VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.
4, If your browser cannot upload files, please download VirSCAN uploader to upload.

Language
Server load
Server Load

VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

File information

Scanner results
Scanner results:0%Antivirus software(0/32)found malware!
Behavior analysis report:         Habo file analysis
Time: 2016-12-22 22:05:39 (CST)
Scanner Engine Ver Sig Ver Sig Date Scan result Time
antiy AVL SDK 2.0 1970-01-01 Found nothing 5
asquared 9.0.0.4799 9.0.0.4799 2015-03-08 Found nothing 4
avast 161221-0 4.7.4 2016-12-21 Found nothing 60
avg 2109/13100 10.0.1405 2016-12-16 Found nothing 60
baidu 2.0.1.0 4.1.3.52192 2.0.1.0 Found nothing 3
baidusd 1.0 1.0 2014-04-02 Found nothing 3
bitdefender 7.58879 7.90123 2015-01-16 Found nothing 60
clamav 22739 0.97.5 2016-12-19 Found nothing 60
drweb 5.0.2.3300 5.0.1.1 2016-12-09 Found nothing 60
fortinet 41.578, 41.578, 41.578 5.4.233 2016-12-22 Found nothing 60
fprot 4.6.2.117 6.5.1.5418 2016-02-05 Found nothing 60
fsecure 2015-08-01-02 9.13 2015-08-01 Found nothing 60
gdata 25.9667 25.9667 2016-12-22 Found nothing 12
ikarus 1.06.01 V1.32.31.0 2016-11-28 Found nothing 60
jiangmin 16.0.100 1.0.0.0 2016-12-19 Found nothing 44
kaspersky 5.5.33 5.5.33 2014-04-01 Found nothing 60
kingsoft 2.1 2.1 2013-09-22 Found nothing 60
mcafee 8254 5400.1158 2016-08-11 Found nothing 60
nod32 1777 3.0.21 2015-06-12 Found nothing 60
panda 9.05.01 9.05.01 2016-12-21 Found nothing 5
pcc 13.108.07 9.500-1005 2016-12-21 Found nothing 60
qh360 1.0.1 1.0.1 1.0.1 Found nothing 3
qqphone 1.0.0.0 1.0.0.0 2015-12-30 Found nothing 60
quickheal 14.00 14.00 2016-12-21 Found nothing 5
rising 26.28.00.01 26.28.00.01 2016-07-18 Found nothing 17
sophos 5.32 3.65.2 2016-10-10 Found nothing 60
symantec 20151230.005 1.3.0.24 2015-12-30 Found nothing 60
tachyon 9.9.9 9.9.9 2013-12-27 Found nothing 20
thehacker 6.8.0.5 6.8.0.5 2016-12-19 Found nothing 8
tws 17.47.17308 1.0.2.2108 2016-12-21 Found nothing 20
vba 3.12.29.3 beta 3.12.29.3 beta 2016-12-15 Found nothing 60
virusbuster 15.0.985.0 5.5.2.13 2014-12-05 Found nothing 60
权限列表
许可名称 信息
android.permission.INTERNET 连接网络(2G或3G)
android.permission.ACCESS_NETWORK_STATE 读取网络状态(2G或3G)
android.permission.MOUNT_UNMOUNT_FILESYSTEMS 挂载、反挂载外部文件系统
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.ACCESS_WIFI_STATE 读取wifi网络状态
android.permission.CAMERA 访问照相机设备
android.permission.RECEIVE_BOOT_COMPLETED 接收开机启动广播
android.permission.WRITE_SETTINGS 读写系统设置项
android.permission.VIBRATE 允许设备震动
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.DISABLE_KEYGUARD 禁用键盘锁
android.permission.ACCESS_COARSE_LOCATION 获取粗略的位置(通过wifi、基站)
android.permission.EXPAND_STATUS_BAR 操控状态栏
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.READ_EXTERNAL_STORAGE 读外部存储器(如:SD卡)
android.permission.SYSTEM_ALERT_WINDOW 显示系统窗口
文件信息
VirSCANVirSCAN
安全评分 :
基本信息
VirSCANVirSCAN
MD5:3db6baf5619b0fee97b297813812ac9a
文件大小:5.58MB
上传时间: 2014-09-22 10:36:30 (CST)
包名:com.duowan.bi
最低运行环境:Android 4.0, 4.0.1, 4.0.2
版权:
关键行为
VirSCANVirSCAN
行为描述: 跨进程写入数据
详情信息: TargetProcess = C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\nvMultitask.exe, WriteAddress = 0x00050000, Size = 0x00000020
TargetProcess = C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\nvMultitask.exe, WriteAddress = 0x00050020, Size = 0x00000034
TargetProcess = C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\nvMultitask.exe, WriteAddress = 0x7ffdc238, Size = 0x00000004
TargetProcess = C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\HSoftDoloEx.exe, WriteAddress = 0x00170000, Size = 0x00000020
TargetProcess = C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\HSoftDoloEx.exe, WriteAddress = 0x00170020, Size = 0x00000034
TargetProcess = C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\HSoftDoloEx.exe, WriteAddress = 0x7ffde238, Size = 0x00000004
TargetProcess = C:\Windows\System32\cmd.exe, WriteAddress = 0x00050000, Size = 0x00000020
TargetProcess = C:\Windows\System32\cmd.exe, WriteAddress = 0x00050020, Size = 0x00000034
TargetProcess = C:\Windows\System32\cmd.exe, WriteAddress = 0x7ffdb238, Size = 0x00000004
TargetProcess = C:\Windows\System32\cmd.exe, WriteAddress = 0x7ffd4238, Size = 0x00000004
行为描述: 查找杀软驱动文件
详情信息: FileName = \\?\C:\Windows\System32\360Safe.exe (360安全卫士)
FileName = C:\Windows\System32\360Safe.exe (360安全卫士)
行为描述: 常规加载驱动
详情信息: \??\C:\Windows\system32\drivers\LcScience.sys
\??\C:\Windows\system32\drivers\WaNdFilter.sys
行为描述: 获取TickCount值
详情信息: TickCount = 825062, SleepMilliseconds = 60000.
TickCount = 825078, SleepMilliseconds = 60000.
TickCount = 825093, SleepMilliseconds = 60000.
TickCount = 825109, SleepMilliseconds = 60000.
TickCount = 825125, SleepMilliseconds = 60000.
TickCount = 825140, SleepMilliseconds = 60000.
TickCount = 825156, SleepMilliseconds = 60000.
TickCount = 825171, SleepMilliseconds = 60000.
TickCount = 825187, SleepMilliseconds = 60000.
TickCount = 825203, SleepMilliseconds = 60000.
TickCount = 825218, SleepMilliseconds = 60000.
TickCount = 825281, SleepMilliseconds = 60000.
TickCount = 825296, SleepMilliseconds = 60000.
TickCount = 769010, SleepMilliseconds = 10.
TickCount = 769025, SleepMilliseconds = 10.
行为描述: 自删除
详情信息: C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\nvMultitask.exe
行为描述: 获取窗口截图信息
详情信息: Foreground window Info: HWND = 0x00000000, DC = 0x41010a3b.
Foreground window Info: HWND = 0x00000000, DC = 0xfc0108c5.
Foreground window Info: HWND = 0x00000000, DC = 0xc301028f.
Foreground window Info: HWND = 0x00000000, DC = 0xfe010a48.
Foreground window Info: HWND = 0x00000000, DC = 0x8b010a17.
Foreground window Info: HWND = 0x00000000, DC = 0xa2010a5c.
行为描述: 设置特殊文件夹属性
详情信息: C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies
C:\Users\Administrator\AppData\Local\Microsoft\Windows\History\History.IE5
行为描述: 创建系统服务
详情信息: [服务创建成功]: LcScience, C:\Windows\system32\drivers\LcScience.sys
[服务创建成功]: WaNdFilter, C:\Windows\system32\drivers\WaNdFilter.sys
进程行为
VirSCANVirSCAN
行为描述: 跨进程写入数据
详情信息: TargetProcess = C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\nvMultitask.exe, WriteAddress = 0x00050000, Size = 0x00000020
TargetProcess = C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\nvMultitask.exe, WriteAddress = 0x00050020, Size = 0x00000034
TargetProcess = C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\nvMultitask.exe, WriteAddress = 0x7ffdc238, Size = 0x00000004
TargetProcess = C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\HSoftDoloEx.exe, WriteAddress = 0x00170000, Size = 0x00000020
TargetProcess = C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\HSoftDoloEx.exe, WriteAddress = 0x00170020, Size = 0x00000034
TargetProcess = C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\HSoftDoloEx.exe, WriteAddress = 0x7ffde238, Size = 0x00000004
TargetProcess = C:\Windows\System32\cmd.exe, WriteAddress = 0x00050000, Size = 0x00000020
TargetProcess = C:\Windows\System32\cmd.exe, WriteAddress = 0x00050020, Size = 0x00000034
TargetProcess = C:\Windows\System32\cmd.exe, WriteAddress = 0x7ffdb238, Size = 0x00000004
TargetProcess = C:\Windows\System32\cmd.exe, WriteAddress = 0x7ffd4238, Size = 0x00000004
行为描述: 查找杀软驱动文件
详情信息: FileName = \\?\C:\Windows\System32\360Safe.exe (360安全卫士)
FileName = C:\Windows\System32\360Safe.exe (360安全卫士)
行为描述: 常规加载驱动
详情信息: \??\C:\Windows\system32\drivers\LcScience.sys
\??\C:\Windows\system32\drivers\WaNdFilter.sys
行为描述: 获取TickCount值
详情信息: TickCount = 825062, SleepMilliseconds = 60000.
TickCount = 825078, SleepMilliseconds = 60000.
TickCount = 825093, SleepMilliseconds = 60000.
TickCount = 825109, SleepMilliseconds = 60000.
TickCount = 825125, SleepMilliseconds = 60000.
TickCount = 825140, SleepMilliseconds = 60000.
TickCount = 825156, SleepMilliseconds = 60000.
TickCount = 825171, SleepMilliseconds = 60000.
TickCount = 825187, SleepMilliseconds = 60000.
TickCount = 825203, SleepMilliseconds = 60000.
TickCount = 825218, SleepMilliseconds = 60000.
TickCount = 825281, SleepMilliseconds = 60000.
TickCount = 825296, SleepMilliseconds = 60000.
TickCount = 769010, SleepMilliseconds = 10.
TickCount = 769025, SleepMilliseconds = 10.
行为描述: 自删除
详情信息: C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\nvMultitask.exe
行为描述: 获取窗口截图信息
详情信息: Foreground window Info: HWND = 0x00000000, DC = 0x41010a3b.
Foreground window Info: HWND = 0x00000000, DC = 0xfc0108c5.
Foreground window Info: HWND = 0x00000000, DC = 0xc301028f.
Foreground window Info: HWND = 0x00000000, DC = 0xfe010a48.
Foreground window Info: HWND = 0x00000000, DC = 0x8b010a17.
Foreground window Info: HWND = 0x00000000, DC = 0xa2010a5c.
行为描述: 设置特殊文件夹属性
详情信息: C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies
C:\Users\Administrator\AppData\Local\Microsoft\Windows\History\History.IE5
行为描述: 创建系统服务
详情信息: [服务创建成功]: LcScience, C:\Windows\system32\drivers\LcScience.sys
[服务创建成功]: WaNdFilter, C:\Windows\system32\drivers\WaNdFilter.sys
文件行为
VirSCANVirSCAN
行为描述: 创建文件
详情信息: C:\Users\Administrator\AppData\Roaming\Microsoft\Crypto\RSA\S-*\a18ca4003deb042bbee7a40f15e1970b_2f8e854c-b3b2-42a4-9df2-1e8ea361c12c
C:\Users\Administrator\AppData\Local\%temp%\countly.sqlite
C:\Users\Administrator\AppData\Local\%temp%\countly.sqlite-journal
C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\dtmp.zd
C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\dtmp.z
C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\npJuziPlugin.dll
C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\nvMultitask.exe
C:\Users\Administrator\AppData\LocalLow\JuziPlugin\1.0.0.1020\npjuziplugin.dll
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\Encrypt.7z
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\Decrypt.7z
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\HSoftDoloEx.exe
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\bime.dll
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\bime64.dll
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\LcScience.sys
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\LcScience64.sys
行为描述: 查找杀软驱动文件
详情信息: FileName = \\?\C:\Windows\System32\360Safe.exe (360安全卫士)
FileName = C:\Windows\System32\360Safe.exe (360安全卫士)
行为描述: 创建可执行文件
详情信息: C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\npJuziPlugin.dll
C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\nvMultitask.exe
C:\Users\Administrator\AppData\LocalLow\JuziPlugin\1.0.0.1020\npjuziplugin.dll
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\HSoftDoloEx.exe
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\bime.dll
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\bime64.dll
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\LcScience.sys
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\LcScience64.sys
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\WaNdFilter.sys
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\WaNdFilter64.sys
C:\Windows\System32\drivers\LcScience.sys
C:\Windows\System32\drivers\WaNdFilter.sys
C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\HSoftDoloEx.exe
C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\bime.dll
C:\Users\Administrator\AppData\Roaming\Temp\-1586472857.tmp
行为描述: 复制文件
详情信息: C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\npJuziPlugin.dll ---> C:\Users\Administrator\AppData\LocalLow\JuziPlugin\1.0.0.1020\npjuziplugin.dll
C:\Users\ADMINI~1\AppData\Local\Temp\nvMultitasking\LcScience.sys ---> C:\Windows\system32\drivers\LcScience.sys
C:\Users\ADMINI~1\AppData\Local\Temp\nvMultitasking\WaNdFilter.sys ---> C:\Windows\system32\drivers\WaNdFilter.sys
C:\Users\ADMINI~1\AppData\Local\Temp\nvMultitasking\HSoftDoloEx.exe ---> C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\HSoftDoloEx.exe
C:\Users\ADMINI~1\AppData\Local\Temp\nvMultitasking\bime.dll ---> C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\bime.dll
C:\Users\Administrator\AppData\Roaming\Temp\-1552109052.tmp ---> C:\Users\Administrator\AppData\Roaming\Temp\-1552109052.tmp.png
行为描述: 删除文件
详情信息: C:\Users\Administrator\AppData\Local\%temp%\countly.sqlite-journal
C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\dtmp.zd
C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\dtmp.z
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\bime.dll
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\bime64.dll
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\Decrypt.7z
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\Encrypt.7z
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\HSoftDoloEx.exe
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\LcScience.sys
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\LcScience64.sys
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\WaNdFilter.sys
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\WaNdFilter64.sys
C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\countly.sqlite-journal
C:\Users\Administrator\AppData\Roaming\Temp\-1586472857.tmp
C:\Users\Administrator\AppData\Roaming\Temp\-1573998435.tmp
行为描述: 查找文件
详情信息: FileName = C:\Users\Administrator\AppData\Roaming\Microsoft\Crypto\RSA\S-*\a18ca4003deb042bbee7a40f15e1970b_*
FileName = C:\Users\Administrator\AppData\Roaming\Microsoft\Crypto\RSA\*
FileName = C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\\*.*
FileName = C:\Users
FileName = C:\Users\Administrator\AppData
FileName = C:\Users\Administrator\AppData\Roaming
FileName = C:\Users\Administrator\AppData\Roaming\Temp
FileName = C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\*.*
FileName = C:\Users\ADMINI~1\AppData\Local\Temp\nvMultitasking\*
FileName = C:\Users\ADMINI~1\AppData\Local\Temp\nvMultitasking\*.sys
FileName = C:\Users\ADMINI~1\AppData\Local\Temp\nvMultitasking\*.exe
FileName = C:\Users\ADMINI~1\AppData\Local\Temp\nvMultitasking\*.dll
FileName = C:\Users\ADMINI~1\AppData\Local\Temp\nvMultitasking\*.dat
FileName = C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\*.*
FileName = \\?\C:\Users
行为描述: 设置特殊文件夹属性
详情信息: C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies
C:\Users\Administrator\AppData\Local\Microsoft\Windows\History\History.IE5
行为描述: 修改文件内容
详情信息: C:\Users\Administrator\AppData\Roaming\Microsoft\Crypto\RSA\S-*\a18ca4003deb042bbee7a40f15e1970b_2f8e854c-b3b2-42a4-9df2-1e8ea361c12c ---> Offset = 0
C:\Users\Administrator\AppData\Local\%temp%\countly.sqlite-journal ---> Offset = 0
C:\Users\Administrator\AppData\Local\%temp%\countly.sqlite ---> Offset = 0
C:\Users\Administrator\AppData\Local\%temp%\countly.sqlite ---> Offset = 1024
C:\Users\Administrator\AppData\Local\%temp%\countly.sqlite-journal ---> Offset = 512
C:\Users\Administrator\AppData\Local\%temp%\countly.sqlite-journal ---> Offset = 516
C:\Users\Administrator\AppData\Local\%temp%\countly.sqlite-journal ---> Offset = 1540
C:\Users\Administrator\AppData\Local\%temp%\countly.sqlite ---> Offset = 2048
C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\dtmp.zd ---> Offset = 0
C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\dtmp.z ---> Offset = 0
C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\dtmp.z ---> Offset = 1376256
C:\Users\Administrator\AppData\Local\%temp%\countly.sqlite-journal ---> Offset = 1544
C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\npJuziPlugin.dll ---> Offset = 0
C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\nvMultitask.exe ---> Offset = 0
C:\Users\Administrator\AppData\LocalLow\JuziPlugin\1.0.0.1020\npjuziplugin.dll ---> Offset = 0
行为描述: 自删除
详情信息: C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\nvMultitask.exe
网络行为
VirSCANVirSCAN
行为描述: 下载文件
详情信息: C:\Users\Administrator\AppData\Roaming\Temp\-1586472857.tmp
C:\Users\Administrator\AppData\Roaming\Temp\-1573998435.tmp
C:\Users\Administrator\AppData\Roaming\Temp\-1563010257.tmp
C:\Users\Administrator\AppData\Roaming\Temp\-1552109052.tmp
C:\Users\Administrator\AppData\Roaming\Temp\-1552109052.tmp.png
C:\Users\Administrator\AppData\Roaming\Temp\-1564080773.tmp
C:\Users\Administrator\AppData\Roaming\Temp\-1586158488.tmp
C:\Users\Administrator\AppData\Roaming\Temp\-1604560792.tmp
C:\Users\Administrator\AppData\Roaming\Temp\-1579222034.tmp
C:\Users\Administrator\AppData\Roaming\Temp\-1603438482.tmp
C:\Users\Administrator\AppData\Local\Temp\dhC648.tmp
C:\Users\Administrator\AppData\Roaming\Temp\-1493922372.tmp
C:\Users\Administrator\AppData\Roaming\Temp\-1530162921.tmp
行为描述: 连接指定站点
详情信息: InternetConnectA: ServerName = se****om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x00000000
InternetConnectA: ServerName = up****et, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x00000000
InternetConnectA: ServerName = so****om, PORT = 80, UserName = , Password = , hSession = 0x00cc0010, hConnect = 0x00cc0014, Flags = 0x00000000
InternetConnectA: ServerName = or****om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x00000000
InternetConnectA: ServerName = up****et, PORT = 80, UserName = , Password = , hSession = 0x00cc0010, hConnect = 0x00cc0014, Flags = 0x00000000
InternetConnectA: ServerName = lo****et, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x00000000
InternetConnectA: ServerName = to****om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x00000000
行为描述: 打开HTTP连接
详情信息: InternetOpenA: UserAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0), hSession = 0x00cc0004
InternetOpenA: UserAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0), hSession = 0x00cc0010
行为描述: 建立到一个指定的套接字连接
详情信息: URL: se****om, IP: **.133.40.**:80, SOCKET = 0x00000320
URL: se****om, IP: **.133.40.**:80, SOCKET = 0x0000031c
URL: up****et, IP: **.133.40.**:80, SOCKET = 0x000003b0
URL: so****om, IP: **.133.40.**:80, SOCKET = 0x000003c8
URL: or****om, IP: **.133.40.**:80, SOCKET = 0x000003cc
URL: se****om, IP: **.133.40.**:80, SOCKET = 0x0000012c
URL: up****et, IP: **.133.40.**:80, SOCKET = 0x0000012c
URL: lo****et, IP: **.133.40.**:80, SOCKET = 0x0000012c
URL: to****om, IP: **.133.40.**:80, SOCKET = 0x00000308
URL: se****om, IP: **.133.40.**:80, SOCKET = 0x0000038c
URL: se****om, IP: **.133.40.**:80, SOCKET = 0x000001e4
行为描述: 读取网络文件
详情信息: hFile = 0x00cc000c, BytesToRead =32768, BytesRead = 32768.
hFile = 0x00cc0018, BytesToRead =32768, BytesRead = 32768.
行为描述: 发送HTTP包
详情信息: GET /i?app_key=e131e8b51bc9c4bb395446794bfdcef9e115b082&device_id=0000246f00005eb500001ebe00007cc400000842&sdk_version=16.02&begin_session=1&metrics=%7b%0a%22_os%22%3a%22Windows%207%22%2c%0a%22_device%22%3a%22PC%22%2c%0a%22_resolution%22%3a%221920x973%22%2c%0a%22_carrier%22%3a%22Free%22%2c%0a%22_app_version%22%3a%221.0.0.8%22%0a%7d HTTP/1.1 Accept: */* Pragma: no-cache Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0) Host: se****om Connection: Close
GET /i?app_key=e131e8b51bc9c4bb395446794bfdcef9e115b082&device_id=0000246f00005eb500001ebe00007cc400000842&session_duration=300000 HTTP/1.1 Accept: */* Pragma: no-cache Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0) Host: se****om Connection: Close
GET /ntflp.php HTTP/1.1 Accept: */* Pragma: no-cache Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0) Host: up****et Connection: Close
GET /uploads/preview/soft/f4/30906/26b75e7f03a3c4b1af22b8bac7519b40.png HTTP/1.1 Accept: */* Pragma: no-cache Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0) Host: so****om Connection: Close
GET /common/cmsone?cms=soft_dl&keys=class_soft_task HTTP/1.1 Accept: */* Pragma: no-cache Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0) Host: or****om Connection: Close
GET /i?app_key=b6b8c04109716276048a7ab0c2908f7becedf903&device_id=00004a4f00004f0800006d43000022cf00005126&sdk_version=16.02&begin_session=1&metrics=%7b%0a%22_os%22%3a%22Windows%207%22%2c%0a%22_device%22%3a%22PC%22%2c%0a%22_resolution%22%3a%221920x973%22%2c%0a%22_carrier%22%3a%22Free%22%2c%0a%22_app_version%22%3a%223.2.0.1%22%0a%7d HTTP/1.1 Accept: */* Pragma: no-cache Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0) Host: se****om Connection: Close
GET /update.php?genre=tsKdx&type=tsKdx_updateCheck&ver=3.2.0.1&cid=&umid=A2FB81A58527C329A5CA83ABD10353DF&os=3&safe=0&ie=8&flash=11.1&ck=254AA6EEB697480F6E1E8E87252C55D5 HTTP/1.1 Accept: */* Pragma: no-cache Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0) Host: up****et Connection: Close
GET /i?app_key=b6b8c04109716276048a7ab0c2908f7becedf903&device_id=00004a4f00004f0800006d43000022cf00005126&session_duration=300000 HTTP/1.1 Accept: */* Pragma: no-cache Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0) Host: se****om Connection: Close
GET /log.php?type=tsKdx_updateEnd&ver=3.2.0.1&cid=&umid=A2FB81A58527C329A5CA83ABD10353DF&i=6&ir=0&iec=503&os=3&safe=0&ie=8&flash=11.1&ck=10EF64749FA3085607FD1730E113AEC1 HTTP/1.1 Accept: */* Pragma: no-cache Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0) Host: lo****et Connection: Close
GET /images/track.gif?pn=jz&tn=&os=3&uuid=C_0-D_42563032363963623731652d3837646230372035-M_080027488980-V_30FD04F0-T_20161222112801&version=3.2.0.1&query=active&set_default=0&interbar=0&type=client&firlaunch=1&frolaunch=0_3 HTTP/1.1 Accept: */* Pragma: no-cache Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0) Host: to****om Connection: Close
GET /i?app_key=e131e8b51bc9c4bb395446794bfdcef9e115b082&device_id=0000246f00005eb500001ebe00007cc400000842&events=%5b%7b%0a%20%20%22timestamp%22%3a%20%221482377336013%22%2c%0a%20%20%22key%22%3a%20%22Safe_0%22%2c%0a%20%20%22count%22%3a%201%0a%7d%5d HTTP/1.1 Accept: */* Pragma: no-cache Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0) Host: se****om Connection: Close
GET /i?app_key=e131e8b51bc9c4bb395446794bfdcef9e115b082&device_id=0000246f00005eb500001ebe00007cc400000842&end_session=1 HTTP/1.1 Accept: */* Pragma: no-cache Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0) Host: se****om Connection: Close
行为描述: 打开HTTP请求
详情信息: HttpOpenRequestA: se****om:80/i?app_key=e131e8b51bc9c4bb395446794bfdcef9e115b082&device_id=0000246f00005eb500001ebe00007cc400000842&sdk_version=16.02&begin_session=1&metrics=%7b%0a%22_os%22%3a%22windows%207%22%2c%0a%22_device%22%3a%22pc%22%2c%0a%22_resolution%22%3a%, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x8400c300
HttpOpenRequestA: se****om:80/i?app_key=e131e8b51bc9c4bb395446794bfdcef9e115b082&device_id=0000246f00005eb500001ebe00007cc400000842&session_duration=300000, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x8400c300
HttpOpenRequestA: up****et:80/ntflp.php, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x8400c300
HttpOpenRequestA: so****om:80/uploads/preview/soft/f4/30906/26b75e7f03a3c4b1af22b8bac7519b40.png, hConnect = 0x00cc0014, hRequest = 0x00cc0018, Verb: GET, Referer: , Flags = 0x8400c300
HttpOpenRequestA: se****om:80/i?app_key=b6b8c04109716276048a7ab0c2908f7becedf903&device_id=00004a4f00004f0800006d43000022cf00005126&sdk_version=16.02&begin_session=1&metrics=%7b%0a%22_os%22%3a%22windows%207%22%2c%0a%22_device%22%3a%22pc%22%2c%0a%22_resolution%22%3a%, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x8400c300
HttpOpenRequestA: or****om:80/common/cmsone?cms=soft_dl&keys=class_soft_task, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x8400c300
HttpOpenRequestA: up****et:80/update.php?genre=tskdx&type=tskdx_updatecheck&ver=3.2.0.1&cid=&umid=a2fb81a58527c329a5ca83abd10353df&os=3&safe=0&ie=8&flash=11.1&ck=254aa6eeb697480f6e1e8e87252c55d5, hConnect = 0x00cc0014, hRequest = 0x00cc0018, Verb: GET, Referer: , Flags = 0x8400c300
HttpOpenRequestA: se****om:80/i?app_key=b6b8c04109716276048a7ab0c2908f7becedf903&device_id=00004a4f00004f0800006d43000022cf00005126&session_duration=300000, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x8400c300
HttpOpenRequestA: lo****et:80/log.php?type=tskdx_updateend&ver=3.2.0.1&cid=&umid=a2fb81a58527c329a5ca83abd10353df&i=6&ir=0&iec=503&os=3&safe=0&ie=8&flash=11.1&ck=10ef64749fa3085607fd1730e113aec1, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x8400c300
HttpOpenRequestA: to****om:80/images/track.gif?pn=jz&tn=&os=3&uuid=c_0-d_42563032363963623731652d3837646230372035-m_080027488980-v_30fd04f0-t_20161222112801&version=3.2.0.1&query=active&set_default=0&interbar=0&type=client&firlaunch=1&frolaunch=0_3, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x8408c300
HttpOpenRequestA: se****om:80/i?app_key=e131e8b51bc9c4bb395446794bfdcef9e115b082&device_id=0000246f00005eb500001ebe00007cc400000842&events=%5b%7b%0a%20%20%22timestamp%22%3a%20%221482377336013%22%2c%0a%20%20%22key%22%3a%20%22safe_0%22%2c%0a%20%20%22count%22%3a%201%0a, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x8400c300
HttpOpenRequestA: se****om:80/i?app_key=e131e8b51bc9c4bb395446794bfdcef9e115b082&device_id=0000246f00005eb500001ebe00007cc400000842&end_session=1, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x8400c300
行为描述: 按名称获取主机地址
详情信息: GetAddrInfoW: se****om
GetAddrInfoW: up****et
GetAddrInfoW: so****om
GetAddrInfoW: or****om
GetAddrInfoW: lo****et
GetAddrInfoW: to****om
注册表行为
VirSCANVirSCAN
行为描述: 修改注册表
详情信息: \REGISTRY\USER\S-*\Software\HDwnld\
\REGISTRY\USER\S-*\Software\HDwnld\lastldtime
\REGISTRY\USER\S-*_CLASSES\CLSID\{F552F265-6686-4422-84E5-C695E35D863A}\InprocServer32\
\REGISTRY\USER\S-*_CLASSES\CLSID\{F552F265-6686-4422-84E5-C695E35D863A}\InprocServer32\ThreadingModel
\REGISTRY\USER\S-*_CLASSES\JuziAgent.Agent\CLSID\
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F552F265-6686-4422-84E5-C695E35D863A}\iexplore\Type
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F552F265-6686-4422-84E5-C695E35D863A}\iexplore\Flags
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F552F265-6686-4422-84E5-C695E35D863A}\iexplore\AllowedDomains\baidu.com\
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F552F265-6686-4422-84E5-C695E35D863A}\iexplore\AllowedDomains\hao123.com\
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F552F265-6686-4422-84E5-C695E35D863A}\iexplore\AllowedDomains\123juzi.com\
\REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\TabProcConfig\baidu.com
\REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\TabProcConfig\hao123.com
\REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\TabProcConfig\123juzi.com
\REGISTRY\USER\S-*\Software\JuziPlugin\cid
\REGISTRY\USER\S-*\Software\MozillaPlugins\@123juzi.com/npJuziAgent\Path
行为描述: 删除注册表键值
详情信息: \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\User_Feed_Synchronization-{DD45CED3-68D4-4258-9DB0-B2D0B36690C9}.job
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\User_Feed_Synchronization-{DD45CED3-68D4-4258-9DB0-B2D0B36690C9}.job.fp
其他行为
VirSCANVirSCAN
行为描述: 检测自身是否被调试
详情信息: N/A
行为描述: 创建互斥体
详情信息: {B5D66703-1AFE-4CBC-910E-7C1191D55777}
RasPbFile
{9A815E77-CE99-4395-BAFB-D139010AC596}
Local\ZonesCounterMutex
Local\ZoneAttributeCacheCounterMutex
Local\ZonesCacheCounterMutex
Local\ZonesLockedCacheCounterMutex
行为描述: 常规加载驱动
详情信息: \??\C:\Windows\system32\drivers\LcScience.sys
\??\C:\Windows\system32\drivers\WaNdFilter.sys
行为描述: 启动系统服务
详情信息: [服务启动成功]: , LcScience, \??\C:\Windows\system32\drivers\LcScience.sys
[服务启动成功]: , WaNdFilter, \??\C:\Windows\system32\drivers\WaNdFilter.sys
行为描述: 窗口信息
详情信息: Pid = 572, Hwnd=0x1c0116, Text = Hao123一键安装器, ClassName = jDownloaderMainFrame.
行为描述: 获取TickCount值
详情信息: TickCount = 825062, SleepMilliseconds = 60000.
TickCount = 825078, SleepMilliseconds = 60000.
TickCount = 825093, SleepMilliseconds = 60000.
TickCount = 825109, SleepMilliseconds = 60000.
TickCount = 825125, SleepMilliseconds = 60000.
TickCount = 825140, SleepMilliseconds = 60000.
TickCount = 825156, SleepMilliseconds = 60000.
TickCount = 825171, SleepMilliseconds = 60000.
TickCount = 825187, SleepMilliseconds = 60000.
TickCount = 825203, SleepMilliseconds = 60000.
TickCount = 825218, SleepMilliseconds = 60000.
TickCount = 825281, SleepMilliseconds = 60000.
TickCount = 825296, SleepMilliseconds = 60000.
TickCount = 769010, SleepMilliseconds = 10.
TickCount = 769025, SleepMilliseconds = 10.
行为描述: 调整进程token权限
详情信息: SE_INC_BASE_PRIORITY_PRIVILEGE
SE_ASSIGNPRIMARYTOKEN_PRIVILEGE
SE_AUDIT_PRIVILEGE
行为描述: 打开事件
详情信息: HookSwitchHookEnabledEvent
\KernelObjects\MaximumCommitCondition
MSFT.VSA.COM.DISABLE.572
MSFT.VSA.IEC.STATUS.6c736db0
\SECURITY\LSA_AUTHENTICATION_INITIALIZED
Global\SvcctrlStartEvent_A3752DX
MSFT.VSA.COM.DISABLE.428
Local\MSCTF.CtfActivated.Default1
Local\MSCTF.AsmCacheReady.Default1
行为描述: 获取窗口截图信息
详情信息: Foreground window Info: HWND = 0x00000000, DC = 0x41010a3b.
Foreground window Info: HWND = 0x00000000, DC = 0xfc0108c5.
Foreground window Info: HWND = 0x00000000, DC = 0xc301028f.
Foreground window Info: HWND = 0x00000000, DC = 0xfe010a48.
Foreground window Info: HWND = 0x00000000, DC = 0x8b010a17.
Foreground window Info: HWND = 0x00000000, DC = 0xa2010a5c.
行为描述: 可执行文件签名信息
详情信息: C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\npJuziPlugin.dll(签名验证: 通过)
C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\nvMultitask.exe(签名验证: 通过)
C:\Users\Administrator\AppData\LocalLow\JuziPlugin\1.0.0.1020\npjuziplugin.dll(签名验证: 通过)
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\HSoftDoloEx.exe(签名验证: 通过)
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\bime.dll(签名验证: 通过)
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\bime64.dll(签名验证: 通过)
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\LcScience.sys(签名验证: 通过)
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\LcScience64.sys(签名验证: 通过)
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\WaNdFilter64.sys(签名验证: 通过)
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\WaNdFilter.sys(签名验证: 通过)
C:\Windows\System32\drivers\LcScience.sys(签名验证: 通过)
C:\Windows\System32\drivers\WaNdFilter.sys(签名验证: 通过)
C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\HSoftDoloEx.exe(签名验证: 通过)
C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\bime.dll(签名验证: 通过)
C:\Users\Administrator\AppData\Roaming\Temp\-1586472857.tmp(签名验证: 未通过)
行为描述: 调用Sleep函数
详情信息: [1]: MilliSeconds = 60000.
[2]: MilliSeconds = 0.
[3]: MilliSeconds = 10.
[4]: MilliSeconds = 10.
[2]: MilliSeconds = 60000.
[5]: MilliSeconds = 10.
[6]: MilliSeconds = 10.
[3]: MilliSeconds = 60000.
[4]: MilliSeconds = 60000.
[5]: MilliSeconds = 0.
[7]: MilliSeconds = 10.
[8]: MilliSeconds = 10.
[9]: MilliSeconds = 10.
[10]: MilliSeconds = 60000.
行为描述: 可执行文件MD5
详情信息: C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\npJuziPlugin.dll ---> 214e19f5877d25e04b6fb5107bca3e55
C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\nvMultitask.exe ---> 0f8e2fb9a4e33542d46acb93857d9b99
C:\Users\Administrator\AppData\LocalLow\JuziPlugin\1.0.0.1020\npjuziplugin.dll ---> 214e19f5877d25e04b6fb5107bca3e55
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\HSoftDoloEx.exe ---> c7ffa14362cba4dd25f353d12d8e11c1
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\bime.dll ---> 20b47c01a9208860f092b10571643e6c
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\bime64.dll ---> 5eed52d21167aaed8b4b0c7a245587f8
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\LcScience.sys ---> 610b50111b8f5601a8eab45dc1b1d916
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\LcScience64.sys ---> 7d67ce19947d890dd2515d9ade051f2d
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\WaNdFilter64.sys ---> df9cb6061cc59efbe628a7dd3f4543c5
C:\Users\Administrator\AppData\Local\Temp\nvMultitasking\WaNdFilter.sys ---> a93a159323537a15c24e6388b9a8c435
C:\Windows\System32\drivers\LcScience.sys ---> 610b50111b8f5601a8eab45dc1b1d916
C:\Windows\System32\drivers\WaNdFilter.sys ---> a93a159323537a15c24e6388b9a8c435
C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\HSoftDoloEx.exe ---> c7ffa14362cba4dd25f353d12d8e11c1
C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\bime.dll ---> 20b47c01a9208860f092b10571643e6c
C:\Users\Administrator\AppData\Roaming\Temp\-1586472857.tmp ---> d0966601ecd6239a9ce0241c9aa21571
行为描述: 打开互斥体
详情信息: Local\_!MSFTHISTORY!_
Local\c:!users!administrator!appdata!local!microsoft!windows!temporary internet files!content.ie5!
Local\c:!users!administrator!appdata!roaming!microsoft!windows!cookies!
Local\c:!users!administrator!appdata!local!microsoft!windows!history!history.ie5!
Local\WininetStartupMutex
Local\WininetConnectionMutex
Local\WininetProxyRegistryMutex
RasPbFile
Local\!IETld!Mutex
Local\MSCTF.Asm.MutexDefault1
行为描述: 创建系统服务
详情信息: [服务创建成功]: LcScience, C:\Windows\system32\drivers\LcScience.sys
[服务创建成功]: WaNdFilter, C:\Windows\system32\drivers\WaNdFilter.sys
行为描述: 加载新释放的文件
详情信息: Image: C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\npJuziPlugin.dll.
Image: C:\Users\Administrator\AppData\Roaming\Temp\{B518B0F4-A50F-431A-83D9-88FE89F0E2E9}\nvMultitask.exe.
Image: C:\Users\Administrator\AppData\Roaming\HSoftDoloEx\HSoftDoloEx.exe.
Activities
VirSCANVirSCAN
活动名 类型
com.duowan.bi.StartActivity android.intent.action.MAIN
com.duowan.bi.StartActivity android.intent.category.LAUNCHER
com.tencent.tauth.AuthActivity android.intent.action.VIEW
com.tencent.tauth.AuthActivity android.intent.category.DEFAULT
com.tencent.tauth.AuthActivity android.intent.category.BROWSABLE
危险函数
VirSCANVirSCAN
函数名称 信息
android/app/NotificationManager;->notify 信息通知栏
ContentResolver;->query 读取联系人、短信等数据库
LocationManager;->getLastKnownLocation 获取地址位置
getRuntime 获取命令行环境
java/net/URL;->openConnection 连接URL
java/net/HttpURLConnection;->connect 连接URL
TelephonyManager;->getDeviceId 搜集用户手机IMEI码、电话号码、系统版本号等信息
HttpClient;->execute 请求远程服务器
java/lang/Runtime;->exec 执行字符串命令
ContentResolver;->delete 删除短信、联系人
TelephonyManager;->getSimSerialNumber 获取SIM序列号
DefaultHttpClient;->execute 发送HTTP请求
启动方式
VirSCANVirSCAN
名称 信息
com.duowan.bi.BiBaiDuPushMessageReceiver
com.duowan.bi.BiBaiDuPushMessageReceiver
com.duowan.bi.BiBaiDuPushMessageReceiver
com.baidu.android.pushservice.PushServiceReceiver 开机启动服务
com.baidu.android.pushservice.PushServiceReceiver 网络连接改变时启动服务
com.baidu.android.pushservice.PushServiceReceiver
com.baidu.android.pushservice.PushServiceReceiver
com.baidu.android.pushservice.PushServiceReceiver
com.baidu.android.pushservice.PushServiceReceiver 屏幕解锁启动服务
com.baidu.android.pushservice.PushServiceReceiver
com.baidu.android.pushservice.PushServiceReceiver
com.baidu.android.pushservice.RegistrationReceiver
com.baidu.android.pushservice.RegistrationReceiver
com.baidu.android.pushservice.RegistrationReceiver 应用卸载时启动服务
广告信息
VirSCANVirSCAN
名称 信息
com.baidu 百度
权限列表
VirSCANVirSCAN
许可名称 信息
android.permission.INTERNET 连接网络(2G或3G)
android.permission.ACCESS_NETWORK_STATE 读取网络状态(2G或3G)
android.permission.MOUNT_UNMOUNT_FILESYSTEMS 挂载、反挂载外部文件系统
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.ACCESS_WIFI_STATE 读取wifi网络状态
android.permission.CAMERA 访问照相机设备
android.permission.RECEIVE_BOOT_COMPLETED 接收开机启动广播
android.permission.WRITE_SETTINGS 读写系统设置项
android.permission.VIBRATE 允许设备震动
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.DISABLE_KEYGUARD 禁用键盘锁
android.permission.ACCESS_COARSE_LOCATION 获取粗略的位置(通过wifi、基站)
android.permission.EXPAND_STATUS_BAR 操控状态栏
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.READ_EXTERNAL_STORAGE 读外部存储器(如:SD卡)
android.permission.SYSTEM_ALERT_WINDOW 显示系统窗口
服务列表
VirSCANVirSCAN
名称
com.baidu.android.pushservice.PushService
com.baidu.android.pushservice.CommandService
com.duowan.bi.BiUpgradeService
文件列表
VirSCANVirSCAN
文件名 校验码
AndroidManifest.xml 0x3e9e918e
assets/loading_error.png 0x5d5c469a
assets/loading_progress.png 0x8ff4a14a
assets/web_error.html 0xf9971b6b
res/anim-v21/design_bottom_sheet_slide_in.xml 0x8e0d6fcf
res/anim-v21/design_bottom_sheet_slide_out.xml 0x3dfd9667
res/anim/abc_fade_in.xml 0xd7e65643
res/anim/abc_fade_out.xml 0xd7e65643
res/anim/abc_grow_fade_in_from_bottom.xml 0xb8fbd669
res/anim/abc_popup_enter.xml 0xddee8fe8
res/anim/abc_popup_exit.xml 0x36611959
res/anim/abc_shrink_fade_out_from_bottom.xml 0x1dc9e60b
res/anim/abc_slide_in_bottom.xml 0xd7e65643
res/anim/abc_slide_in_top.xml 0xd7e65643
res/anim/abc_slide_out_bottom.xml 0xd7e65643
res/anim/abc_slide_out_top.xml 0xd7e65643
res/anim/acitivity_anim_none.xml 0xd7e65643
res/anim/acitivity_enter_anim_scale.xml 0xd7e65643
res/anim/acitivity_exit_anim_scale.xml 0x22fbd5e3
res/anim/activity_anim_create_zoomin.xml 0x106f3a1f
res/anim/activity_anim_create_zoomout.xml 0x6c8acdad
res/anim/activity_anim_finish_zoomin.xml 0x9c93f0a5
res/anim/activity_anim_finish_zoomout.xml 0x9898fd3e
res/anim/design_bottom_sheet_slide_in.xml 0x43de5e1a
res/anim/design_bottom_sheet_slide_out.xml 0xc285984f
res/anim/design_fab_in.xml 0x4cc1d922
res/anim/design_fab_out.xml 0x8d676b4b
res/anim/design_snackbar_in.xml 0x89444de8
res/anim/design_snackbar_out.xml 0x501bbe4c
res/anim/float_menu_close.xml 0xed68efd4
res/anim/float_menu_item_enter.xml 0x4302f398
res/anim/float_menu_item_exit.xml 0xd93e35a9
res/anim/float_menu_open.xml 0x9384085a
res/anim/float_menu_shadow_close.xml 0x3e7ef2c3
res/anim/float_menu_shadow_open.xml 0xec4bd830
res/anim/follow_btn_disappear.xml 0x80a176e2
res/anim/follow_toast_appear.xml 0xd7e65643
res/anim/imageselector_in_from_left.xml 0x7282310d
res/anim/imageselector_out_to_right.xml 0xa30b171b
res/anim/umeng_fb_audio_play_anim.xml 0x6a0141a8
res/anim/umeng_fb_dialog_enter_anim.xml 0x4103d130
res/anim/umeng_fb_dialog_exit_anim.xml 0xba9f068f
res/color-v11/abc_background_cache_hint_selector_material_dark.xml 0xebb19075
res/color-v11/abc_background_cache_hint_selector_material_light.xml 0x59d4092
res/color-v23/abc_color_highlight_material.xml 0xb2553452
res/color/abc_btn_colored_borderless_text_material.xml 0xdaf00c7c
res/color/abc_primary_text_disable_only_material_dark.xml 0x865d209f
res/color/abc_primary_text_disable_only_material_light.xml 0x209b89bb
res/color/abc_primary_text_material_dark.xml 0xf5b62768
res/color/abc_primary_text_material_light.xml 0x66a95812
res/color/abc_search_url_text.xml 0x591d8e24
res/color/abc_secondary_text_material_dark.xml 0x47a205c1
res/color/abc_secondary_text_material_light.xml 0xa59def3d
res/color/abc_tint_btn_checkable.xml 0x4b9b2555
res/color/abc_tint_default.xml 0xab7b9bdc
res/color/abc_tint_edittext.xml 0xaee9d3d0
res/color/abc_tint_seek_thumb.xml 0x7248e4a8
res/color/abc_tint_spinner.xml 0x713ba4e9
res/color/abc_tint_switch_thumb.xml 0x6a70437
res/color/abc_tint_switch_track.xml 0x2e834ce6
res/color/business_cooperation_text_color_selector.xml 0xae99d0d1
res/color/doutu_edit_tab_txt_color_selector.xml 0xbe5dd3c3
res/color/main_tab_text_color_selector.xml 0xbc425d98
res/color/switch_thumb_material_dark.xml 0xb1aace48
res/color/switch_thumb_material_light.xml 0x22b5b132
res/drawable-hdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0x64228504
res/drawable-hdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0x11706987
res/drawable-hdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0x1764993
res/drawable-hdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0x3df2f3
res/drawable-hdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0x4afe65be
res/drawable-hdpi-v4/abc_ic_star_black_16dp.png 0x8b8a9485
res/drawable-hdpi-v4/abc_ic_star_black_36dp.png 0xdd4584
res/drawable-hdpi-v4/abc_ic_star_black_48dp.png 0xa1fb74a1
res/drawable-hdpi-v4/abc_ic_star_half_black_16dp.png 0xa97f155c
res/drawable-hdpi-v4/abc_ic_star_half_black_36dp.png 0x7e9b424
res/drawable-hdpi-v4/abc_ic_star_half_black_48dp.png 0x6b73b52b
res/drawable-hdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x72ff0f68
res/drawable-hdpi-v4/abc_list_focused_holo.9.png 0x8e4da209
res/drawable-hdpi-v4/abc_list_longpressed_holo.9.png 0x81b12fde
res/drawable-hdpi-v4/abc_list_pressed_holo_dark.9.png 0x62993bc8
res/drawable-hdpi-v4/abc_list_pressed_holo_light.9.png 0x7c69f413
res/drawable-hdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0xe50f1648
res/drawable-hdpi-v4/abc_list_selector_disabled_holo_light.9.png 0x43f655e6
res/drawable-hdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0xbed682a
res/drawable-hdpi-v4/abc_popup_background_mtrl_mult.9.png 0x84fecf87
res/drawable-hdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0x6b6f6e10
res/drawable-hdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0x7ebcc8c0
res/drawable-hdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0xedd62a7e
res/drawable-hdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0x415336be
res/drawable-hdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0x65b9786e
res/drawable-hdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0x7ab89543
res/drawable-hdpi-v4/abc_switch_track_mtrl_alpha.9.png 0x18025bff
res/drawable-hdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0x6c11debe
res/drawable-hdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x103aeb6a
res/drawable-hdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0xaa35a06e
res/drawable-hdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0xafd79c5c
res/drawable-hdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0xee0f1fea
res/drawable-hdpi-v4/about_ic.png 0x89cb64a7
res/drawable-hdpi-v4/app_logo.png 0x242cf87e
res/drawable-hdpi-v4/arrow_ic.png 0x5c74220a
res/drawable-hdpi-v4/bi_progress_view_determinate_face.png 0x78bc9d2d
res/drawable-hdpi-v4/bi_progress_view_indeterminate_face.png 0x228d5473
res/drawable-hdpi-v4/bi_radio_dialog_driver.9.png 0x4c42c32c
res/drawable-hdpi-v4/bi_raido_dialog_selected_icon.png 0x7ddb5c94
res/drawable-hdpi-v4/bi_toast_error_face.png 0xe77a41a7
res/drawable-hdpi-v4/bi_toast_success_face.png 0x15167d65
res/drawable-hdpi-v4/btn_delete_input_text.png 0x739eeab1
res/drawable-hdpi-v4/btn_doutu_edit_img_reload_normal.png 0xbaf5b194
res/drawable-hdpi-v4/btn_doutu_edit_img_reload_pressed.png 0x5f4db12e
res/drawable-hdpi-v4/btn_mixed_video_play.png 0xda26caa9
res/drawable-hdpi-v4/btn_more_draft.png 0x322e716b
res/drawable-hdpi-v4/btn_remove_draft.png 0x467ef333
res/drawable-hdpi-v4/btn_share_popup_qq_zone.png 0xeb3ac415
res/drawable-hdpi-v4/btn_share_popup_wx_circle.png 0xd238e0f2
res/drawable-hdpi-v4/category_certificate_ic.png 0x43dae8be
res/drawable-hdpi-v4/category_egao_ic.png 0xf50994b0
res/drawable-hdpi-v4/category_font_ic.png 0x638ed3da
res/drawable-hdpi-v4/category_game_ic.png 0x1d30f704
res/drawable-hdpi-v4/category_gif_ic.png 0xb7bb1297
res/drawable-hdpi-v4/category_love_ic.png 0xd6f3d4e
res/drawable-hdpi-v4/category_rich_ic.png 0x47ea6100
res/drawable-hdpi-v4/category_star_ic.png 0x2f73bf9f
res/drawable-hdpi-v4/category_weixin_ic.png 0x60f66126
res/drawable-hdpi-v4/cb_bg_color_checked.png 0x2f9d9754
res/drawable-hdpi-v4/cb_bg_color_normal.png 0x63b8773c
res/drawable-hdpi-v4/cb_doutu_text_checked.png 0xe201b2b6
res/drawable-hdpi-v4/cb_doutu_text_normal.png 0x665a558f
res/drawable-hdpi-v4/cb_text_color_checked.png 0x6c4bbb11
res/drawable-hdpi-v4/cb_text_color_normal.png 0xb3c715b6
res/drawable-hdpi-v4/chat_item_reveiver_bg.9.png 0xc6519d49
res/drawable-hdpi-v4/chat_item_sender_bg.9.png 0x40e19a4d
res/drawable-hdpi-v4/comment_add_pic_btn_normal.png 0x66e0b2fb
res/drawable-hdpi-v4/comment_add_pic_btn_pressed.png 0x11863407
res/drawable-hdpi-v4/comment_add_pic_handle_normal.png 0xe230c2cc
res/drawable-hdpi-v4/comment_add_pic_handle_pressed.png 0x2a4ab6c5
res/drawable-hdpi-v4/comment_del_pic_ic_normal.png 0xe35d2524
res/drawable-hdpi-v4/comment_del_pic_ic_pressed.png 0x961f8d1f
res/drawable-hdpi-v4/dcode.png 0x6c60a1bf
res/drawable-hdpi-v4/default_pic_material_library.png 0x9c271ced
res/drawable-hdpi-v4/default_user_ic.png 0xd87bbff7
res/drawable-hdpi-v4/dot_normal.png 0x4210e8ec
res/drawable-hdpi-v4/dot_selected.png 0xe4564e5e
res/drawable-hdpi-v4/doutu_download_img_tag.png 0x5c760f05
res/drawable-hdpi-v4/doutu_edit_diver.png 0x4d80f309
res/drawable-hdpi-v4/doutu_edit_tab_sel_tag.png 0x56eb5b0c
res/drawable-hdpi-v4/doutu_generate_loading_ic.png 0x5914405a
res/drawable-hdpi-v4/doutu_img_loading.png 0xa76866aa
res/drawable-hdpi-v4/doutu_img_loading_bg.png 0x8c6d4d65
res/drawable-hdpi-v4/doutu_modify_img_tag.png 0x3419b7d6
res/drawable-hdpi-v4/doutu_personal_img.png 0xe2456913
res/drawable-hdpi-v4/doutu_pop_divider.png 0x8e21a7a6
res/drawable-hdpi-v4/doutu_share_circle_normal.png 0x81c6fa55
res/drawable-hdpi-v4/doutu_share_circle_pressed.png 0x634d73ef
res/drawable-hdpi-v4/doutu_share_qq_normal.png 0x47e46e08
res/drawable-hdpi-v4/doutu_share_qq_pressed.png 0x9cda3a68
res/drawable-hdpi-v4/doutu_share_wx_normal.png 0x9d7da895
res/drawable-hdpi-v4/doutu_share_wx_pressed.png 0xb1319c6e
res/drawable-hdpi-v4/doutu_transparent_tag.png 0xf6732562
res/drawable-hdpi-v4/doutu_txt_sel_bg.png 0xff3288b4
res/drawable-hdpi-v4/draft_add_picture.png 0x292d3d4a
res/drawable-hdpi-v4/draft_btn_comment_ic.png 0x50c327af
res/drawable-hdpi-v4/draft_btn_dislike_unvote_ic.png 0x8f3c9fbd
res/drawable-hdpi-v4/draft_btn_dislike_voted_ic.png 0xf6e7d148
res/drawable-hdpi-v4/draft_btn_like_unvote_ic.png 0x3a6b248f
res/drawable-hdpi-v4/draft_btn_like_voted_ic.png 0xaf2d007
res/drawable-hdpi-v4/draft_comment_inverted_triangle_ic.png 0x635a3b38
res/drawable-hdpi-v4/draft_complain_ic.png 0xc8dbb0da
res/drawable-hdpi-v4/draft_detail_more_menu.png 0xa2fe6cf5
res/drawable-hdpi-v4/draft_received_support_icon.png 0xbd4fbca9
res/drawable-hdpi-v4/follow_tips_toast_bg.png 0x6ef8feff
res/drawable-hdpi-v4/ic_loading_rotate.png 0x81470e73
res/drawable-hdpi-v4/ic_pulltorefresh_arrow.png 0x3c354b5e
res/drawable-hdpi-v4/icon_back_circle.png 0x28c816b1
res/drawable-hdpi-v4/icon_checked.png 0xa3150c0c
res/drawable-hdpi-v4/icon_comment_unlock.png 0xa2d63ea6
res/drawable-hdpi-v4/icon_content_expand_more.png 0xd3cc43a8
res/drawable-hdpi-v4/icon_delete_recent_keywords.png 0x61b88a2a
res/drawable-hdpi-v4/icon_doutu_color_sel_tag.png 0x592e8af2
res/drawable-hdpi-v4/icon_doutu_edit_drag.png 0x8d74ff72
res/drawable-hdpi-v4/icon_doutu_saved.png 0xc6fbd98b
res/drawable-hdpi-v4/icon_doutu_txt_del.png 0x879b4527
res/drawable-hdpi-v4/icon_fans.png 0x6d36c4bf
res/drawable-hdpi-v4/icon_female.png 0x3abf508e
res/drawable-hdpi-v4/icon_follow.png 0x319cea65
res/drawable-hdpi-v4/icon_followed.png 0xa9cbdd04
res/drawable-hdpi-v4/icon_friend.png 0xce3495e8
res/drawable-hdpi-v4/icon_get_score_done.png 0xf4c8374c
res/drawable-hdpi-v4/icon_get_score_undone.png 0x67a14ca1
res/drawable-hdpi-v4/icon_level_indication.png 0x12eb729a
res/drawable-hdpi-v4/icon_main_redpoint.png 0x36a5b0e2
res/drawable-hdpi-v4/icon_male.png 0x8cb39252
res/drawable-hdpi-v4/icon_poor.png 0xb89b116e
res/drawable-hdpi-v4/icon_private_letter.png 0x769b7bea
res/drawable-hdpi-v4/icon_unchecked.png 0x67a14ca1
res/drawable-hdpi-v4/icon_user_doutu_delete.png 0x4afdc4f
res/drawable-hdpi-v4/icon_user_doutu_selected.png 0xa3150c0c
res/drawable-hdpi-v4/icon_yyb_market.png 0x5d858e36
res/drawable-hdpi-v4/image_my_level.png 0x88b2a3b0
res/drawable-hdpi-v4/image_my_level_water_wave.png 0xb26346ad
res/drawable-hdpi-v4/loading_01.png 0xaa8185b
res/drawable-hdpi-v4/loading_02.png 0x562608e1
res/drawable-hdpi-v4/loading_03.png 0xfc30acce
res/drawable-hdpi-v4/loading_04.png 0x82f9e64b
res/drawable-hdpi-v4/loading_05.png 0x582787b
res/drawable-hdpi-v4/loading_06.png 0x26389dbb
res/drawable-hdpi-v4/loading_07.png 0xcb89dcbc
res/drawable-hdpi-v4/loading_08.png 0xb06b26db
res/drawable-hdpi-v4/loading_09.png 0x71c42754
res/drawable-hdpi-v4/loading_10.png 0xfe30e99
res/drawable-hdpi-v4/loading_11.png 0x28736397
res/drawable-hdpi-v4/loading_12.png 0x85ea8421
res/drawable-hdpi-v4/main_tab_emoji_default_ic.png 0x19d5d1f1
res/drawable-hdpi-v4/main_tab_emoji_selected_ic.png 0x11349b0f
res/drawable-hdpi-v4/main_tab_news_default_ic.png 0xbb08799d
res/drawable-hdpi-v4/main_tab_news_selected_ic.png 0xae506e1f
res/drawable-hdpi-v4/main_tab_square_default_ic.png 0xee63908e
res/drawable-hdpi-v4/main_tab_square_selected_ic.png 0x206ae
res/drawable-hdpi-v4/main_tab_tool_default_ic.png 0x5c6ced67
res/drawable-hdpi-v4/main_tab_tool_selected_ic.png 0x34fcbddc
res/drawable-hdpi-v4/material.png 0x88b2a3b0
res/drawable-hdpi-v4/me_received_support_icon.png 0x94bb541f
res/drawable-hdpi-v4/msg_notice_arrwo.png 0xaad7c7a9
res/drawable-hdpi-v4/news_add_comment.png 0xbf39bd08
res/drawable-hdpi-v4/news_share.png 0x5026e69e
res/drawable-hdpi-v4/official_tag_icon.png 0x4c7d9b5f
res/drawable-hdpi-v4/pic_select_default_circle_ic.png 0xf21464e6
res/drawable-hdpi-v4/pic_select_default_ic.png 0xf47d50e8
res/drawable-hdpi-v4/popup_item_top_shadow.png 0xf0b23ee2
res/drawable-hdpi-v4/post_doutu_moment_icon_normal.png 0x7adaf8ff
res/drawable-hdpi-v4/post_doutu_moment_icon_pressed.png 0x17de34d0
res/drawable-hdpi-v4/progress_dialog_ic_close.png 0x937612cc
res/drawable-hdpi-v4/progressbar.xml 0x91af3ba0
res/drawable-hdpi-v4/qq_login_ic.png 0xfbaa2427
res/drawable-hdpi-v4/qq_login_ic_pressed.png 0x1143779
res/drawable-hdpi-v4/return_ic.png 0x5b270667
res/drawable-hdpi-v4/return_ic_white.png 0xdb6c7b97
res/drawable-hdpi-v4/round_rect_cover_bg.png 0x26cb22e1
res/drawable-hdpi-v4/search_ic.png 0x5e560f1
res/drawable-hdpi-v4/select_flag_ic.png 0x82cd31fc
res/drawable-hdpi-v4/selection_divider.9.png 0xa3eda7fa
res/drawable-hdpi-v4/setting_ic.png 0x4b5a032a
res/drawable-hdpi-v4/setting_ic_white.png 0x4416abf
res/drawable-hdpi-v4/share_qq_friend_disable_ic.png 0xe82f902
res/drawable-hdpi-v4/share_qq_friend_normal_ic.png 0x3507b9a3
res/drawable-hdpi-v4/share_qq_friend_pressed_ic.png 0xb3ce4b46
res/drawable-hdpi-v4/share_qq_zone_disable_ic.png 0x477b690d
res/drawable-hdpi-v4/share_qq_zone_normal_ic.png 0x21aff8b3
res/drawable-hdpi-v4/share_qq_zone_pressed_ic.png 0xebca995
res/drawable-hdpi-v4/share_weixin_friend_disable_ic.png 0x7ebb3884
res/drawable-hdpi-v4/share_weixin_friend_normal_ic.png 0x6d499589
res/drawable-hdpi-v4/share_weixin_friend_pressed_ic.png 0x1a1aeec5
res/drawable-hdpi-v4/share_weixin_quan_disable_ic.png 0x95de455
res/drawable-hdpi-v4/share_weixin_quan_normal_ic.png 0x9cee7004
res/drawable-hdpi-v4/share_weixin_quan_pressed_ic.png 0x3f105f81
res/drawable-hdpi-v4/square_ad_cancel_icon.png 0xe5acec9e
res/drawable-hdpi-v4/square_float_menu_close.png 0x6baeb7e4
res/drawable-hdpi-v4/square_float_menu_default.png 0x5eaa6cb7
res/drawable-hdpi-v4/square_float_menu_draft.png 0xdd694bc2
res/drawable-hdpi-v4/square_float_menu_open.png 0x88b2a3b0
res/drawable-hdpi-v4/square_item_btn_drop_menu.png 0x25cdad0c
res/drawable-hdpi-v4/square_me_comment_icon.png 0x2067e2c6
res/drawable-hdpi-v4/square_me_ic.png 0x3a8e884b
res/drawable-hdpi-v4/square_submission_ic.png 0xce3043a5
res/drawable-hdpi-v4/square_topic_draft_num.png 0xede65af6
res/drawable-hdpi-v4/square_topic_person_num.png 0x4b1ef32b
res/drawable-hdpi-v4/test_zhengshu.png 0x5b6f6a01
res/drawable-hdpi-v4/user_moment_list_loading_ic.png 0xbd2382f2
res/drawable-hdpi-v4/user_msg_draft_delete_bg.png 0x6703eabf
res/drawable-ldrtl-hdpi-v17/abc_spinner_mtrl_am_alpha.9.png 0xa596c3d0
res/drawable-ldrtl-mdpi-v17/abc_spinner_mtrl_am_alpha.9.png 0xb1c14ea7
res/drawable-ldrtl-xhdpi-v17/abc_spinner_mtrl_am_alpha.9.png 0x64a842b9
res/drawable-ldrtl-xxhdpi-v17/abc_spinner_mtrl_am_alpha.9.png 0x48f4c207
res/drawable-ldrtl-xxxhdpi-v17/abc_spinner_mtrl_am_alpha.9.png 0x2ff6ecc
res/drawable-mdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0xa852580c
res/drawable-mdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0xa7483509
res/drawable-mdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0xd76b7b1e
res/drawable-mdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0xb6857dd0
res/drawable-mdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0xc890fc5c
res/drawable-mdpi-v4/abc_ic_star_black_16dp.png 0x1d21eeb3
res/drawable-mdpi-v4/abc_ic_star_black_36dp.png 0x2a40c706
res/drawable-mdpi-v4/abc_ic_star_black_48dp.png 0x15d856d
res/drawable-mdpi-v4/abc_ic_star_half_black_16dp.png 0x166d14dd
res/drawable-mdpi-v4/abc_ic_star_half_black_36dp.png 0x4a32950e
res/drawable-mdpi-v4/abc_ic_star_half_black_48dp.png 0xcd5c10f5
res/drawable-mdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x72ff0f68
res/drawable-mdpi-v4/abc_list_focused_holo.9.png 0xb1ab9d03
res/drawable-mdpi-v4/abc_list_longpressed_holo.9.png 0x78c37895
res/drawable-mdpi-v4/abc_list_pressed_holo_dark.9.png 0x686b7a66
res/drawable-mdpi-v4/abc_list_pressed_holo_light.9.png 0x32efca3
res/drawable-mdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0x551f7c98
res/drawable-mdpi-v4/abc_list_selector_disabled_holo_light.9.png 0xd6426851
res/drawable-mdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0xe2078e4d
res/drawable-mdpi-v4/abc_popup_background_mtrl_mult.9.png 0x3bdea6d1
res/drawable-mdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0xf4030717
res/drawable-mdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0xefd6e141
res/drawable-mdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0xb2b1b258
res/drawable-mdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0x3a0eb435
res/drawable-mdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0xd393324b
res/drawable-mdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0x5ceac6c5
res/drawable-mdpi-v4/abc_switch_track_mtrl_alpha.9.png 0xd6b37a0c
res/drawable-mdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0xb58b040f
res/drawable-mdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x4f16ccfc
res/drawable-mdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0xf8dbf6f6
res/drawable-mdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0xfb4249d4
res/drawable-mdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0x19a0052e
res/drawable-mdpi-v4/selection_divider.9.png 0xa3eda7fa
res/drawable-v21/abc_action_bar_item_background_material.xml 0xb794af16
res/drawable-v21/abc_btn_colored_material.xml 0x3942634
res/drawable-v21/abc_edit_text_material.xml 0xa7ed9ed1
res/drawable-v21/abc_ratingbar_indicator_material.xml 0x94de658b
res/drawable-v21/abc_ratingbar_material.xml 0x7b7cc122
res/drawable-v21/abc_ratingbar_small_material.xml 0xb530d2ba
res/drawable-v23/abc_control_background_material.xml 0xe0173aa5
res/drawable-xhdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0xcf127e45
res/drawable-xhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0xcd563567
res/drawable-xhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0x3e9a5317
res/drawable-xhdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0xf70ddcc0
res/drawable-xhdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0xa633729c
res/drawable-xhdpi-v4/abc_ic_star_black_16dp.png 0x7da76864
res/drawable-xhdpi-v4/abc_ic_star_black_36dp.png 0xa1fb74a1
res/drawable-xhdpi-v4/abc_ic_star_black_48dp.png 0x2b93ff5d
res/drawable-xhdpi-v4/abc_ic_star_half_black_16dp.png 0xf86c6c7a
res/drawable-xhdpi-v4/abc_ic_star_half_black_36dp.png 0x6b73b52b
res/drawable-xhdpi-v4/abc_ic_star_half_black_48dp.png 0x4e7c659a
res/drawable-xhdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x72ff0f68
res/drawable-xhdpi-v4/abc_list_focused_holo.9.png 0xbde23956
res/drawable-xhdpi-v4/abc_list_longpressed_holo.9.png 0x84a788a6
res/drawable-xhdpi-v4/abc_list_pressed_holo_dark.9.png 0x98f7c81a
res/drawable-xhdpi-v4/abc_list_pressed_holo_light.9.png 0x5314692b
res/drawable-xhdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0x41748705
res/drawable-xhdpi-v4/abc_list_selector_disabled_holo_light.9.png 0x1c2ff2be
res/drawable-xhdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0x63ee6937
res/drawable-xhdpi-v4/abc_popup_background_mtrl_mult.9.png 0x79067b02
res/drawable-xhdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0x6cd6529b
res/drawable-xhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0x3d7b9fee
res/drawable-xhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0xbeb523af
res/drawable-xhdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0xbf40ca92
res/drawable-xhdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0x1a186496
res/drawable-xhdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0xfbc5d182
res/drawable-xhdpi-v4/abc_switch_track_mtrl_alpha.9.png 0x4ebe0617
res/drawable-xhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0x361544c6
res/drawable-xhdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x4853c2d6
res/drawable-xhdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0x7a6dbe65
res/drawable-xhdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0xeaa0434b
res/drawable-xhdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0x4cfa2def
res/drawable-xhdpi-v4/about_ic.png 0xc5da0b93
res/drawable-xhdpi-v4/app_logo.png 0x2da73014
res/drawable-xhdpi-v4/arrow_ic.png 0xd1c9978e
res/drawable-xhdpi-v4/bg_valentine_start_image.jpg 0xf3f42035
res/drawable-xhdpi-v4/bi_progress_view_determinate_face.png 0xab33c9c3
res/drawable-xhdpi-v4/bi_progress_view_indeterminate_face.png 0x77386fd8
res/drawable-xhdpi-v4/bi_toast_error_face.png 0x1122c116
res/drawable-xhdpi-v4/bi_toast_success_face.png 0xa0decacc
res/drawable-xhdpi-v4/btn_delete_input_text.png 0xb241a43a
res/drawable-xhdpi-v4/btn_doutu_edit_img_reload_normal.png 0xd31aae31
res/drawable-xhdpi-v4/btn_doutu_edit_img_reload_pressed.png 0xaccafd63
res/drawable-xhdpi-v4/btn_mixed_video_play.png 0x54339c9f
res/drawable-xhdpi-v4/btn_more_draft.png 0xc1bf703d
res/drawable-xhdpi-v4/btn_remove_draft.png 0x2bcc9ff3
res/drawable-xhdpi-v4/btn_share_popup_qq_zone.png 0x7f04aec4
res/drawable-xhdpi-v4/btn_share_popup_wx_circle.png 0x88e1d7c3
res/drawable-xhdpi-v4/category_certificate_ic.png 0xe0180c32
res/drawable-xhdpi-v4/category_egao_ic.png 0x24ed6dda
res/drawable-xhdpi-v4/category_font_ic.png 0xc6834bcc
res/drawable-xhdpi-v4/category_game_ic.png 0x7b32fb6c
res/drawable-xhdpi-v4/category_gif_ic.png 0x29ddfe7c
res/drawable-xhdpi-v4/category_love_ic.png 0xb4b667c5
res/drawable-xhdpi-v4/category_rich_ic.png 0xac78b7f4
res/drawable-xhdpi-v4/category_star_ic.png 0x76115c0f
res/drawable-xhdpi-v4/category_weixin_ic.png 0x502081da
res/drawable-xhdpi-v4/cb_bg_color_checked.png 0x405eb9e5
res/drawable-xhdpi-v4/cb_bg_color_normal.png 0xa2fb42bb
res/drawable-xhdpi-v4/cb_doutu_text_checked.png 0xe62583ea
res/drawable-xhdpi-v4/cb_doutu_text_normal.png 0xdc709cc4
res/drawable-xhdpi-v4/cb_text_color_checked.png 0xea5b56d6
res/drawable-xhdpi-v4/cb_text_color_normal.png 0x209deb86
res/drawable-xhdpi-v4/chat_item_reveiver_bg.9.png 0x833c773b
res/drawable-xhdpi-v4/chat_item_sender_bg.9.png 0x96789def
res/drawable-xhdpi-v4/clear_cross.png 0x56e60df6
res/drawable-xhdpi-v4/comment_add_pic_btn_normal.png 0xa9e73ed5
res/drawable-xhdpi-v4/comment_add_pic_btn_pressed.png 0x384e3ed0
res/drawable-xhdpi-v4/comment_add_pic_handle_normal.png 0xf9c50246
res/drawable-xhdpi-v4/comment_add_pic_handle_pressed.png 0xb0fc1d8c
res/drawable-xhdpi-v4/comment_del_pic_ic_normal.png 0xe7b7c235
res/drawable-xhdpi-v4/comment_del_pic_ic_pressed.png 0x7e5ec60e
res/drawable-xhdpi-v4/dcode.png 0x6c60a1bf
res/drawable-xhdpi-v4/default_pic_material_library.png 0x9b960f6e
res/drawable-xhdpi-v4/default_user_ic.png 0xa327cea0
res/drawable-xhdpi-v4/dot_normal.png 0x52ef5885
res/drawable-xhdpi-v4/dot_selected.png 0xf6b0169a
res/drawable-xhdpi-v4/doutu_download_img_tag.png 0x77b22ff8
res/drawable-xhdpi-v4/doutu_edit_diver.png 0x8ff5aded
res/drawable-xhdpi-v4/doutu_edit_tab_sel_tag.png 0xeeaffcef
res/drawable-xhdpi-v4/doutu_generate_loading_ic.png 0x2510408b
res/drawable-xhdpi-v4/doutu_img_loading.png 0x550bb174
res/drawable-xhdpi-v4/doutu_img_loading_bg.png 0xfd512cfd
res/drawable-xhdpi-v4/doutu_modify_img_tag.png 0x972e87d9
res/drawable-xhdpi-v4/doutu_personal_img.png 0x67a483a
res/drawable-xhdpi-v4/doutu_pop_divider.png 0x7ea3166d
res/drawable-xhdpi-v4/doutu_share_circle_normal.png 0x1f739aaa
res/drawable-xhdpi-v4/doutu_share_circle_pressed.png 0xc89d3df2
res/drawable-xhdpi-v4/doutu_share_qq_normal.png 0x7a6001a8
res/drawable-xhdpi-v4/doutu_share_qq_pressed.png 0xeb8fc6e3
res/drawable-xhdpi-v4/doutu_share_wx_normal.png 0x9baa5be
res/drawable-xhdpi-v4/doutu_share_wx_pressed.png 0xf1b5bfd9
res/drawable-xhdpi-v4/doutu_transparent_tag.png 0x7027ac78
res/drawable-xhdpi-v4/doutu_txt_sel_bg.png 0x33fb1b7f
res/drawable-xhdpi-v4/draft_add_picture.png 0xc927562e
res/drawable-xhdpi-v4/draft_btn_comment_ic.png 0xfb63a924
res/drawable-xhdpi-v4/draft_btn_dislike_unvote_ic.png 0x13ff05e1
res/drawable-xhdpi-v4/draft_btn_dislike_voted_ic.png 0x3fce56
res/drawable-xhdpi-v4/draft_btn_like_unvote_ic.png 0x316e43e9
res/drawable-xhdpi-v4/draft_btn_like_voted_ic.png 0x9f84ead1
res/drawable-xhdpi-v4/draft_comment_inverted_triangle_ic.png 0x9777b60b
res/drawable-xhdpi-v4/draft_complain_ic.png 0xa5f9ab36
res/drawable-xhdpi-v4/draft_detail_more_menu.png 0x279e32be
res/drawable-xhdpi-v4/draft_received_support_icon.png 0x4436f166
res/drawable-xhdpi-v4/follow_tips_toast_bg.png 0xf2bffc9c
res/drawable-xhdpi-v4/icon_back_circle.png 0x14e786b2
res/drawable-xhdpi-v4/icon_checked.png 0xa3150c0c
res/drawable-xhdpi-v4/icon_comment_unlock.png 0x2af865c7
res/drawable-xhdpi-v4/icon_content_expand_more.png 0x2579926a
res/drawable-xhdpi-v4/icon_delete_recent_keywords.png 0xb75168e
res/drawable-xhdpi-v4/icon_doutu_color_sel_tag.png 0x772b8906
res/drawable-xhdpi-v4/icon_doutu_edit_drag.png 0xb772b3b
res/drawable-xhdpi-v4/icon_doutu_saved.png 0xebd22172
res/drawable-xhdpi-v4/icon_doutu_txt_del.png 0xa6c8a4bf
res/drawable-xhdpi-v4/icon_fans.png 0x78ec103c
res/drawable-xhdpi-v4/icon_female.png 0x31b4574f
res/drawable-xhdpi-v4/icon_follow.png 0xb45f0fa6
res/drawable-xhdpi-v4/icon_followed.png 0x31d227c3
res/drawable-xhdpi-v4/icon_friend.png 0x821dd1
res/drawable-xhdpi-v4/icon_get_score_done.png 0x956d8e3d
res/drawable-xhdpi-v4/icon_get_score_undone.png 0xe5e9241e
res/drawable-xhdpi-v4/icon_level_indication.png 0x8bc0bcd9
res/drawable-xhdpi-v4/icon_load_failed.png 0x89f9e4e
res/drawable-xhdpi-v4/icon_loading.png 0x83a5de20
res/drawable-xhdpi-v4/icon_main_redpoint.png 0x22fffac8
res/drawable-xhdpi-v4/icon_male.png 0xef6db247
res/drawable-xhdpi-v4/icon_material_item_more.png 0x40e3a295
res/drawable-xhdpi-v4/icon_official_accept.png 0x561c24d0
res/drawable-xhdpi-v4/icon_poor.png 0xc2996944
res/drawable-xhdpi-v4/icon_private_letter.png 0xb6b1c1a0
res/drawable-xhdpi-v4/icon_unchecked.png 0xe5e9241e
res/drawable-xhdpi-v4/icon_user_doutu_delete.png 0xddcac5a2
res/drawable-xhdpi-v4/icon_user_doutu_selected.png 0x63bdd256
res/drawable-xhdpi-v4/icon_yyb_market.png 0x1fce757c
res/drawable-xhdpi-v4/image.png 0x88b2a3b0
res/drawable-xhdpi-v4/image_level_introduction.jpg 0xbf1fec6f
res/drawable-xhdpi-v4/image_my_level.png 0x88b2a3b0
res/drawable-xhdpi-v4/image_my_level_water_wave.png 0x87a16c77
res/drawable-xhdpi-v4/jc_back.png 0xa2ad5268
res/drawable-xhdpi-v4/jc_backward_icon.png 0xbbb2b578
res/drawable-xhdpi-v4/jc_bi_error.png 0xddecf0d
res/drawable-xhdpi-v4/jc_enlarge.png 0x15948baa
res/drawable-xhdpi-v4/jc_error_normal.png 0x88b2a3b0
res/drawable-xhdpi-v4/jc_error_pressed.png 0x88b2a3b0
res/drawable-xhdpi-v4/jc_forward_icon.png 0x4d8f72f5
res/drawable-xhdpi-v4/jc_loading_bg.png 0xdb5e06f8
res/drawable-xhdpi-v4/jc_pause_normal.png 0x2bb9f478
res/drawable-xhdpi-v4/jc_pause_pressed.png 0x1fc9247e
res/drawable-xhdpi-v4/jc_play_normal.png 0xefe7ed11
res/drawable-xhdpi-v4/jc_play_pressed.png 0x71fe83c
res/drawable-xhdpi-v4/jc_shrink.png 0x6f36db63
res/drawable-xhdpi-v4/jc_volume_icon.png 0x49c9062d
res/drawable-xhdpi-v4/level_up_anim_1.jpg 0xa0b82297
res/drawable-xhdpi-v4/level_up_anim_2.jpg 0x62fc4fc
res/drawable-xhdpi-v4/level_up_anim_3.jpg 0x505a970a
res/drawable-xhdpi-v4/main_tab_emoji_default_ic.png 0x3c37889c
res/drawable-xhdpi-v4/main_tab_emoji_selected_ic.png 0x8bd5da2e
res/drawable-xhdpi-v4/main_tab_news_default_ic.png 0x55151e58
res/drawable-xhdpi-v4/main_tab_news_selected_ic.png 0x43dc522b
res/drawable-xhdpi-v4/main_tab_square_default_ic.png 0x18bb9e1e
res/drawable-xhdpi-v4/main_tab_square_selected_ic.png 0xa1472286
res/drawable-xhdpi-v4/main_tab_tool_default_ic.png 0xa84f6a75
res/drawable-xhdpi-v4/main_tab_tool_selected_ic.png 0xad14274d
res/drawable-xhdpi-v4/material.png 0x88b2a3b0
res/drawable-xhdpi-v4/me_received_support_icon.png 0x547ebf11
res/drawable-xhdpi-v4/msg_notice_arrwo.png 0x430b6ebb
res/drawable-xhdpi-v4/news_add_comment.png 0xcc0774d6
res/drawable-xhdpi-v4/news_share.png 0xaaf91885
res/drawable-xhdpi-v4/official_tag_icon.png 0x43d8ce19
res/drawable-xhdpi-v4/pic_select_default_circle_ic.png 0xa2f52c5e
res/drawable-xhdpi-v4/pic_select_default_ic.png 0x1eb4464a
res/drawable-xhdpi-v4/popup_item_top_shadow.png 0xa1a1a0a4
res/drawable-xhdpi-v4/post_doutu_moment_icon_normal.png 0x1f12f69f
res/drawable-xhdpi-v4/post_doutu_moment_icon_pressed.png 0x19ea2f91
res/drawable-xhdpi-v4/progress_dialog_ic_close.png 0x866b40c7
res/drawable-xhdpi-v4/ptr_rotate_arrow.png 0x8335fe07
res/drawable-xhdpi-v4/qq_login_ic.png 0xc0a3e2b5
res/drawable-xhdpi-v4/qq_login_ic_pressed.png 0x8addc368
res/drawable-xhdpi-v4/return_ic.png 0xba3b119b
res/drawable-xhdpi-v4/return_ic_white.png 0x28e81c2d
res/drawable-xhdpi-v4/round_rect_cover_bg.png 0x6fc28c9e
res/drawable-xhdpi-v4/search_ic.png 0x14d4f2f4
res/drawable-xhdpi-v4/select_flag_ic.png 0x929b02fb
res/drawable-xhdpi-v4/selection_divider.9.png 0xa3eda7fa
res/drawable-xhdpi-v4/setting_ic.png 0x93378490
res/drawable-xhdpi-v4/setting_ic_white.png 0xcf1c8d02
res/drawable-xhdpi-v4/share_qq_friend_disable_ic.png 0xf3a660e2
res/drawable-xhdpi-v4/share_qq_friend_normal_ic.png 0x8f306276
res/drawable-xhdpi-v4/share_qq_friend_pressed_ic.png 0xbcc836a0
res/drawable-xhdpi-v4/share_qq_zone_disable_ic.png 0x5d2c8820
res/drawable-xhdpi-v4/share_qq_zone_normal_ic.png 0xdc02af
res/drawable-xhdpi-v4/share_qq_zone_pressed_ic.png 0x33c02a7b
res/drawable-xhdpi-v4/share_weixin_friend_disable_ic.png 0x37e42f0b
res/drawable-xhdpi-v4/share_weixin_friend_normal_ic.png 0xf489c937
res/drawable-xhdpi-v4/share_weixin_friend_pressed_ic.png 0xe5b7b394
res/drawable-xhdpi-v4/share_weixin_quan_disable_ic.png 0x45869482
res/drawable-xhdpi-v4/share_weixin_quan_normal_ic.png 0xb46b3c41
res/drawable-xhdpi-v4/share_weixin_quan_pressed_ic.png 0x65fd98f1
res/drawable-xhdpi-v4/square_ad_cancel_icon.png 0xe1c3dfeb
res/drawable-xhdpi-v4/square_float_menu_close.png 0x52127a03
res/drawable-xhdpi-v4/square_float_menu_default.png 0xfc2f1bc6
res/drawable-xhdpi-v4/square_float_menu_draft.png 0xe80baff1
res/drawable-xhdpi-v4/square_float_menu_open.png 0x88b2a3b0
res/drawable-xhdpi-v4/square_floating_image.png 0x88b2a3b0
res/drawable-xhdpi-v4/square_item_btn_drop_menu.png 0x796a3d60
res/drawable-xhdpi-v4/square_me_back.png 0x88b2a3b0
res/drawable-xhdpi-v4/square_me_comment_icon.png 0x1399cd95
res/drawable-xhdpi-v4/square_me_ic.png 0xb0c9fdf7
res/drawable-xhdpi-v4/square_me_setting.png 0x93378490
res/drawable-xhdpi-v4/square_submission_ic.png 0x9dbc3fa7
res/drawable-xhdpi-v4/square_topic_draft_num.png 0x4f1cdcaa
res/drawable-xhdpi-v4/square_topic_person_num.png 0x1a5b0b0f
res/drawable-xhdpi-v4/topic_theme_image.png 0xe4bd2bb5
res/drawable-xhdpi-v4/umeng_fb_audio_dialog_cancel.png 0x8091cf95
res/drawable-xhdpi-v4/umeng_fb_audio_dialog_content.png 0xc499a316
res/drawable-xhdpi-v4/umeng_fb_audio_play_01.png 0x420e78f2
res/drawable-xhdpi-v4/umeng_fb_audio_play_02.png 0x2361a357
res/drawable-xhdpi-v4/umeng_fb_audio_play_03.png 0x6b3bc1ba
res/drawable-xhdpi-v4/umeng_fb_audio_play_bg.9.png 0x38918ad8
res/drawable-xhdpi-v4/umeng_fb_keyboard.png 0xa8b11bf9
res/drawable-xhdpi-v4/umeng_fb_plus.png 0x6b14efca
res/drawable-xhdpi-v4/umeng_fb_record.png 0x415f67f5
res/drawable-xhdpi-v4/user_moment_list_loading_ic.png 0x2510408b
res/drawable-xhdpi-v4/user_msg_draft_delete_bg.png 0xe67d4a63
res/drawable-xhdpi-v4/user_photo_wall_local_default.jpg 0xe65f72a4
res/drawable-xxhdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0x7758fe71
res/drawable-xxhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0xe3ff53b2
res/drawable-xxhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0x7f666710
res/drawable-xxhdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0x7cd87445
res/drawable-xxhdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0x75e2a0e0
res/drawable-xxhdpi-v4/abc_ic_star_black_16dp.png 0x15d856d
res/drawable-xxhdpi-v4/abc_ic_star_black_36dp.png 0x3e52d827
res/drawable-xxhdpi-v4/abc_ic_star_black_48dp.png 0xe3e4a114
res/drawable-xxhdpi-v4/abc_ic_star_half_black_16dp.png 0xcd5c10f5
res/drawable-xxhdpi-v4/abc_ic_star_half_black_36dp.png 0x65d095bf
res/drawable-xxhdpi-v4/abc_ic_star_half_black_48dp.png 0x957a7d58
res/drawable-xxhdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x2d5a2100
res/drawable-xxhdpi-v4/abc_list_focused_holo.9.png 0x19c09c27
res/drawable-xxhdpi-v4/abc_list_longpressed_holo.9.png 0x236b6e98
res/drawable-xxhdpi-v4/abc_list_pressed_holo_dark.9.png 0x823780d0
res/drawable-xxhdpi-v4/abc_list_pressed_holo_light.9.png 0x813ae23c
res/drawable-xxhdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0xdddaae2e
res/drawable-xxhdpi-v4/abc_list_selector_disabled_holo_light.9.png 0x1ff1856f
res/drawable-xxhdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0xe97125d2
res/drawable-xxhdpi-v4/abc_popup_background_mtrl_mult.9.png 0x478db1d1
res/drawable-xxhdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0xc57037f7
res/drawable-xxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0x35329a
res/drawable-xxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0x9aaa658d
res/drawable-xxhdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0x5902ed5c
res/drawable-xxhdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0xa028728e
res/drawable-xxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0xbba9274f
res/drawable-xxhdpi-v4/abc_switch_track_mtrl_alpha.9.png 0xf785991a
res/drawable-xxhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0xd6692ce7
res/drawable-xxhdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x2fa093c4
res/drawable-xxhdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0x4d07b4a9
res/drawable-xxhdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0x77c42d34
res/drawable-xxhdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0x9e0d73d
res/drawable-xxhdpi-v4/about_ic.png 0x264b54c1
res/drawable-xxhdpi-v4/app_logo.png 0x80bf9665
res/drawable-xxhdpi-v4/arrow_ic.png 0xcc1c5a8e
res/drawable-xxhdpi-v4/bg_valentine_start_image.jpg 0xdfa6c1f0
res/drawable-xxhdpi-v4/bi_radio_dialog_driver.9.png 0xdb60dae4
res/drawable-xxhdpi-v4/bi_raido_dialog_selected_icon.png 0xd2b5efd7
res/drawable-xxhdpi-v4/btn_delete_input_text.png 0x957822ec
res/drawable-xxhdpi-v4/btn_doutu_edit_img_reload_normal.png 0xe84ef004
res/drawable-xxhdpi-v4/btn_doutu_edit_img_reload_pressed.png 0xbd41b6e7
res/drawable-xxhdpi-v4/btn_mixed_video_play.png 0xeafad3cf
res/drawable-xxhdpi-v4/btn_more_draft.png 0x6b94c4c
res/drawable-xxhdpi-v4/btn_remove_draft.png 0x44f50f3c
res/drawable-xxhdpi-v4/btn_share_popup_qq_zone.png 0xce783594
res/drawable-xxhdpi-v4/btn_share_popup_wx_circle.png 0x66ad2ac4
res/drawable-xxhdpi-v4/category_certificate_ic.png 0x9bd754db
res/drawable-xxhdpi-v4/category_egao_ic.png 0xcec79042
res/drawable-xxhdpi-v4/category_font_ic.png 0x52df1acf
res/drawable-xxhdpi-v4/category_game_ic.png 0xb0574877
res/drawable-xxhdpi-v4/category_gif_ic.png 0x4f8af61a
res/drawable-xxhdpi-v4/category_love_ic.png 0xd64f8930
res/drawable-xxhdpi-v4/category_rich_ic.png 0x51af6493
res/drawable-xxhdpi-v4/category_star_ic.png 0x2651965e
res/drawable-xxhdpi-v4/category_weixin_ic.png 0x1ce63fa3
res/drawable-xxhdpi-v4/cb_bg_color_checked.png 0x3d8bccf
res/drawable-xxhdpi-v4/cb_bg_color_normal.png 0xfb80e8da
res/drawable-xxhdpi-v4/cb_doutu_text_checked.png 0x480be734
res/drawable-xxhdpi-v4/cb_doutu_text_normal.png 0x708fcc1c
res/drawable-xxhdpi-v4/cb_text_color_checked.png 0x5d18d59a
res/drawable-xxhdpi-v4/cb_text_color_normal.png 0x4e281190
res/drawable-xxhdpi-v4/chat_item_reveiver_bg.9.png 0xedabd2af
res/drawable-xxhdpi-v4/chat_item_sender_bg.9.png 0x448ef149
res/drawable-xxhdpi-v4/comment_add_pic_btn_normal.png 0x8afc033
res/drawable-xxhdpi-v4/comment_add_pic_btn_pressed.png 0x1c2e6eb1
res/drawable-xxhdpi-v4/comment_add_pic_handle_normal.png 0xdf1c3903
res/drawable-xxhdpi-v4/comment_add_pic_handle_pressed.png 0xdb8a5c0a
res/drawable-xxhdpi-v4/comment_del_pic_ic_normal.png 0x94438e18
res/drawable-xxhdpi-v4/comment_del_pic_ic_pressed.png 0x294dad2f
res/drawable-xxhdpi-v4/dcode.png 0x6c60a1bf
res/drawable-xxhdpi-v4/default_pic_material_library.png 0x9f3aaede
res/drawable-xxhdpi-v4/default_user_ic.png 0x35d21e11
res/drawable-xxhdpi-v4/dot_normal.png 0xe62f26bc
res/drawable-xxhdpi-v4/dot_selected.png 0x764c2b67
res/drawable-xxhdpi-v4/doutu_download_img_tag.png 0x7067b541
res/drawable-xxhdpi-v4/doutu_edit_diver.png 0xcd1a8a2c
res/drawable-xxhdpi-v4/doutu_edit_tab_sel_tag.png 0x9ad314d4
res/drawable-xxhdpi-v4/doutu_generate_loading_ic.png 0x6f5f7df3
res/drawable-xxhdpi-v4/doutu_img_loading.png 0x18404849
res/drawable-xxhdpi-v4/doutu_img_loading_bg.png 0xe0eadea7
res/drawable-xxhdpi-v4/doutu_modify_img_tag.png 0x1e8a5efb
res/drawable-xxhdpi-v4/doutu_personal_img.png 0xd72e7853
res/drawable-xxhdpi-v4/doutu_pop_divider.png 0xa7833cf1
res/drawable-xxhdpi-v4/doutu_share_circle_disable.png 0x4d28989a
res/drawable-xxhdpi-v4/doutu_share_circle_normal.png 0xa1248e6
res/drawable-xxhdpi-v4/doutu_share_circle_pressed.png 0x29885c1a
res/drawable-xxhdpi-v4/doutu_share_qq_disable.png 0x5bd80596
res/drawable-xxhdpi-v4/doutu_share_qq_normal.png 0x6527e146
res/drawable-xxhdpi-v4/doutu_share_qq_pressed.png 0x731ce9
res/drawable-xxhdpi-v4/doutu_share_wx_disable.png 0x3ba56b4a
res/drawable-xxhdpi-v4/doutu_share_wx_normal.png 0x344bb42d
res/drawable-xxhdpi-v4/doutu_share_wx_pressed.png 0x53c70e9
res/drawable-xxhdpi-v4/doutu_transparent_tag.png 0x417f64b5
res/drawable-xxhdpi-v4/doutu_txt_sel_bg.png 0xd4bf873f
res/drawable-xxhdpi-v4/draft_add_picture.png 0x175629ca
res/drawable-xxhdpi-v4/draft_btn_comment_ic.png 0x11343bd8
res/drawable-xxhdpi-v4/draft_btn_dislike_unvote_ic.png 0xe4cbdcd
res/drawable-xxhdpi-v4/draft_btn_dislike_voted_ic.png 0x13d4fda5
res/drawable-xxhdpi-v4/draft_btn_like_unvote_ic.png 0x7a5f44b1
res/drawable-xxhdpi-v4/draft_btn_like_voted_ic.png 0xc50ac18a
res/drawable-xxhdpi-v4/draft_comment_inverted_triangle_ic.png 0x30419fcf
res/drawable-xxhdpi-v4/draft_complain_ic.png 0x841f48f7
res/drawable-xxhdpi-v4/draft_detail_more_menu.png 0x87f9364f
res/drawable-xxhdpi-v4/draft_received_support_icon.png 0x95815196
res/drawable-xxhdpi-v4/follow_tips_toast_bg.png 0x539bd820
res/drawable-xxhdpi-v4/icon_back_circle.png 0xfa96515c
res/drawable-xxhdpi-v4/icon_checked.png 0x3d7bfb33
res/drawable-xxhdpi-v4/icon_comment_unlock.png 0xe1aedc89
res/drawable-xxhdpi-v4/icon_content_expand_more.png 0x7970fd97
res/drawable-xxhdpi-v4/icon_delete_recent_keywords.png 0x55dacbad
res/drawable-xxhdpi-v4/icon_doutu_color_sel_tag.png 0x517411ee
res/drawable-xxhdpi-v4/icon_doutu_edit_drag.png 0x3d602222
res/drawable-xxhdpi-v4/icon_doutu_saved.png 0xe084cd5
res/drawable-xxhdpi-v4/icon_doutu_txt_del.png 0x28a84f18
res/drawable-xxhdpi-v4/icon_fans.png 0x1f0572f6
res/drawable-xxhdpi-v4/icon_female.png 0xb4e6c370
res/drawable-xxhdpi-v4/icon_follow.png 0xcc560e36
res/drawable-xxhdpi-v4/icon_followed.png 0x4fe4f0b9
res/drawable-xxhdpi-v4/icon_friend.png 0x6a8ec191
res/drawable-xxhdpi-v4/icon_get_score_done.png 0xdf05ae49
res/drawable-xxhdpi-v4/icon_get_score_undone.png 0xda3220f7
res/drawable-xxhdpi-v4/icon_level_indication.png 0xf13b5cc0
res/drawable-xxhdpi-v4/icon_main_redpoint.png 0x2d936272
res/drawable-xxhdpi-v4/icon_male.png 0x5322b008
res/drawable-xxhdpi-v4/icon_poor.png 0xecfa18b1
res/drawable-xxhdpi-v4/icon_private_letter.png 0xb7c7f45a
res/drawable-xxhdpi-v4/icon_unchecked.png 0xda3220f7
res/drawable-xxhdpi-v4/icon_user_doutu_delete.png 0x30148ac2
res/drawable-xxhdpi-v4/icon_user_doutu_selected.png 0x63d07a3
res/drawable-xxhdpi-v4/icon_yyb_market.png 0xd408890c
res/drawable-xxhdpi-v4/image_my_level.png 0x88b2a3b0
res/drawable-xxhdpi-v4/image_my_level_water_wave.png 0xc754c70c
res/drawable-xxhdpi-v4/main_tab_emoji_default_ic.png 0x33412356
res/drawable-xxhdpi-v4/main_tab_emoji_selected_ic.png 0xa0a07f0f
res/drawable-xxhdpi-v4/main_tab_news_default_ic.png 0xc267ecc0
res/drawable-xxhdpi-v4/main_tab_news_selected_ic.png 0xd8191ca8
res/drawable-xxhdpi-v4/main_tab_square_default_ic.png 0xb64fdeeb
res/drawable-xxhdpi-v4/main_tab_square_selected_ic.png 0x853fb31b
res/drawable-xxhdpi-v4/main_tab_tool_default_ic.png 0xe6bdbb2b
res/drawable-xxhdpi-v4/main_tab_tool_selected_ic.png 0xc436eb9d
res/drawable-xxhdpi-v4/material.png 0x88b2a3b0
res/drawable-xxhdpi-v4/me_received_support_icon.png 0x40e46345
res/drawable-xxhdpi-v4/msg_notice_arrwo.png 0x424767ee
res/drawable-xxhdpi-v4/news_add_comment.png 0x525e5d68
res/drawable-xxhdpi-v4/news_share.png 0xf7f1433f
res/drawable-xxhdpi-v4/official_tag_icon.png 0xab27de92
res/drawable-xxhdpi-v4/pic_select_default_circle_ic.png 0x562686ce
res/drawable-xxhdpi-v4/pic_select_default_ic.png 0x3d1d63ce
res/drawable-xxhdpi-v4/popup_item_top_shadow.png 0x7926cc27
res/drawable-xxhdpi-v4/post_doutu_moment_icon_normal.png 0x5b0db8ec
res/drawable-xxhdpi-v4/post_doutu_moment_icon_pressed.png 0x84f88740
res/drawable-xxhdpi-v4/progress_dialog_ic_close.png 0xab9459ed
res/drawable-xxhdpi-v4/qq_login_ic.png 0xf0de79d
res/drawable-xxhdpi-v4/qq_login_ic_pressed.png 0xff8f2d08
res/drawable-xxhdpi-v4/return_ic.png 0xca2a3fa2
res/drawable-xxhdpi-v4/return_ic_white.png 0xebf29608
res/drawable-xxhdpi-v4/round_rect_cover_bg.png 0x1195f226
res/drawable-xxhdpi-v4/search_ic.png 0x58f11152
res/drawable-xxhdpi-v4/select_flag_ic.png 0x1ea10f1a
res/drawable-xxhdpi-v4/setting_ic.png 0xe711c91e
res/drawable-xxhdpi-v4/setting_ic_white.png 0x20e6fbf5
res/drawable-xxhdpi-v4/share_qq_friend_disable_ic.png 0x9b2de06d
res/drawable-xxhdpi-v4/share_qq_friend_normal_ic.png 0x2cdd9327
res/drawable-xxhdpi-v4/share_qq_friend_pressed_ic.png 0x3757f683
res/drawable-xxhdpi-v4/share_qq_zone_disable_ic.png 0x9e991ec
res/drawable-xxhdpi-v4/share_qq_zone_normal_ic.png 0xc1e44e5f
res/drawable-xxhdpi-v4/share_qq_zone_pressed_ic.png 0x5ba6c16
res/drawable-xxhdpi-v4/share_weixin_friend_disable_ic.png 0x1bf1c64e
res/drawable-xxhdpi-v4/share_weixin_friend_normal_ic.png 0x6d590997
res/drawable-xxhdpi-v4/share_weixin_friend_pressed_ic.png 0x68eeed18
res/drawable-xxhdpi-v4/share_weixin_quan_disable_ic.png 0xeedc2bd2
res/drawable-xxhdpi-v4/share_weixin_quan_normal_ic.png 0x2a9ca622
res/drawable-xxhdpi-v4/share_weixin_quan_pressed_ic.png 0x4bd7ec99
res/drawable-xxhdpi-v4/square_ad_cancel_icon.png 0x8d4bb055
res/drawable-xxhdpi-v4/square_float_menu_close.png 0xeb6410f5
res/drawable-xxhdpi-v4/square_float_menu_default.png 0x7d793248
res/drawable-xxhdpi-v4/square_float_menu_draft.png 0xc46869b4
res/drawable-xxhdpi-v4/square_float_menu_open.png 0x88b2a3b0
res/drawable-xxhdpi-v4/square_item_btn_drop_menu.png 0xa710bd11
res/drawable-xxhdpi-v4/square_me_comment_icon.png 0xa209b2c5
res/drawable-xxhdpi-v4/square_me_ic.png 0xbf8cd00b
res/drawable-xxhdpi-v4/square_submission_ic.png 0x862fcdd0
res/drawable-xxhdpi-v4/square_topic_draft_num.png 0x3ac12bd0
res/drawable-xxhdpi-v4/square_topic_person_num.png 0xfa46a34b
res/drawable-xxhdpi-v4/user_moment_list_loading_ic.png 0x2c2b189e
res/drawable-xxhdpi-v4/user_msg_draft_delete_bg.png 0x98bea6c1
res/drawable-xxxhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0x4f6e087d
res/drawable-xxxhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0xa817850a
res/drawable-xxxhdpi-v4/abc_ic_star_black_16dp.png 0x8f0aa8f4
res/drawable-xxxhdpi-v4/abc_ic_star_black_36dp.png 0xe3e4a114
res/drawable-xxxhdpi-v4/abc_ic_star_black_48dp.png 0xe5fef4dc
res/drawable-xxxhdpi-v4/abc_ic_star_half_black_16dp.png 0x83fb9cd5
res/drawable-xxxhdpi-v4/abc_ic_star_half_black_36dp.png 0x957a7d58
res/drawable-xxxhdpi-v4/abc_ic_star_half_black_48dp.png 0xf65c00be
res/drawable-xxxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0xdbb5b067
res/drawable-xxxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0xd1165fc
res/drawable-xxxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0x3bd11453
res/drawable-xxxhdpi-v4/abc_switch_track_mtrl_alpha.9.png 0x1a7d6c07
res/drawable-xxxhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0x74529d2e
res/drawable/abc_btn_borderless_material.xml 0xf341af1c
res/drawable/abc_btn_check_material.xml 0x789cac73
res/drawable/abc_btn_checkbox_checked_mtrl.xml 0xb26355a5
res/drawable/abc_btn_checkbox_unchecked_mtrl.xml 0x1198a816
res/drawable/abc_btn_colored_material.xml 0x1522b03
res/drawable/abc_btn_default_mtrl_shape.xml 0xa8203eb6
res/drawable/abc_btn_radio_material.xml 0x789cac73
res/drawable/abc_btn_radio_off_mtrl.xml 0x610e3641
res/drawable/abc_btn_radio_on_mtrl.xml 0xf2b6ebb3
res/drawable/abc_cab_background_internal_bg.xml 0x9c5b1555
res/drawable/abc_cab_background_top_material.xml 0x789cac73
res/drawable/abc_dialog_material_background.xml 0x7a5fb308
res/drawable/abc_edit_text_material.xml 0xa62229c0
res/drawable/abc_ic_ab_back_material.xml 0xd47ec561
res/drawable/abc_ic_arrow_drop_right_black_24dp.xml 0x9fc5ea48
res/drawable/abc_ic_clear_material.xml 0xa0e676c5
res/drawable/abc_ic_go_search_api_material.xml 0xa5967839
res/drawable/abc_ic_menu_copy_material.xml 0x19151d4d
res/drawable/abc_ic_menu_cut_material.xml 0xcf451844
res/drawable/abc_ic_menu_overflow_material.xml 0xe9591916
res/drawable/abc_ic_menu_paste_material.xml 0x85567fbd
res/drawable/abc_ic_menu_selectall_material.xml 0x87b5d1a1
res/drawable/abc_ic_menu_share_material.xml 0x1717b2f1
res/drawable/abc_ic_search_api_material.xml 0xc250dd1d
res/drawable/abc_ic_voice_search_api_material.xml 0x828431f3
res/drawable/abc_item_background_holo_dark.xml 0xd1b21c63
res/drawable/abc_item_background_holo_light.xml 0x5c0f0b25
res/drawable/abc_list_selector_background_transition_holo_dark.xml 0xad127204
res/drawable/abc_list_selector_background_transition_holo_light.xml 0xff8319d8
res/drawable/abc_list_selector_holo_dark.xml 0xd3230273
res/drawable/abc_list_selector_holo_light.xml 0x4ca62f47
res/drawable/abc_ratingbar_indicator_material.xml 0xcf9d7d51
res/drawable/abc_ratingbar_material.xml 0xff99e3b7
res/drawable/abc_ratingbar_small_material.xml 0x70b0c6dd
res/drawable/abc_seekbar_thumb_material.xml 0xf5569f09
res/drawable/abc_seekbar_tick_mark_material.xml 0xcda07a80
res/drawable/abc_seekbar_track_material.xml 0xd86c6936
res/drawable/abc_spinner_textfield_background_material.xml 0xddc89de4
res/drawable/abc_switch_thumb_material.xml 0xa1583620
res/drawable/abc_tab_indicator_material.xml 0x3d35ff46
res/drawable/abc_text_cursor_material.xml 0x9fd1fc63
res/drawable/abc_textfield_search_material.xml 0xc3718a4c
res/drawable/bg_hot_material_rank.xml 0xc862a6f1
res/drawable/bg_normal_material_rank.xml 0x9033921d
res/drawable/bg_share_popup_qq_zone_normal.xml 0x23a0c32e
res/drawable/bg_share_popup_qq_zone_pressed.xml 0x9b9a127d
res/drawable/bg_share_popup_qq_zone_selector.xml 0x14df6bcd
res/drawable/bg_share_popup_wx_circle_normal.xml 0xb4a05e89
res/drawable/bg_share_popup_wx_circle_pressed.xml 0x4f1ff6ab
res/drawable/bg_share_popup_wx_circle_selector.xml 0x9c957f14
res/drawable/bg_share_popupwindow.xml 0xa775caf2
res/drawable/bg_square_float_menu_shadow.xml 0xaf908935
res/drawable/bi_btn_blue_bg_selector.xml 0x73be533
res/drawable/bi_btn_del_comment_pic_selector.xml 0x9ecaa6ce
res/drawable/bi_btn_f0f0f0_bg_selector.xml 0xd59700f6
res/drawable/bi_btn_fafafa_bg_selector.xml 0x2b952f34
res/drawable/bi_btn_gray_bd_selector.xml 0xdda56120
res/drawable/bi_btn_gray_bg_selector.xml 0x89679e09
res/drawable/bi_btn_post_comment_selector.xml 0xd5996f99
res/drawable/bi_btn_transparent_bg_selector.xml 0xdc345f51
res/drawable/bi_btn_white_bg_selector.xml 0x79bfcef4
res/drawable/bi_btn_white_bg_yellow_bd_selector.xml 0x445ec86d
res/drawable/bi_btn_yellow_bg_selector.xml 0xc37fc527
res/drawable/bi_comment_add_pic_btn_selector.xml 0xb911bd2c
res/drawable/bi_comment_add_pic_handle_selector.xml 0x445e4599
res/drawable/bi_comment_added_pic_num_bg.xml 0x138b34ee
res/drawable/bi_comment_et_bg.xml 0x3eaea71c
res/drawable/bi_comment_layout_bg.xml 0xb0ffd305
res/drawable/bi_default_bg.xml 0x4a4eb7a4
res/drawable/bi_dialog_bg.xml 0xe7dddd19
res/drawable/bi_dialog_bottom_btn_bg_normal.xml 0x4b2e1cfa
res/drawable/bi_dialog_bottom_btn_bg_pressed.xml 0x46fbb0e6
res/drawable/bi_dialog_bottom_btn_bg_selector.xml 0x2ea7b90d
res/drawable/bi_dialog_center_btn_bg_selector.xml 0x8f2afb17
res/drawable/bi_dialog_left_btn_bg_normal.xml 0x993b02e0
res/drawable/bi_dialog_left_btn_bg_pressed.xml 0x94eeaefc
res/drawable/bi_dialog_left_btn_bg_selector.xml 0xcb2f7cdc
res/drawable/bi_dialog_right_btn_bg_normal.xml 0xa5f4afcc
res/drawable/bi_dialog_right_btn_bg_pressed.xml 0xa82103d0
res/drawable/bi_dialog_right_btn_bg_selector.xml 0xeab35e8b
res/drawable/bi_dialog_top_btn_bg_normal.xml 0xdb127035
res/drawable/bi_dialog_top_btn_bg_pressed.xml 0xd6c7dc29
res/drawable/bi_dialog_top_btn_bg_selector.xml 0x178e7342
res/drawable/bi_divider_bg.xml 0xfaf1ac18
res/drawable/bi_draft_divider.xml 0x211e0842
res/drawable/bi_edit_text_bg_selector.xml 0x1204329
res/drawable/bi_gender_female_bg.xml 0x708ba2c8
res/drawable/bi_gender_male_bg.xml 0xda15f0b2
res/drawable/bi_icon_bg_selector.xml 0x8a407fab
res/drawable/bi_list_divider.xml 0x4a4eb7a4
res/drawable/bi_material_list_bg_selector.xml 0x4624688c
res/drawable/bi_menu_dialog_bg.xml 0x12724946
res/drawable/bi_photo_default_color_drawable.xml 0xaff5d3f5
res/drawable/bi_photo_default_color_drawable_333.xml 0x101123bf
res/drawable/bi_progress_view_determinate_bg.xml 0xb23c47ab
res/drawable/bi_recycleview_divider_bg.xml 0xebc94ac9
res/drawable/bi_square_draft_comment_item_bg_selector.xml 0x38fc3d0a
res/drawable/bi_square_draft_item_bg_selector.xml 0x38fc3d0a
res/drawable/bi_square_draft_item_btn_selector.xml 0x1fede319
res/drawable/bi_square_me_comment_btn_bg_selector.xml 0xf1d97acf
res/drawable/bi_square_post_btn_selector.xml 0xb76fccad
res/drawable/bi_text_gray_bg_selector.xml 0x9bab3b87
res/drawable/bi_toast_bg.xml 0x4568be3d
res/drawable/bi_user_msg_reply_original_selector.xml 0x6875188a
res/drawable/bi_user_msg_unread_original_selector.xml 0x8dfddd5b
res/drawable/bi_video_error_refresh_selector.xml 0x87d1ddb5
res/drawable/btn_doutu_edit_img_reload_selector.xml 0xc263a7f6
res/drawable/btn_edit_photo_wall_bg_selector.xml 0x82112574
res/drawable/btn_sign_bg_selector.xml 0xaf1cde80
res/drawable/btn_signed_bg.xml 0xf4c66e14
res/drawable/cb_bg_color_selector.xml 0x47f1a3ca
res/drawable/cb_doutu_text_selector.xml 0x666d819d
res/drawable/cb_text_color_selector.xml 0x2a41a7be
res/drawable/chart_msg_notice_bg.xml 0x6804ec93
res/drawable/comment_list_reply_btn_selector.xml 0x359a4a30
res/drawable/design_fab_background.xml 0x516623a0
res/drawable/design_snackbar_background.xml 0xd376155f
res/drawable/dialog_icon_btn_bg_selector.xml 0xc0dea3fc
res/drawable/doutu_color_1.xml 0xf34da30d
res/drawable/doutu_color_2.xml 0x2504784b
res/drawable/doutu_color_3.xml 0x4874fc72
res/drawable/doutu_color_4.xml 0x505de472
res/drawable/doutu_color_5.xml 0xd0c54114
res/drawable/doutu_color_6.xml 0x6b108512
res/drawable/doutu_color_7.xml 0x5e0dfd93
res/drawable/doutu_color_8.xml 0x2fc24900
res/drawable/doutu_color_9.xml 0xea12466c
res/drawable/doutu_download_img_selector.xml 0x73be533
res/drawable/doutu_edit_generate_loading_bg.xml 0x8431568d
res/drawable/doutu_head_divider.xml 0xdce31dad
res/drawable/doutu_hot_img_item_divider.xml 0xbb0d4300
res/drawable/doutu_hot_tag_bg.xml 0x14967074
res/drawable/doutu_img_generate_loading_pb.xml 0x5a2e0878
res/drawable/doutu_img_loading_pb.xml 0xaeacb44b
res/drawable/doutu_modify_img_selector.xml 0xc37fc527
res/drawable/doutu_share_circle_selector.xml 0x8f4f9812
res/drawable/doutu_share_qq_selector.xml 0x208ea497
res/drawable/doutu_share_wx_selector.xml 0xbbce759
res/drawable/doutu_sort_search_bg.xml 0x4d3d72d9
res/drawable/doutu_stroke_bg.xml 0xb457db39
res/drawable/draft_received_support_bg.xml 0xbeb0cf40
res/drawable/gridview_shadow_selector.xml 0x75553bad
res/drawable/image_end_progressbar.xml 0x3cf0a194
res/drawable/image_start_progressbar.xml 0xc0d74790
res/drawable/imageselector_title_right_bg.xml 0x2ab04373
res/drawable/jc_click_error_selector.xml 0xd7e65643
res/drawable/jc_click_pause_selector.xml 0xde204a36
res/drawable/jc_click_play_selector.xml 0xca956807
res/drawable/jc_dialog_progress.xml 0x6ff8fbd7
res/drawable/jc_dialog_progress_bg.xml 0x2811a1ef
res/drawable/jc_loading.xml 0xe56f088b
res/drawable/jc_progress.xml 0x2bef7039
res/drawable/jc_seek_progress.xml