ash_approx_english.txt 0xbc9e748d
    org/apache/commons/codec/language/bm/ash_approx_french.txt 0x1a67287a
    org/apache/commons/codec/language/bm/ash_approx_german.txt 0x2fb1098b
    org/apache/commons/codec/language/bm/ash_approx_hebrew.txt 0xce032a4b
    org/apache/commons/codec/language/bm/ash_approx_hungarian.txt 0x9c55ad03
    org/apache/commons/codec/language/bm/ash_approx_polish.txt 0xa5b3d051
    org/apache/commons/codec/language/bm/ash_approx_romanian.txt 0xe32f54e8
    org/apache/commons/codec/language/bm/ash_approx_russian.txt 0xdd6ffa45
    org/apache/commons/codec/language/bm/ash_approx_spanish.txt 0x9c55ad03
    org/apache/commons/codec/language/bm/ash_exact_any.txt 0x87dabe69
    org/apache/commons/codec/language/bm/ash_exact_approx_common.txt 0x6003c285
    org/apache/commons/codec/language/bm/ash_exact_common.txt 0x38605d45
    org/apache/commons/codec/language/bm/ash_exact_cyrillic.txt 0x9df22ffd
    org/apache/commons/codec/language/bm/ash_exact_english.txt 0x9df22ffd
    org/apache/commons/codec/language/bm/ash_exact_french.txt 0x9df22ffd
    org/apache/commons/codec/language/bm/ash_exact_german.txt 0x5947830a
    org/apache/commons/codec/language/bm/ash_exact_hebrew.txt 0xce032a4b
    org/apache/commons/codec/language/bm/ash_exact_hungarian.txt 0x9df22ffd
    org/apache/commons/codec/language/bm/ash_exact_polish.txt 0xce3bc4d1
    org/apache/commons/codec/language/bm/ash_exact_romanian.txt 0x9df22ffd
    org/apache/commons/codec/language/bm/ash_exact_russian.txt 0xe76e477c
    org/apache/commons/codec/language/bm/ash_exact_spanish.txt 0x9df22ffd
    org/apache/commons/codec/language/bm/ash_hebrew_common.txt 0xb50094da
    org/apache/commons/codec/language/bm/ash_lang.txt 0x36ab6797
    org/apache/commons/codec/language/bm/ash_languages.txt 0x7cf803ba
    org/apache/commons/codec/language/bm/ash_rules_any.txt 0xd145b4d3
    org/apache/commons/codec/language/bm/ash_rules_cyrillic.txt 0x9275ae66
    org/apache/commons/codec/language/bm/ash_rules_english.txt 0x5e21bc20
    org/apache/commons/codec/language/bm/ash_rules_french.txt 0xe01f0635
    org/apache/commons/codec/language/bm/ash_rules_german.txt 0xba199e11
    org/apache/commons/codec/language/bm/ash_rules_hebrew.txt 0xb7e451cb
    org/apache/commons/codec/language/bm/ash_rules_hungarian.txt 0xd1851e11
    org/apache/commons/codec/language/bm/ash_rules_polish.txt 0x1477e19
    org/apache/commons/codec/language/bm/ash_rules_romanian.txt 0x8475a992
    org/apache/commons/codec/language/bm/ash_rules_russian.txt 0x14115c69
    org/apache/commons/codec/language/bm/ash_rules_spanish.txt 0xf079f98a
    org/apache/commons/codec/language/bm/gen_approx_any.txt 0xea3e938a
    org/apache/commons/codec/language/bm/gen_approx_arabic.txt 0xe1a71491
    org/apache/commons/codec/language/bm/gen_approx_common.txt 0xd6800efa
    org/apache/commons/codec/language/bm/gen_approx_cyrillic.txt 0x1307074b
    org/apache/commons/codec/language/bm/gen_approx_czech.txt 0xac2d9983
    org/apache/commons/codec/language/bm/gen_approx_dutch.txt 0xac2d9983
    org/apache/commons/codec/language/bm/gen_approx_english.txt 0xbc9e748d
    org/apache/commons/codec/language/bm/gen_approx_french.txt 0x90d68a28
    org/apache/commons/codec/language/bm/gen_approx_german.txt 0xcd4efd3c
    org/apache/commons/codec/language/bm/gen_approx_greek.txt 0xac2d9983
    org/apache/commons/codec/language/bm/gen_approx_greeklatin.txt 0x91e5d3a7
    org/apache/commons/codec/language/bm/gen_approx_hebrew.txt 0xce032a4b
    org/apache/commons/codec/language/bm/gen_approx_hungarian.txt 0x46caf990
    org/apache/commons/codec/language/bm/gen_approx_italian.txt 0x46caf990
    org/apache/commons/codec/language/bm/gen_approx_polish.txt 0xc31334cf
    org/apache/commons/codec/language/bm/gen_approx_portuguese.txt 0xac2d9983
    org/apache/commons/codec/language/bm/gen_approx_romanian.txt 0xd3576068
    org/apache/commons/codec/language/bm/gen_approx_russian.txt 0xd00b5f6a
    org/apache/commons/codec/language/bm/gen_approx_spanish.txt 0x9c5b0217
    org/apache/commons/codec/language/bm/gen_approx_turkish.txt 0xac2d9983
    org/apache/commons/codec/language/bm/gen_exact_any.txt 0xfb7ec53e
    org/apache/commons/codec/language/bm/gen_exact_approx_common.txt 0x1c78e51f
    org/apache/commons/codec/language/bm/gen_exact_arabic.txt 0x212abd41
    org/apache/commons/codec/language/bm/gen_exact_common.txt 0xfb724c8f
    org/apache/commons/codec/language/bm/gen_exact_cyrillic.txt 0xad8a1b7d
    org/apache/commons/codec/language/bm/gen_exact_czech.txt 0xad8a1b7d
    org/apache/commons/codec/language/bm/gen_exact_dutch.txt 0xce032a4b
    org/apache/commons/codec/language/bm/gen_exact_english.txt 0xad8a1b7d
    org/apache/commons/codec/language/bm/gen_exact_french.txt 0xce032a4b
    org/apache/commons/codec/language/bm/gen_exact_german.txt 0xf232de88
    org/apache/commons/codec/language/bm/gen_exact_greek.txt 0xce032a4b
    org/apache/commons/codec/language/bm/gen_exact_greeklatin.txt 0xc8aeb5e
    org/apache/commons/codec/language/bm/gen_exact_hebrew.txt 0xce032a4b
    org/apache/commons/codec/language/bm/gen_exact_hungarian.txt 0xce032a4b
    org/apache/commons/codec/language/bm/gen_exact_italian.txt 0xce032a4b
    org/apache/commons/codec/language/bm/gen_exact_polish.txt 0x554a3e5b
    org/apache/commons/codec/language/bm/gen_exact_portuguese.txt 0xce032a4b
    org/apache/commons/codec/language/bm/gen_exact_romanian.txt 0xce032a4b
    org/apache/commons/codec/language/bm/gen_exact_russian.txt 0xe76e477c
    org/apache/commons/codec/language/bm/gen_exact_spanish.txt 0x1dc9f8ac
    org/apache/commons/codec/language/bm/gen_exact_turkish.txt 0xce032a4b
    org/apache/commons/codec/language/bm/gen_hebrew_common.txt 0x50c12cbb
    org/apache/commons/codec/language/bm/gen_lang.txt 0xc1c7ae34
    org/apache/commons/codec/language/bm/gen_languages.txt 0x803d0692
    org/apache/commons/codec/language/bm/gen_rules_any.txt 0x3c000685
    org/apache/commons/codec/language/bm/gen_rules_arabic.txt 0x57738550
    org/apache/commons/codec/language/bm/gen_rules_cyrillic.txt 0xc8fac8e5
    org/apache/commons/codec/language/bm/gen_rules_czech.txt 0xbca186d0
    org/apache/commons/codec/language/bm/gen_rules_dutch.txt 0x57760fee
    org/apache/commons/codec/language/bm/gen_rules_english.txt 0x53169626
    org/apache/commons/codec/language/bm/gen_rules_french.txt 0x7d470b2c
    org/apache/commons/codec/language/bm/gen_rules_german.txt 0x72646cd6
    org/apache/commons/codec/language/bm/gen_rules_greek.txt 0x272d2d0b
    org/apache/commons/codec/language/bm/gen_rules_greeklatin.txt 0xe37d11b4
    org/apache/commons/codec/language/bm/gen_rules_hebrew.txt 0x75aa315a
    org/apache/commons/codec/language/bm/gen_rules_hungarian.txt 0xc2585c44
    org/apache/commons/codec/language/bm/gen_rules_italian.txt 0x61d7c1e3
    org/apache/commons/codec/language/bm/gen_rules_polish.txt 0xf65e0e49
    org/apache/commons/codec/language/bm/gen_rules_portuguese.txt 0xa8a7fc4d
    org/apache/commons/codec/language/bm/gen_rules_romanian.txt 0x68cf863b
    org/apache/commons/codec/language/bm/gen_rules_russian.txt 0x83d196a3
    org/apache/commons/codec/language/bm/gen_rules_spanish.txt 0x896ee7f2
    org/apache/commons/codec/language/bm/gen_rules_turkish.txt 0xd3a4b4a2
    org/apache/commons/codec/language/bm/lang.txt 0x757d5ce1
    org/apache/commons/codec/language/bm/sep_approx_any.txt 0xdb401ace
    org/apache/commons/codec/language/bm/sep_approx_common.txt 0x9b26c34f
    org/apache/commons/codec/language/bm/sep_approx_french.txt 0xce032a4b
    org/apache/commons/codec/language/bm/sep_approx_hebrew.txt 0xce032a4b
    org/apache/commons/codec/language/bm/sep_approx_italian.txt 0x6165a00b
    org/apache/commons/codec/language/bm/sep_approx_portuguese.txt 0xa564babb
    org/apache/commons/codec/language/bm/sep_approx_spanish.txt 0xa564babb
    org/apache/commons/codec/language/bm/sep_exact_any.txt 0x9eec969b
    org/apache/commons/codec/language/bm/sep_exact_approx_common.txt 0x5afecfa5
    org/apache/commons/codec/language/bm/sep_exact_common.txt 0xc3d88c91
    org/apache/commons/codec/language/bm/sep_exact_french.txt 0x1a46b4f1
    org/apache/commons/codec/language/bm/sep_exact_hebrew.txt 0xce032a4b
    org/apache/commons/codec/language/bm/sep_exact_italian.txt 0xce032a4b
    org/apache/commons/codec/language/bm/sep_exact_portuguese.txt 0xce032a4b
    org/apache/commons/codec/language/bm/sep_exact_spanish.txt 0xce032a4b
    org/apache/commons/codec/language/bm/sep_hebrew_common.txt 0xa9efaa3
    org/apache/commons/codec/language/bm/sep_lang.txt 0x25d900f
    org/apache/commons/codec/language/bm/sep_languages.txt 0xe5582185
    org/apache/commons/codec/language/bm/sep_rules_any.txt 0xe04f4be9
    org/apache/commons/codec/language/bm/sep_rules_french.txt 0x659e16a7
    org/apache/commons/codec/language/bm/sep_rules_hebrew.txt 0x36efdcad
    org/apache/commons/codec/language/bm/sep_rules_italian.txt 0xa12e8946
    org/apache/commons/codec/language/bm/sep_rules_portuguese.txt 0x2bd5fa5f
    org/apache/commons/codec/language/bm/sep_rules_spanish.txt 0x13959cc4
    org/apache/commons/codec/language/dmrules.txt 0x25589080
    org/apache/http/version.properties 0xf4c443a3
    org/pcap4j/packet/packet.properties 0x22eb23b7
    org/pcap4j/pcap4j.properties 0xff36c7cc
    publicsuffixes.gz 0x5fccc77e
    res/anim-v21/design_bottom_sheet_slide_in.xml 0x53d29a85
    res/anim-v21/design_bottom_sheet_slide_out.xml 0xe022632d
    res/anim/abc_fade_in.xml 0xd7e65643
    res/anim/abc_fade_out.xml 0xd7e65643
    res/anim/abc_grow_fade_in_from_bottom.xml 0xfe9ae5c
    res/anim/abc_popup_enter.xml 0x3fa79e93
    res/anim/abc_popup_exit.xml 0xd4280822
    res/anim/abc_shrink_fade_out_from_bottom.xml 0x5bd69e6
    res/anim/abc_slide_in_bottom.xml 0xd7e65643
    res/anim/abc_slide_in_top.xml 0xd7e65643
    res/anim/abc_slide_out_bottom.xml 0xd7e65643
    res/anim/abc_slide_out_top.xml 0xd7e65643
    res/anim/abc_tooltip_enter.xml 0x26a5ad5b
    res/anim/abc_tooltip_exit.xml 0x1a6f11c
    res/anim/design_snackbar_in.xml 0x63dd8675
    res/anim/design_snackbar_out.xml 0xba8275d1
    res/anim/slide_in.xml 0xcddc2443
    res/anim/slide_out.xml 0x57e0e272
    res/animator-v21/design_appbar_state_list_animator.xml 0x1c9f9ee7
    res/animator/design_fab_hide_motion_spec.xml 0x2531fac5
    res/animator/design_fab_show_motion_spec.xml 0x42964ca0
    res/animator/mtrl_btn_state_list_anim.xml 0x78174797
    res/animator/mtrl_btn_unelevated_state_list_anim.xml 0xd7e65643
    res/animator/mtrl_chip_state_list_anim.xml 0xedb197d0
    res/animator/mtrl_fab_hide_motion_spec.xml 0xd7e65643
    res/animator/mtrl_fab_show_motion_spec.xml 0xd7e65643
    res/animator/mtrl_fab_transformation_sheet_collapse_spec.xml 0xfe27897a
    res/animator/mtrl_fab_transformation_sheet_expand_spec.xml 0x52f5d90e
    res/color-v21/abc_btn_colored_borderless_text_material.xml 0x56f08df5
    res/color-v23/abc_btn_colored_borderless_text_material.xml 0xef8c4307
    res/color-v23/abc_btn_colored_text_material.xml 0xaed1dbf2
    res/color-v23/abc_color_highlight_material.xml 0xf65921b0
    res/color-v23/abc_tint_btn_checkable.xml 0x465943b1
    res/color-v23/abc_tint_default.xml 0xc21ad955
    res/color-v23/abc_tint_edittext.xml 0xd85a553
    res/color-v23/abc_tint_seek_thumb.xml 0xd8a404c
    res/color-v23/abc_tint_spinner.xml 0xd85a553
    res/color-v23/abc_tint_switch_track.xml 0x4de0cbd2
    res/color-v23/design_tint_password_toggle.xml 0xd1bf0c0e
    res/color/abc_background_cache_hint_selector_material_dark.xml 0x77fbdcc4
    res/color/abc_background_cache_hint_selector_material_light.xml 0x2de06c99
    res/color/abc_btn_colored_text_material.xml 0x67354b35
    res/color/abc_hint_foreground_material_dark.xml 0x68dce686
    res/color/abc_hint_foreground_material_light.xml 0xd80aa3df
    res/color/abc_primary_text_disable_only_material_dark.xml 0x11c33b0d
    res/color/abc_primary_text_disable_only_material_light.xml 0x82dc4477
    res/color/abc_primary_text_material_dark.xml 0x925eaa64
    res/color/abc_primary_text_material_light.xml 0x1a47fe6
    res/color/abc_search_url_text.xml 0xea43cf77
    res/color/abc_secondary_text_material_dark.xml 0x11c4f205
    res/color/abc_secondary_text_material_light.xml 0x82db8d7f
    res/color/abc_tint_btn_checkable.xml 0x33dfd9db
    res/color/abc_tint_default.xml 0x99e2f028
    res/color/abc_tint_edittext.xml 0x1762e9d3
    res/color/abc_tint_seek_thumb.xml 0x756d875f
    res/color/abc_tint_spinner.xml 0x9d41e1fb
    res/color/abc_tint_switch_track.xml 0xfbe882de
    res/color/design_error.xml 0x88d3266c
    res/color/design_tint_password_toggle.xml 0x91e96ea3
    res/color/mtrl_bottom_nav_colored_item_tint.xml 0xd7e65643
    res/color/mtrl_bottom_nav_item_tint.xml 0xd7e65643
    res/color/mtrl_btn_bg_color_selector.xml 0xa0b8d33d
    res/color/mtrl_btn_ripple_color.xml 0xd625b293
    res/color/mtrl_btn_stroke_color_selector.xml 0xd7e65643
    res/color/mtrl_btn_text_btn_ripple_color.xml 0xd7e65643
    res/color/mtrl_btn_text_color_selector.xml 0xeb99ff96
    res/color/mtrl_chip_background_color.xml 0xe5591bdb
    res/color/mtrl_chip_close_icon_tint.xml 0x969ece5a
    res/color/mtrl_chip_ripple_color.xml 0x64aadf24
    res/color/mtrl_chip_text_color.xml 0x640902fa
    res/color/mtrl_fab_ripple_color.xml 0xd7e65643
    res/color/mtrl_tabs_colored_ripple_color.xml 0xd7e65643
    res/color/mtrl_tabs_icon_color_selector.xml 0x99e763b2
    res/color/mtrl_tabs_icon_color_selector_colored.xml 0xd7e65643
    res/color/mtrl_tabs_legacy_text_color_selector.xml 0x11f3a8f7
    res/color/mtrl_tabs_ripple_color.xml 0xd7e65643
    res/color/mtrl_text_btn_text_color_selector.xml 0xd7e65643
    res/color/switch_thumb_material_dark.xml 0x6424b491
    res/color/switch_thumb_material_light.xml 0xa74335e
    res/drawable-anydpi-v21/design_ic_visibility.xml 0xe7054ddd
    res/drawable-anydpi-v21/design_ic_visibility_off.xml 0xfc9ba7b3
    res/drawable-hdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0xe0e00b8a
    res/drawable-hdpi-v4/abc_btn_check_to_on_mtrl_000.png 0x55e57039
    res/drawable-hdpi-v4/abc_btn_check_to_on_mtrl_015.png 0x13296992
    res/drawable-hdpi-v4/abc_btn_radio_to_on_mtrl_000.png 0xd265c1df
    res/drawable-hdpi-v4/abc_btn_radio_to_on_mtrl_015.png 0x9b1429bf
    res/drawable-hdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0x452a314b
    res/drawable-hdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0xee5987fb
    res/drawable-hdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0x89186040
    res/drawable-hdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0xce3e1667
    res/drawable-hdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0x2cb7fb1a
    res/drawable-hdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0x3a60c5fb
    res/drawable-hdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png 0x77025832
    res/drawable-hdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png 0x4d9f4336
    res/drawable-hdpi-v4/abc_ic_menu_share_mtrl_alpha.png 0x23a419ae
    res/drawable-hdpi-v4/abc_ic_star_black_16dp.png 0x2423f5f1
    res/drawable-hdpi-v4/abc_ic_star_black_36dp.png 0xdcf33fba
    res/drawable-hdpi-v4/abc_ic_star_black_48dp.png 0xb2403ba1
    res/drawable-hdpi-v4/abc_ic_star_half_black_16dp.png 0x96063905
    res/drawable-hdpi-v4/abc_ic_star_half_black_36dp.png 0xf93feaa6
    res/drawable-hdpi-v4/abc_ic_star_half_black_48dp.png 0xf9fe8ea6
    res/drawable-hdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x35642324
    res/drawable-hdpi-v4/abc_list_focused_holo.9.png 0x8e4da209
    res/drawable-hdpi-v4/abc_list_longpressed_holo.9.png 0x81b12fde
    res/drawable-hdpi-v4/abc_list_pressed_holo_dark.9.png 0x91d34861
    res/drawable-hdpi-v4/abc_list_pressed_holo_light.9.png 0xe01fa47a
    res/drawable-hdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0xe28c1958
    res/drawable-hdpi-v4/abc_list_selector_disabled_holo_light.9.png 0xd18b0a1b
    res/drawable-hdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0x325c2847
    res/drawable-hdpi-v4/abc_popup_background_mtrl_mult.9.png 0x3d820b33
    res/drawable-hdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0x86ce55b9
    res/drawable-hdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0x21171d42
    res/drawable-hdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0x58089ef9
    res/drawable-hdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0xac46dae1
    res/drawable-hdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0x384badb
    res/drawable-hdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0x8dece53e
    res/drawable-hdpi-v4/abc_switch_track_mtrl_alpha.9.png 0xf4aa1eaf
    res/drawable-hdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0x5bdf785c
    res/drawable-hdpi-v4/abc_text_select_handle_left_mtrl_dark.png 0x487c7caf
    res/drawable-hdpi-v4/abc_text_select_handle_left_mtrl_light.png 0xa0d3c543
    res/drawable-hdpi-v4/abc_text_select_handle_middle_mtrl_dark.png 0xe9486929
    res/drawable-hdpi-v4/abc_text_select_handle_middle_mtrl_light.png 0xbe21c0b7
    res/drawable-hdpi-v4/abc_text_select_handle_right_mtrl_dark.png 0x725a273a
    res/drawable-hdpi-v4/abc_text_select_handle_right_mtrl_light.png 0xdf25bc6b
    res/drawable-hdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x747c103f
    res/drawable-hdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0x296f3744
    res/drawable-hdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0xbb045ad2
    res/drawable-hdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0xaad3c65d
    res/drawable-hdpi-v4/design_ic_visibility.png 0x4b5d50b8
    res/drawable-hdpi-v4/design_ic_visibility_off.png 0x65b6bef5
    res/drawable-hdpi-v4/notification_bg_low_normal.9.png 0x378c117e
    res/drawable-hdpi-v4/notification_bg_low_pressed.9.png 0x5059e725
    res/drawable-hdpi-v4/notification_bg_normal.9.png 0xc22cbe9f
    res/drawable-hdpi-v4/notification_bg_normal_pressed.9.png 0xa1d68cd0
    res/drawable-hdpi-v4/notify_panel_notification_icon_bg.png 0x6ed8c1f1
    res/drawable-ldrtl-hdpi-v17/abc_ic_menu_copy_mtrl_am_alpha.png 0xd0282950
    res/drawable-ldrtl-hdpi-v17/abc_ic_menu_cut_mtrl_alpha.png 0xd879d837
    res/drawable-ldrtl-hdpi-v17/abc_spinner_mtrl_am_alpha.9.png 0xbd28c868
    res/drawable-ldrtl-mdpi-v17/abc_ic_menu_copy_mtrl_am_alpha.png 0xdd761e3
    res/drawable-ldrtl-mdpi-v17/abc_ic_menu_cut_mtrl_alpha.png 0x1e7c3912
    res/drawable-ldrtl-mdpi-v17/abc_spinner_mtrl_am_alpha.9.png 0xed4949b
    res/drawable-ldrtl-xhdpi-v17/abc_ic_menu_copy_mtrl_am_alpha.png 0x549df8db
    res/drawable-ldrtl-xhdpi-v17/abc_ic_menu_cut_mtrl_alpha.png 0xfd3b518e
    res/drawable-ldrtl-xhdpi-v17/abc_spinner_mtrl_am_alpha.9.png 0x3c853cf4
    res/drawable-ldrtl-xxhdpi-v17/abc_ic_menu_copy_mtrl_am_alpha.png 0xccbf9f8a
    res/drawable-ldrtl-xxhdpi-v17/abc_ic_menu_cut_mtrl_alpha.png 0x7ab4d01c
    res/drawable-ldrtl-xxhdpi-v17/abc_spinner_mtrl_am_alpha.9.png 0xc8e02261
    res/drawable-ldrtl-xxxhdpi-v17/abc_ic_menu_copy_mtrl_am_alpha.png 0x3fa87e1c
    res/drawable-ldrtl-xxxhdpi-v17/abc_ic_menu_cut_mtrl_alpha.png 0xf2326e1
    res/drawable-ldrtl-xxxhdpi-v17/abc_spinner_mtrl_am_alpha.9.png 0x3b70c5f0
    res/drawable-mdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0x95bbccff
    res/drawable-mdpi-v4/abc_btn_check_to_on_mtrl_000.png 0x6a5cd9b8
    res/drawable-mdpi-v4/abc_btn_check_to_on_mtrl_015.png 0x18e8038a
    res/drawable-mdpi-v4/abc_btn_radio_to_on_mtrl_000.png 0xfe749af3
    res/drawable-mdpi-v4/abc_btn_radio_to_on_mtrl_015.png 0x1cd824d4
    res/drawable-mdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0x8637ab35
    res/drawable-mdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0x2c7b277c
    res/drawable-mdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0x4f558efa
    res/drawable-mdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0xb399ef9
    res/drawable-mdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0xc7100f0b
    res/drawable-mdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0x70e50370
    res/drawable-mdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png 0xec79a2d0
    res/drawable-mdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png 0xb5ab766d
    res/drawable-mdpi-v4/abc_ic_menu_share_mtrl_alpha.png 0xb6dc9c3c
    res/drawable-mdpi-v4/abc_ic_star_black_16dp.png 0x89a28d10
    res/drawable-mdpi-v4/abc_ic_star_black_36dp.png 0x22b6d27f
    res/drawable-mdpi-v4/abc_ic_star_black_48dp.png 0x595e2d54
    res/drawable-mdpi-v4/abc_ic_star_half_black_16dp.png 0x4f0bbca5
    res/drawable-mdpi-v4/abc_ic_star_half_black_36dp.png 0x42ad22b7
    res/drawable-mdpi-v4/abc_ic_star_half_black_48dp.png 0xcf24b77b
    res/drawable-mdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x35642324
    res/drawable-mdpi-v4/abc_list_focused_holo.9.png 0xb1ab9d03
    res/drawable-mdpi-v4/abc_list_longpressed_holo.9.png 0x78c37895
    res/drawable-mdpi-v4/abc_list_pressed_holo_dark.9.png 0xec632f8
    res/drawable-mdpi-v4/abc_list_pressed_holo_light.9.png 0x7219c8a8
    res/drawable-mdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0xbac90016
    res/drawable-mdpi-v4/abc_list_selector_disabled_holo_light.9.png 0xecd8775b
    res/drawable-mdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0xc5fedfaf
    res/drawable-mdpi-v4/abc_popup_background_mtrl_mult.9.png 0xd0abe4f8
    res/drawable-mdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0x52c2e8e3
    res/drawable-mdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0x2df95774
    res/drawable-mdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0xa759a25f
    res/drawable-mdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0xd8f23e2a
    res/drawable-mdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0x822df711
    res/drawable-mdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0xa072df4e
    res/drawable-mdpi-v4/abc_switch_track_mtrl_alpha.9.png 0x972e3ff3
    res/drawable-mdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0xa87d0908
    res/drawable-mdpi-v4/abc_text_select_handle_left_mtrl_dark.png 0x8303c87d
    res/drawable-mdpi-v4/abc_text_select_handle_left_mtrl_light.png 0x214dfcbe
    res/drawable-mdpi-v4/abc_text_select_handle_middle_mtrl_dark.png 0x1d985902
    res/drawable-mdpi-v4/abc_text_select_handle_middle_mtrl_light.png 0x40bc4240
    res/drawable-mdpi-v4/abc_text_select_handle_right_mtrl_dark.png 0x3eb4a280
    res/drawable-mdpi-v4/abc_text_select_handle_right_mtrl_light.png 0x5910e5d8
    res/drawable-mdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x77ca704d
    res/drawable-mdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0xc56f26da
    res/drawable-mdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0x6899209c
    res/drawable-mdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0xaf91e7cc
    res/drawable-mdpi-v4/design_ic_visibility.png 0x7711c6a8
    res/drawable-mdpi-v4/design_ic_visibility_off.png 0x83ffed60
    res/drawable-mdpi-v4/notification_bg_low_normal.9.png 0xd9fa55b7
    res/drawable-mdpi-v4/notification_bg_low_pressed.9.png 0xb80ede38
    res/drawable-mdpi-v4/notification_bg_normal.9.png 0xc135d194
    res/drawable-mdpi-v4/notification_bg_normal_pressed.9.png 0xed1fee6a
    res/drawable-mdpi-v4/notify_panel_notification_icon_bg.png 0x2ea3830b
    res/drawable-v21/$avd_hide_password__0.xml 0x4d770a2f
    res/drawable-v21/$avd_hide_password__1.xml 0x9b8848c2
    res/drawable-v21/$avd_hide_password__2.xml 0xc5233082
    res/drawable-v21/$avd_show_password__0.xml 0x972ec3e1
    res/drawable-v21/$avd_show_password__1.xml 0x2043ea8d
    res/drawable-v21/$avd_show_password__2.xml 0x50138fca
    res/drawable-v21/abc_action_bar_item_background_material.xml 0xe428598e
    res/drawable-v21/abc_btn_colored_material.xml 0x949f2bd2
    res/drawable-v21/abc_dialog_material_background.xml 0x2204ff51
    res/drawable-v21/abc_edit_text_material.xml 0xac4c4812
    res/drawable-v21/abc_list_divider_material.xml 0x40627491
    res/drawable-v21/avd_hide_password.xml 0xdf591d9
    res/drawable-v21/avd_show_password.xml 0xbf915e74
    res/drawable-v21/design_bottom_navigation_item_background.xml 0xbb2cf9b8
    res/drawable-v21/design_password_eye.xml 0xea204625
    res/drawable-v21/notification_action_background.xml 0x263e411b
    res/drawable-v23/abc_control_background_material.xml 0x2bc3392c
    res/drawable-watch-v20/abc_dialog_material_background.xml 0x8f2c801c
    res/drawable-xhdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0xa6e7b9d8
    res/drawable-xhdpi-v4/abc_btn_check_to_on_mtrl_000.png 0xead36c57
    res/drawable-xhdpi-v4/abc_btn_check_to_on_mtrl_015.png 0xc6db123
    res/drawable-xhdpi-v4/abc_btn_radio_to_on_mtrl_000.png 0x22f95d51
    res/drawable-xhdpi-v4/abc_btn_radio_to_on_mtrl_015.png 0xb236fd62
    res/drawable-xhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0xe329a7f5
    res/drawable-xhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0x307aa23f
    res/drawable-xhdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0x63663bff
    res/drawable-xhdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0xa0cfd3d4
    res/drawable-xhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0x7c36cc60
    res/drawable-xhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0x879b4472
    res/drawable-xhdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png 0x3daacdd
    res/drawable-xhdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png 0x1dc5daa5
    res/drawable-xhdpi-v4/abc_ic_menu_share_mtrl_alpha.png 0xb9af7f4f
    res/drawable-xhdpi-v4/abc_ic_star_black_16dp.png 0x3f8a65d1
    res/drawable-xhdpi-v4/abc_ic_star_black_36dp.png 0x8e8d8274
    res/drawable-xhdpi-v4/abc_ic_star_black_48dp.png 0xced98925
    res/drawable-xhdpi-v4/abc_ic_star_half_black_16dp.png 0xfab97236
    res/drawable-xhdpi-v4/abc_ic_star_half_black_36dp.png 0x5c88f962
    res/drawable-xhdpi-v4/abc_ic_star_half_black_48dp.png 0xa981f321
    res/drawable-xhdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x35642324
    res/drawable-xhdpi-v4/abc_list_focused_holo.9.png 0xbde23956
    res/drawable-xhdpi-v4/abc_list_longpressed_holo.9.png 0x84a788a6
    res/drawable-xhdpi-v4/abc_list_pressed_holo_dark.9.png 0x54cd03ea
    res/drawable-xhdpi-v4/abc_list_pressed_holo_light.9.png 0x4644c6e1
    res/drawable-xhdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0x585bf0cc
    res/drawable-xhdpi-v4/abc_list_selector_disabled_holo_light.9.png 0x30459f98
    res/drawable-xhdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0x9df27093
    res/drawable-xhdpi-v4/abc_popup_background_mtrl_mult.9.png 0x3d40754b
    res/drawable-xhdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0xf1f6a033
    res/drawable-xhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0x6a20e5ff
    res/drawable-xhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0x4fcf3d5b
    res/drawable-xhdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0xa531b28b
    res/drawable-xhdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0x18ddec29
    res/drawable-xhdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0xda0d8e3e
    res/drawable-xhdpi-v4/abc_switch_track_mtrl_alpha.9.png 0xed2cba2f
    res/drawable-xhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0x945f2990
    res/drawable-xhdpi-v4/abc_text_select_handle_left_mtrl_dark.png 0xc1258581
    res/drawable-xhdpi-v4/abc_text_select_handle_left_mtrl_light.png 0x6d48e543
    res/drawable-xhdpi-v4/abc_text_select_handle_middle_mtrl_dark.png 0x852892ff
    res/drawable-xhdpi-v4/abc_text_select_handle_middle_mtrl_light.png 0x1361e44f
    res/drawable-xhdpi-v4/abc_text_select_handle_right_mtrl_dark.png 0x2038073f
    res/drawable-xhdpi-v4/abc_text_select_handle_right_mtrl_light.png 0x5390d72d
    res/drawable-xhdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x3408a58b
    res/drawable-xhdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0x52c5a6c3
    res/drawable-xhdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0xd42327b8
    res/drawable-xhdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0x2d0b1d64
    res/drawable-xhdpi-v4/design_ic_visibility.png 0x3704fd9a
    res/drawable-xhdpi-v4/design_ic_visibility_off.png 0xa855be3d
    res/drawable-xhdpi-v4/ic_pulltorefresh_arrow.png 0xadc2d8cf
    res/drawable-xhdpi-v4/icon_arrow_up.png 0x805dfc82
    res/drawable-xhdpi-v4/icon_arrow_up_history_month.png 0xac46de15
    res/drawable-xhdpi-v4/icon_back.png 0x4b6cd7c
    res/drawable-xhdpi-v4/icon_boy128.png 0x373208dd
    res/drawable-xhdpi-v4/icon_choose.png 0x7f1aa2f3
    res/drawable-xhdpi-v4/icon_filter_close.png 0x7330858d
    res/drawable-xhdpi-v4/icon_filter_open.png 0xb80f0dd0
    res/drawable-xhdpi-v4/icon_flag_white.png 0x1d89a7fc
    res/drawable-xhdpi-v4/icon_forward.png 0x13737e25
    res/drawable-xhdpi-v4/icon_girl128.png 0xd91fff55
    res/drawable-xhdpi-v4/icon_main_bg_setting.png 0xcff5d8e4
    res/drawable-xhdpi-v4/icon_main_share.png 0xae5cef8c
    res/drawable-xhdpi-v4/icon_permission_chart.png 0xef3154a9
    res/drawable-xhdpi-v4/icon_qq.png 0x6329d54
    res/drawable-xhdpi-v4/icon_refresh_.png 0xd0428bf9
    res/drawable-xhdpi-v4/icon_right_arrow72ffffff_.png 0x849caa73
    res/drawable-xhdpi-v4/icon_right_arrowffffff_.png 0x7fe24bd3
    res/drawable-xhdpi-v4/icon_select.png 0x72dd33b6
    res/drawable-xhdpi-v4/icon_setting.png 0xa347843b
    res/drawable-xhdpi-v4/icon_share_qrcode.png 0x471b145a
    res/drawable-xhdpi-v4/icon_share_wechat_session.png 0xd40617bd
    res/drawable-xhdpi-v4/icon_share_wechat_timeline.png 0x48cdea6d
    res/drawable-xhdpi-v4/icon_tool_box.png 0x629aa003
    res/drawable-xhdpi-v4/icon_trend_line.png 0xe3179420
    res/drawable-xhdpi-v4/icon_uninstall_app.png 0x9f1eda62
    res/drawable-xhdpi-v4/icon_unselect.png 0xee1bfa44
    res/drawable-xhdpi-v4/icon_widget22_pre.png 0xa1a6a020
    res/drawable-xhdpi-v4/icon_widget42_pre.png 0x8b30a3f2
    res/drawable-xhdpi-v4/main_bg1.png 0x58237084
    res/drawable-xhdpi-v4/main_bg2.png 0x5d4daabb
    res/drawable-xhdpi-v4/main_bg3.png 0x5bffa0dd
    res/drawable-xhdpi-v4/main_bg4.png 0xdc193261
    res/drawable-xhdpi-v4/notification_bg_low_normal.9.png 0x3ad03275
    res/drawable-xhdpi-v4/notification_bg_low_pressed.9.png 0xc8900a8e
    res/drawable-xhdpi-v4/notification_bg_normal.9.png 0x9944f31a
    res/drawable-xhdpi-v4/notification_bg_normal_pressed.9.png 0xc29ac558
    res/drawable-xhdpi-v4/notify_panel_notification_icon_bg.png 0x4576501
    res/drawable-xxhdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0x22603145
    res/drawable-xxhdpi-v4/abc_btn_check_to_on_mtrl_000.png 0x33d55ad0
    res/drawable-xxhdpi-v4/abc_btn_check_to_on_mtrl_015.png 0xc02d00e1
    res/drawable-xxhdpi-v4/abc_btn_radio_to_on_mtrl_000.png 0xf7245981
    res/drawable-xxhdpi-v4/abc_btn_radio_to_on_mtrl_015.png 0xb3414d08
    res/drawable-xxhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0xabacf2d2
    res/drawable-xxhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0xda81b970
    res/drawable-xxhdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0x813f61b1
    res/drawable-xxhdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0x5d9d5f1a
    res/drawable-xxhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0xe432e225
    res/drawable-xxhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0xab0f1725
    res/drawable-xxhdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png 0xdbb1c6ea
    res/drawable-xxhdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png 0xc3d9aa33
    res/drawable-xxhdpi-v4/abc_ic_menu_share_mtrl_alpha.png 0xd57b1a17
    res/drawable-xxhdpi-v4/abc_ic_star_black_16dp.png 0x22030140
    res/drawable-xxhdpi-v4/abc_ic_star_black_36dp.png 0x6e9ee550
    res/drawable-xxhdpi-v4/abc_ic_star_black_48dp.png 0x5d04e88f
    res/drawable-xxhdpi-v4/abc_ic_star_half_black_16dp.png 0x5f323132
    res/drawable-xxhdpi-v4/abc_ic_star_half_black_36dp.png 0xbddd926
    res/drawable-xxhdpi-v4/abc_ic_star_half_black_48dp.png 0xc8ecac15
    res/drawable-xxhdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x19b7f846
    res/drawable-xxhdpi-v4/abc_list_focused_holo.9.png 0x19c09c27
    res/drawable-xxhdpi-v4/abc_list_longpressed_holo.9.png 0x236b6e98
    res/drawable-xxhdpi-v4/abc_list_pressed_holo_dark.9.png 0x71be1c35
    res/drawable-xxhdpi-v4/abc_list_pressed_holo_light.9.png 0x3bde0e3f
    res/drawable-xxhdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0x1b0c989d
    res/drawable-xxhdpi-v4/abc_list_selector_disabled_holo_light.9.png 0xcff461f2
    res/drawable-xxhdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0xe97125d2
    res/drawable-xxhdpi-v4/abc_popup_background_mtrl_mult.9.png 0x3217b6e
    res/drawable-xxhdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0x6761bc02
    res/drawable-xxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0xf0997f1b
    res/drawable-xxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0x1847edd
    res/drawable-xxhdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0x5418f824
    res/drawable-xxhdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0x3a5ce84d
    res/drawable-xxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0xb4b2c492
    res/drawable-xxhdpi-v4/abc_switch_track_mtrl_alpha.9.png 0xa3c882b5
    res/drawable-xxhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0xe3ea6cb6
    res/drawable-xxhdpi-v4/abc_text_select_handle_left_mtrl_dark.png 0x1b683074
    res/drawable-xxhdpi-v4/abc_text_select_handle_left_mtrl_light.png 0xab2a1853
    res/drawable-xxhdpi-v4/abc_text_select_handle_middle_mtrl_dark.png 0x832c1b4
    res/drawable-xxhdpi-v4/abc_text_select_handle_middle_mtrl_light.png 0x9313e5c2
    res/drawable-xxhdpi-v4/abc_text_select_handle_right_mtrl_dark.png 0xd63e53e1
    res/drawable-xxhdpi-v4/abc_text_select_handle_right_mtrl_light.png 0x394ef93c
    res/drawable-xxhdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x308df7a1
    res/drawable-xxhdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0x3023e3da
    res/drawable-xxhdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0x4164b6d3
    res/drawable-xxhdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0xf52e9e15
    res/drawable-xxhdpi-v4/design_ic_visibility.png 0xfff79f9a
    res/drawable-xxhdpi-v4/design_ic_visibility_off.png 0xea5de6c5
    res/drawable-xxxhdpi-v4/abc_btn_check_to_on_mtrl_000.png 0x96d1317c
    res/drawable-xxxhdpi-v4/abc_btn_check_to_on_mtrl_015.png 0xc4de743b
    res/drawable-xxxhdpi-v4/abc_btn_radio_to_on_mtrl_000.png 0x1cea0e0c
    res/drawable-xxxhdpi-v4/abc_btn_radio_to_on_mtrl_015.png 0x600e5975
    res/drawable-xxxhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0x7c75d46d
    res/drawable-xxxhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0x18a1de4
    res/drawable-xxxhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0xda3cb045
    res/drawable-xxxhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0x566244db
    res/drawable-xxxhdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png 0xad44ee65
    res/drawable-xxxhdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png 0xbca76b79
    res/drawable-xxxhdpi-v4/abc_ic_menu_share_mtrl_alpha.png 0x53e8c861
    res/drawable-xxxhdpi-v4/abc_ic_star_black_16dp.png 0x249e7a2f
    res/drawable-xxxhdpi-v4/abc_ic_star_black_36dp.png 0x97f27b0b
    res/drawable-xxxhdpi-v4/abc_ic_star_black_48dp.png 0x15621716
    res/drawable-xxxhdpi-v4/abc_ic_star_half_black_16dp.png 0x87f6eadc
    res/drawable-xxxhdpi-v4/abc_ic_star_half_black_36dp.png 0x9c922b43
    res/drawable-xxxhdpi-v4/abc_ic_star_half_black_48dp.png 0xf4d6e8d9
    res/drawable-xxxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0xec058f9b
    res/drawable-xxxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0x83a904b8
    res/drawable-xxxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0xc7c65396
    res/drawable-xxxhdpi-v4/abc_switch_track_mtrl_alpha.9.png 0xdf201e21
    res/drawable-xxxhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0xa404393e
    res/drawable-xxxhdpi-v4/abc_text_select_handle_left_mtrl_dark.png 0x50866cd3
    res/drawable-xxxhdpi-v4/abc_text_select_handle_left_mtrl_light.png 0xc4f21d8f
    res/drawable-xxxhdpi-v4/abc_text_select_handle_right_mtrl_dark.png 0xfaa98882
    res/drawable-xxxhdpi-v4/abc_text_select_handle_right_mtrl_light.png 0x6eddf9de
    res/drawable-xxxhdpi-v4/design_ic_visibility.png 0xe8df2458
    res/drawable-xxxhdpi-v4/design_ic_visibility_off.png 0x1bca7dd1
    res/drawable/abc_btn_borderless_material.xml 0x8b653c6a
    res/drawable/abc_btn_check_material.xml 0x8babbd31
    res/drawable/abc_btn_default_mtrl_shape.xml 0x80af28c8
    res/drawable/abc_btn_radio_material.xml 0x92d500d9
    res/drawable/abc_cab_background_internal_bg.xml 0xb1f9f695
    res/drawable/abc_cab_background_top_material.xml 0xa5e03008
    res/drawable/abc_ic_ab_back_material.xml 0xc9845dcd
    res/drawable/abc_ic_arrow_drop_right_black_24dp.xml 0xbff90ae8
    res/drawable/abc_ic_clear_material.xml 0xc8791c32
    res/drawable/abc_ic_go_search_api_material.xml 0xcd3b2a3f
    res/drawable/abc_ic_menu_overflow_material.xml 0x90bfb68f
    res/drawable/abc_ic_search_api_material.xml 0xfb3fe3dd
    res/drawable/abc_ic_voice_search_api_material.xml 0x4e7e317b
    res/drawable/abc_item_background_holo_dark.xml 0x6fbaae85
    res/drawable/abc_item_background_holo_light.xml 0xd69098d6
    res/drawable/abc_list_selector_background_transition_holo_dark.xml 0xff9533be
    res/drawable/abc_list_selector_background_transition_holo_light.xml 0xe2c8fdfa
    res/drawable/abc_list_selector_holo_dark.xml 0xbb0821f3
    res/drawable/abc_list_selector_holo_light.xml 0x8e35812e
    res/drawable/abc_ratingbar_indicator_material.xml 0x129c0959
    res/drawable/abc_ratingbar_material.xml 0x7311665e
    res/drawable/abc_ratingbar_small_material.xml 0xde5695a0
    res/drawable/abc_seekbar_thumb_material.xml 0x4b77e76a
    res/drawable/abc_seekbar_tick_mark_material.xml 0x6680e7cd
    res/drawable/abc_seekbar_track_material.xml 0xaa73d554
    res/drawable/abc_spinner_textfield_background_material.xml 0xda9d223b
    res/drawable/abc_switch_thumb_material.xml 0x1b26948c
    res/drawable/abc_tab_indicator_material.xml 0xde987ea5
    res/drawable/abc_text_cursor_material.xml 0x2f82072d
    res/drawable/abc_textfield_search_material.xml 0xd370cf43
    res/drawable/abc_vector_test.xml 0x6440c442
    res/drawable/background_circle.xml 0xc2cd3f2b
    res/drawable/bg_advice_input.xml 0xe3873f9e
    res/drawable/bg_app_info_time_detail.xml 0xff5d2f3d
    res/drawable/bg_appinfo_today_dot.xml 0x7a8a7d99
    res/drawable/bg_appinfo_trend_chart_color.xml 0x6670f37e
    res/drawable/bg_appinfo_trend_dot.xml 0xfdbe8ac0
    res/drawable/bg_card_7_trend_chart.xml 0x435d4a9a
    res/drawable/bg_card_7_trend_chart_theme.xml 0x4774b32
    res/drawable/bg_card_7_trend_table.xml 0x14f14c39
    res/drawable/bg_card_7_trend_table_theme.xml 0x53db4d91
    res/drawable/bg_card_app_usagetime.xml 0xd0b80610
    res/drawable/bg_card_app_usagetime_theme.xml 0x80a00821
    res/drawable/bg_card_averagetime.xml 0xcccbb4e1
    res/drawable/bg_card_averagetime_theme.xml 0x8be1b549
    res/drawable/bg_card_btn_choose.xml 0x2426ba7b
    res/drawable/bg_card_launchcount.xml 0x89f6ded2
    res/drawable/bg_card_launchcount_theme.xml 0xcedcdf7a
    res/drawable/bg_card_usagetime.xml 0x1164d2f0
    res/drawable/bg_card_usagetime_piechart.xml 0x72298e30
    res/drawable/bg_card_usagetime_theme.xml 0x564ed358
    res/drawable/bg_card_usagetime_trend_chart_color.xml 0x1ef95fdb
    res/drawable/bg_chart_marker.xml 0x7f5e10c5
    res/drawable/bg_circle_corner_flag.xml 0xb48e005b
    res/drawable/bg_circle_corner_flag_select.xml 0x7b5d0038
    res/drawable/bg_close_ad_dialog.xml 0x29ad4428
    res/drawable/bg_default_main_bg.xml 0x27d5816f
    res/drawable/bg_dialog_loading.xml 0xfff48e30
    res/drawable/bg_dialog_warning.xml 0x35785757
    res/drawable/bg_disavailable_clean_ad.xml 0xb6e72218
    res/drawable/bg_history_date_dialog.xml 0x5fed7b20
    res/drawable/bg_history_trend_chart_color.xml 0xfcb20693
    res/drawable/bg_history_trend_dot.xml 0x1d21cc2d
    res/drawable/bg_item_app_type.xml 0x1c5b52dd
    res/drawable/bg_item_chart.xml 0x95a2acdc
    res/drawable/bg_item_chart_sel.xml 0x3b58ea9f
    res/drawable/bg_limit_warning_confirm.xml 0x1c79b21d
    res/drawable/bg_login.xml 0xfb479ecc
    res/drawable/bg_main_bg_add.xml 0x26a4fa79
    res/drawable/bg_main_bg_add_line.xml 0x94e10b35
    res/drawable/bg_main_selector.xml 0xbe9451d8
    res/drawable/bg_open_clean_ad.xml 0x27d5816f
    res/drawable/bg_phone_login_btn.xml 0x94736ecd
    res/drawable/bg_phone_login_et.xml 0x45340f1d
    res/drawable/bg_progress_dialog.xml 0x1d530658
    res/drawable/bg_share_dialog.xml 0x818f9114
    res/drawable/bg_time_line.xml 0x233a96b1
    res/drawable/bg_time_line_dot.xml 0xb2c1f4e1
    res/drawable/bg_time_line_normal.xml 0xa7c17b98
    res/drawable/bg_usage_item.xml 0xdd42d452
    res/drawable/bg_usage_item_select.xml 0xe9e710a
    res/drawable/bg_usage_item_selector.xml 0x87f848a0
    res/drawable/bg_usageday.xml 0xf9a366ca
    res/drawable/bg_versionname.xml 0x7511d61d
    res/drawable/bg_widget_usagetime.xml 0x21d4d291
    res/drawable/bg_widget_usagetime_transparent.xml 0x9c28203f
    res/drawable/design_fab_background.xml 0x7874cf38
    res/drawable/design_snackbar_background.xml 0x156ae2be
    res/drawable/edit_cursor.xml 0x95b8a874
    res/drawable/ic_clean_ad.xml 0x52c08754
    res/drawable/ic_clean_ad_525252.xml 0x7e4e1115
    res/drawable/ic_mtrl_chip_checked_black.xml 0x2f2a6e67
    res/drawable/ic_mtrl_chip_checked_circle.xml 0xa037285d
    res/drawable/ic_mtrl_chip_close_circle.xml 0xc88833b0
    res/drawable/ic_pause_black_24dp.xml 0x7055c16a
    res/drawable/ic_refresh.xml 0x18fad31f
    res/drawable/ic_state_deny.xml 0x878072d0
    res/drawable/ic_warning.xml 0xfeb0cacc
    res/drawable/mtrl_snackbar_background.xml 0xd7e65643
    res/drawable/mtrl_tabs_default_indicator.xml 0xdc448cc6
    res/drawable/navigation_empty_icon.xml 0x6b486c1a
    res/drawable/notification_bg.xml 0x3f06dd02
    res/drawable/notification_bg_low.xml 0x49aef9c7
    res/drawable/notification_icon_background.xml 0x518a8f2f
    res/drawable/notification_tile_bg.xml 0x66c1e9d2
    res/drawable/tooltip_frame_dark.xml 0x180f3a2e
    res/drawable/tooltip_frame_light.xml 0x552f46a
    res/interpolator-v21/mtrl_fast_out_linear_in.xml 0x48e26c7e
    res/interpolator-v21/mtrl_fast_out_slow_in.xml 0x7f0d9363
    res/interpolator-v21/mtrl_linear_out_slow_in.xml 0xbfea0b2d
    res/interpolator/mtrl_linear.xml 0xd7e65643
    res/layout-sw600dp-v13/design_layout_snackbar.xml 0xf9330fbb
    res/layout-sw600dp-v13/mtrl_layout_snackbar.xml 0x49ad19b4
    res/layout-v21/notification_action.xml 0xab247cc5
    res/layout-v21/notification_action_tombstone.xml 0x60b352a4
    res/layout-v21/notification_template_custom_big.xml 0xc50c83ae
    res/layout-v21/notification_template_icon_group.xml 0x75f684ce
    res/layout-v26/abc_screen_toolbar.xml 0x9d9b5b68
    res/layout-watch-v20/abc_alert_dialog_button_bar_material.xml 0xcdf055cd
    res/layout-watch-v20/abc_alert_dialog_title_material.xml 0x90b966df
    res/layout/abc_action_bar_title_item.xml 0x6c620c90
    res/layout/abc_action_bar_up_container.xml 0xd7e65643
    res/layout/abc_action_menu_item_layout.xml 0xb3493332
    res/layout/abc_action_menu_layout.xml 0x4757cae8
    res/layout/abc_action_mode_bar.xml 0x223a8c44
    res/layout/abc_action_mode_close_item_material.xml 0x6ea2d3e
    res/layout/abc_activity_chooser_view.xml 0xbe094bc6
    res/layout/abc_activity_chooser_view_list_item.xml 0x2fbb7c17
    res/layout/abc_alert_dialog_button_bar_material.xml 0xf9c5ee89
    res/layout/abc_alert_dialog_material.xml 0xdbede031
    res/layout/abc_alert_dialog_title_material.xml 0x4af4beb8
    res/layout/abc_cascading_menu_item_layout.xml 0x9f1f6027
    res/layout/abc_dialog_title_material.xml 0xa0d06c46
    res/layout/abc_expanded_menu_layout.xml 0x94d7a37b
    res/layout/abc_list_menu_item_checkbox.xml 0x41469432
    res/layout/abc_list_menu_item_icon.xml 0xbe6731b7
    res/layout/abc_list_menu_item_layout.xml 0xb5b9499d
    res/layout/abc_list_menu_item_radio.xml 0x2f6d5385
    res/layout/abc_popup_menu_header_item_layout.xml 0x7abfff44
    res/layout/abc_popup_menu_item_layout.xml 0xe98baf5a
    res/layout/abc_screen_content_include.xml 0xfca624fc
    res/layout/abc_screen_simple.xml 0x99ac2d69
    res/layout/abc_screen_simple_overlay_action_mode.xml 0x1815f40c
    res/layout/abc_screen_toolbar.xml 0xd962fe2b
    res/layout/abc_search_dropdown_item_icons_2line.xml 0xe5bb60bc
    res/layout/abc_search_view.xml 0xf7442197
    res/layout/abc_select_dialog_material.xml 0xd7515abe
    res/layout/abc_tooltip.xml 0x6bc75bf8
    res/layout/activity_about.xml 0x4119e82b
    res/layout/activity_advice.xml 0xa0113628
    res/layout/activity_clean_ad.xml 0xdc6102fc
    res/layout/activity_close_ad.xml 0xf0cfec90
    res/layout/activity_filter_app.xml 0x5d56c125
    res/layout/activity_history_data.xml 0xa4ec1275
    res/layout/activity_launch_count.xml 0x5594ae75
    res/layout/activity_limit_app.xml 0x8b40e148
    res/layout/activity_limit_warning.xml 0xb77a36c7
    res/layout/activity_login.xml 0x24318c90
    res/layout/activity_main.xml 0xf272a5ca
    res/layout/activity_main_bg.xml 0xcae932c0
    res/layout/activity_new_app_info.xml 0x65793d5f
    res/layout/activity_screen_time.xml 0x5594ae75
    res/layout/activity_screen_time_pie_chart.xml 0x3426d86
    res/layout/activity_set_flag.xml 0xd88c2bb
    res/layout/activity_setting.xml 0x1f125f36
    res/layout/activity_splash.xml 0x6bda14ef
    res/layout/activity_time_line.xml 0x24e3f4ad
    res/layout/activity_title_bar.xml 0xc308a309
    res/layout/activity_tool_box.xml 0x59e195e4
    res/layout/activity_usage_rank.xml 0x64b09615
    res/layout/activity_usage_time_limit.xml 0x46c1d854
    res/layout/activity_user_info.xml 0x94805dc
    res/layout/activity_user_setting.xml 0xc8b55fb5
    res/layout/activity_web.xml 0xf7b66803
    res/layout/activity_widget42_config.xml 0xbd312d60
    res/layout/actvity_bind_phone.xml 0x5326937b
    res/layout/actvity_phone_login.xml 0x2f127f8e
    res/layout/design_bottom_navigation_item.xml 0x4abecc6d
    res/layout/design_bottom_sheet_dialog.xml 0x8481f75d
    res/layout/design_layout_snackbar.xml 0xb5ae4594
    res/layout/design_layout_snackbar_include.xml 0x3664ccc6
    res/layout/design_layout_tab_icon.xml 0x5141e4c6
    res/layout/design_layout_tab_text.xml 0xba9741c6
    res/layout/design_menu_item_action_area.xml 0xc8be56c5
    res/layout/design_navigation_item.xml 0xedee3fef
    res/layout/design_navigation_item_header.xml 0x991df62a
    res/layout/design_navigation_item_separator.xml 0x62ef8d5d
    res/layout/design_navigation_item_subheader.xml 0x1f3dc8e8
    res/layout/design_navigation_menu.xml 0x2744a5ca
    res/layout/design_navigation_menu_item.xml 0xeb0b0da7
    res/layout/design_text_input_password_icon.xml 0xd98f1634
    res/layout/dialog_app_limit.xml 0xeaaa2919
    res/layout/dialog_close_ad.xml 0x78881c40
    res/layout/dialog_common.xml 0xc3219554
    res/layout/dialog_date_picker.xml 0xe76cc1cb
    res/layout/dialog_flag_picker.xml 0x74a55a12
    res/layout/dialog_guide_comment.xml 0xc1980826
    res/layout/dialog_history_date.xml 0x82604599
    res/layout/dialog_items_picker.xml 0x936d9304
    res/layout/dialog_loading.xml 0xea345cad
    res/layout/dialog_more.xml 0x9264d3ad
    res/layout/dialog_permission.xml 0x63a017c1
    res/layout/dialog_progress.xml 0xd38b357a
    res/layout/dialog_share.xml 0xbdc7eadc
    res/layout/dialog_upload_data.xml 0x117d5ebd
    res/layout/item_app_filter.xml 0x12c88b8f
    res/layout/item_app_launch_count.xml 0xa56b1fe3
    res/layout/item_app_limit.xml 0xf71f63c2
    res/layout/item_app_screeen_time.xml 0xa23a7eff
    res/layout/item_app_type.xml 0x9cc85d6e
    res/layout/item_app_usage_time.xml 0x13fc98d3
    res/layout/item_card_app_usagetime.xml 0xc40f2d9e
    res/layout/item_history_app_screeen_time.xml 0x6b2f64a7
    res/layout/item_history_date_.xml 0x67e99a35
    res/layout/item_history_list.xml 0xaaf9b513
    res/layout/item_main_bg.xml 0x4eecb8d1
    res/layout/item_timeline.xml 0x636fb0c7
    res/layout/item_timeline_more_app.xml 0x6b64443c
    res/layout/item_trend_7_list.xml 0x9a69bd9f
    res/layout/item_usage_rank.xml 0x9f327cc0
    res/layout/item_widget42_bg.xml 0x1ff71677
    res/layout/layout_main_header.xml 0x45373ba6
    res/layout/listview_header.xml 0x478122e9
    res/layout/mtrl_layout_snackbar.xml 0x530539b
    res/layout/mtrl_layout_snackbar_include.xml 0xf5fee3f4
    res/layout/notification_layout.xml 0x9a8d93
    res/layout/notification_media_action.xml 0x5adc773b
    res/layout/notification_media_cancel_action.xml 0x2324b5c1
    res/layout/notification_template_big_media.xml 0x96cea1d7
    res/layout/notification_template_big_media_custom.xml 0xc9709e07
    res/layout/notification_template_big_media_narrow.xml 0x1bd8fa1a
    res/layout/notification_template_big_media_narrow_custom.xml 0xf3a6b136
    res/layout/notification_template_lines_media.xml 0xdc65dc86
    res/layout/notification_template_media.xml 0x34df1d8d
    res/layout/notification_template_media_custom.xml 0xa95197dd
    res/layout/notification_template_part_chronometer.xml 0xa4c35e73
    res/layout/notification_template_part_time.xml 0x7a23f9a0
    res/layout/select_dialog_item_material.xml 0xf90f42c7
    res/layout/select_dialog_multichoice_material.xml 0xe5a82c39
    res/layout/select_dialog_singlechoice_material.xml 0x5229c75a
    res/layout/support_simple_spinner_dropdown_item.xml 0xe99774dd
    res/layout/view_chart.xml 0xd35e282f
    res/layout/view_item_chart.xml 0x627ec069
    res/layout/view_line_chart_marker.xml 0xfb3ca819
    res/layout/widget_usagetime.xml 0xe662c119
    res/layout/widget_usagetime22.xml 0xe3d714f3
    res/mipmap-xxxhdpi-v4/ic_launcher.png 0xfb848796
    res/xml/gdt_file_path.xml 0xa074b6e9
    res/xml/provider_paths.xml 0xd46b98ef
    res/xml/widget_usagetime22_info.xml 0x41dda5a7
    res/xml/widget_usagetime_info.xml 0x95346ff2
    resources.arsc 0xcbc89c2f
    AndroidManifest.xml 0xb762d455
    assets/.channel 0xeb941e55
    META-INF/USAGETIM.SF 0x2a5fa91e
    META-INF/USAGETIM.RSA 0x9632514d
    META-INF/MANIFEST.MF 0x297c9162
    运行截图
    VirSCAN

About VirSCAN | Privacy Policy | Contact us | Links | Help VirSCAN
Translated by Keith Miller, United States
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号