kn10-uid-734022.apk 3% Antivirus software(1/32) found malware! - VirSCAN.org - Free Multi-Engine Online Virus Scanner v1.02, Supports 47 AntiVirus Engines!

Main Menu

API

uploader for windows(test)

Powered By

File information

File Name :kn10-uid-734022.apk (File not down)

File Size :1843317 byte

File Type :Zip archive data

MD5:4df5df26e03859f1c6f3b3bfc305194b

SHA1:ae34f474f8a1925b0415417dd213887ddb749e5c

SHA256:8e3b7b452a9a29135c2ba0a9f1b7c0becc741f9a531808edde86b28e83f955f6

SSDEEP:49152:phATsT2qXHEzHEX/Qyq2RNVL0nhfX0isZG84pw8iST8kfaq9VcjJPi:phAQT2qXkzkX/QyLRNVL8hfX0isZmpaC

扫描结果
权限
文件行为分析

Scanner results

Scanner results:3%Antivirus software(1/32)found malware!

Behavior analysis report: Habo file analysis

Time: 2017-06-25 14:18:26 (CST)

Scanner	Engine Ver	Sig Ver	Sig Date	Scan result	Time
antiy	AVL SDK 2.0		1970-01-01	Found nothing	5
asquared	9.0.0.4799	9.0.0.4799	2015-03-08	Found nothing	2
avast	170303-1	4.7.4	2017-03-03	Found nothing	60
avg	2109/14096	10.0.1405	2017-06-23	Found nothing	60
baidu	2.0.1.0	4.1.3.52192	2.0.1.0	Found nothing	5
baidusd	1.0	1.0	2017-03-22	Found nothing	2
bitdefender	7.58879	7.90123	2015-01-16	Found nothing	60
clamav	23500	0.97.5	2017-06-23	Found nothing	60
drweb	5.0.2.3300	5.0.1.1	2017-06-18	Found nothing	60
fortinet	49.726, 49.726, 49.726	5.4.233	2017-06-25	Found nothing	60
fprot	4.6.2.117	6.5.1.5418	2016-02-05	Found nothing	60
fsecure	2015-08-01-02	9.13	2015-08-01	Found nothing	60
gdata	25.13029	25.13029	2017-06-25	Found nothing	12
ikarus	1.06.01	V1.32.31.0	2016-11-28	Found nothing	60
jiangmin	16.0.100	1.0.0.0	2017-06-23	Found nothing	2
kaspersky	5.5.33	5.5.33	2014-04-01	Found nothing	60
kingsoft	2.1	2.1	2017-06-24	Found nothing	5
mcafee	8261	5400.1158	2016-08-18	Found nothing	60
nod32	1777	3.0.21	2015-06-12	Found nothing	60
panda	9.05.01	9.05.01	2017-06-24	Found nothing	4
pcc	13.302.06	9.500-1005	2017-03-27	Found nothing	60
qh360	1.0.1	1.0.1	1.0.1	Found nothing	3
qqphone	1.0.0.0	1.0.0.0	2015-12-30	Found nothing	60
quickheal	14.00	14.00	2017-06-24	Android.Agent.GEN1478	3
rising	26.28.00.01	26.28.00.01	2016-07-18	Found nothing	6
sophos	5.32	3.65.2	2016-10-10	Found nothing	60
symantec	20151230.005	1.3.0.24	2015-12-30	Found nothing	60
tachyon	9.9.9	9.9.9	2013-12-27	Found nothing	4
thehacker	6.8.0.5	6.8.0.5	2017-06-23	Found nothing	3
tws	17.47.17308	1.0.2.2108	2017-06-24	Found nothing	16
vba	3.12.29.5 beta	3.12.29.5 beta	2017-06-23	Found nothing	60
virusbuster	15.0.985.0	5.5.2.13	2014-12-05	Found nothing	60

■Heuristic/Suspicious ■Exact

NOTICE: Results are not 100% accurate and can be reported as a false positive by some scannerswhen and if malware is found. Please judge these results for yourself.

Last Scanned File List

File Name (File Size)	Scan results (Suspicious degree)
00Computer_Troubleshooting1.4(64819 )	Found nothing
00Computer_Monitor_Keylogger5.0.1.5(420697 )	Found DeepScan:Generic.Mira.CF26E316 (20%)
00Computer_History_Viewer1.1(420124 )	Found DeepScan:Generic.Mira.CF26E316 (20%)
00Computer_Census3.00.0037(2286622 )	Found GrayWare/Win32.Kryptik.BQX (8%)
00Complete_Cleanup5.23(420150 )	Found DeepScan:Generic.Mira.CF26E316 (20%)
00CompleteInternet3.1.0(99916 )	Found nothing
00Compaq_Laptop_to_Hotspot_Converter7.8(420124 )	Found DeepScan:Generic.Mira.CF26E316 (20%)
00Compaq_Drivers_Update_Utility***(420140 )	Found DeepScan:Generic.Mira.CF26E316 (18%)
Heroes.of.Might.Magic.3.Collections.modifier.rar(927596 )	Found a.gray.Nebula.a (2%)
00Commander智能计算王1.0(420673 )	Found DeepScan:Generic.Mira.CF26E316 (20%)
00CommandBurner3.5.0(809285 )	Found Gen:Trojan.ShellIni.XKZcau@EAwci (22%)
7z.exe(475648 )	Found GrayWare/Win32.Generic (2%)
00CommHelperv1.01(420671 )	Found DeepScan:Generic.Mira.CF26E316 (20%)
弹窗广告屏蔽.exe(143360 )	Found nothing
00Comic_Seer2.51-4(619 )	Found Trojan/WinLNK.Agent (8%)
00Comfort_Keys_Lite7.4.1.0(420691 )	Found DeepScan:Generic.Mira.CF26E316 (22%)
00Combofix_绿色免费版v17.4.16.1(66383 )	Found Trojan/Win64.Pakes.l (8%)
dabapi.dll(14336 )	Found nothing
00Combofix_官方版v17.1.13.1(420691 )	Found DeepScan:Generic.Mira.CF26E316 (20%)
00Combofix_官方最新版v***.1(893256 )	Found nothing

权限列表
许可名称	信息
android.permission.READ_PHONE_STATE	读取电话状态
android.permission.INTERNET	连接网络（2G或3G）
android.permission.WRITE_EXTERNAL_STORAGE	写外部存储器（如：SD卡）
android.permission.CAMERA	访问照相机设备
android.permission.VIBRATE	允许设备震动
android.permission.READ_EXTERNAL_STORAGE	读外部存储器（如：SD卡）
android.permission.MOUNT_UNMOUNT_FILESYSTEMS	挂载、反挂载外部文件系统
android.permission.RECORD_AUDIO	录音（使用AudioRecord）
android.permission.SYSTEM_ALERT_WINDOW	显示系统窗口
android.permission.FLASHLIGHT	访问闪光灯

文件信息

安全评分 :

基本信息
MD5:4df5df26e03859f1c6f3b3bfc305194b
包名:com.video
最低运行环境:Android 2.2.x
版权:ipuser

关键行为
行为描述:	跨进程写入数据
详情信息:	TargetProcess = C:\WINDOWS\system32\sort.exe, WriteAddress = 0x001e0000, Size = 0x00056200 TargetPID = 0x0000098c
	TargetProcess = C:\WINDOWS\system32\sort.exe, WriteAddress = 0x00910000, Size = 0x00056300 TargetPID = 0x0000098c
行为描述:	常规加载驱动
详情信息:	\??\C:\Program Files\Common Files\System\uiprotect.sys
行为描述:	杀掉进程
详情信息:	C:\WINDOWS\explorer.exe
行为描述:	创建远程线程
详情信息:	TargetProcess: sort.exe, InheritedFromPID = 2224, ProcessID = 2444, ThreadID = 2456, StartAddress = 00914FB0, Parameter = 00910000
行为描述:	获取User基本信息
详情信息:	Level = 2.
行为描述:	获取TickCount值
详情信息:	TickCount = 5443625, SleepMilliseconds = 250.
行为描述:	设置特殊文件夹属性
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
	C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
	C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
	C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
	C:\Documents and Settings\Administrator\Local Settings\History
	C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
	C:\Documents and Settings\Administrator\Cookies
	C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds Cache
	C:\Documents and Settings\Administrator\IETldCache
行为描述:	修改注册表_启动项
详情信息:	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\0OverlayIcon\

进程行为
行为描述:	隐藏窗口创建进程
详情信息:	ImagePath = , CmdLine = cmd /c start C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\\PanDownload.exe
	ImagePath = , CmdLine = cmd /c start C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\\LockPage.exe
	ImagePath = , CmdLine = C:\Windows\system32\sort.exe
行为描述:	创建进程
详情信息:	[0x000003f4]ImagePath = C:\WINDOWS\system32\cmd.exe, CmdLine = cmd /c start C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\\PanDownload.exe
	[0x0000081c]ImagePath = C:\WINDOWS\system32\cmd.exe, CmdLine = cmd /c start C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\\LockPage.exe
	[0x0000098c]ImagePath = C:\WINDOWS\system32\sort.exe, CmdLine = C:\Windows\system32\sort.exe
	[0x00000a24]ImagePath = C:\WINDOWS\system32\verclsid.exe, CmdLine = /S /C {2559A1F4-21D7-11D4-BDAF-00C04F60B9F0} /I {000214E6-0000-0000-C000-000000000046} /X 0x401
	[0x00000a44]ImagePath = C:\WINDOWS\system32\verclsid.exe, CmdLine = /S /C {2559A1F5-21D7-11D4-BDAF-00C04F60B9F0} /I {000214E6-0000-0000-C000-000000000046} /X 0x401
行为描述:	创建新文件进程
详情信息:	[0x00000830]ImagePath = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\LockPage.exe, CmdLine = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\\LockPage.exe
行为描述:	跨进程写入数据
详情信息:	TargetProcess = C:\WINDOWS\system32\sort.exe, WriteAddress = 0x001e0000, Size = 0x00056200 TargetPID = 0x0000098c
	TargetProcess = C:\WINDOWS\system32\sort.exe, WriteAddress = 0x00910000, Size = 0x00056300 TargetPID = 0x0000098c
行为描述:	创建远程线程
详情信息:	TargetProcess: sort.exe, InheritedFromPID = 2224, ProcessID = 2444, ThreadID = 2456, StartAddress = 00914FB0, Parameter = 00910000
行为描述:	枚举进程
详情信息:	N/A
行为描述:	杀掉进程
详情信息:	C:\WINDOWS\explorer.exe
行为描述:	创建本地线程
详情信息:	TargetProcess: LockPage.exe, InheritedFromPID = 2076, ProcessID = 2096, ThreadID = 2112, StartAddress = 77DC845A, Parameter = 00000000
	TargetProcess: iexplore.exe, InheritedFromPID = 120, ProcessID = 2116, ThreadID = 2248, StartAddress = 03021890, Parameter = 00000000
	TargetProcess: explorer.exe, InheritedFromPID = 612, ProcessID = 2224, ThreadID = 2252, StartAddress = 01101890, Parameter = 00000000
	TargetProcess: explorer.exe, InheritedFromPID = 612, ProcessID = 2224, ThreadID = 2256, StartAddress = 01101EB0, Parameter = 00000000
	TargetProcess: explorer.exe, InheritedFromPID = 612, ProcessID = 2224, ThreadID = 2280, StartAddress = 77E56C7D, Parameter = 00108438
	TargetProcess: explorer.exe, InheritedFromPID = 612, ProcessID = 2224, ThreadID = 2284, StartAddress = 769AE43B, Parameter = 0010B030
	TargetProcess: explorer.exe, InheritedFromPID = 612, ProcessID = 2224, ThreadID = 2288, StartAddress = 77F56ED3, Parameter = 0007FDBC
	TargetProcess: explorer.exe, InheritedFromPID = 612, ProcessID = 2224, ThreadID = 2292, StartAddress = 7C947EBB, Parameter = 00000000
	TargetProcess: explorer.exe, InheritedFromPID = 612, ProcessID = 2224, ThreadID = 2296, StartAddress = 7C930230, Parameter = 00000000
	TargetProcess: explorer.exe, InheritedFromPID = 612, ProcessID = 2224, ThreadID = 2300, StartAddress = 7C949B6F, Parameter = 00000000
	TargetProcess: explorer.exe, InheritedFromPID = 612, ProcessID = 2224, ThreadID = 2304, StartAddress = 7D5D9849, Parameter = 00000000
	TargetProcess: explorer.exe, InheritedFromPID = 612, ProcessID = 2224, ThreadID = 2312, StartAddress = 77F56ED3, Parameter = 017CF4D4
	TargetProcess: iexplore.exe, InheritedFromPID = 120, ProcessID = 2116, ThreadID = 2316, StartAddress = 7C930230, Parameter = 00000000
	TargetProcess: iexplore.exe, InheritedFromPID = 120, ProcessID = 2116, ThreadID = 2320, StartAddress = 77E56C7D, Parameter = 00204E70
	TargetProcess: explorer.exe, InheritedFromPID = 612, ProcessID = 2224, ThreadID = 2324, StartAddress = 7D5DAD7C, Parameter = 0000028C

文件行为
行为描述:	创建文件
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\krnln.fnr
	C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\shell.fne
	C:\Documents and Settings\Administrator\Local Settings\Temp\PanDownload.exe
	C:\Documents and Settings\Administrator\Local Settings\Temp\LockPage.exe
	C:\Program Files\Common Files\System\iminute.ini
	C:\Program Files\Common Files\System\config.dat
	C:\Documents and Settings\Administrator\Local Settings\Temp\config.dat
	C:\Program Files\Common Files\System\safe.dat
	C:\Documents and Settings\Administrator\Local Settings\Temp\safe.dat
	C:\Program Files\Common Files\System\safemonn32.dll
	C:\Documents and Settings\Administrator\Local Settings\Temp\unit.bat
	C:\Program Files\Common Files\System\safemon.dat
	C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{B29B420D-5911-11E7-91BE-7B****28}.dat
	C:\Documents and Settings\Administrator\Local Settings\Temp\~DFDAEE.tmp
	C:\Program Files\Common Files\System\ado\hehe.dat
行为描述:	创建可执行文件
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\krnln.fnr
	C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\shell.fne
	C:\Documents and Settings\Administrator\Local Settings\Temp\PanDownload.exe
	C:\Documents and Settings\Administrator\Local Settings\Temp\LockPage.exe
	C:\Program Files\Common Files\System\safemonn32.dll
	C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
行为描述:	查找文件
详情信息:	FileName = C:\WINDOWS
	FileName = C:\WINDOWS\system32
	FileName = C:\WINDOWS\system32\cmd.exe
	FileName = C:\Documents and Settings
	FileName = C:\Documents and Settings\Administrator
	FileName = C:\Documents and Settings\Administrator\Local Settings
	FileName = C:\Documents and Settings\Administrator\Local Settings\Temp
	FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%
	FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump
	FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\PanDownload_v1.3.1
	FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\PanDownload_v1.3.1\PanDownload_v1.3.1
	FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\PanDownload_v1.3.1\PanDownload_v1.3.1\PanDownload
	FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\PanDownload.exe
	FileName = C:\DOCUME~1
	FileName = C:\DOCUME~1\ADMINI~1
行为描述:	删除文件
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temp\~DFDAEE.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6TLOMATB\favicon[1].ico
	C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
	C:\Documents and Settings\Administrator\Local Settings\Temp\~DF3ED6.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\~DF3F3F.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\~DF40BC.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\~DF40E0.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\~DF4453.tmp
	C:\Documents and Settings\Administrator\Local Settings\Temp\~DF4465.tmp
行为描述:	修改BAT脚本文件
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temp\unit.bat ---> Offset = 0
行为描述:	设置特殊文件夹属性
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
	C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
	C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
	C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
	C:\Documents and Settings\Administrator\Local Settings\History
	C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
	C:\Documents and Settings\Administrator\Cookies
	C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds Cache
	C:\Documents and Settings\Administrator\IETldCache
行为描述:	修改文件内容
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\krnln.fnr ---> Offset = 0
	C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\shell.fne ---> Offset = 0
	C:\Documents and Settings\Administrator\Local Settings\Temp\PanDownload.exe ---> Offset = 0
	C:\Documents and Settings\Administrator\Local Settings\Temp\LockPage.exe ---> Offset = 0
	C:\Program Files\Common Files\System\iminute.ini ---> Offset = 0
	C:\Program Files\Common Files\System\iminute.ini ---> Offset = 19
	C:\Program Files\Common Files\System\config.dat ---> Offset = 0
	C:\Documents and Settings\Administrator\Local Settings\Temp\config.dat ---> Offset = 0
	C:\Program Files\Common Files\System\safe.dat ---> Offset = 0
	C:\Documents and Settings\Administrator\Local Settings\Temp\safe.dat ---> Offset = 0
	C:\Program Files\Common Files\System\safemonn32.dll ---> Offset = 0
	C:\Program Files\Common Files\System\safemon.dat ---> Offset = 0
	C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{B29B420D-5911-11E7-91BE-7B****28}.dat ---> Offset = 512
	C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{B29B420D-5911-11E7-91BE-7B****28}.dat ---> Offset = 0
	C:\Documents and Settings\Administrator\Local Settings\Temp\~DFDAEE.tmp ---> Offset = 16383

网络行为
行为描述:	联网打开网址
详情信息:	InternetOpenUrlA: http://ww****cn/, hInternet = 0x00cc0004, Flags = 0x04000000
	InternetOpenUrlA: http://ci****om/ip2city.asp, hInternet = 0x00cc0004, Flags = 0x04000000
	InternetOpenUrlA: http://ww****om/, hInternet = 0x00cc0004, Flags = 0x04000000
	InternetOpenUrlA: http://ww****om/getwinmm.php?type=1&compName=COMPUTER&visiteNow=03:17:19 &code=f44048e7&ip=&sys=Microsoft Windows XP 5.1 32bit&ver=5.3&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb, hInternet = 0x00cc0004, Flags = 0x04000000
	InternetOpenUrlA: http://ww****om/insertCompdata.php?&compName=COMPUTER&sys=Microsoft Windows XP 5.1 32bit&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb, hInternet = 0x00cc0004, Flags = 0x04000000
	InternetOpenUrlA: http://ww****om/countcomp.php?md5=f750c487afa08b09dfd169ccf45e22fb&compName=COMPUTER&setuptime=2017-06-25&qq=s2002108&sys=Microsoft Windows XP 5.1 32bit&ver=5.3&usever=4.0&domain=http://www.woniulock.com/, hInternet = 0x00cc0004, Flags = 0x04000000
	InternetOpenUrlA: http://ww****om/taobaoke.php?domain=http://www.woniulock.com/, hInternet = 0x00cc0004, Flags = 0x04000000
	InternetOpenUrlA: http://ww****om/visiturl.php?qq=s2002108, hInternet = 0x00cc0004, Flags = 0x04000000
	InternetOpenUrlA: http://ww****om/getMd5Ver.php?md5=f750c487afa08b09dfd169ccf45e22fb, hInternet = 0x00cc0004, Flags = 0x04000000
	InternetOpenUrlA: http://ww****om/getIdByMd5.php?md5=f750c487afa08b09dfd169ccf45e22fb, hInternet = 0x00cc0004, Flags = 0x04000000
行为描述:	下载文件
详情信息:	URLDownloadToFileW: http://ww****om/favicon.ico ---> C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
	C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
行为描述:	连接指定站点
详情信息:	InternetConnectA: ServerName = ww****om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x00000000
	InternetConnectA: ServerName = ww****cn, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x04000000
	InternetConnectA: ServerName = ci****om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x04000000
	InternetConnectA: ServerName = ww****om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x04000000
行为描述:	打开HTTP连接
详情信息:	InternetOpenA: UserAgent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; KB974489), hSession = 0x00cc0004
	InternetOpenA: UserAgent: http://www.ip.cn/, hSession = 0x00cc0004
	InternetOpenA: UserAgent: http://city.ip138.com/ip2city.asp, hSession = 0x00cc0004
	InternetOpenA: UserAgent: http://www.ipchicken.com/, hSession = 0x00cc0004
	InternetOpenA: UserAgent: http://www.woniulock.com/getwinmm.php?type=1&compName=COMPUTER&visiteNow=03:17:19 &code=f44048e7&ip=&sys=Microsoft Windows XP 5.1 32bit&ver=5.3&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb, hSession = 0x00cc0
	InternetOpenA: UserAgent: http://www.woniulock.com/insertCompdata.php?&compName=COMPUTER&sys=Microsoft Windows XP 5.1 32bit&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb, hSession = 0x00cc0004
	InternetOpenA: UserAgent: http://www.woniulock.com/countcomp.php?md5=f750c487afa08b09dfd169ccf45e22fb&compName=COMPUTER&setuptime=2017-06-25&qq=s2002108&sys=Microsoft Windows XP 5.1 32bit&ver=5.3&usever=4.0&domain=http://www.woniulock.com/, hSession = 0x00cc0
	InternetOpenA: UserAgent: http://www.woniulock.com/taobaoke.php?domain=http://www.woniulock.com/, hSession = 0x00cc0004
	InternetOpenA: UserAgent: http://www.woniulock.com/visiturl.php?qq=s2002108, hSession = 0x00cc0004
	InternetOpenA: UserAgent: http://www.woniulock.com/getMd5Ver.php?md5=f750c487afa08b09dfd169ccf45e22fb, hSession = 0x00cc0004
	InternetOpenA: UserAgent: download, hSession = 0x00cc0004
	InternetOpenA: UserAgent: http://www.woniulock.com/getIdByMd5.php?md5=f750c487afa08b09dfd169ccf45e22fb, hSession = 0x00cc0004
行为描述:	建立到一个指定的套接字连接
详情信息:	URL: ww**om, IP: .133.40.**:80, SOCKET = 0x000005d0
	URL: ww**cn, IP: .133.40.**:80, SOCKET = 0x00000554
	URL: ww**cn, IP: .133.40.**:80, SOCKET = 0x000004bc
	URL: ci**om, IP: .133.40.**:80, SOCKET = 0x000004bc
	URL: ww**cn, IP: .133.40.**:80, SOCKET = 0x00000594
	URL: ww**cn, IP: .133.40.**:80, SOCKET = 0x000005d4
	URL: ww**cn, IP: .133.40.**:80, SOCKET = 0x000005d0
	URL: ww**cn, IP: .133.40.**:80, SOCKET = 0x0000059c
	URL: ww**cn, IP: .133.40.**:80, SOCKET = 0x000005dc
	URL: ci**om, IP: .133.40.**:80, SOCKET = 0x000005c8
	URL: ww**om, IP: .133.40.**:80, SOCKET = 0x000005c8
	URL: ww**om, IP: .133.40.**:80, SOCKET = 0x000005e4
	URL: ww**om, IP: .133.40.**:80, SOCKET = 0x000005dc
	URL: ww**om, IP: .133.40.**:80, SOCKET = 0x000005e0
	URL: ww**om, IP: .133.40.**:80, SOCKET = 0x000005b8
行为描述:	读取网络文件
详情信息:	hFile = 0x00cc000c, BytesToRead =2048, BytesRead = 2048.
	hFile = 0x00cc000c, BytesToRead =4096, BytesRead = 4096.
行为描述:	发送HTTP包
详情信息:	GET /favicon.ico HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; KB974489) Host: ww****om Connection: Keep-Alive
	GET / HTTP/1.1 User-Agent: http://www.ip.cn/ Host: ww****cn
	GET /ip2city.asp HTTP/1.1 User-Agent: http://city.ip138.com/ip2city.asp Host: ci****om
	GET / HTTP/1.1 User-Agent: http://www.ipchicken.com/ Host: ww****om
	GET /getwinmm.php?type=1&compName=COMPUTER&visiteNow=03:17:19%20&code=f44048e7&ip=&sys=Microsoft%20Windows%20XP%205.1%2032bit&ver=5.3&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb HTTP/1.1 User-Agent: http://www.woniulock.com/getwinmm.php?type=1&compName=COMPUTER&visiteNow=03:17:19 &code=f44048e7&ip=&sys=Microsoft Windows XP 5.1 32bit&ver=5.3&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb Host: ww****om
	GET /insertCompdata.php?&compName=COMPUTER&sys=Microsoft%20Windows%20XP%205.1%2032bit&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb HTTP/1.1 User-Agent: http://www.woniulock.com/insertCompdata.php?&compName=COMPUTER&sys=Microsoft Windows XP 5.1 32bit&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb Host: ww****om
	GET /countcomp.php?md5=f750c487afa08b09dfd169ccf45e22fb&compName=COMPUTER&setuptime=2017-06-25&qq=s2002108&sys=Microsoft%20Windows%20XP%205.1%2032bit&ver=5.3&usever=4.0&domain=http://www.woniulock.com/ HTTP/1.1 User-Agent: http://www.woniulock.com/countcomp.php?md5=f750c487afa08b09dfd169ccf45e22fb&compName=COMPUTER&setuptime=2017-06-25&qq=s2002108&sys=Microsoft Windows XP 5.1 32bit&ver=5.3&usever=4.0&domain=http://www.woniulock.com/ Host: ww****om
	GET /taobaoke.php?domain=http://www.woniulock.com/ HTTP/1.1 User-Agent: http://www.woniulock.com/taobaoke.php?domain=http://www.woniulock.com/ Host: ww****om
	GET /visiturl.php?qq=s2002108 HTTP/1.1 User-Agent: http://www.woniulock.com/visiturl.php?qq=s2002108 Host: ww****om
	GET /getMd5Ver.php?md5=f750c487afa08b09dfd169ccf45e22fb HTTP/1.1 User-Agent: http://www.woniulock.com/getMd5Ver.php?md5=f750c487afa08b09dfd169ccf45e22fb Host: ww****om
	HEAD /downfile/loadfor32_2.0.rar HTTP/1.1 User-Agent: download Host: ww****om Content-Length: 0 Cache-Control: no-cache
	HEAD /downfile/loadfor32_2.0.rar HTTP/1.1 User-Agent: download Host: ww****om Content-Length: 0 Cache-Control: no-cache Connection: Keep-Alive
	GET /getIdByMd5.php?md5=f750c487afa08b09dfd169ccf45e22fb HTTP/1.1 User-Agent: http://www.woniulock.com/getIdByMd5.php?md5=f750c487afa08b09dfd169ccf45e22fb Host: ww****om
行为描述:	打开HTTP请求
详情信息:	HttpOpenRequestA: ww****om:80/favicon.ico, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x00600010
	HttpOpenRequestA: ww****cn:80/, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
	HttpOpenRequestA: ci****om:80/ip2city.asp, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
	HttpOpenRequestA: ww****om:80/, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
	HttpOpenRequestA: ww****om:80/getwinmm.php?type=1&compname=computer&visitenow=03:17:19 &code=f44048e7&ip=&sys=microsoft windows xp 5.1 32bit&ver=5.3&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
	HttpOpenRequestA: ww****om:80/insertcompdata.php?&compname=computer&sys=microsoft windows xp 5.1 32bit&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
	HttpOpenRequestA: ww****om:80/countcomp.php?md5=f750c487afa08b09dfd169ccf45e22fb&compname=computer&setuptime=2017-06-25&qq=s2002108&sys=microsoft windows xp 5.1 32bit&ver=5.3&usever=4.0&domain=http://www.woniulock.com/, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
	HttpOpenRequestA: ww****om:80/taobaoke.php?domain=http://www.woniulock.com/, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
	HttpOpenRequestA: ww****om:80/visiturl.php?qq=s2002108, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
	HttpOpenRequestA: ww****om:80/getmd5ver.php?md5=f750c487afa08b09dfd169ccf45e22fb, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
	HttpOpenRequestA: ww****om:80/downfile/loadfor32_2.0.rar, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: HEAD, Referer: , Flags = 0x80000000
	HttpOpenRequestA: ww****om:80/getidbymd5.php?md5=f750c487afa08b09dfd169ccf45e22fb, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
行为描述:	按名称获取主机地址
详情信息:	GetAddrInfoW: ww****om
	GetAddrInfoW: ww****cn
	GetAddrInfoW: ci****om

注册表行为
行为描述:	修改注册表
详情信息:	\REGISTRY\USER\S-*\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\PanDownload.exe
	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8D6E9E7B-57C4-4080-AAAE-5DC03C45B9D7}\InProcServer32\
	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\MyOverlayIcon\
	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}\InprocServer32\
	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}\InprocServer32\
	\REGISTRY\USER\S-*\Software\Microsoft\Windows NT\CurrentVersion\ProductName
	\REGISTRY\USER\S-*\Software\Microsoft\Windows NT\CurrentVersion\CurrentVersion
	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{1EA4DBF0-3C3B-11CF-810C-00AA00389B71}\1.1\0\win32\
	\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Explorer\FaultCount
	\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Explorer\FaultTime
	\REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\Main\Window_Placement
	\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{61066b64-7a09-11e4-91b2-806d6172696f}\Generation
	\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{67ff5543-c5c9-11e0-9f6d-806d6172696f}\Generation
	\REGISTRY\USER\S-*\SessionInformation\ProgramCount
	\REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\Desktop\Components\0\Position
行为描述:	删除注册表键值
详情信息:	\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer
	\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL
	\REGISTRY\MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW\DWFileTreeRoot
	\REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\0\Expiration
	\REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\1\Expiration
行为描述:	修改注册表_服务项
详情信息:	\REGISTRY\MACHINE\SYSTEM\ControlSet002\Services\reload\Start
	\REGISTRY\MACHINE\SYSTEM\ControlSet002\Services\reload\ImagePath
行为描述:	删除注册表键
详情信息:	\REGISTRY\MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW\
行为描述:	修改注册表_启动项
详情信息:	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\0OverlayIcon\

其他行为
行为描述:	创建互斥体
详情信息:	CTF.LBES.MutexDefaultS-*
	CTF.Compart.MutexDefaultS-*
	CTF.Asm.MutexDefaultS-*
	CTF.Layouts.MutexDefaultS-*
	CTF.TMD.MutexDefaultS-*
	CTF.TimListCache.FMPDefaultS-MUTEX.DefaultS-
	Local\ZonesCounterMutex
	Local\ZoneAttributeCacheCounterMutex
	Local\ZonesCacheCounterMutex
	Local\ZonesLockedCacheCounterMutex
	MSCTF.Shared.MUTEX.ELH
	MSCTF.Shared.MUTEX.EAI
	oleacc-msaa-loaded
	Local\RSS Eventing Connection Database Mutex 00000844
	Local\Feed Eventing Shared Memory Mutex S-*
行为描述:	创建事件对象
详情信息:	EventName = DINPUTWINMM
	EventName = Wait For Buffer Return
	EventName = MSCTF.SendReceive.Event.EAI.IC
	EventName = MSCTF.SendReceiveConection.Event.EAI.IC
	EventName = _fCanRegisterWithShellService
	EventName = Local\RSS Eventing Event Event 00000844
	EventName = IEFrame.EventCheckDefaultBrowser
	EventName = Local\Feed Arbitration Lock Event [ Process : 0x00000844 ]
	EventName = Local\Feed Arbitration Unlock Event [ Process : 0x00000844 ]
	EventName = Global\crypt32LogoffEvent
	EventName = CTF.ThreadMarshalInterfaceEvent.000008F0.00000000.00000000
	EventName = CTF.ThreadMIConnectionEvent.000008F0.00000000.00000000
	EventName = MSCTF.SendReceive.Event.API.IC
	EventName = MSCTF.SendReceiveConection.Event.API.IC
	EventName = CTF.ThreadMarshalInterfaceEvent.000008F0.00000000.00000001
行为描述:	常规加载驱动
详情信息:	\??\C:\Program Files\Common Files\System\uiprotect.sys
行为描述:	查找指定窗口
详情信息:	NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,]
	NtUserFindWindowEx: [Class,Window] = [CicLoaderWndClass,]
	NtUserFindWindowEx: [Class,Window] = [UIMainFrame,]
	NtUserFindWindowEx: [Class,Window] = [Proxy Desktop,]
	NtUserFindWindowEx: [Class,Window] = [BaseBar,ChanApp]
	NtUserFindWindowEx: [Class,Window] = [SysListView32,]
	NtUserFindWindowEx: [Class,Window] = [SHELLDLL_DefView,]
	NtUserFindWindowEx: [Class,Window] = [,hookforbrowser]
	NtUserFindWindowEx: [Class,Window] = [Static,]
	NtUserFindWindowEx: [Class,Window] = [,xxxx_xxxx]
	NtUserFindWindowEx: [Class,Window] = [MS_AutodialMonitor,]
	NtUserFindWindowEx: [Class,Window] = [MS_WebCheckMonitor,]
	NtUserFindWindowEx: [Class,Window] = [OleMainThreadWndClass,]
	NtUserFindWindowEx: [Class,Window] = [SystemTray_Main,]
	NtUserFindWindowEx: [Class,Window] = [CSCHiddenWindow,]
行为描述:	打开事件
详情信息:	HookSwitchHookEnabledEvent
	_fCanRegisterWithShellService
	\SECURITY\LSA_AUTHENTICATION_INITIALIZED
	CTF.ThreadMIConnectionEvent.000007B4.00000000.00000052
	CTF.ThreadMarshalInterfaceEvent.000007B4.00000000.00000052
	MSCTF.SendReceiveConection.Event.ELH.IC
	MSCTF.SendReceive.Event.ELH.IC
	MSFT.VSA.COM.DISABLE.2224
	MSFT.VSA.IEC.STATUS.6c736db0
	Global\SvcctrlStartEvent_A3752DX
	Local\RSS Eventing Event Event 00000844
	msgina: ShellReadyEvent
	\INSTALLATION_SECURITY_HOLD
	Global\crypt32LogoffEvent
	CTF.ThreadMIConnectionEvent.000008F0.00000000.00000000
行为描述:	获取User基本信息
详情信息:	Level = 2.
行为描述:	获取TickCount值
详情信息:	TickCount = 5443625, SleepMilliseconds = 250.
行为描述:	调整进程token权限
详情信息:	SE_LOAD_DRIVER_PRIVILEGE
	SE_DEBUG_PRIVILEGE
	SE_ASSIGNPRIMARYTOKEN_PRIVILEGE
	SE_AUDIT_PRIVILEGE
	SE_BACKUP_PRIVILEGE
	SE_CHANGE_NOTIFY_PRIVILEGE
	SE_CREATE_PAGEFILE_PRIVILEGE
	SE_CREATE_PERMANENT_PRIVILEGE
	SE_CREATE_TOKEN_PRIVILEGE
	SE_INC_BASE_PRIORITY_PRIVILEGE
	SE_INCREASE_QUOTA_PRIVILEGE
	SE_LOCK_MEMORY_PRIVILEGE
	SE_PROF_SINGLE_PROCESS_PRIVILEGE
	SE_REMOTE_SHUTDOWN_PRIVILEGE
	SE_RESTORE_PRIVILEGE
行为描述:	枚举窗口
详情信息:	N/A
行为描述:	可执行文件签名信息
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\krnln.fnr(签名验证: 未通过)
	C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\shell.fne(签名验证: 未通过)
	C:\Documents and Settings\Administrator\Local Settings\Temp\PanDownload.exe(签名验证: 未通过)
	C:\Documents and Settings\Administrator\Local Settings\Temp\LockPage.exe(签名验证: 未通过)
	C:\Program Files\Common Files\System\safemonn32.dll(签名验证: 未通过)
	C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico(签名验证: 未通过)
行为描述:	调用Sleep函数
详情信息:	[1]: MilliSeconds = 250.
行为描述:	隐藏指定窗口
详情信息:	[Window,Class] = [xxxx_xxxx,#32770]
	[Window,Class] = [,BrowserFrameGripperClass]
	[Window,Class] = [,UIMainFrame]
行为描述:	可执行文件MD5
详情信息:	C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\krnln.fnr ---> 97c8fe752e354b2945e4c593a87e4a8b
	C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\shell.fne ---> d63851f89c7ad4615565ca300e8b8e27
	C:\Documents and Settings\Administrator\Local Settings\Temp\PanDownload.exe ---> 文件过大!
	C:\Documents and Settings\Administrator\Local Settings\Temp\LockPage.exe ---> a859806132be4042a242d42ae30f1664
	C:\Program Files\Common Files\System\safemonn32.dll ---> e920cb8eb27afb4535f009e11b523b88
	C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico ---> fe1d0ee5901dd167ee9b28eece31786c
行为描述:	打开互斥体
详情信息:	ShimCacheMutex
	Local\!IETld!Mutex
	DBWinMutex
	Ie4Setup.Mutext
	Local\RSS Eventing Connection Database Mutex 00000844
	Local\WininetStartupMutex
	Local\_!MSFTHISTORY!_
	Local\c:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
	Local\c:!documents and settings!administrator!cookies!
	Local\c:!documents and settings!administrator!local settings!history!history.ie5!
	Local\c:!documents and settings!administrator!local settings!application data!microsoft!feeds cache!
	Local\WininetConnectionMutex
	Local\WininetProxyRegistryMutex
	Local\c:!documents and settings!administrator!ietldcache!
	CtfmonInstMutexDefaultS-*
行为描述:	加载新释放的文件
详情信息:	Image: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\E_4\krnln.fnr.
	Image: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\E_4\shell.fne.
	Image: C:\Program Files\Common Files\System\safemonn32.dll.

Activities
活动名	类型
com.iapp.app.logoActivity	android.intent.action.MAIN
com.iapp.app.logoActivity	android.intent.category.LAUNCHER

危险函数
函数名称	信息
android/app/NotificationManager;->notify	信息通知栏
LocationManager;->getLastKnownLocation	获取地址位置
ContentResolver;->query	读取联系人、短信等数据库
java/net/URL;->openConnection	连接URL
HttpClient;->execute	请求远程服务器
DefaultHttpClient;->execute	发送HTTP请求
Camera;->open	开启相机
TelephonyManager;->getDeviceId	搜集用户手机IMEI码、电话号码、系统版本号等信息
MediaRecorder;->setAudioSource	开启录音功能
MediaRecorder;->setVideoSource	开启视频录制

权限列表
许可名称	信息
android.permission.READ_PHONE_STATE	读取电话状态
android.permission.INTERNET	连接网络（2G或3G）
android.permission.WRITE_EXTERNAL_STORAGE	写外部存储器（如：SD卡）
android.permission.CAMERA	访问照相机设备
android.permission.VIBRATE	允许设备震动
android.permission.READ_EXTERNAL_STORAGE	读外部存储器（如：SD卡）
android.permission.MOUNT_UNMOUNT_FILESYSTEMS	挂载、反挂载外部文件系统
android.permission.RECORD_AUDIO	录音（使用AudioRecord）
android.permission.SYSTEM_ALERT_WINDOW	显示系统窗口
android.permission.FLASHLIGHT	访问闪光灯

文件列表
文件名	校验码
META-INF/MANIFEST.MF	0x176c5ad6
META-INF/CERT.SF	0x3aa64142
META-INF/CERT.RSA	0x493a70b6
AndroidManifest.xml	0x1df76874
assets/lib.so	0x3ef28fba
assets/res/02671402aee.png	0xa3ed241d
assets/res/1.jpg	0x924abced
assets/res/2.jpg	0x5efed3a0
assets/res/3.jpg	0x5fa82824
assets/res/4.jpg	0x6a734eb6
assets/res/547292.png	0xb3aab857
assets/res/833969.png	0xe91391d2
assets/res/950943.png	0x69b409f0
assets/res/a.png	0xec50e078
assets/res/abc_ic_ab_back_mtrl_am_alpha.png	0x23f1af9d
assets/res/abc_ic_menu_moreoverflow_mtrl_alpha.png	0xb056041c
assets/res/ad_img_load.png	0x23f11b17
assets/res/android.png	0xd93c5dee
assets/res/bai311.png	0xd2196ad3
assets/res/bai414.png	0x66627778
assets/res/beep.ogg	0x1bac0bfc
assets/res/ic_navigation_white_24dp.png	0x77624c5d
assets/res/ic_settings_black_24dp.png	0x20f433a0
assets/res/icon_fans_comment_normal.png	0x76e1fe32
assets/res/icon_loading_progress.png	0x3615d34
assets/res/icon_setup_normal.png	0x20a42d66
assets/res/loading_big.png	0x2be08b8
assets/res/loading_gif.png	0x971db6a3
assets/res/mobile.png	0xe242f87d
assets/res/moo.png	0xb6b760e7
assets/res/pvv.png	0x7324b15
assets/res/settings_check_off.png	0x4ba0513b
assets/res/settings_check_on.png	0xec4e8271
assets/res/shadow_bottom.png	0xe309e8a4
assets/res/yyb_friends.png	0xf969c41e
classes.dex	0x2fac8efd
lib/armeabi-v7a/libygsiyu.so	0xad2b5ed6
lib/armeabi/libygsiyu.so	0x8143ceed
lib/x86/libygsiyu.so	0x689c763a
res/anim/abc_fade_in.xml	0x2f94166b
res/anim/abc_fade_out.xml	0x396f7a13
res/anim/abc_grow_fade_in_from_bottom.xml	0xd9f09e0
res/anim/abc_popup_enter.xml	0x5cd73f80
res/anim/abc_popup_exit.xml	0xb758a931
res/anim/abc_shrink_fade_out_from_bottom.xml	0xa8ad3982
res/anim/abc_slide_in_bottom.xml	0x73663fbe
res/anim/abc_slide_in_top.xml	0x41f8f3af
res/anim/abc_slide_out_bottom.xml	0x51b9c50a
res/anim/abc_slide_out_top.xml	0x4f613364
res/anim/fade.xml	0xdea0186f
res/anim/hold.xml	0xe88a6ff3
res/anim/hyperspace_in.xml	0x4e158c9e
res/anim/hyperspace_out.xml	0x38820aba
res/anim/my_alpha_action.xml	0xdb4301e2
res/anim/my_scale_action.xml	0xd52bce0c
res/anim/push_left_in.xml	0xd22cac64
res/anim/push_left_in2.xml	0xd22cac64
res/anim/push_left_out.xml	0x22adf124
res/anim/push_left_out2.xml	0x22adf124
res/anim/push_up_in.xml	0xcdca50c3
res/anim/push_up_out.xml	0x6b4d2b46
res/anim/scale_rotate.xml	0x8327f408
res/anim/scale_translate.xml	0x90a76167
res/anim/scale_translate_rotate.xml	0x2bbe82af
res/anim/slide_down_out.xml	0xb15d52ac
res/anim/slide_left.xml	0x1c98ba48
res/anim/slide_right.xml	0x572d5a6f
res/anim/slide_up_in.xml	0x33ea183
res/anim/wave_scale.xml	0x56cc4796
res/anim/zoom_enter.xml	0x75a5d582
res/anim/zoom_exit.xml	0xdb9e8694
res/color-v11/abc_background_cache_hint_selector_material_dark.xml	0x7b570c28
res/color-v11/abc_background_cache_hint_selector_material_light.xml	0x214cbc75
res/color-v23/abc_color_highlight_material.xml	0x5b973f50
res/color/abc_background_cache_hint_selector_material_dark.xml	0xb71cf25d
res/color/abc_background_cache_hint_selector_material_light.xml	0x395e4363
res/color/abc_primary_text_disable_only_material_dark.xml	0x65a5f53f
res/color/abc_primary_text_disable_only_material_light.xml	0xf6ba8a45
res/color/abc_primary_text_material_dark.xml	0x79d43312
res/color/abc_primary_text_material_light.xml	0xc46a0fa
res/color/abc_search_url_text.xml	0x53b37346
res/color/abc_secondary_text_material_dark.xml	0xeacb4c68
res/color/abc_secondary_text_material_light.xml	0x9f59df80
res/color/switch_thumb_material_dark.xml	0x796ec42
res/color/switch_thumb_material_light.xml	0x94899338
res/drawable-hdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png	0x64228504
res/drawable-hdpi-v4/abc_btn_check_to_on_mtrl_000.png	0x74f15b22
res/drawable-hdpi-v4/abc_btn_check_to_on_mtrl_015.png	0x347f06cc
res/drawable-hdpi-v4/abc_btn_radio_to_on_mtrl_000.png	0xa580de72
res/drawable-hdpi-v4/abc_btn_radio_to_on_mtrl_015.png	0x714e0a91
res/drawable-hdpi-v4/abc_btn_rating_star_off_mtrl_alpha.png	0x817a051a
res/drawable-hdpi-v4/abc_btn_rating_star_on_mtrl_alpha.png	0xb411cc6f
res/drawable-hdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png	0x11706987
res/drawable-hdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png	0x1764993
res/drawable-hdpi-v4/abc_cab_background_top_mtrl_alpha.9.png	0x3df2f3
res/drawable-hdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png	0x4d559b7f
res/drawable-hdpi-v4/abc_ic_clear_mtrl_alpha.png	0x799ebe47
res/drawable-hdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png	0x7ea78a3e
res/drawable-hdpi-v4/abc_ic_go_search_api_mtrl_alpha.png	0xfc73d072
res/drawable-hdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png	0x836988f5
res/drawable-hdpi-v4/abc_ic_menu_cut_mtrl_alpha.png	0xbc3edf09
res/drawable-hdpi-v4/abc_ic_menu_moreoverflow_mtrl_alpha.png	0xd2a2c4d0
res/drawable-hdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png	0x4b50c4ad
res/drawable-hdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png	0x743a9b21
res/drawable-hdpi-v4/abc_ic_menu_share_mtrl_alpha.png	0x60f120a
res/drawable-hdpi-v4/abc_ic_search_api_mtrl_alpha.png	0x9c3f63ba
res/drawable-hdpi-v4/abc_ic_star_black_16dp.png	0xdbbcee79
res/drawable-hdpi-v4/abc_ic_star_black_36dp.png	0xfefc0dde
res/drawable-hdpi-v4/abc_ic_star_half_black_16dp.png	0xeff95437
res/drawable-hdpi-v4/abc_ic_star_half_black_36dp.png	0xe1a5c56
res/drawable-hdpi-v4/abc_ic_voice_search_api_mtrl_alpha.png	0xa3db01a5
res/drawable-hdpi-v4/abc_list_divider_mtrl_alpha.9.png	0x9f45a479
res/drawable-hdpi-v4/abc_list_focused_holo.9.png	0x8e4da209
res/drawable-hdpi-v4/abc_list_longpressed_holo.9.png	0x81b12fde
res/drawable-hdpi-v4/abc_list_pressed_holo_dark.9.png	0x62993bc8
res/drawable-hdpi-v4/abc_list_pressed_holo_light.9.png	0x7c69f413
res/drawable-hdpi-v4/abc_list_selector_disabled_holo_dark.9.png	0xe50f1648
res/drawable-hdpi-v4/abc_list_selector_disabled_holo_light.9.png	0x43f655e6
res/drawable-hdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png	0xbed682a
res/drawable-hdpi-v4/abc_popup_background_mtrl_mult.9.png	0xda0d75a8
res/drawable-hdpi-v4/abc_scrubber_control_off_mtrl_alpha.png	0x87a95710
res/drawable-hdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png	0x7c2d3dcb
res/drawable-hdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png	0x6ba280e1
res/drawable-hdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png	0x415336be
res/drawable-hdpi-v4/abc_scrubber_track_mtrl_alpha.9.png	0x65b9786e
res/drawable-hdpi-v4/abc_spinner_mtrl_am_alpha.9.png	0x7ab89543
res/drawable-hdpi-v4/abc_switch_track_mtrl_alpha.9.png	0x18025bff
res/drawable-hdpi-v4/abc_tab_indicator_mtrl_alpha.9.png	0x6c11debe
res/drawable-hdpi-v4/abc_textfield_activated_mtrl_alpha.9.png	0x103aeb6a
res/drawable-hdpi-v4/abc_textfield_default_mtrl_alpha.9.png	0xaa35a06e
res/drawable-hdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png	0xafd79c5c
res/drawable-hdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png	0xee0f1fea
res/drawable-hdpi-v4/ic_launcher.png	0xf248df62
res/drawable-hdpi-v4/img_back_g.png	0xd76a7ae4
res/drawable-hdpi-v4/img_delete.png	0x43f56755
res/drawable-hdpi-v4/img_down_go.png	0x7d3df75
res/drawable-hdpi-v4/img_down_inst.png	0xfb87f64e
res/drawable-hdpi-v4/img_down_ok.png	0x52b4a04f
res/drawable-hdpi-v4/img_down_open.png	0xd7a95a9a
res/drawable-hdpi-v4/img_down_select_all.png	0x7a44c6a1
res/drawable-hdpi-v4/img_down_select_no.png	0x3391aa0f
res/drawable-hdpi-v4/img_down_select_off.png	0x918e12ef
res/drawable-hdpi-v4/img_down_stop.png	0xb699afdc
res/drawable-hdpi-v4/img_iapp.png	0xd57594e2
res/drawable-hdpi-v4/img_ing.png	0x7b38c0ae
res/drawable-hdpi-v4/img_list_img.png	0x2e015f64
res/drawable-hdpi-v4/img_list_mp3.png	0x84c94797
res/drawable-hdpi-v4/img_list_mp4.png	0xd2caf87d
res/drawable-hdpi-v4/img_list_myu.png	0x8a8394d3
res/drawable-hdpi-v4/img_list_object.png	0x3767032f
res/drawable-hdpi-v4/img_list_txt.png	0xb1747efb
res/drawable-hdpi-v4/img_list_xml.png	0x5f84b459
res/drawable-hdpi-v4/img_list_zip.png	0xae92324
res/drawable-hdpi-v4/img_menu.png	0x6e8fc407
res/drawable-ldrtl-hdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png	0xb5157429
res/drawable-ldrtl-hdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png	0x5b37968c
res/drawable-ldrtl-hdpi-v4/abc_ic_menu_cut_mtrl_alpha.png	0x5842f18c
res/drawable-ldrtl-hdpi-v4/abc_spinner_mtrl_am_alpha.9.png	0xa596c3d0
res/drawable-ldrtl-mdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png	0xaaf195a5
res/drawable-ldrtl-mdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png	0x10f9ca4f
res/drawable-ldrtl-mdpi-v4/abc_ic_menu_cut_mtrl_alpha.png	0x8c99babb
res/drawable-ldrtl-mdpi-v4/abc_spinner_mtrl_am_alpha.9.png	0xb1c14ea7
res/drawable-ldrtl-xhdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png	0x183f0445
res/drawable-ldrtl-xhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png	0xac092729
res/drawable-ldrtl-xhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png	0x257e3129
res/drawable-ldrtl-xhdpi-v4/abc_spinner_mtrl_am_alpha.9.png	0x64a842b9
res/drawable-ldrtl-xxhdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png	0x2410865f
res/drawable-ldrtl-xxhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png	0x335d861c
res/drawable-ldrtl-xxhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png	0xd511ead1
res/drawable-ldrtl-xxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png	0x48f4c207
res/drawable-ldrtl-xxxhdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png	0x20cdc21d
res/drawable-ldrtl-xxxhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png	0xabd6747f
res/drawable-ldrtl-xxxhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png	0x26079ff1
res/drawable-ldrtl-xxxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png	0x2ff6ecc
res/drawable-mdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png	0xa852580c
res/drawable-mdpi-v4/abc_btn_check_to_on_mtrl_000.png	0xfaaf439
res/drawable-mdpi-v4/abc_btn_check_to_on_mtrl_015.png	0x6c18aa07
res/drawable-mdpi-v4/abc_btn_radio_to_on_mtrl_000.png	0xfdd05be0
res/drawable-mdpi-v4/abc_btn_radio_to_on_mtrl_015.png	0xffdb8904
res/drawable-mdpi-v4/abc_btn_rating_star_off_mtrl_alpha.png	0x8c457b6b
res/drawable-mdpi-v4/abc_btn_rating_star_on_mtrl_alpha.png	0xab7e9f96
res/drawable-mdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png	0xa7483509
res/drawable-mdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png	0xd76b7b1e
res/drawable-mdpi-v4/abc_cab_background_top_mtrl_alpha.9.png	0xb6857dd0
res/drawable-mdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png	0xb2e9a498
res/drawable-mdpi-v4/abc_ic_clear_mtrl_alpha.png	0xe790a0d0
res/drawable-mdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png	0x32483490
res/drawable-mdpi-v4/abc_ic_go_search_api_mtrl_alpha.png	0xbed90f7c
res/drawable-mdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png	0x7cef9caa
res/drawable-mdpi-v4/abc_ic_menu_cut_mtrl_alpha.png	0x42efd0f1
res/drawable-mdpi-v4/abc_ic_menu_moreoverflow_mtrl_alpha.png	0xebc07e4
res/drawable-mdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png	0xbab9dddb
res/drawable-mdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png	0xb3728438
res/drawable-mdpi-v4/abc_ic_menu_share_mtrl_alpha.png	0xbe19401d
res/drawable-mdpi-v4/abc_ic_search_api_mtrl_alpha.png	0x7a6d4b49
res/drawable-mdpi-v4/abc_ic_star_black_16dp.png	0xd2747cc6
res/drawable-mdpi-v4/abc_ic_star_black_36dp.png	0x8eade8c4
res/drawable-mdpi-v4/abc_ic_star_half_black_16dp.png	0x376d09c1
res/drawable-mdpi-v4/abc_ic_star_half_black_36dp.png	0xd99f62d9
res/drawable-mdpi-v4/abc_ic_voice_search_api_mtrl_alpha.png	0xb6b2ac0c
res/drawable-mdpi-v4/abc_list_divider_mtrl_alpha.9.png	0x9f45a479
res/drawable-mdpi-v4/abc_list_focused_holo.9.png	0xb1ab9d03
res/drawable-mdpi-v4/abc_list_longpressed_holo.9.png	0x78c37895
res/drawable-mdpi-v4/abc_list_pressed_holo_dark.9.png	0x686b7a66
res/drawable-mdpi-v4/abc_list_pressed_holo_light.9.png	0x32efca3
res/drawable-mdpi-v4/abc_list_selector_disabled_holo_dark.9.png	0x551f7c98
res/drawable-mdpi-v4/abc_list_selector_disabled_holo_light.9.png	0xd6426851
res/drawable-mdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png	0xe2078e4d
res/drawable-mdpi-v4/abc_popup_background_mtrl_mult.9.png	0x3c2b73c5
res/drawable-mdpi-v4/abc_scrubber_control_off_mtrl_alpha.png	0xc5139d00
res/drawable-mdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png	0x3150efb2
res/drawable-mdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png	0x92d4681d
res/drawable-mdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png	0x3a0eb435
res/drawable-mdpi-v4/abc_scrubber_track_mtrl_alpha.9.png	0xd393324b
res/drawable-mdpi-v4/abc_spinner_mtrl_am_alpha.9.png	0xe9abec02
res/drawable-mdpi-v4/abc_switch_track_mtrl_alpha.9.png	0xd6b37a0c
res/drawable-mdpi-v4/abc_tab_indicator_mtrl_alpha.9.png	0xb58b040f
res/drawable-mdpi-v4/abc_textfield_activated_mtrl_alpha.9.png	0x4f16ccfc
res/drawable-mdpi-v4/abc_textfield_default_mtrl_alpha.9.png	0xf8dbf6f6
res/drawable-mdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png	0xfb4249d4
res/drawable-mdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png	0x19a0052e
res/drawable-mdpi-v4/ic_launcher.png	0x6a84dfd9
res/drawable-mdpi-v4/img_iapp.png	0xfcad59f4
res/drawable-mdpi-v4/navbar.9.png	0xdcbb720d
res/drawable-v11/abc_textfield_search_material.xml	0xce463838
res/drawable-v21/abc_action_bar_item_background_material.xml	0xb794af16
res/drawable-v21/abc_btn_colored_material.xml	0x4280b364
res/drawable-v21/abc_edit_text_material.xml	0x627c56de
res/drawable-v21/abc_ratingbar_indicator_material.xml	0x5b57a222
res/drawable-v21/abc_ratingbar_small_material.xml	0xbed7f6fc
res/drawable-v23/abc_control_background_material.xml	0xb2678245
res/drawable-xhdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png	0xcf127e45
res/drawable-xhdpi-v4/abc_btn_check_to_on_mtrl_000.png	0x9dc49f7d
res/drawable-xhdpi-v4/abc_btn_check_to_on_mtrl_015.png	0xb578b0b6
res/drawable-xhdpi-v4/abc_btn_radio_to_on_mtrl_000.png	0xb67a40bc
res/drawable-xhdpi-v4/abc_btn_radio_to_on_mtrl_015.png	0x48c0aa49
res/drawable-xhdpi-v4/abc_btn_rating_star_off_mtrl_alpha.png	0x7ca23195
res/drawable-xhdpi-v4/abc_btn_rating_star_on_mtrl_alpha.png	0x810875a7
res/drawable-xhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png	0xcd563567
res/drawable-xhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png	0x3e9a5317
res/drawable-xhdpi-v4/abc_cab_background_top_mtrl_alpha.9.png	0xf70ddcc0
res/drawable-xhdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png	0x2208bbf4
res/drawable-xhdpi-v4/abc_ic_clear_mtrl_alpha.png	0x59653fcd
res/drawable-xhdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png	0x4d465d62
res/drawable-xhdpi-v4/abc_ic_go_search_api_mtrl_alpha.png	0x3994a8c0
res/drawable-xhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png	0xa7e68a05
res/drawable-xhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png	0x1c6691ae
res/drawable-xhdpi-v4/abc_ic_menu_moreoverflow_mtrl_alpha.png	0xb9a1d654
res/drawable-xhdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png	0xdb4a104
res/drawable-xhdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png	0xc7885a40
res/drawable-xhdpi-v4/abc_ic_menu_share_mtrl_alpha.png	0xbf9dc0ff
res/drawable-xhdpi-v4/abc_ic_search_api_mtrl_alpha.png	0xd0ddade2
res/drawable-xhdpi-v4/abc_ic_star_black_16dp.png	0x8f39f3
res/drawable-xhdpi-v4/abc_ic_star_black_36dp.png	0x374f1282
res/drawable-xhdpi-v4/abc_ic_star_half_black_16dp.png	0xa306a485
res/drawable-xhdpi-v4/abc_ic_star_half_black_36dp.png	0x6b6d8b7a
res/drawable-xhdpi-v4/abc_ic_voice_search_api_mtrl_alpha.png	0x8776b055
res/drawable-xhdpi-v4/abc_list_divider_mtrl_alpha.9.png	0x9f45a479
res/drawable-xhdpi-v4/abc_list_focused_holo.9.png	0xbde23956
res/drawable-xhdpi-v4/abc_list_longpressed_holo.9.png	0x84a788a6
res/drawable-xhdpi-v4/abc_list_pressed_holo_dark.9.png	0x98f7c81a
res/drawable-xhdpi-v4/abc_list_pressed_holo_light.9.png	0x5314692b
res/drawable-xhdpi-v4/abc_list_selector_disabled_holo_dark.9.png	0x41748705
res/drawable-xhdpi-v4/abc_list_selector_disabled_holo_light.9.png	0x1c2ff2be
res/drawable-xhdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png	0x63ee6937
res/drawable-xhdpi-v4/abc_popup_background_mtrl_mult.9.png	0x5343eaf
res/drawable-xhdpi-v4/abc_scrubber_control_off_mtrl_alpha.png	0xabc8be5c
res/drawable-xhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png	0x11f71e70
res/drawable-xhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png	0x7c6aeb4d
res/drawable-xhdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png	0xbf40ca92
res/drawable-xhdpi-v4/abc_scrubber_track_mtrl_alpha.9.png	0x1a186496
res/drawable-xhdpi-v4/abc_spinner_mtrl_am_alpha.9.png	0x458f09df
res/drawable-xhdpi-v4/abc_switch_track_mtrl_alpha.9.png	0x4ebe0617
res/drawable-xhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png	0x361544c6
res/drawable-xhdpi-v4/abc_textfield_activated_mtrl_alpha.9.png	0x4853c2d6
res/drawable-xhdpi-v4/abc_textfield_default_mtrl_alpha.9.png	0x7a6dbe65
res/drawable-xhdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png	0xeaa0434b
res/drawable-xhdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png	0x4cfa2def
res/drawable-xhdpi-v4/ic_launcher.png	0xa227fc8a
res/drawable-xhdpi-v4/img_iapp.png	0xb9e8e577
res/drawable-xxhdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png	0x7758fe71
res/drawable-xxhdpi-v4/abc_btn_check_to_on_mtrl_000.png	0x94f2a26f
res/drawable-xxhdpi-v4/abc_btn_check_to_on_mtrl_015.png	0xbe6202c4
res/drawable-xxhdpi-v4/abc_btn_radio_to_on_mtrl_000.png	0x4c84ff8a
res/drawable-xxhdpi-v4/abc_btn_radio_to_on_mtrl_015.png	0x8409c614
res/drawable-xxhdpi-v4/abc_btn_rating_star_off_mtrl_alpha.png	0xf7330862
res/drawable-xxhdpi-v4/abc_btn_rating_star_on_mtrl_alpha.png	0xf8645745
res/drawable-xxhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png	0xe3ff53b2
res/drawable-xxhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png	0xb888b755
res/drawable-xxhdpi-v4/abc_cab_background_top_mtrl_alpha.9.png	0x7cd87445
res/drawable-xxhdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png	0x9de04f3d
res/drawable-xxhdpi-v4/abc_ic_clear_mtrl_alpha.png	0x5a9a6442
res/drawable-xxhdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png	0x9c96c544
res/drawable-xxhdpi-v4/abc_ic_go_search_api_mtrl_alpha.png	0x53da0904
res/drawable-xxhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png	0x2076590
res/drawable-xxhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png	0xed54c33a
res/drawable-xxhdpi-v4/abc_ic_menu_moreoverflow_mtrl_alpha.png	0xd4313c3e
res/drawable-xxhdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png	0xd9456a27
res/drawable-xxhdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png	0xee5349d8
res/drawable-xxhdpi-v4/abc_ic_menu_share_mtrl_alpha.png	0xf6f48e1c
res/drawable-xxhdpi-v4/abc_ic_search_api_mtrl_alpha.png	0xc01fb8ab
res/drawable-xxhdpi-v4/abc_ic_star_black_16dp.png	0x5ab712b9
res/drawable-xxhdpi-v4/abc_ic_star_black_36dp.png	0xa6cf7e1
res/drawable-xxhdpi-v4/abc_ic_star_half_black_16dp.png	0x9ccb2530
res/drawable-xxhdpi-v4/abc_ic_star_half_black_36dp.png	0xc388831a
res/drawable-xxhdpi-v4/abc_ic_voice_search_api_mtrl_alpha.png	0xcdbe91d1
res/drawable-xxhdpi-v4/abc_list_divider_mtrl_alpha.9.png	0x19b7f846
res/drawable-xxhdpi-v4/abc_list_focused_holo.9.png	0x19c09c27
res/drawable-xxhdpi-v4/abc_list_longpressed_holo.9.png	0x236b6e98
res/drawable-xxhdpi-v4/abc_list_pressed_holo_dark.9.png	0x823780d0
res/drawable-xxhdpi-v4/abc_list_pressed_holo_light.9.png	0x813ae23c
res/drawable-xxhdpi-v4/abc_list_selector_disabled_holo_dark.9.png	0xdddaae2e
res/drawable-xxhdpi-v4/abc_list_selector_disabled_holo_light.9.png	0x1ff1856f
res/drawable-xxhdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png	0xe97125d2
res/drawable-xxhdpi-v4/abc_popup_background_mtrl_mult.9.png	0x478db1d1
res/drawable-xxhdpi-v4/abc_scrubber_control_off_mtrl_alpha.png	0x44428171
res/drawable-xxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png	0x560a527a
res/drawable-xxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png	0x916a150c
res/drawable-xxhdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png	0x5902ed5c
res/drawable-xxhdpi-v4/abc_scrubber_track_mtrl_alpha.9.png	0xa028728e
res/drawable-xxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png	0xbba9274f
res/drawable-xxhdpi-v4/abc_switch_track_mtrl_alpha.9.png	0xf785991a
res/drawable-xxhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png	0xd6692ce7
res/drawable-xxhdpi-v4/abc_textfield_activated_mtrl_alpha.9.png	0x2fa093c4
res/drawable-xxhdpi-v4/abc_textfield_default_mtrl_alpha.9.png	0x4d07b4a9
res/drawable-xxhdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png	0x77c42d34
res/drawable-xxhdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png	0x9e0d73d
res/drawable-xxhdpi-v4/ic_launcher.png	0x2a4a99d1
res/drawable-xxhdpi-v4/img_iapp.png	0x4fdfd6a6
res/drawable-xxxhdpi-v4/abc_btn_check_to_on_mtrl_000.png	0x226f3157
res/drawable-xxxhdpi-v4/abc_btn_check_to_on_mtrl_015.png	0xb39b6532
res/drawable-xxxhdpi-v4/abc_btn_radio_to_on_mtrl_000.png	0xc64a3649
res/drawable-xxxhdpi-v4/abc_btn_radio_to_on_mtrl_015.png	0x785397a7
res/drawable-xxxhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png	0x4f6e087d
res/drawable-xxxhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png	0xa817850a
res/drawable-xxxhdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png	0xd277dedc
res/drawable-xxxhdpi-v4/abc_ic_clear_mtrl_alpha.png	0xec7c0cad
res/drawable-xxxhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png	0xba01d78a
res/drawable-xxxhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png	0xf381f0b0
res/drawable-xxxhdpi-v4/abc_ic_menu_moreoverflow_mtrl_alpha.png	0xb056041c
res/drawable-xxxhdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png	0x39ad65c6
res/drawable-xxxhdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png	0x952378b5
res/drawable-xxxhdpi-v4/abc_ic_menu_share_mtrl_alpha.png	0xd183ee02
res/drawable-xxxhdpi-v4/abc_ic_search_api_mtrl_alpha.png	0xe102bb65
res/drawable-xxxhdpi-v4/abc_ic_star_black_16dp.png	0xed643efb
res/drawable-xxxhdpi-v4/abc_ic_star_black_36dp.png	0xcf8f9d01
res/drawable-xxxhdpi-v4/abc_ic_star_half_black_16dp.png	0xf0f0c7ff
res/drawable-xxxhdpi-v4/abc_ic_star_half_black_36dp.png	0x72839b05
res/drawable-xxxhdpi-v4/abc_ic_voice_search_api_mtrl_alpha.png	0x204db219
res/drawable-xxxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png	0x4a5cd1ed
res/drawable-xxxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png	0xee7e8b29
res/drawable-xxxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png	0x3bd11453
res/drawable-xxxhdpi-v4/abc_switch_track_mtrl_alpha.9.png	0x1a7d6c07
res/drawable-xxxhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png	0x74529d2e
res/drawable-xxxhdpi-v4/img_iapp.png	0x7f8876ae
res/drawable/abc_btn_borderless_material.xml	0xf341af1c
res/drawable/abc_btn_check_material.xml	0xe2f70d0a
res/drawable/abc_btn_colored_material.xml	0x1522b03
res/drawable/abc_btn_default_mtrl_shape.xml	0x94236625
res/drawable/abc_btn_radio_material.xml	0x2960f785
res/drawable/abc_cab_background_internal_bg.xml	0x9c5b1555
res/drawable/abc_cab_background_top_material.xml	0x789cac73
res/drawable/abc_dialog_material_background_dark.xml	0xf26269b9
res/drawable/abc_dialog_material_background_light.xml	0x87fdaf24
res/drawable/abc_edit_text_material.xml	0x365ecec6
res/drawable/abc_item_background_holo_dark.xml	0xd1b21c63
res/drawable/abc_item_background_holo_light.xml	0x5c0f0b25
res/drawable/abc_list_selector_background_transition_holo_dark.xml	0xad127204
res/drawable/abc_list_selector_background_transition_holo_light.xml	0xff8319d8
res/drawable/abc_list_selector_holo_dark.xml	0xd3230273
res/drawable/abc_list_selector_holo_light.xml	0x4ca62f47
res/drawable/abc_ratingbar_full_material.xml	0xf00f836e
res/drawable/abc_ratingbar_indicator_material.xml	0xdbcfdb9a
res/drawable/abc_ratingbar_small_material.xml	0xecbbc468
res/drawable/abc_seekbar_thumb_material.xml	0xf5569f09
res/drawable/abc_seekbar_track_material.xml	0xd86c6936
res/drawable/abc_spinner_textfield_background_material.xml	0x291ca69f
res/drawable/abc_switch_thumb_material.xml	0x88e00ae
res/drawable/abc_tab_indicator_material.xml	0x20683102
res/drawable/abc_text_cursor_material.xml	0x9fd1fc63
res/drawable/abc_textfield_search_material.xml	0x7892e84b
res/drawable/ui_app_tab_clicks.xml	0xa6de3e82
res/drawable/ui_app_tab_clicks_select.xml	0x2f995002
res/drawable/ui_app_tab_clicks_unselect.xml	0x3f9de6be
res/drawable/ui_clicks_00.xml	0xbbf0b393
res/drawable/ui_clicks_00_select.xml	0xee9472ac
res/drawable/ui_clicks_00_unselect.xml	0x92a88605
res/drawable/ui_progressbar.xml	0x79204641
res/layout-v13/select_dialog_multichoice_material.xml	0x505d5691
res/layout-v13/select_dialog_singlechoice_material.xml	0xda2637d5
res/layout-v17/abc_alert_dialog_button_bar_material.xml	0xb404fb7d
res/layout-v17/abc_alert_dialog_material.xml	0x974ed80
res/layout-v17/abc_dialog_title_material.xml	0xb1785b0c
res/layout-v17/abc_search_view.xml	0x848f56fc
res/layout-v17/notification_template_big_media.xml	0x3c379f74
res/layout-v17/notification_template_big_media_narrow.xml	0x89097afb
res/layout-v17/notification_template_lines.xml	0xe4b63510
res/layout-v17/notification_template_media.xml	0x29b7fa8e
res/layout-v17/notification_template_part_chronometer.xml	0xf8b5be5f
res/layout-v17/notification_template_part_time.xml	0xf1421b70
res/layout-v17/select_dialog_multichoice_material.xml	0xa6a5f684
res/layout-v17/select_dialog_singlechoice_material.xml	0x11241de7
res/layout-v21/abc_screen_toolbar.xml	0xdeace488
res/layout-v9/abc_select_dialog_material.xml	0x3ef6520c
res/layout-v9/ui_downlist.xml	0x80261cef
res/layout/abc_action_bar_title_item.xml	0xa745b312
res/layout/abc_action_bar_up_container.xml	0xb0b662fa
res/layout/abc_action_bar_view_list_nav_layout.xml	0x3b7fb5a6
res/layout/abc_action_menu_item_layout.xml	0x57139df
res/layout/abc_action_menu_layout.xml	0x10a76152
res/layout/abc_action_mode_bar.xml	0x19d94e5a
res/layout/abc_action_mode_close_item_material.xml	0xa149f09e
res/layout/abc_activity_chooser_view.xml	0x9a26286b
res/layout/abc_activity_chooser_view_list_item.xml	0xf17a54ff
res/layout/abc_alert_dialog_button_bar_material.xml	0xe803a6f0
res/layout/abc_alert_dialog_material.xml	0xfce12892
res/layout/abc_dialog_title_material.xml	0xd6da6187
res/layout/abc_expanded_menu_layout.xml	0x6a583165
res/layout/abc_list_menu_item_checkbox.xml	0xf85b2a2a
res/layout/abc_list_menu_item_icon.xml	0x1825e3a4
res/layout/abc_list_menu_item_layout.xml	0x6ca737a1
res/layout/abc_list_menu_item_radio.xml	0x9b890641
res/layout/abc_popup_menu_item_layout.xml	0x7247ac0d
res/layout/abc_screen_content_include.xml	0xfcb152fa
res/layout/abc_screen_simple.xml	0x7e853c52
res/layout/abc_screen_simple_overlay_action_mode.xml	0xf1a7e2fe
res/layout/abc_screen_toolbar.xml	0xdc2fc6dd
res/layout/abc_search_dropdown_item_icons_2line.xml	0x6ae1b4e1
res/layout/abc_search_view.xml	0xb7eb9de6
res/layout/abc_select_dialog_material.xml	0x2bd8a334
res/layout/notification_media_action.xml	0xf70e67e3
res/layout/notification_media_cancel_action.xml	0x4e34dc2a
res/layout/notification_template_big_media.xml	0xb5381819
res/layout/notification_template_big_media_narrow.xml	0xdc52977f
res/layout/notification_template_lines.xml	0xb11cac43
res/layout/notification_template_media.xml	0xafbb5e2
res/layout/notification_template_part_chronometer.xml	0x4020e104
res/layout/notification_template_part_time.xml	0xf866e24
res/layout/select_dialog_item_material.xml	0x3f73aed6
res/layout/select_dialog_multichoice_material.xml	0xff0c15d1
res/layout/select_dialog_singlechoice_material.xml	0xd660e72c
res/layout/support_simple_spinner_dropdown_item.xml	0x9bee4093
res/layout/ui_downlist.xml	0x52bf4aa2
res/layout/ui_downlist_listitem.xml	0xb893a5d3
res/layout/ui_qr_camera.xml	0x5959cf1c
res/layout/ui_qr_main.xml	0x68bbb5d2
res/layout/ui_run_mian.xml	0xa16933ee
res/layout/ui_webview.xml	0x7aa106d0
res/raw/beep.ogg	0x1bac0bfc
res/raw/realm_properties	0x76e960ad
resources.arsc	0x8bbe684a

运行截图

File information

上传文件