VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load

VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

File information

Scanner results
Scanner results:12%Scanner(s) (5/39)found malware!
Behavior analysis report:         Habo file analysis
Time: 2014-10-30 16:54:20 (CST)
Scanner Engine Ver Sig Ver Sig Date Scan result Time
ahnlab 9.9.9 9.9.9 2013-05-28 Found nothing 5
antivir 1.9.2.0 1.9.159.0 7.11.182.42 Found nothing 15
antiy 114619 AVL141027 2014-10-29 Found nothing 6
arcavir 1.0 2011 2014-05-30 Found nothing 9
asquared 9.0.0.4324 9.0.0.4324 2014-07-03 Android.Riskware.SmsPay.N 2
avast 141029-1 4.7.4 2014-10-29 Found nothing 32
avg 2109/7906 10.0.1405 2014-10-17 Found nothing 6
baidu 2.0.1.0 4.1.3.52192 2.0.1.0 Found nothing 4
baidusd 1.0 1.0 2014-04-02 Found nothing 2
bitdefender 7.57431 7.90123 2014-10-29 Android.Riskware.SmsPay.N 7
clamav 19554 0.97.5 2014-10-30 Heuristics.Broken.Executable 1
comodo 15023 5.1 2014-10-28 Found nothing 3
ctch 4.6.5 5.3.14 2013-12-01 Found nothing 1
drweb 5.0.2.3300 5.0.1.1 2014-10-30 Found nothing 58
fortinet 23.078, 23.078 5.1.158 2014-10-30 Found nothing 2
fprot 4.6.2.117 6.5.1.5418 2014-10-29 Found nothing 1
fsecure 2014-04-02-01 9.13 2014-04-02 Android.Riskware.SmsPay.N 8
gdata 24.4664 24.4664 2014-10-30 Android.Riskware.SmsPay.N 11
hauri 2.73 2.73 2014-10-29 Found nothing 1
ikarus 1.06.01 V1.32.31.0 2014-10-29 Found nothing 16
jiangmin 16.0.100 1.0.0.0 2014-08-20 Found nothing 46
kaspersky 5.5.33 5.5.33 2014-04-01 Found nothing 24
kingsoft 2.1 2.1 2013-09-22 Found nothing 8
mcafee 7520 5400.1158 2014-08-04 Found nothing 11
nod32 0436 3.0.21 2014-09-18 Found nothing 2
panda 9.05.01 9.05.01 2014-10-29 Found nothing 10
pcc 11.242.06 9.500-1005 2014-10-29 Found nothing 3
qh360 1.0.1 1.0.1 1.0.1 Found nothing 13
qqphone 1.0.0.0 1.0.0.0 2014-10-30 Found nothing 1
quickheal 14.00 14.00 2014-10-28 Found nothing 8
rising 25.38.01.01 25.38.01.01 2014-10-28 Found nothing 15
sophos 5.04 3.51.0 2014-08-05 Found nothing 8
sunbelt 3.9.2595.2 3.9.2595.2 2014-10-29 Found nothing 9
symantec 20141028.001 1.3.0.24 2014-10-28 Found nothing 1
tachyon 9.9.9 9.9.9 2013-12-27 Found nothing 15
thehacker 6.8.0.5 6.8.0.5 2014-10-27 Found nothing 9
tws 17.47.17308 1.0.2.2108 2014-10-29 Found nothing 10
vba 3.12.26.3 3.12.26.3 2014-10-29 Found nothing 6
virusbuster 15.0.952.0 5.5.2.13 2014-10-28 Found nothing 17
权限列表
许可名称 信息
android.permission.INTERNET 连接网络(2G或3G)
android.permission.ACCESS_WIFI_STATE 读取wifi网络状态
android.permission.ACCESS_NETWORK_STATE 读取网络状态(2G或3G)
android.permission.CHANGE_WIFI_STATE 改变WIFI连接状态
android.permission.CHANGE_NETWORK_STATE 变更网络状态
android.permission.WAKE_LOCK 手机屏幕关闭后后台进程仍运行
android.permission.MODIFY_AUDIO_SETTINGS 修改声音设置
android.permission.WRITE_SETTINGS 读写系统设置项
android.permission.DISABLE_KEYGUARD 禁用键盘锁
android.permission.READ_CONTACTS 读取联系人信息
android.permission.PROCESS_OUTGOING_CALLS 监视、修改有关拨出电话
android.permission.CALL_PHONE 拨打电话
android.permission.ACCESS_COARSE_LOCATION 获取粗略的位置(通过wifi、基站)
android.permission.ACCESS_FINE_LOCATION 获取精确的位置(通过GPS)
android.permission.MOUNT_UNMOUNT_FILESYSTEMS 挂载、反挂载外部文件系统
android.permission.RECORD_AUDIO 录音(使用AudioRecord)
android.permission.RAISED_THREAD_PRIORITY
android.permission.SEND_SMS 发送短信
android.permission.MODIFY_PHONE_STATE 修改电话状态
android.permission.WRITE_SMS 写短信
android.permission.READ_SMS 读取短信
android.permission.RECEIVE_BOOT_COMPLETED 接收开机启动广播
android.permission.VIBRATE 允许设备震动
android.permission.READ_LOGS 读取系统日志
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.WRITE_CONTACTS 写入联系人信息
android.permission.BLUETOOTH 连接蓝牙设备
android.permission.BROADCAST_STICKY 发送持久广播
android.permission.GET_ACCOUNTS 访问账户列表
android.permission.GET_TASKS 获取有关当前或最近运行的任务信息
android.permission.REORDER_TASKS 系统任务排序
文件信息
VirSCANVirSCAN
安全评分 :72
基本信息
VirSCANVirSCAN
MD5:ae4bc79b985cbd50591eb8ac3e1f017a
文件大小:5.58MB
上传时间: 2014-09-22 10:36:30 (CST)
包名:com.callda
最低运行环境:Android 2.2.x
版权:JIUSI NETWORK
关键行为
VirSCANVirSCAN
行为描述: 隐藏指定窗口
详情信息: [Window,Class] = [,Afx:400000:8:10011:1900015:0]
[Window,Class] = [,BrowserFrameGripperClass]
[Window,Class] = [缩放级别,ToolbarWindow32]
[Window,Class] = [,msctls_progress32]
[Window,Class] = [,Shell Embedding]
[Window,Class] = [,Internet Explorer_Server]
[Window,Class] = [,AddressDisplay Control]
[Window,Class] = [,tooltips_class32]
[Window,Class] = [,CtrlNotifySink]
行为描述: 设置消息钩子
详情信息: C:\WINDOWS\system32\IEFRAME.dll
行为描述: 设置特殊文件夹属性
详情信息: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds Cache
C:\Documents and Settings\Administrator\IECompatCache
行为描述: 查找指定内核模块
详情信息: lstrcmpiA: ntice.sys <------> ntkrnlpa.exe (ntice.sys)
lstrcmpiA: ntice.sys <------> hal.dll (ntice.sys)
lstrcmpiA: ntice.sys <------> KDCOM.DLL (ntice.sys)
lstrcmpiA: ntice.sys <------> BOOTVID.dll (ntice.sys)
lstrcmpiA: ntice.sys <------> ACPI.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> WMILIB.SYS (ntice.sys)
lstrcmpiA: ntice.sys <------> pci.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> isapnp.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> compbatt.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> BATTC.SYS (ntice.sys)
lstrcmpiA: ntice.sys <------> intelide.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> PCIIDEX.SYS (ntice.sys)
lstrcmpiA: ntice.sys <------> MountMgr.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> ftdisk.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> dmload.sys (ntice.sys)
行为描述: 查找反病毒常用工具窗口
详情信息: NtUserFindWindowEx: [Class,Window] = [OLLYDBG,]
NtUserFindWindowEx: [Class,Window] = [GBDYLLO,]
NtUserFindWindowEx: [Class,Window] = [pediy06,]
NtUserFindWindowEx: [Class,Window] = [FilemonClass,]
NtUserFindWindowEx: [Class,Window] = [,File Monitor - Sysinternals: www.sysinternals.com]
NtUserFindWindowEx: [Class,Window] = [PROCMON_WINDOW_CLASS,]
NtUserFindWindowEx: [Class,Window] = [,Process Monitor - Sysinternals: www.sysinternals.com]
NtUserFindWindowEx: [Class,Window] = [RegmonClass,]
NtUserFindWindowEx: [Class,Window] = [,Registry Monitor - Sysinternals: www.sysinternals.com]
行为描述: 按名称获取主机地址
详情信息: wpad
进程行为
VirSCANVirSCAN
行为描述: 隐藏指定窗口
详情信息: [Window,Class] = [,Afx:400000:8:10011:1900015:0]
[Window,Class] = [,BrowserFrameGripperClass]
[Window,Class] = [缩放级别,ToolbarWindow32]
[Window,Class] = [,msctls_progress32]
[Window,Class] = [,Shell Embedding]
[Window,Class] = [,Internet Explorer_Server]
[Window,Class] = [,AddressDisplay Control]
[Window,Class] = [,tooltips_class32]
[Window,Class] = [,CtrlNotifySink]
行为描述: 设置消息钩子
详情信息: C:\WINDOWS\system32\IEFRAME.dll
行为描述: 设置特殊文件夹属性
详情信息: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds Cache
C:\Documents and Settings\Administrator\IECompatCache
行为描述: 查找指定内核模块
详情信息: lstrcmpiA: ntice.sys <------> ntkrnlpa.exe (ntice.sys)
lstrcmpiA: ntice.sys <------> hal.dll (ntice.sys)
lstrcmpiA: ntice.sys <------> KDCOM.DLL (ntice.sys)
lstrcmpiA: ntice.sys <------> BOOTVID.dll (ntice.sys)
lstrcmpiA: ntice.sys <------> ACPI.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> WMILIB.SYS (ntice.sys)
lstrcmpiA: ntice.sys <------> pci.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> isapnp.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> compbatt.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> BATTC.SYS (ntice.sys)
lstrcmpiA: ntice.sys <------> intelide.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> PCIIDEX.SYS (ntice.sys)
lstrcmpiA: ntice.sys <------> MountMgr.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> ftdisk.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> dmload.sys (ntice.sys)
行为描述: 查找反病毒常用工具窗口
详情信息: NtUserFindWindowEx: [Class,Window] = [OLLYDBG,]
NtUserFindWindowEx: [Class,Window] = [GBDYLLO,]
NtUserFindWindowEx: [Class,Window] = [pediy06,]
NtUserFindWindowEx: [Class,Window] = [FilemonClass,]
NtUserFindWindowEx: [Class,Window] = [,File Monitor - Sysinternals: www.sysinternals.com]
NtUserFindWindowEx: [Class,Window] = [PROCMON_WINDOW_CLASS,]
NtUserFindWindowEx: [Class,Window] = [,Process Monitor - Sysinternals: www.sysinternals.com]
NtUserFindWindowEx: [Class,Window] = [RegmonClass,]
NtUserFindWindowEx: [Class,Window] = [,Registry Monitor - Sysinternals: www.sysinternals.com]
行为描述: 按名称获取主机地址
详情信息: wpad
文件行为
VirSCANVirSCAN
行为描述: 写权限映射文件
详情信息: \WINDOWS\system32\zh-cn\ieframe.dll.mui
Local\UrlZonesSM_Administrator
Local\!PrivacIE!SharedMem!Counter
CiceroSharedMemDefaultS-1-5-21-1482476501-1645522239-1417001333-500
\WINDOWS\system32\zh-cn\mshtml.dll.mui
\WINDOWS\system32\zh-cn\wshom.ocx.mui
Internet Explorer Immutable Application State (00000AB0-0000-0000-0000-000000000000)
Local\SqmData_IESQM-2736_S-1-5-21-1482476501-1645522239-1417001333-500
ie_lcie_main_ab0
Isolation Process Registry (0AC0ACF7-5F9C-11E4-B5D3-000C2938259F)
Isolation Signal Registry (0AC0ACF7-5F9C-11E4-B5D3-000C2938259F, 0)
ie_lcie_LogonMedium
Local\IEFrame!GetAsyncKeyStateSharedMem!2736
ie_lcie_ConnHashTable<2736>
AtlDebugAllocator_FileMappingNameStatic3_ab0
行为描述: 设置特殊文件夹属性
详情信息: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds Cache
C:\Documents and Settings\Administrator\IECompatCache
行为描述: 修改文件内容
详情信息: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IUKHR8T2\dnserrordiagoff_webOC[1]---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\dnserrordiagoff_webOC[1]---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\ErrorPageTemplate[1]---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6P4O8QNJ\errorPageStrings[1]---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6TLOMATB\httpErrorPagesScripts[1]---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\ErrorPageTemplate[2]---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\errorPageStrings[1]---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6P4O8QNJ\ErrorPageTemplate[1]---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\errorPageStrings[2]---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\background_gradient[1]---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IUKHR8T2\info_48[1]---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\bullet[1]---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IUKHR8T2\down[1]---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\httpErrorPagesScripts[1]---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6TLOMATB\background_gradient[1]---> Offset = 0
网络行为
VirSCANVirSCAN
行为描述: 下载文件
详情信息: URLDownloadToFileW: http://www.live.com/favicon.ico ---> C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
行为描述: 连接指定站点
详情信息: InternetConnectA: ServerName = www.x5xian.com, PORT = 80
InternetConnectA: ServerName = gg.memewg.com, PORT = 80
行为描述: 建立到一个指定的套接字连接
详情信息: 127.0.0.1:1040
127.0.0.1:1044
行为描述: 读取网络文件
详情信息: hFile = 0x0000030c, BytesToRead =10240, BytesRead = 10240.
行为描述: 打开HTTP请求
详情信息: HttpOpenRequestA: www.x5xian.com:80/, hConnect = 0x00000438
HttpOpenRequestA: www.x5xian.com:80/ok.html, hConnect = 0x00000410
HttpOpenRequestA: www.x5xian.com:80/ok22.html, hConnect = 0x00000410
HttpOpenRequestA: gg.memewg.com:80/gg.txt, hConnect = 0x00000398
HttpOpenRequestA: www.x5xian.com:80/pp.txt, hConnect = 0x00000398
HttpOpenRequestA: www.x5xian.com:80/, hConnect = 0x000002e4
HttpOpenRequestA: www.x5xian.com:80/ok2.html, hConnect = 0x000002a0
HttpOpenRequestA: www.x5xian.com:80/ok2.html, hConnect = 0x00000308
HttpOpenRequestA: www.x5xian.com:80/, hConnect = 0x000003ec
行为描述: 按名称获取主机地址
详情信息: wpad
注册表行为
VirSCANVirSCAN
行为描述: 修改注册表
详情信息: \REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\X\BaseClass
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\WINDOWS\system32\rundll32.exe
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Internet Explorer\SQM\PIDs\PID_2736
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Internet Explorer\Recovery\Active\{0AC0ACFA-5F9C-11E4-B5D3-000C2938259F}
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\CTF\TIP\{1188450c-fdab-47ae-80d8-c9633f71be64}\LanguageProfile\0x00000000\{63800dac-e7ca-4df9-9a5c-20765055488d}\Enable
\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{1EA4DBF0-3C3B-11CF-810C-00AA00389B71}\1.1\0\win32\
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Internet Explorer\Main\Window_Placement
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\iexplore\Count
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\iexplore\Time
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\iexplore\LoadTime
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\iexplore\LoadTimeCount
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\FaviconPath
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\0\DisplayName
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\0\ErrorState
行为描述: 删除注册表键
详情信息: \REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\CTF\TIP\{1188450c-fdab-47ae-80d8-c9633f71be64}\LanguageProfile\0x00000000\{63800dac-e7ca-4df9-9a5c-20765055488d}
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\CTF\TIP\{1188450c-fdab-47ae-80d8-c9633f71be64}\LanguageProfile\0x00000000
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\CTF\TIP\{1188450c-fdab-47ae-80d8-c9633f71be64}\LanguageProfile
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\CTF\TIP\{1188450c-fdab-47ae-80d8-c9633f71be64}
行为描述: 删除注册表键值_IE连接设置
详情信息: \REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL
行为描述: 删除注册表键值
详情信息: \REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\0\Expiration
\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\1\Expiration
其他行为
VirSCANVirSCAN
行为描述: 创建互斥体
详情信息: RasPbFile
Local\ZonesCounterMutex
Local\ZoneAttributeCacheCounterMutex
Local\ZonesCacheCounterMutex
Local\ZonesLockedCacheCounterMutex
Local\!PrivacIE!SharedMemory!Mutex
CTF.LBES.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.Compart.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.Asm.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.Layouts.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.TMD.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.TimListCache.FMPDefaultS-1-5-21-1482476501-1645522239-1417001333-500MUTEX.DefaultS-1-5-21-1482476501-1645522239-1417001333-500
qq炫舞仙音全功能增强版0527.exe
SHIMLIB_LOG_MUTEX
IESQM-2736_S-1-5-21-1482476501-1645522239-1417001333-500
行为描述: 内联HOOK
详情信息: C:\WINDOWS\system32\ntdll.dll--->DbgUiRemoteBreakin Offset = 0x0
C:\WINDOWS\system32\ntdll.dll--->DbgBreakPoint Offset = 0x0
行为描述: 设置消息钩子
详情信息: C:\WINDOWS\system32\IEFRAME.dll
行为描述: 查找指定窗口
详情信息: NtUserFindWindowEx: [Class,Window] = [18467-41,]
NtUserFindWindowEx: [Class,Window] = [MS_AutodialMonitor,]
NtUserFindWindowEx: [Class,Window] = [MS_WebCheckMonitor,]
NtUserFindWindowEx: [Class,Window] = [IEFrame,]
NtUserFindWindowEx: [Class,Window] = [Static,]
行为描述: 窗口信息
详情信息: Pid = 1760, Hwnd=0xd01ac, Text = 请先进入游戏,在游戏大厅点击开启, ClassName = Afx:400000:b:10011:1900015:0.
Pid = 1760, Hwnd=0xb01be, Text = 已过期,无法开启, ClassName = Button.
Pid = 1760, Hwnd=0xa0196, Text = MZ, ClassName = Afx:400000:b:10011:1900015:0.
Pid = 1760, Hwnd=0xd01e8, Text = 版本已过期,请点击下载地址下载!, ClassName = Afx:400000:b:10011:1900015:0.
Pid = 1760, Hwnd=0xa018c, Text = 炫舞仙音新官网:www.x5xian.com ← ← ← ← 点击进入, ClassName = Afx:400000:b:3e0165:1900015:0.
Pid = 1760, Hwnd=0xb01b0, Text = 版本更新提示:, ClassName = Afx:400000:b:10011:1900015:0.
Pid = 1760, Hwnd=0xa01aa, Text = 仙音最新版本:, ClassName = Afx:400000:b:10011:1900015:0.
Pid = 1760, Hwnd=0xb0184, Text = MZ, ClassName = Afx:400000:b:10011:1900015:0.
Pid = 1760, Hwnd=0xd01c2, Text = V0509, ClassName = Afx:400000:b:10011:1900015:0.
Pid = 1760, Hwnd=0xb016a, Text = 【 炫舞·仙音 】 , ClassName = 反抗拉萨尽管卢卡斯莫高窟老妈快噶.
Pid = 1760, Hwnd=0xc01a6, Text = 确定, ClassName = Button.
Pid = 1760, Hwnd=0xd01f6, Text = 此版本过期,不是最新版,请进炫舞仙音官网下载最新版本 请记住官网地址,www.x5xian.com,方便下载最新版, ClassName = Static.
Pid = 1760, Hwnd=0xc01da, Text = 提示, ClassName = #32770.
Pid = 2736, Hwnd=0x80396, Text = 导航栏, ClassName = WorkerW.
Pid = 2736, Hwnd=0x90392, Text = 地址组合控制, ClassName = ToolbarWindow32.
行为描述: 获取系统权限
详情信息: SE_LOAD_DRIVER_PRIVILEGE
行为描述: 尝试打开调试器或监控软件的驱动设备对象
详情信息: \??\SICE
\??\SIWVID
\??\NTICE
行为描述: 打开指定IE网页
详情信息: www.x5xian.com
行为描述: 隐藏指定窗口
详情信息: [Window,Class] = [,Afx:400000:8:10011:1900015:0]
[Window,Class] = [,BrowserFrameGripperClass]
[Window,Class] = [缩放级别,ToolbarWindow32]
[Window,Class] = [,msctls_progress32]
[Window,Class] = [,Shell Embedding]
[Window,Class] = [,Internet Explorer_Server]
[Window,Class] = [,AddressDisplay Control]
[Window,Class] = [,tooltips_class32]
[Window,Class] = [,CtrlNotifySink]
行为描述: 查找指定内核模块
详情信息: lstrcmpiA: ntice.sys <------> ntkrnlpa.exe (ntice.sys)
lstrcmpiA: ntice.sys <------> hal.dll (ntice.sys)
lstrcmpiA: ntice.sys <------> KDCOM.DLL (ntice.sys)
lstrcmpiA: ntice.sys <------> BOOTVID.dll (ntice.sys)
lstrcmpiA: ntice.sys <------> ACPI.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> WMILIB.SYS (ntice.sys)
lstrcmpiA: ntice.sys <------> pci.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> isapnp.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> compbatt.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> BATTC.SYS (ntice.sys)
lstrcmpiA: ntice.sys <------> intelide.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> PCIIDEX.SYS (ntice.sys)
lstrcmpiA: ntice.sys <------> MountMgr.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> ftdisk.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> dmload.sys (ntice.sys)
行为描述: 查找反病毒常用工具窗口
详情信息: NtUserFindWindowEx: [Class,Window] = [OLLYDBG,]
NtUserFindWindowEx: [Class,Window] = [GBDYLLO,]
NtUserFindWindowEx: [Class,Window] = [pediy06,]
NtUserFindWindowEx: [Class,Window] = [FilemonClass,]
NtUserFindWindowEx: [Class,Window] = [,File Monitor - Sysinternals: www.sysinternals.com]
NtUserFindWindowEx: [Class,Window] = [PROCMON_WINDOW_CLASS,]
NtUserFindWindowEx: [Class,Window] = [,Process Monitor - Sysinternals: www.sysinternals.com]
NtUserFindWindowEx: [Class,Window] = [RegmonClass,]
NtUserFindWindowEx: [Class,Window] = [,Registry Monitor - Sysinternals: www.sysinternals.com]
异常崩溃
VirSCANVirSCAN
行为描述: 创建互斥体
详情信息: RasPbFile
Local\ZonesCounterMutex
Local\ZoneAttributeCacheCounterMutex
Local\ZonesCacheCounterMutex
Local\ZonesLockedCacheCounterMutex
Local\!PrivacIE!SharedMemory!Mutex
CTF.LBES.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.Compart.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.Asm.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.Layouts.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.TMD.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500
CTF.TimListCache.FMPDefaultS-1-5-21-1482476501-1645522239-1417001333-500MUTEX.DefaultS-1-5-21-1482476501-1645522239-1417001333-500
qq炫舞仙音全功能增强版0527.exe
SHIMLIB_LOG_MUTEX
IESQM-2736_S-1-5-21-1482476501-1645522239-1417001333-500
行为描述: 内联HOOK
详情信息: C:\WINDOWS\system32\ntdll.dll--->DbgUiRemoteBreakin Offset = 0x0
C:\WINDOWS\system32\ntdll.dll--->DbgBreakPoint Offset = 0x0
行为描述: 设置消息钩子
详情信息: C:\WINDOWS\system32\IEFRAME.dll
行为描述: 查找指定窗口
详情信息: NtUserFindWindowEx: [Class,Window] = [18467-41,]
NtUserFindWindowEx: [Class,Window] = [MS_AutodialMonitor,]
NtUserFindWindowEx: [Class,Window] = [MS_WebCheckMonitor,]
NtUserFindWindowEx: [Class,Window] = [IEFrame,]
NtUserFindWindowEx: [Class,Window] = [Static,]
行为描述: 窗口信息
详情信息: Pid = 1760, Hwnd=0xd01ac, Text = 请先进入游戏,在游戏大厅点击开启, ClassName = Afx:400000:b:10011:1900015:0.
Pid = 1760, Hwnd=0xb01be, Text = 已过期,无法开启, ClassName = Button.
Pid = 1760, Hwnd=0xa0196, Text = MZ, ClassName = Afx:400000:b:10011:1900015:0.
Pid = 1760, Hwnd=0xd01e8, Text = 版本已过期,请点击下载地址下载!, ClassName = Afx:400000:b:10011:1900015:0.
Pid = 1760, Hwnd=0xa018c, Text = 炫舞仙音新官网:www.x5xian.com ← ← ← ← 点击进入, ClassName = Afx:400000:b:3e0165:1900015:0.
Pid = 1760, Hwnd=0xb01b0, Text = 版本更新提示:, ClassName = Afx:400000:b:10011:1900015:0.
Pid = 1760, Hwnd=0xa01aa, Text = 仙音最新版本:, ClassName = Afx:400000:b:10011:1900015:0.
Pid = 1760, Hwnd=0xb0184, Text = MZ, ClassName = Afx:400000:b:10011:1900015:0.
Pid = 1760, Hwnd=0xd01c2, Text = V0509, ClassName = Afx:400000:b:10011:1900015:0.
Pid = 1760, Hwnd=0xb016a, Text = 【 炫舞·仙音 】 , ClassName = 反抗拉萨尽管卢卡斯莫高窟老妈快噶.
Pid = 1760, Hwnd=0xc01a6, Text = 确定, ClassName = Button.
Pid = 1760, Hwnd=0xd01f6, Text = 此版本过期,不是最新版,请进炫舞仙音官网下载最新版本 请记住官网地址,www.x5xian.com,方便下载最新版, ClassName = Static.
Pid = 1760, Hwnd=0xc01da, Text = 提示, ClassName = #32770.
Pid = 2736, Hwnd=0x80396, Text = 导航栏, ClassName = WorkerW.
Pid = 2736, Hwnd=0x90392, Text = 地址组合控制, ClassName = ToolbarWindow32.
行为描述: 获取系统权限
详情信息: SE_LOAD_DRIVER_PRIVILEGE
行为描述: 尝试打开调试器或监控软件的驱动设备对象
详情信息: \??\SICE
\??\SIWVID
\??\NTICE
行为描述: 打开指定IE网页
详情信息: www.x5xian.com
行为描述: 隐藏指定窗口
详情信息: [Window,Class] = [,Afx:400000:8:10011:1900015:0]
[Window,Class] = [,BrowserFrameGripperClass]
[Window,Class] = [缩放级别,ToolbarWindow32]
[Window,Class] = [,msctls_progress32]
[Window,Class] = [,Shell Embedding]
[Window,Class] = [,Internet Explorer_Server]
[Window,Class] = [,AddressDisplay Control]
[Window,Class] = [,tooltips_class32]
[Window,Class] = [,CtrlNotifySink]
行为描述: 查找指定内核模块
详情信息: lstrcmpiA: ntice.sys <------> ntkrnlpa.exe (ntice.sys)
lstrcmpiA: ntice.sys <------> hal.dll (ntice.sys)
lstrcmpiA: ntice.sys <------> KDCOM.DLL (ntice.sys)
lstrcmpiA: ntice.sys <------> BOOTVID.dll (ntice.sys)
lstrcmpiA: ntice.sys <------> ACPI.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> WMILIB.SYS (ntice.sys)
lstrcmpiA: ntice.sys <------> pci.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> isapnp.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> compbatt.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> BATTC.SYS (ntice.sys)
lstrcmpiA: ntice.sys <------> intelide.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> PCIIDEX.SYS (ntice.sys)
lstrcmpiA: ntice.sys <------> MountMgr.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> ftdisk.sys (ntice.sys)
lstrcmpiA: ntice.sys <------> dmload.sys (ntice.sys)
行为描述: 查找反病毒常用工具窗口
详情信息: NtUserFindWindowEx: [Class,Window] = [OLLYDBG,]
NtUserFindWindowEx: [Class,Window] = [GBDYLLO,]
NtUserFindWindowEx: [Class,Window] = [pediy06,]
NtUserFindWindowEx: [Class,Window] = [FilemonClass,]
NtUserFindWindowEx: [Class,Window] = [,File Monitor - Sysinternals: www.sysinternals.com]
NtUserFindWindowEx: [Class,Window] = [PROCMON_WINDOW_CLASS,]
NtUserFindWindowEx: [Class,Window] = [,Process Monitor - Sysinternals: www.sysinternals.com]
NtUserFindWindowEx: [Class,Window] = [RegmonClass,]
NtUserFindWindowEx: [Class,Window] = [,Registry Monitor - Sysinternals: www.sysinternals.com]
动态列表行为
VirSCANVirSCAN
行为描述: 启动服务
详情信息: com.android.musicfx.Compatibility$Service
com.android.mms.transaction.SmsReceiverService
行为描述: 读取文件
详情信息: path:/proc/783/cmdline length:105
path:/proc/798/cmdline length:105
path:/proc/810/cmdline length:105
path:/proc/840/cmdline length:105
path:/proc/851/cmdline length:105
path:/data/tombstones/tombstone_01 length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:98
path:/data/data/com.callda/.lib/libexec.so length:101
path:/data/data/com.callda/.lib/libexec.so length:95
path:/data/data/com.callda/.lib/libexec.so length:93
path:/data/data/com.callda/.lib/libexec.so length:96
path:/data/data/com.callda/.lib/libexec.so length:92
path:/data/data/com.callda/.lib/libexec.so length:98
path:/data/data/com.callda/.lib/libexec.so length:95
path:/data/data/com.callda/.lib/libexec.so length:88
path:/data/data/com.callda/.lib/libexec.so length:90
path:/data/data/com.callda/.lib/libexec.so length:92
path:/data/data/com.callda/.lib/libexec.so length:97
path:/data/data/com.callda/.lib/libexec.so length:93
path:/data/data/com.callda/.lib/libexec.so length:93
path:/data/data/com.callda/.lib/libexec.so length:92
path:/data/data/com.callda/.lib/libexec.so length:96
path:/data/data/com.callda/.lib/libexec.so length:97
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:101
path:/data/data/com.callda/.lib/libexec.so length:99
path:/data/data/com.callda/.lib/libexec.so length:98
path:/data/data/com.callda/.lib/libexec.so length:98
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:100
path:/data/data/com.callda/.lib/libexec.so length:101
path:/data/data/com.callda/.lib/libexec.so length:97
path:/data/data/com.callda/.lib/libexec.so length:92
path:/data/data/com.callda/.lib/libexec.so length:82
path:/data/data/com.callda/.lib/libexec.so length:84
path:/data/data/com.callda/.lib/libexec.so length:91
path:/data/data/com.callda/.lib/libexec.so length:90
path:/data/data/com.callda/.lib/libexec.so length:81
path:/data/data/com.callda/.lib/libexec.so length:93
path:/data/data/com.callda/.lib/libexec.so length:90
path:/data/data/com.callda/.lib/libexec.so length:91
path:/data/data/com.callda/.lib/libexec.so length:84
path:/proc/875/cmdline length:105
path:/proc/888/cmdline length:105
path:/data/data/com.callda/.lib/libexec.so length:68
path:/data/data/com.callda/.lib/libexec.so length:68
path:/proc/890/cmdline length:105
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:59
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:65
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:51
path:/data/data/com.callda/.lib/libexec.so length:59
path:/data/data/com.callda/.lib/libexec.so length:51
path:/data/data/com.callda/.lib/libexec.so length:69
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:56
path:/data/data/com.callda/.lib/libexec.so length:51
path:/data/data/com.callda/.lib/libexec.so length:48
path:/data/data/com.callda/.lib/libexec.so length:67
path:/data/data/com.callda/.lib/libexec.so length:49
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:70
path:/data/data/com.callda/.lib/libexec.so length:51
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:48
path:/data/data/com.callda/.lib/libexec.so length:67
path:/data/data/com.callda/.lib/libexec.so length:69
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:57
path:/data/data/com.callda/.lib/libexec.so length:74
path:/data/data/com.callda/.lib/libexec.so length:73
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:69
path:/data/data/com.callda/.lib/libexec.so length:53
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:63
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:67
path:/data/data/com.callda/.lib/libexec.so length:63
path:/data/data/com.callda/.lib/libexec.so length:71
path:/data/data/com.callda/.lib/libexec.so length:69
path:/data/data/com.callda/.lib/libexec.so length:57
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:56
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:66
path:/data/data/com.callda/.lib/libexec.so length:72
path:/data/data/com.callda/.lib/libexec.so length:52
path:/data/data/com.callda/.lib/libexec.so length:68
path:/data/data/com.callda/.lib/libexec.so length:59
path:/data/data/com.callda/.lib/libexec.so length:59
path:/data/data/com.callda/.lib/libexec.so length:49
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:57
path:/data/data/com.callda/.lib/libexec.so length:59
path:/data/data/com.callda/.lib/libexec.so length:65
path:/data/data/com.callda/.lib/libexec.so length:71
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:57
path:/data/data/com.callda/.lib/libexec.so length:54
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:54
path:/data/data/com.callda/.lib/libexec.so length:67
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:54
path:/data/data/com.callda/.lib/libexec.so length:55
path:/data/data/com.callda/.lib/libexec.so length:70
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:54
path:/data/data/com.callda/.lib/libexec.so length:59
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:57
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:47
path:/data/data/com.callda/.lib/libexec.so length:68
path:/data/data/com.callda/.lib/libexec.so length:69
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:56
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:71
path:/data/data/com.callda/.lib/libexec.so length:66
path:/data/data/com.callda/.lib/libexec.so length:53
path:/data/data/com.callda/.lib/libexec.so length:56
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:53
path:/data/data/com.callda/.lib/libexec.so length:65
path:/data/data/com.callda/.lib/libexec.so length:53
path:/data/data/com.callda/.lib/libexec.so length:63
path:/data/data/com.callda/.lib/libexec.so length:59
path:/data/data/com.callda/.lib/libexec.so length:46
path:/data/data/com.callda/.lib/libexec.so length:65
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:74
path:/data/data/com.callda/.lib/libexec.so length:63
path:/data/data/com.callda/.lib/libexec.so length:67
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:53
path:/data/data/com.callda/.lib/libexec.so length:71
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:54
path:/data/data/com.callda/.lib/libexec.so length:72
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:63
path:/data/data/com.callda/.lib/libexec.so length:63
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:66
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:49
path:/data/data/com.callda/.lib/libexec.so length:65
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:55
path:/data/data/com.callda/.lib/libexec.so length:74
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:67
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:70
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:66
path:/data/data/com.callda/.lib/libexec.so length:66
path:/data/data/com.callda/.lib/libexec.so length:50
path:/data/data/com.callda/.lib/libexec.so length:52
path:/data/data/com.callda/.lib/libexec.so length:63
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:53
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:65
path:/data/data/com.callda/.lib/libexec.so length:67
path:/data/data/com.callda/.lib/libexec.so length:49
path:/data/data/com.callda/.lib/libexec.so length:71
path:/data/data/com.callda/.lib/libexec.so length:49
path:/data/data/com.callda/.lib/libexec.so length:69
path:/data/data/com.callda/.lib/libexec.so length:77
path:/data/data/com.callda/.lib/libexec.so length:65
path:/data/data/com.callda/.lib/libexec.so length:74
path:/data/data/com.callda/.lib/libexec.so length:76
path:/data/data/com.callda/.lib/libexec.so length:53
path:/data/data/com.callda/.lib/libexec.so length:48
path:/data/data/com.callda/.lib/libexec.so length:51
path:/data/data/com.callda/.lib/libexec.so length:37
path:/data/data/com.callda/.lib/libexec.so length:52
path:/data/data/com.callda/.lib/libexec.so length:48
path:/data/data/com.callda/.lib/libexec.so length:48
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:53
path:/data/data/com.callda/.lib/libexec.so length:75
path:/data/data/com.callda/.lib/libexec.so length:71
path:/data/data/com.callda/.lib/libexec.so length:66
path:/data/data/com.callda/.lib/libexec.so length:81
path:/data/data/com.callda/.lib/libexec.so length:73
path:/data/data/com.callda/.lib/libexec.so length:80
path:/data/data/com.callda/.lib/libexec.so length:69
path:/data/data/com.callda/.lib/libexec.so length:63
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:71
path:/data/data/com.callda/.lib/libexec.so length:63
path:/data/data/com.callda/.lib/libexec.so length:66
path:/data/data/com.callda/.lib/libexec.so length:83
path:/data/data/com.callda/.lib/libexec.so length:74
path:/data/data/com.callda/.lib/libexec.so length:70
path:/data/data/com.callda/.lib/libexec.so length:75
path:/data/data/com.callda/.lib/libexec.so length:78
path:/data/data/com.callda/.lib/libexec.so length:73
path:/data/data/com.callda/.lib/libexec.so length:69
path:/data/data/com.callda/.lib/libexec.so length:80
path:/data/data/com.callda/.lib/libexec.so length:84
path:/data/data/com.callda/.lib/libexec.so length:75
path:/data/data/com.callda/.lib/libexec.so length:80
path:/data/data/com.callda/.lib/libexec.so length:80
path:/data/data/com.callda/.lib/libexec.so length:97
path:/data/data/com.callda/.lib/libexec.so length:95
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:96
path:/data/data/com.callda/.lib/libexecmain.so length:104
path:/data/data/com.callda/.lib/libexecmain.so length:24
path:/data/data/com.callda/.lib/libexecmain.so length:59
path:/data/data/com.callda/.lib/libexecmain.so length:48
path:/data/data/com.callda/.lib/libexecmain.so length:42
path:/data/data/com.callda/.lib/libexecmain.so length:42
path:/data/data/com.callda/.lib/libexecmain.so length:58
path:/data/data/com.callda/.lib/libexecmain.so length:105
path:/data/data/com.callda/.lib/libexecmain.so length:105
path:/data/data/com.callda/.lib/libexecmain.so length:102
path:/data/tombstones/tombstone_02 length:105
path:/proc/911/cmdline length:105
path:/proc/959/cmdline length:105
path:/data/tombstones/tombstone_03 length:105
path:/data/tombstones/tombstone_04 length:105
行为描述: 类加载
详情信息: path:/system/app/PicoTts.apk
path:/system/app/MusicFX.apk
path:/system/framework/am.jar
path:/data/app/com.callda-1.apk
行为描述: 写入文件
详情信息: path:/data/data/com.android.gallery3d/shared_prefs/com.android.gallery3d_preferences.xml length:105
path:/data/data/com.android.musicfx/shared_prefs/musicfx.xml length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:98
path:/data/data/com.callda/.lib/libexec.so length:101
path:/data/data/com.callda/.lib/libexec.so length:95
path:/data/data/com.callda/.lib/libexec.so length:93
path:/data/data/com.callda/.lib/libexec.so length:96
path:/data/data/com.callda/.lib/libexec.so length:92
path:/data/data/com.callda/.lib/libexec.so length:98
path:/data/data/com.callda/.lib/libexec.so length:95
path:/data/data/com.callda/.lib/libexec.so length:88
path:/data/data/com.callda/.lib/libexec.so length:90
path:/data/data/com.callda/.lib/libexec.so length:92
path:/data/data/com.callda/.lib/libexec.so length:97
path:/data/data/com.callda/.lib/libexec.so length:93
path:/data/data/com.callda/.lib/libexec.so length:93
path:/data/data/com.callda/.lib/libexec.so length:92
path:/data/data/com.callda/.lib/libexec.so length:96
path:/data/data/com.callda/.lib/libexec.so length:97
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:101
path:/data/data/com.callda/.lib/libexec.so length:99
path:/data/data/com.callda/.lib/libexec.so length:98
path:/data/data/com.callda/.lib/libexec.so length:98
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:100
path:/data/data/com.callda/.lib/libexec.so length:101
path:/data/data/com.callda/.lib/libexec.so length:97
path:/data/data/com.callda/.lib/libexec.so length:92
path:/data/data/com.callda/.lib/libexec.so length:82
path:/data/data/com.callda/.lib/libexec.so length:84
path:/data/data/com.callda/.lib/libexec.so length:91
path:/data/data/com.callda/.lib/libexec.so length:90
path:/data/data/com.callda/.lib/libexec.so length:81
path:/data/data/com.callda/.lib/libexec.so length:93
path:/data/data/com.callda/.lib/libexec.so length:90
path:/data/data/com.callda/.lib/libexec.so length:91
path:/data/data/com.callda/.lib/libexec.so length:84
path:/data/data/com.callda/.lib/libexec.so length:68
path:/data/data/com.callda/.lib/libexec.so length:68
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:59
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:65
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:51
path:/data/data/com.callda/.lib/libexec.so length:59
path:/data/data/com.callda/.lib/libexec.so length:51
path:/data/data/com.callda/.lib/libexec.so length:69
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:56
path:/data/data/com.callda/.lib/libexec.so length:51
path:/data/data/com.callda/.lib/libexec.so length:48
path:/data/data/com.callda/.lib/libexec.so length:67
path:/data/data/com.callda/.lib/libexec.so length:49
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:70
path:/data/data/com.callda/.lib/libexec.so length:51
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:48
path:/data/data/com.callda/.lib/libexec.so length:67
path:/data/data/com.callda/.lib/libexec.so length:69
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:57
path:/data/data/com.callda/.lib/libexec.so length:74
path:/data/data/com.callda/.lib/libexec.so length:73
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:69
path:/data/data/com.callda/.lib/libexec.so length:53
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:63
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:67
path:/data/data/com.callda/.lib/libexec.so length:63
path:/data/data/com.callda/.lib/libexec.so length:71
path:/data/data/com.callda/.lib/libexec.so length:69
path:/data/data/com.callda/.lib/libexec.so length:57
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:56
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:53
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:54
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:45
path:/data/data/com.callda/.lib/libexec.so length:65
path:/data/data/com.callda/.lib/libexec.so length:65
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:47
path:/data/data/com.callda/.lib/libexec.so length:65
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:65
path:/data/data/com.callda/.lib/libexec.so length:56
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:56
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:56
path:/data/data/com.callda/.lib/libexec.so length:70
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:52
path:/data/data/com.callda/.lib/libexec.so length:53
path:/data/data/com.callda/.lib/libexec.so length:63
path:/data/data/com.callda/.lib/libexec.so length:63
path:/data/data/com.callda/.lib/libexec.so length:69
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:73
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:51
path:/data/data/com.callda/.lib/libexec.so length:53
path:/data/data/com.callda/.lib/libexec.so length:50
path:/data/data/com.callda/.lib/libexec.so length:47
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:55
path:/data/data/com.callda/.lib/libexec.so length:57
path:/data/data/com.callda/.lib/libexec.so length:66
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:65
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:69
path:/data/data/com.callda/.lib/libexec.so length:63
path:/data/data/com.callda/.lib/libexec.so length:51
path:/data/data/com.callda/.lib/libexec.so length:52
path:/data/data/com.callda/.lib/libexec.so length:72
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:67
path:/data/data/com.callda/.lib/libexec.so length:68
path:/data/data/com.callda/.lib/libexec.so length:79
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:51
path:/data/data/com.callda/.lib/libexec.so length:59
path:/data/data/com.callda/.lib/libexec.so length:71
path:/data/data/com.callda/.lib/libexec.so length:76
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:68
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:67
path:/data/data/com.callda/.lib/libexec.so length:56
path:/data/data/com.callda/.lib/libexec.so length:69
path:/data/data/com.callda/.lib/libexec.so length:65
path:/data/data/com.callda/.lib/libexec.so length:63
path:/data/data/com.callda/.lib/libexec.so length:52
path:/data/data/com.callda/.lib/libexec.so length:59
path:/data/data/com.callda/.lib/libexec.so length:56
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:66
path:/data/data/com.callda/.lib/libexec.so length:56
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:56
path:/data/data/com.callda/.lib/libexec.so length:59
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:67
path:/data/data/com.callda/.lib/libexec.so length:68
path:/data/data/com.callda/.lib/libexec.so length:61
path:/data/data/com.callda/.lib/libexec.so length:50
path:/data/data/com.callda/.lib/libexec.so length:51
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:62
path:/data/data/com.callda/.lib/libexec.so length:57
path:/data/data/com.callda/.lib/libexec.so length:56
path:/data/data/com.callda/.lib/libexec.so length:58
path:/data/data/com.callda/.lib/libexec.so length:68
path:/data/data/com.callda/.lib/libexec.so length:52
path:/data/data/com.callda/.lib/libexec.so length:71
path:/data/data/com.callda/.lib/libexec.so length:50
path:/data/data/com.callda/.lib/libexec.so length:87
path:/data/data/com.callda/.lib/libexec.so length:82
path:/data/data/com.callda/.lib/libexec.so length:38
path:/data/data/com.callda/.lib/libexec.so length:74
path:/data/data/com.callda/.lib/libexec.so length:63
path:/data/data/com.callda/.lib/libexec.so length:54
path:/data/data/com.callda/.lib/libexec.so length:50
path:/data/data/com.callda/.lib/libexec.so length:56
path:/data/data/com.callda/.lib/libexec.so length:39
path:/data/data/com.callda/.lib/libexec.so length:51
path:/data/data/com.callda/.lib/libexec.so length:42
path:/data/data/com.callda/.lib/libexec.so length:44
path:/data/data/com.callda/.lib/libexec.so length:40
path:/data/data/com.callda/.lib/libexec.so length:52
path:/data/data/com.callda/.lib/libexec.so length:79
path:/data/data/com.callda/.lib/libexec.so length:76
path:/data/data/com.callda/.lib/libexec.so length:56
path:/data/data/com.callda/.lib/libexec.so length:78
path:/data/data/com.callda/.lib/libexec.so length:91
path:/data/data/com.callda/.lib/libexec.so length:77
path:/data/data/com.callda/.lib/libexec.so length:55
path:/data/data/com.callda/.lib/libexec.so length:64
path:/data/data/com.callda/.lib/libexec.so length:59
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:60
path:/data/data/com.callda/.lib/libexec.so length:68
path:/data/data/com.callda/.lib/libexec.so length:81
path:/data/data/com.callda/.lib/libexec.so length:81
path:/data/data/com.callda/.lib/libexec.so length:76
path:/data/data/com.callda/.lib/libexec.so length:70
path:/data/data/com.callda/.lib/libexec.so length:83
path:/data/data/com.callda/.lib/libexec.so length:82
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:91
path:/data/data/com.callda/.lib/libexec.so length:86
path:/data/data/com.callda/.lib/libexec.so length:88
path:/data/data/com.callda/.lib/libexec.so length:85
path:/data/data/com.callda/.lib/libexec.so length:88
path:/data/data/com.callda/.lib/libexec.so length:71
path:/data/data/com.callda/.lib/libexec.so length:89
path:/data/data/com.callda/.lib/libexec.so length:82
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexec.so length:105
path:/data/data/com.callda/.lib/libexecmain.so length:104
path:/data/data/com.callda/.lib/libexecmain.so length:24
path:/data/data/com.callda/.lib/libexecmain.so length:59
path:/data/data/com.callda/.lib/libexecmain.so length:48
path:/data/data/com.callda/.lib/libexecmain.so length:42
path:/data/data/com.callda/.lib/libexecmain.so length:42
path:/data/data/com.callda/.lib/libexecmain.so length:58
path:/data/data/com.callda/.lib/libexecmain.so length:105
path:/data/data/com.callda/.lib/libexecmain.so length:105
path:/data/data/com.callda/.lib/libexecmain.so length:102
path:/data/data/com.android.gallery3d/shared_prefs/com.android.gallery3d_preferences.xml length:105
Activities
VirSCANVirSCAN
活动名 类型
.phone.activity.WelcomeActivity android.intent.action.MAIN
.phone.activity.WelcomeActivity android.intent.category.LAUNCHER
com.callda.phone.activity.CallChooserActivity android.intent.action.CALL_BUTTON
com.callda.phone.activity.CallChooserActivity android.intent.action.CALL_PRIVILEGED
com.callda.phone.activity.CallChooserActivity android.intent.action.CALL
com.callda.phone.activity.CallChooserActivity android.intent.action.DIAL
com.callda.phone.activity.CallChooserActivity android.intent.action.VIEW
com.callda.phone.activity.CallChooserActivity android.intent.category.DEFAULT
com.callda.phone.activity.CallChooserActivity android.intent.category.BROWSABLE
启动方式
VirSCANVirSCAN
名称 信息
com.callda.phone.sipcall.receive.NetworkManager 网络连接改变时启动服务
com.umeng.message.RegistrationReceiver 网络连接改变时启动服务
com.umeng.message.RegistrationReceiver 应用卸载时启动服务
权限列表
VirSCANVirSCAN
许可名称 信息
android.permission.INTERNET 连接网络(2G或3G)
android.permission.ACCESS_WIFI_STATE 读取wifi网络状态
android.permission.ACCESS_NETWORK_STATE 读取网络状态(2G或3G)
android.permission.CHANGE_WIFI_STATE 改变WIFI连接状态
android.permission.CHANGE_NETWORK_STATE 变更网络状态
android.permission.WAKE_LOCK 手机屏幕关闭后后台进程仍运行
android.permission.MODIFY_AUDIO_SETTINGS 修改声音设置
android.permission.WRITE_SETTINGS 读写系统设置项
android.permission.DISABLE_KEYGUARD 禁用键盘锁
android.permission.READ_CONTACTS 读取联系人信息
android.permission.PROCESS_OUTGOING_CALLS 监视、修改有关拨出电话
android.permission.CALL_PHONE 拨打电话
android.permission.ACCESS_COARSE_LOCATION 获取粗略的位置(通过wifi、基站)
android.permission.ACCESS_FINE_LOCATION 获取精确的位置(通过GPS)
android.permission.MOUNT_UNMOUNT_FILESYSTEMS 挂载、反挂载外部文件系统
android.permission.RECORD_AUDIO 录音(使用AudioRecord)
android.permission.RAISED_THREAD_PRIORITY
android.permission.SEND_SMS 发送短信
android.permission.MODIFY_PHONE_STATE 修改电话状态
android.permission.WRITE_SMS 写短信
android.permission.READ_SMS 读取短信
android.permission.RECEIVE_BOOT_COMPLETED 接收开机启动广播
android.permission.VIBRATE 允许设备震动
android.permission.READ_LOGS 读取系统日志
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.WRITE_CONTACTS 写入联系人信息
android.permission.BLUETOOTH 连接蓝牙设备
android.permission.BROADCAST_STICKY 发送持久广播
android.permission.GET_ACCOUNTS 访问账户列表
android.permission.GET_TASKS 获取有关当前或最近运行的任务信息
android.permission.REORDER_TASKS 系统任务排序
服务列表
VirSCANVirSCAN
名称
com.callda.phone.service.MainService
com.callda.phone.service.CalldaPhoneService
com.umeng.message.UmengService
org.android.agoo.service.ElectionService
com.umeng.message.UmengIntentService
文件列表
VirSCANVirSCAN
文件名 校验码
META-INF/MANIFEST.MF 0xb2f4a016
META-INF/CALLDA_N.SF 0x269854b
META-INF/CALLDA_N.RSA 0x1b4752de
META-INF/signed.bin 0x15c12ec
META-INF/sdata.bin 0xb6bfe729
META-INF/af.bin 0x600f6070
assets/ijm_lib/armeabi/libexec.so 0xa793f19f
assets/ijm_lib/armeabi/libexecmain.so 0xde8917d7
assets/ijm_lib/x86/libexec.so 0xb042f44d
assets/ijm_lib/x86/libexecmain.so 0xad0db1e8
assets/alipay_plugin_20120428msp.apk 0x6237a883
assets/ijiami.dat 0xbe521bc7
lib/armeabi/libcallda-armeabi.so 0x633ddac7
lib/armeabi/libcrypto-armeabi.so 0x8c143510
lib/armeabi/libsrtp-armeabi.so 0xec5d9bb7
lib/armeabi/libzrtpcpp-armeabi.so 0xa0acd847
lib/armeabi-v7a/libcallda-armeabi-v7a.so 0x2f20d95
lib/armeabi-v7a/libcrypto-armeabi-v7a.so 0x2d9e552e
lib/armeabi-v7a/libsrtp-armeabi-v7a.so 0xd432585c
lib/armeabi-v7a/libzrtpcpp-armeabi-v7a.so 0xdb62058f
res/anim/push_left_in.xml 0x89ac38b8
res/anim/push_left_out.xml 0x2f2b433d
res/anim/umeng_fb_slide_in_from_left.xml 0x970dfb8b
res/anim/umeng_fb_slide_in_from_right.xml 0xd29e9c99
res/anim/umeng_fb_slide_out_from_left.xml 0x807b5089
res/anim/umeng_fb_slide_out_from_right.xml 0x847927ad
res/anim/umeng_socialize_fade_in.xml 0xf2e7bdac
res/anim/umeng_socialize_fade_out.xml 0x19682b1d
res/anim/umeng_socialize_shareboard_animation_in.xml 0x5b62eaa8
res/anim/umeng_socialize_shareboard_animation_out.xml 0x100d0f13
res/anim/umeng_socialize_slide_in_from_bottom.xml 0x72fa759c
res/anim/umeng_socialize_slide_out_from_bottom.xml 0x62fd58e7
res/drawable/bg_edit.9.png 0x41a83caa
res/drawable/bn_bg_selector.xml 0x226b1232
res/drawable/bn_call_chooser_selector.xml 0x2c3fd4c7
res/drawable/bn_close_bg_selector.xml 0xd986276b
res/drawable/bn_warning_selector.xml 0x74e9b94
res/drawable/bn_white_bg_selector.xml 0xcb2f08a0
res/drawable/boda_bg_selector.xml 0xbb1006a5
res/drawable/btn_answer_item.xml 0xa2c9ad52
res/drawable/btn_cancel_selector.xml 0x893afa64
res/drawable/btn_g_selector.xml 0x75a809ff
res/drawable/btn_hangup_item.xml 0x6b6129c7
res/drawable/btn_ok_selector.xml 0x75a809ff
res/drawable/btn_reg_selector.xml 0xf26e4e08
res/drawable/btn_regester_white_selector.xml 0xef3c8ec3
res/drawable/call_button_bg_selector.xml 0x92565c40
res/drawable/call_left_css.xml 0x2fba7252
res/drawable/call_toast_bg.xml 0x6d70d905
res/drawable/call_zero_css.xml 0x68d89d03
res/drawable/calling_b1_css.xml 0x2582537e
res/drawable/calling_b3_css.xml 0xcb438027
res/drawable/calling_big_00.xml 0xb6154475
res/drawable/calling_big_01.xml 0xf715aba9
res/drawable/calling_big_10.xml 0x19d478f0
res/drawable/calling_big_11.xml 0x75147411
res/drawable/calling_small_0.xml 0xa83e51b2
res/drawable/calling_small_1.xml 0x8e08ebd2
res/drawable/calling_small_2.xml 0x1adc4b4d
res/drawable/calling_small_3.xml 0x5bdca491
res/drawable/calling_small_4.xml 0xb51d77c8
res/drawable/calling_small_5.xml 0xd9dd7b29
res/drawable/calling_small_6.xml 0x9e2f3406
res/drawable/calling_small_jing.xml 0x7ff6d37
res/drawable/calling_small_xing.xml 0xbda77055
res/drawable/calllog_bn_selector.xml 0xf540a61e
res/drawable/contact_check_selector.xml 0xf3c077f4
res/drawable/contact_fl_selector.xml 0xb060545
res/drawable/contact_lv_item_selector.xml 0x51c473cd
res/drawable/corner_list_first_item.xml 0x5b87e2fc
res/drawable/corner_list_item.xml 0x539cae2d
res/drawable/corner_list_last_item.xml 0xba298b65
res/drawable/corner_list_single_item.xml 0xb232c7b4
res/drawable/dial_delete_css.xml 0xb4e93871
res/drawable/dialog_button_colorlist.xml 0x6d936cff
res/drawable/dialog_button_submit.xml 0x43dccc7f
res/drawable/dic_background.xml 0x53b59c27
res/drawable/listitem_bk.xml 0x7270e4e8
res/drawable/meal_item_cb_bg_selector.xml 0xf4fd8afc
res/drawable/meal_item_cb_icon_selector.xml 0xccb8aed0
res/drawable/meal_item_zb_bg_selector.xml 0xbf68337e
res/drawable/meal_item_zb_icon_selector.xml 0xe8ab28b3
res/drawable/menu1_selector.xml 0x5490d81
res/drawable/menu2_selector.xml 0x5e7ca3ce
res/drawable/menu3_selector.xml 0x43f35b23
res/drawable/menu4_selector.xml 0x9a4a8f0d
res/drawable/menu5_selector.xml 0x2ef6eb96
res/drawable/more_item_selector.xml 0x5e490d23
res/drawable/my_progressbar.xml 0x90aee701
res/drawable/my_progressbar1.xml 0x74a86e2d
res/drawable/progressbar1.xml 0xb91c94da
res/drawable/quicksearchbar_bg_selector.xml 0x37ebae4a
res/drawable/refresh_button.xml 0x9aed51b4
res/drawable/rounded_view_top_bg.xml 0x9223c09e
res/drawable/sendcallback_css.xml 0x3194e7d6
res/drawable/shape_corner_linearlayout_bg.xml 0xf9630f8b
res/drawable/shape_corner_ll_bg_select.xml 0xb8f28665
res/drawable/shape_corner_nor.xml 0xafedc730
res/drawable/shape_corner_press.xml 0x6111950
res/drawable/shape_cornerlist_bottom_back.xml 0xe4eed679
res/drawable/shape_cornerlist_mid_back.xml 0x977bd376
res/drawable/shape_cornerlist_single_back.xml 0x501cc9c3
res/drawable/shape_cornerlist_top_back.xml 0xea9dd7a9
res/drawable/shape_line.xml 0xaddc50f3
res/drawable/shape_square_bg.xml 0x9e609131
res/drawable/sms_add_bg_selector.xml 0x9f16254e
res/drawable/star_progressbar.xml 0x24dac1d8
res/drawable/tab_text_selector.xml 0x4cbd52bf
res/drawable/text_item_select.xml 0x389b911d
res/drawable/togglebutton_selector.xml 0x740e2e17
res/drawable/umeng_common_gradient_green.xml 0x962bb903
res/drawable/umeng_common_gradient_orange.xml 0xd5106ae2
res/drawable/umeng_common_gradient_red.xml 0x133ade08
res/drawable/umeng_fb_arrow_right.png 0x7a1c5b28
res/drawable/umeng_fb_back_normal.png 0xf037944c
res/drawable/umeng_fb_back_selected.png 0x8c4fe8b
res/drawable/umeng_fb_back_selector.xml 0x7efb59a1
res/drawable/umeng_fb_bar_bg.9.png 0x382879f2
res/drawable/umeng_fb_btn_bg_selector.xml 0x1cfdb3f3
res/drawable/umeng_fb_conversation_bg.png 0xdc739dc7
res/drawable/umeng_fb_gradient_green.xml 0x962bb903
res/drawable/umeng_fb_gradient_orange.xml 0xd5106ae2
res/drawable/umeng_fb_gray_frame.xml 0xd1c4cb2
res/drawable/umeng_fb_list_item.9.png 0x1dd77523
res/drawable/umeng_fb_list_item_pressed.9.png 0xdcc0e0d
res/drawable/umeng_fb_list_item_selector.xml 0xcbeb269
res/drawable/umeng_fb_logo.png 0x2d9cb111
res/drawable/umeng_fb_point_new.xml 0xb0b65b88
res/drawable/umeng_fb_point_normal.xml 0xd54fcdde
res/drawable/umeng_fb_reply_left_bg.9.png 0xfa4a43b9
res/drawable/umeng_fb_reply_right_bg.9.png 0x49b36368
res/drawable/umeng_fb_see_list_normal.png 0x6d9ee2f3
res/drawable/umeng_fb_see_list_pressed.png 0x3ff6d161
res/drawable/umeng_fb_see_list_selector.xml 0xfeb2da2b
res/drawable/umeng_fb_statusbar_icon.png 0x6eefda9a
res/drawable/umeng_fb_submit_selector.xml 0x7e8b4823
res/drawable/umeng_fb_tick_normal.png 0xdea435dd
res/drawable/umeng_fb_tick_selected.png 0x33316df3
res/drawable/umeng_fb_tick_selector.xml 0x62b757a4
res/drawable/umeng_fb_top_banner.xml 0xf7574374
res/drawable/umeng_fb_user_bubble.9.png 0x23cfe9b2
res/drawable/umeng_fb_write_normal.png 0xf3083af7
res/drawable/umeng_fb_write_pressed.png 0x10dae61
res/drawable/umeng_fb_write_selector.xml 0x5670eb45
res/drawable/umeng_socialize_action_back.xml 0xa22a181b
res/drawable/umeng_socialize_action_back_normal.png 0xba8b7386
res/drawable/umeng_socialize_action_back_selected.png 0xce53b418
res/drawable/umeng_socialize_action_comment_normal.png 0x4a2cb650
res/drawable/umeng_socialize_action_comment_selected.png 0x789fef90
res/drawable/umeng_socialize_action_item_bg.png 0xd6da6f19
res/drawable/umeng_socialize_action_like.png 0x8c8838d3
res/drawable/umeng_socialize_action_personal_icon.xml 0x8a9eb166
res/drawable/umeng_socialize_action_personal_normal.png 0x534b8d2e
res/drawable/umeng_socialize_action_personal_selected.png 0x66335bf8
res/drawable/umeng_socialize_action_share_icon.xml 0xcee51124
res/drawable/umeng_socialize_action_share_normal.png 0x92a44513
res/drawable/umeng_socialize_action_share_selected.png 0xcdf5bf9d
res/drawable/umeng_socialize_action_unlike.png 0x94220fee
res/drawable/umeng_socialize_actionbar_bg.9.png 0x35047368
res/drawable/umeng_socialize_at_button.xml 0xbdd33acb
res/drawable/umeng_socialize_at_label_bg.png 0x7730e5b6
res/drawable/umeng_socialize_at_normal.png 0x5f0e2072
res/drawable/umeng_socialize_at_search_bg.9.png 0x9d583d2b
res/drawable/umeng_socialize_at_selected.png 0x8dffa32e
res/drawable/umeng_socialize_bind_bg.9.png 0xc75a503
res/drawable/umeng_socialize_bind_bt.xml 0xe7d4b87a
res/drawable/umeng_socialize_bind_select_bg.png 0xbe398570
res/drawable/umeng_socialize_button_blue.9.png 0x883f5575
res/drawable/umeng_socialize_button_grey.9.png 0xf6adf7f3
res/drawable/umeng_socialize_button_grey_blue.xml 0xcbcbf648
res/drawable/umeng_socialize_button_login.xml 0x1014f1f7
res/drawable/umeng_socialize_button_login_normal.png 0x815ff5a
res/drawable/umeng_socialize_button_login_pressed.png 0x815ff5a
res/drawable/umeng_socialize_button_red.9.png 0x4bb0e4ba
res/drawable/umeng_socialize_button_red_blue.xml 0x71bd2f32
res/drawable/umeng_socialize_button_white.9.png 0x11f44e85
res/drawable/umeng_socialize_button_white_blue.xml 0x541276f7
res/drawable/umeng_socialize_checked.png 0x420ef896
res/drawable/umeng_socialize_comment_bg.png 0x911f93d0
res/drawable/umeng_socialize_comment_icon.xml 0x68606578
res/drawable/umeng_socialize_comment_item_bg_shape.xml 0x64d15b4f
res/drawable/umeng_socialize_comment_normal.png 0x522b7ff4
res/drawable/umeng_socialize_comment_selected.png 0x3c18faea
res/drawable/umeng_socialize_commnet_header_bg.xml 0xa8d21dca
res/drawable/umeng_socialize_default_avatar.png 0xd968c89b
res/drawable/umeng_socialize_divider_line.png 0x55aed24c
res/drawable/umeng_socialize_douban_off.png 0x2c165aac
res/drawable/umeng_socialize_douban_on.png 0x72af12c1
res/drawable/umeng_socialize_facebook.png 0x79e8d3ee
res/drawable/umeng_socialize_fetch_image.png 0x79c102e9
res/drawable/umeng_socialize_fetch_image_disabled.png 0xcf533b82
res/drawable/umeng_socialize_fetch_location.png 0x5d7d5c2
res/drawable/umeng_socialize_fetch_location_disabled.png 0xa7a3b87e
res/drawable/umeng_socialize_gmail.png 0xe2cf4751
res/drawable/umeng_socialize_google.png 0x14e0c993
res/drawable/umeng_socialize_input_bar.png 0x25897e6
res/drawable/umeng_socialize_light_bar_bg.9.png 0x600ae142
res/drawable/umeng_socialize_location_grey.png 0xc9dc4d22
res/drawable/umeng_socialize_location_ic.png 0xaa26ffe6
res/drawable/umeng_socialize_location_mark.png 0xaa26ffe6
res/drawable/umeng_socialize_location_off.png 0x351812a3
res/drawable/umeng_socialize_location_on.png 0x793abdae
res/drawable/umeng_socialize_nav_bar_bg.png 0x816c111f
res/drawable/umeng_socialize_oauth_check.xml 0x2c7eec66
res/drawable/umeng_socialize_oauth_check_off.png 0xe4317840
res/drawable/umeng_socialize_oauth_check_on.png 0x43a08af1
res/drawable/umeng_socialize_pulltorefresh_arrow.png 0x32192a53
res/drawable/umeng_socialize_pv.png 0xbb30ac53
res/drawable/umeng_socialize_qq_login.png 0x25c5b3c7
res/drawable/umeng_socialize_qq_off.png 0x7bdd3319
res/drawable/umeng_socialize_qq_on.png 0x1c72a73
res/drawable/umeng_socialize_qzone_off.png 0x9058e27f
res/drawable/umeng_socialize_qzone_on.png 0x9a0765c4
res/drawable/umeng_socialize_refersh.png 0x79e6fe33
res/drawable/umeng_socialize_renren_off.png 0xe8ee095b
res/drawable/umeng_socialize_renren_on.png 0x67c8b264
res/drawable/umeng_socialize_search_icon.png 0x277770e7
res/drawable/umeng_socialize_shape_bt.xml 0xe72b94c
res/drawable/umeng_socialize_shape_cyan.xml 0x4974eb40
res/drawable/umeng_socialize_shape_hollow_grey.xml 0xe85cba2a
res/drawable/umeng_socialize_shape_red.xml 0x2941ebe
res/drawable/umeng_socialize_shape_solid_black.xml 0x1b444197
res/drawable/umeng_socialize_shape_solid_grey.xml 0xd3b9615
res/drawable/umeng_socialize_shape_yellow.xml 0xbd8d9ed0
res/drawable/umeng_socialize_share_to_button.xml 0x258be656
res/drawable/umeng_socialize_share_transparent_corner.xml 0x2177c030
res/drawable/umeng_socialize_shareboard_item_background.xml 0x2b6939c4
res/drawable/umeng_socialize_sidebar_normal.xml 0x65ceb328
res/drawable/umeng_socialize_sidebar_selected.xml 0xe80b415a
res/drawable/umeng_socialize_sidebar_selector.xml 0xf502e174
res/drawable/umeng_socialize_sina_off.png 0x9ace6a82
res/drawable/umeng_socialize_sina_on.png 0xa87f0657
res/drawable/umeng_socialize_slate_bg.png 0x72fd273d
res/drawable/umeng_socialize_sms.png 0x3febfef5
res/drawable/umeng_socialize_title_back_bt.xml 0xb213ae29
res/drawable/umeng_socialize_title_back_bt_normal.png 0xf06342af
res/drawable/umeng_socialize_title_back_bt_selected.png 0xa372e23a
res/drawable/umeng_socialize_title_right_bt.xml 0xe7d4b87a
res/drawable/umeng_socialize_title_right_bt_normal.png 0x8e7527a7
res/drawable/umeng_socialize_title_right_bt_selected.png 0xc9b4f9f3
res/drawable/umeng_socialize_title_tab_button_left.xml 0x4b0c02fe
res/drawable/umeng_socialize_title_tab_button_right.xml 0xe03f577d
res/drawable/umeng_socialize_title_tab_left_normal.png 0x3867c1c8
res/drawable/umeng_socialize_title_tab_left_pressed.png 0x36d083e1
res/drawable/umeng_socialize_title_tab_right_normal.png 0xc8ec4ad
res/drawable/umeng_socialize_title_tab_right_pressed.png 0xcda47f76
res/drawable/umeng_socialize_twitter.png 0x2e7076b0
res/drawable/umeng_socialize_tx_off.png 0xbf6cc43
res/drawable/umeng_socialize_tx_on.png 0xfb1960db
res/drawable/umeng_socialize_ucenter_hbg.png 0x82f2702d
res/drawable/umeng_socialize_wechat.png 0xdb75721e
res/drawable/umeng_socialize_wechat_gray.png 0xb960e5cb
res/drawable/umeng_socialize_window_shadow_pad.xml 0xccbfb7d1
res/drawable/umeng_socialize_wxcircle.png 0xb71e1c46
res/drawable/umeng_socialize_wxcircle_gray.png 0x445beb69
res/drawable/umeng_socialize_x_button.png 0x12819e5e
res/drawable-hdpi/aa.png 0x9162e84d
res/drawable-hdpi/alerticon.png 0x2391298c
res/drawable-hdpi/alipay.png 0xbdb8770a
res/drawable-hdpi/android.jpg 0xbbc8acd4
res/drawable-hdpi/answer1.png 0x92e6b458
res/drawable-hdpi/answer2.png 0xd92691b
res/drawable-hdpi/answer_head.png 0x5704e80f
res/drawable-hdpi/bg1.png 0x590e4b6c
res/drawable-hdpi/bg2.png 0x2dc70675
res/drawable-hdpi/bg_edityzm.9.png 0x9e73425c
res/drawable-hdpi/bgcalling.jpg 0xe6accf2
res/drawable-hdpi/boda_bg.png 0x9b775b28
res/drawable-hdpi/boda_bg_s.png 0x8fa77407
res/drawable-hdpi/bottom_address_bg.png 0x5a51fa3e
res/drawable-hdpi/btn_bg.9.png 0x5fe8f4d5
res/drawable-hdpi/btn_bg_s.9.png 0xb18fa5f8
res/drawable-hdpi/btn_g.9.png 0xef3ac229
res/drawable-hdpi/btn_g_s.9.png 0xb74bd15c
res/drawable-hdpi/btn_reg.9.png 0xdd9b7d16
res/drawable-hdpi/btn_reg_s.9.png 0x1b82077a
res/drawable-hdpi/btn_w.9.png 0xc1ecfce3
res/drawable-hdpi/btn_w_s.9.png 0x326575b3
res/drawable-hdpi/btn_warning_normal.9.png 0x328d7e99
res/drawable-hdpi/btn_warning_press.9.png 0x4d614502
res/drawable-hdpi/call_0.png 0x115d6d47
res/drawable-hdpi/call_1.png 0x5ad31d74
res/drawable-hdpi/call_10.png 0xbca160cd
res/drawable-hdpi/call_11.png 0x69d100de
res/drawable-hdpi/call_1_off.png 0x8422f6bd
res/drawable-hdpi/call_1_on.png 0x4d69501a
res/drawable-hdpi/call_2.png 0x219d7302
res/drawable-hdpi/call_3.png 0xca514f95
res/drawable-hdpi/call_4.png 0xf0afbb37
res/drawable-hdpi/call_5.png 0xfaf41fea
res/drawable-hdpi/call_6.png 0x9e120b35
res/drawable-hdpi/call_7.png 0x2d8cac99
res/drawable-hdpi/call_8.png 0x342d57c7
res/drawable-hdpi/call_9.png 0x3d596b21
res/drawable-hdpi/call_button_bg.9.png 0xb8bfa96d
res/drawable-hdpi/call_button_bgs.9.png 0x77fb8b6
res/drawable-hdpi/call_item_split.png 0x503e4784
res/drawable-hdpi/call_menu_down.png 0x80fbcbcd
res/drawable-hdpi/call_menu_downs.png 0xb0b0a563
res/drawable-hdpi/call_menu_up.png 0xe162fc8c
res/drawable-hdpi/callback_tip.9.png 0x991ce745
res/drawable-hdpi/callda.png 0xbab7bfa7
res/drawable-hdpi/china_mobile.png 0xf5f5f68b
res/drawable-hdpi/china_telecom.png 0xcec75317
res/drawable-hdpi/china_unicom.png 0xd8363f1
res/drawable-hdpi/china_unionpay.png 0x338a25c5
res/drawable-hdpi/clear.png 0x2abb637a
res/drawable-hdpi/contact_download.png 0x472c0333
res/drawable-hdpi/contact_list_scroll_normal.png 0x393d4906
res/drawable-hdpi/contact_list_scroll_pressed.png 0xef34775c
res/drawable-hdpi/contact_look.png 0x7e050d3b
res/drawable-hdpi/contact_search_bg.9.png 0x98d7fe9c
res/drawable-hdpi/contact_tieshi.9.png 0x59852d72
res/drawable-hdpi/contact_upload.png 0xc21caa82
res/drawable-hdpi/dailtop.png 0x3dd920fa
res/drawable-hdpi/default_bg.png 0xf1388982
res/drawable-hdpi/dial_call.png 0x99af8baa
res/drawable-hdpi/dial_call_close.png 0xf968414f
res/drawable-hdpi/dial_call_close_s.png 0xc14a7de9
res/drawable-hdpi/dial_call_more.png 0x9c9d601a
res/drawable-hdpi/dial_calls_more.png 0x84d39ac5
res/drawable-hdpi/dial_delete.png 0xbbd2ce88
res/drawable-hdpi/dial_delete_select.png 0x50b50afa
res/drawable-hdpi/dial_money.png 0x47bcfeb9
res/drawable-hdpi/dial_more.png 0x3378c79a
res/drawable-hdpi/dial_numberleft_bg.png 0x7bcbb27f
res/drawable-hdpi/dialback_bg.png 0x275ad30c
res/drawable-hdpi/dialog_bg_click.9.png 0x2de46b5d
res/drawable-hdpi/dialog_bg_normal.9.png 0x2b129582
res/drawable-hdpi/dialog_cut_line.png 0x8cf46c5d
res/drawable-hdpi/dialog_split_h.png 0x12db1a81
res/drawable-hdpi/dialog_split_v.png 0x7702c185
res/drawable-hdpi/ggou.png 0x41b17c30
res/drawable-hdpi/hangup.png 0x23b189c9
res/drawable-hdpi/hangup1.png 0x45a18e6c
res/drawable-hdpi/hangup2.png 0x2cb33f03
res/drawable-hdpi/ic_launcher.png 0xf248df62
res/drawable-hdpi/ic_launcher_phone.png 0xfec5b434
res/drawable-hdpi/ic_stat_sipok.png 0x5c5338a4
res/drawable-hdpi/icon_contact.png 0xee1822a1
res/drawable-hdpi/icon_contact_edit.png 0x68d334db
res/drawable-hdpi/icon_net_contact.png 0x5ad44a80
res/drawable-hdpi/icon_phonecall.png 0x51ba7944
res/drawable-hdpi/imgcallall.png 0xcf2f495a
res/drawable-hdpi/imgcallin.png 0x83c2238a
res/drawable-hdpi/imgcallmiss.png 0x33b982de
res/drawable-hdpi/imgcallout.png 0x9cb1f5e7
res/drawable-hdpi/imgright.png 0xa1d396c2
res/drawable-hdpi/info.png 0xb089e3bb
res/drawable-hdpi/infoicon.png 0x56114044
res/drawable-hdpi/keyboard_setting_icon.png 0x385e10ee
res/drawable-hdpi/keyboard_setting_off_icon.png 0x6b37a078
res/drawable-hdpi/line.png 0xe7f7aeb9
res/drawable-hdpi/list_bottom_bg.9.png 0x546e964d
res/drawable-hdpi/list_icon_1.png 0x5658654b
res/drawable-hdpi/list_icon_2.png 0x6446e2f5
res/drawable-hdpi/list_icon_3.png 0xd52784fc
res/drawable-hdpi/list_icon_4.png 0x2e6134c7
res/drawable-hdpi/list_icon_6.png 0xd7fa9ac1
res/drawable-hdpi/list_nor.png 0xf871d891
res/drawable-hdpi/list_pressed.png 0x1c2f9712
res/drawable-hdpi/list_top_bg.9.png 0x5fca8667
res/drawable-hdpi/loading.png 0x8caa07a2
res/drawable-hdpi/logo.png 0x6fddea6f
res/drawable-hdpi/lookcontact_bg.jpg 0x5262421
res/drawable-hdpi/meal_item_cb_bg_nor.png 0x1e47653f
res/drawable-hdpi/meal_item_cb_bg_pre.png 0x294fd53b
res/drawable-hdpi/meal_item_cb_icon_nor.png 0xc532921d
res/drawable-hdpi/meal_item_cb_icon_pre.png 0xa1debc94
res/drawable-hdpi/meal_item_zb_bg_nor.png 0x92ccb19a
res/drawable-hdpi/meal_item_zb_bg_pre.png 0xce57f7b7
res/drawable-hdpi/meal_item_zb_icon_nor.png 0xe64d4859
res/drawable-hdpi/meal_item_zb_icon_pre.png 0x5b04bf32
res/drawable-hdpi/menu_1.png 0x6950ee32
res/drawable-hdpi/menu_2.png 0x93496398
res/drawable-hdpi/menu_2s.png 0x45991b1a
res/drawable-hdpi/menu_3.png 0x20dfa5fd
res/drawable-hdpi/menu_3s.png 0xc709d3a
res/drawable-hdpi/menu_4.png 0xb1ea5c95
res/drawable-hdpi/menu_4s.png 0x6bc24884
res/drawable-hdpi/menu_5.png 0xae53860e
res/drawable-hdpi/menu_5s.png 0x22dc98f5
res/drawable-hdpi/menu_bg.9.png 0xccdbd897
res/drawable-hdpi/menu_exit.png 0x6a23181c
res/drawable-hdpi/more_bdsz.png 0x4e6b9459
res/drawable-hdpi/more_bug.png 0xc4a1ad11
res/drawable-hdpi/more_cxfl.png 0xbee0f03a
res/drawable-hdpi/more_cxhd.png 0xcca53057
res/drawable-hdpi/more_cxye.png 0xbff4c170
res/drawable-hdpi/more_dlsz.png 0x704261ee
res/drawable-hdpi/more_dxyq.png 0x9528ed10
res/drawable-hdpi/more_exit.png 0x8f2ada28
res/drawable-hdpi/more_fxyl.png 0x3be89e9f
res/drawable-hdpi/more_ggyh.png 0xc70207d3
res/drawable-hdpi/more_gywm.png 0xf7d6b72b
res/drawable-hdpi/more_haoping.png 0xde7e892c
res/drawable-hdpi/more_help.png 0xca1ad55a
res/drawable-hdpi/more_mrqd.png 0x8d004225
res/drawable-hdpi/more_qhsz.png 0x474e2a17
res/drawable-hdpi/more_rjsj.png 0x4923737f
res/drawable-hdpi/more_sys_dialer.png 0xf0f137c
res/drawable-hdpi/more_txltb.png 0x64521908
res/drawable-hdpi/more_xgmm.png 0x14ca8212
res/drawable-hdpi/more_xhsz.png 0x4bc609c7
res/drawable-hdpi/more_zhmm.png 0x1830c7f3
res/drawable-hdpi/more_zhsz.png 0x7aa854d8
res/drawable-hdpi/more_zzhgl.png 0x9abeb8c2
res/drawable-hdpi/pb_star_progress.png 0xd8240e60
res/drawable-hdpi/phone_list_call.png 0x4f5b43d5
res/drawable-hdpi/phone_list_sms.png 0xc4776bc
res/drawable-hdpi/popo_window_bg.9.png 0x14b57b6a
res/drawable-hdpi/popup_bg.9.png 0xbd3d7cd8
res/drawable-hdpi/profile_icon_refresh.png 0x16971f0b
res/drawable-hdpi/pushnews.png 0x890fbbc6
res/drawable-hdpi/r_box_4.png 0x7fae8a96
res/drawable-hdpi/r_box_4s.png 0x7e2cfbd1
res/drawable-hdpi/refresh.9.png 0x793a2425
res/drawable-hdpi/refresh_push.9.png 0x1d71fbbf
res/drawable-hdpi/round_list_top.9.png 0x87bb61b2
res/drawable-hdpi/search_icon.png 0x9234a1e8
res/drawable-hdpi/searchbg.png 0xaa55dc16
res/drawable-hdpi/sel_yes_img.png 0xbbbfcead
res/drawable-hdpi/sendback_bg.png 0xb39d71ba
res/drawable-hdpi/sendback_return.png 0x8396c9fd
res/drawable-hdpi/sendcallbutton.9.png 0xfd9f5df3
res/drawable-hdpi/sendcallbutton_s.9.png 0x312d66aa
res/drawable-hdpi/show_alpha_bg.9.png 0x388a14be
res/drawable-hdpi/sms_add.png 0xdf21a582
res/drawable-hdpi/sms_adds.png 0x96c87de6
res/drawable-hdpi/sms_select.9.png 0xdddd9d8a
res/drawable-hdpi/sms_select_s.9.png 0x6b508039
res/drawable-hdpi/sms_wai.9.png 0x92d99581
res/drawable-hdpi/super_call.png 0x99af8baa
res/drawable-hdpi/t_b_1.9.png 0xede3f711