VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.
4, If your browser cannot upload files, please download VirSCAN uploader to upload.

Language
Server load
Server Load

VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

File information

Scanner results
Scanner results:3%Antivirus software(1/32)found malware!
Behavior analysis report:         Habo file analysis
Time: 2017-06-25 14:18:26 (CST)
Scanner Engine Ver Sig Ver Sig Date Scan result Time
antiy AVL SDK 2.0 1970-01-01 Found nothing 5
asquared 9.0.0.4799 9.0.0.4799 2015-03-08 Found nothing 2
avast 170303-1 4.7.4 2017-03-03 Found nothing 60
avg 2109/14096 10.0.1405 2017-06-23 Found nothing 60
baidu 2.0.1.0 4.1.3.52192 2.0.1.0 Found nothing 5
baidusd 1.0 1.0 2017-03-22 Found nothing 2
bitdefender 7.58879 7.90123 2015-01-16 Found nothing 60
clamav 23500 0.97.5 2017-06-23 Found nothing 60
drweb 5.0.2.3300 5.0.1.1 2017-06-18 Found nothing 60
fortinet 49.726, 49.726, 49.726 5.4.233 2017-06-25 Found nothing 60
fprot 4.6.2.117 6.5.1.5418 2016-02-05 Found nothing 60
fsecure 2015-08-01-02 9.13 2015-08-01 Found nothing 60
gdata 25.13029 25.13029 2017-06-25 Found nothing 12
ikarus 1.06.01 V1.32.31.0 2016-11-28 Found nothing 60
jiangmin 16.0.100 1.0.0.0 2017-06-23 Found nothing 2
kaspersky 5.5.33 5.5.33 2014-04-01 Found nothing 60
kingsoft 2.1 2.1 2017-06-24 Found nothing 5
mcafee 8261 5400.1158 2016-08-18 Found nothing 60
nod32 1777 3.0.21 2015-06-12 Found nothing 60
panda 9.05.01 9.05.01 2017-06-24 Found nothing 4
pcc 13.302.06 9.500-1005 2017-03-27 Found nothing 60
qh360 1.0.1 1.0.1 1.0.1 Found nothing 3
qqphone 1.0.0.0 1.0.0.0 2015-12-30 Found nothing 60
quickheal 14.00 14.00 2017-06-24 Android.Agent.GEN1478 3
rising 26.28.00.01 26.28.00.01 2016-07-18 Found nothing 6
sophos 5.32 3.65.2 2016-10-10 Found nothing 60
symantec 20151230.005 1.3.0.24 2015-12-30 Found nothing 60
tachyon 9.9.9 9.9.9 2013-12-27 Found nothing 4
thehacker 6.8.0.5 6.8.0.5 2017-06-23 Found nothing 3
tws 17.47.17308 1.0.2.2108 2017-06-24 Found nothing 16
vba 3.12.29.5 beta 3.12.29.5 beta 2017-06-23 Found nothing 60
virusbuster 15.0.985.0 5.5.2.13 2014-12-05 Found nothing 60
权限列表
许可名称 信息
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.INTERNET 连接网络(2G或3G)
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.CAMERA 访问照相机设备
android.permission.VIBRATE 允许设备震动
android.permission.READ_EXTERNAL_STORAGE 读外部存储器(如:SD卡)
android.permission.MOUNT_UNMOUNT_FILESYSTEMS 挂载、反挂载外部文件系统
android.permission.RECORD_AUDIO 录音(使用AudioRecord)
android.permission.SYSTEM_ALERT_WINDOW 显示系统窗口
android.permission.FLASHLIGHT 访问闪光灯
文件信息
VirSCANVirSCAN
安全评分 :
基本信息
VirSCANVirSCAN
MD5:4df5df26e03859f1c6f3b3bfc305194b
文件大小:5.58MB
上传时间: 2014-09-22 10:36:30 (CST)
包名:com.video
最低运行环境:Android 2.2.x
版权:ipuser
关键行为
VirSCANVirSCAN
行为描述: 跨进程写入数据
详情信息: TargetProcess = C:\WINDOWS\system32\sort.exe, WriteAddress = 0x001e0000, Size = 0x00056200 TargetPID = 0x0000098c
TargetProcess = C:\WINDOWS\system32\sort.exe, WriteAddress = 0x00910000, Size = 0x00056300 TargetPID = 0x0000098c
行为描述: 常规加载驱动
详情信息: \??\C:\Program Files\Common Files\System\uiprotect.sys
行为描述: 杀掉进程
详情信息: C:\WINDOWS\explorer.exe
行为描述: 创建远程线程
详情信息: TargetProcess: sort.exe, InheritedFromPID = 2224, ProcessID = 2444, ThreadID = 2456, StartAddress = 00914FB0, Parameter = 00910000
行为描述: 获取User基本信息
详情信息: Level = 2.
行为描述: 获取TickCount值
详情信息: TickCount = 5443625, SleepMilliseconds = 250.
行为描述: 设置特殊文件夹属性
详情信息: C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds Cache
C:\Documents and Settings\Administrator\IETldCache
行为描述: 修改注册表_启动项
详情信息: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\0OverlayIcon\
进程行为
VirSCANVirSCAN
行为描述: 跨进程写入数据
详情信息: TargetProcess = C:\WINDOWS\system32\sort.exe, WriteAddress = 0x001e0000, Size = 0x00056200 TargetPID = 0x0000098c
TargetProcess = C:\WINDOWS\system32\sort.exe, WriteAddress = 0x00910000, Size = 0x00056300 TargetPID = 0x0000098c
行为描述: 常规加载驱动
详情信息: \??\C:\Program Files\Common Files\System\uiprotect.sys
行为描述: 杀掉进程
详情信息: C:\WINDOWS\explorer.exe
行为描述: 创建远程线程
详情信息: TargetProcess: sort.exe, InheritedFromPID = 2224, ProcessID = 2444, ThreadID = 2456, StartAddress = 00914FB0, Parameter = 00910000
行为描述: 获取User基本信息
详情信息: Level = 2.
行为描述: 获取TickCount值
详情信息: TickCount = 5443625, SleepMilliseconds = 250.
行为描述: 设置特殊文件夹属性
详情信息: C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds Cache
C:\Documents and Settings\Administrator\IETldCache
行为描述: 修改注册表_启动项
详情信息: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\0OverlayIcon\
文件行为
VirSCANVirSCAN
行为描述: 创建文件
详情信息: C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\krnln.fnr
C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\shell.fne
C:\Documents and Settings\Administrator\Local Settings\Temp\PanDownload.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\LockPage.exe
C:\Program Files\Common Files\System\iminute.ini
C:\Program Files\Common Files\System\config.dat
C:\Documents and Settings\Administrator\Local Settings\Temp\config.dat
C:\Program Files\Common Files\System\safe.dat
C:\Documents and Settings\Administrator\Local Settings\Temp\safe.dat
C:\Program Files\Common Files\System\safemonn32.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\unit.bat
C:\Program Files\Common Files\System\safemon.dat
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{B29B420D-5911-11E7-91BE-7B****28}.dat
C:\Documents and Settings\Administrator\Local Settings\Temp\~DFDAEE.tmp
C:\Program Files\Common Files\System\ado\hehe.dat
行为描述: 创建可执行文件
详情信息: C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\krnln.fnr
C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\shell.fne
C:\Documents and Settings\Administrator\Local Settings\Temp\PanDownload.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\LockPage.exe
C:\Program Files\Common Files\System\safemonn32.dll
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
行为描述: 查找文件
详情信息: FileName = C:\WINDOWS
FileName = C:\WINDOWS\system32
FileName = C:\WINDOWS\system32\cmd.exe
FileName = C:\Documents and Settings
FileName = C:\Documents and Settings\Administrator
FileName = C:\Documents and Settings\Administrator\Local Settings
FileName = C:\Documents and Settings\Administrator\Local Settings\Temp
FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%
FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump
FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\PanDownload_v1.3.1
FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\PanDownload_v1.3.1\PanDownload_v1.3.1
FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe_7zdump\PanDownload_v1.3.1\PanDownload_v1.3.1\PanDownload
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\PanDownload.exe
FileName = C:\DOCUME~1
FileName = C:\DOCUME~1\ADMINI~1
行为描述: 删除文件
详情信息: C:\Documents and Settings\Administrator\Local Settings\Temp\~DFDAEE.tmp
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6TLOMATB\favicon[1].ico
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF3ED6.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF3F3F.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF40BC.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF40E0.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF4453.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF4465.tmp
行为描述: 修改BAT脚本文件
详情信息: C:\Documents and Settings\Administrator\Local Settings\Temp\unit.bat ---> Offset = 0
行为描述: 设置特殊文件夹属性
详情信息: C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds Cache
C:\Documents and Settings\Administrator\IETldCache
行为描述: 修改文件内容
详情信息: C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\krnln.fnr ---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\shell.fne ---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\PanDownload.exe ---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\LockPage.exe ---> Offset = 0
C:\Program Files\Common Files\System\iminute.ini ---> Offset = 0
C:\Program Files\Common Files\System\iminute.ini ---> Offset = 19
C:\Program Files\Common Files\System\config.dat ---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\config.dat ---> Offset = 0
C:\Program Files\Common Files\System\safe.dat ---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\safe.dat ---> Offset = 0
C:\Program Files\Common Files\System\safemonn32.dll ---> Offset = 0
C:\Program Files\Common Files\System\safemon.dat ---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{B29B420D-5911-11E7-91BE-7B****28}.dat ---> Offset = 512
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{B29B420D-5911-11E7-91BE-7B****28}.dat ---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\~DFDAEE.tmp ---> Offset = 16383
网络行为
VirSCANVirSCAN
行为描述: 联网打开网址
详情信息: InternetOpenUrlA: http://ww****cn/, hInternet = 0x00cc0004, Flags = 0x04000000
InternetOpenUrlA: http://ci****om/ip2city.asp, hInternet = 0x00cc0004, Flags = 0x04000000
InternetOpenUrlA: http://ww****om/, hInternet = 0x00cc0004, Flags = 0x04000000
InternetOpenUrlA: http://ww****om/getwinmm.php?type=1&compName=COMPUTER&visiteNow=03:17:19 &code=f44048e7&ip=&sys=Microsoft Windows XP 5.1 32bit&ver=5.3&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb, hInternet = 0x00cc0004, Flags = 0x04000000
InternetOpenUrlA: http://ww****om/insertCompdata.php?&compName=COMPUTER&sys=Microsoft Windows XP 5.1 32bit&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb, hInternet = 0x00cc0004, Flags = 0x04000000
InternetOpenUrlA: http://ww****om/countcomp.php?md5=f750c487afa08b09dfd169ccf45e22fb&compName=COMPUTER&setuptime=2017-06-25&qq=s2002108&sys=Microsoft Windows XP 5.1 32bit&ver=5.3&usever=4.0&domain=http://www.woniulock.com/, hInternet = 0x00cc0004, Flags = 0x04000000
InternetOpenUrlA: http://ww****om/taobaoke.php?domain=http://www.woniulock.com/, hInternet = 0x00cc0004, Flags = 0x04000000
InternetOpenUrlA: http://ww****om/visiturl.php?qq=s2002108, hInternet = 0x00cc0004, Flags = 0x04000000
InternetOpenUrlA: http://ww****om/getMd5Ver.php?md5=f750c487afa08b09dfd169ccf45e22fb, hInternet = 0x00cc0004, Flags = 0x04000000
InternetOpenUrlA: http://ww****om/getIdByMd5.php?md5=f750c487afa08b09dfd169ccf45e22fb, hInternet = 0x00cc0004, Flags = 0x04000000
行为描述: 下载文件
详情信息: URLDownloadToFileW: http://ww****om/favicon.ico ---> C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
行为描述: 连接指定站点
详情信息: InternetConnectA: ServerName = ww****om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x00000000
InternetConnectA: ServerName = ww****cn, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x04000000
InternetConnectA: ServerName = ci****om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x04000000
InternetConnectA: ServerName = ww****om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x04000000
行为描述: 打开HTTP连接
详情信息: InternetOpenA: UserAgent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; KB974489), hSession = 0x00cc0004
InternetOpenA: UserAgent: http://www.ip.cn/, hSession = 0x00cc0004
InternetOpenA: UserAgent: http://city.ip138.com/ip2city.asp, hSession = 0x00cc0004
InternetOpenA: UserAgent: http://www.ipchicken.com/, hSession = 0x00cc0004
InternetOpenA: UserAgent: http://www.woniulock.com/getwinmm.php?type=1&compName=COMPUTER&visiteNow=03:17:19 &code=f44048e7&ip=&sys=Microsoft Windows XP 5.1 32bit&ver=5.3&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb, hSession = 0x00cc0
InternetOpenA: UserAgent: http://www.woniulock.com/insertCompdata.php?&compName=COMPUTER&sys=Microsoft Windows XP 5.1 32bit&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb, hSession = 0x00cc0004
InternetOpenA: UserAgent: http://www.woniulock.com/countcomp.php?md5=f750c487afa08b09dfd169ccf45e22fb&compName=COMPUTER&setuptime=2017-06-25&qq=s2002108&sys=Microsoft Windows XP 5.1 32bit&ver=5.3&usever=4.0&domain=http://www.woniulock.com/, hSession = 0x00cc0
InternetOpenA: UserAgent: http://www.woniulock.com/taobaoke.php?domain=http://www.woniulock.com/, hSession = 0x00cc0004
InternetOpenA: UserAgent: http://www.woniulock.com/visiturl.php?qq=s2002108, hSession = 0x00cc0004
InternetOpenA: UserAgent: http://www.woniulock.com/getMd5Ver.php?md5=f750c487afa08b09dfd169ccf45e22fb, hSession = 0x00cc0004
InternetOpenA: UserAgent: download, hSession = 0x00cc0004
InternetOpenA: UserAgent: http://www.woniulock.com/getIdByMd5.php?md5=f750c487afa08b09dfd169ccf45e22fb, hSession = 0x00cc0004
行为描述: 建立到一个指定的套接字连接
详情信息: URL: ww****om, IP: **.133.40.**:80, SOCKET = 0x000005d0
URL: ww****cn, IP: **.133.40.**:80, SOCKET = 0x00000554
URL: ww****cn, IP: **.133.40.**:80, SOCKET = 0x000004bc
URL: ci****om, IP: **.133.40.**:80, SOCKET = 0x000004bc
URL: ww****cn, IP: **.133.40.**:80, SOCKET = 0x00000594
URL: ww****cn, IP: **.133.40.**:80, SOCKET = 0x000005d4
URL: ww****cn, IP: **.133.40.**:80, SOCKET = 0x000005d0
URL: ww****cn, IP: **.133.40.**:80, SOCKET = 0x0000059c
URL: ww****cn, IP: **.133.40.**:80, SOCKET = 0x000005dc
URL: ci****om, IP: **.133.40.**:80, SOCKET = 0x000005c8
URL: ww****om, IP: **.133.40.**:80, SOCKET = 0x000005c8
URL: ww****om, IP: **.133.40.**:80, SOCKET = 0x000005e4
URL: ww****om, IP: **.133.40.**:80, SOCKET = 0x000005dc
URL: ww****om, IP: **.133.40.**:80, SOCKET = 0x000005e0
URL: ww****om, IP: **.133.40.**:80, SOCKET = 0x000005b8
行为描述: 读取网络文件
详情信息: hFile = 0x00cc000c, BytesToRead =2048, BytesRead = 2048.
hFile = 0x00cc000c, BytesToRead =4096, BytesRead = 4096.
行为描述: 发送HTTP包
详情信息: GET /favicon.ico HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; KB974489) Host: ww****om Connection: Keep-Alive
GET / HTTP/1.1 User-Agent: http://www.ip.cn/ Host: ww****cn
GET /ip2city.asp HTTP/1.1 User-Agent: http://city.ip138.com/ip2city.asp Host: ci****om
GET / HTTP/1.1 User-Agent: http://www.ipchicken.com/ Host: ww****om
GET /getwinmm.php?type=1&compName=COMPUTER&visiteNow=03:17:19%20&code=f44048e7&ip=&sys=Microsoft%20Windows%20XP%205.1%2032bit&ver=5.3&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb HTTP/1.1 User-Agent: http://www.woniulock.com/getwinmm.php?type=1&compName=COMPUTER&visiteNow=03:17:19 &code=f44048e7&ip=&sys=Microsoft Windows XP 5.1 32bit&ver=5.3&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb Host: ww****om
GET /insertCompdata.php?&compName=COMPUTER&sys=Microsoft%20Windows%20XP%205.1%2032bit&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb HTTP/1.1 User-Agent: http://www.woniulock.com/insertCompdata.php?&compName=COMPUTER&sys=Microsoft Windows XP 5.1 32bit&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb Host: ww****om
GET /countcomp.php?md5=f750c487afa08b09dfd169ccf45e22fb&compName=COMPUTER&setuptime=2017-06-25&qq=s2002108&sys=Microsoft%20Windows%20XP%205.1%2032bit&ver=5.3&usever=4.0&domain=http://www.woniulock.com/ HTTP/1.1 User-Agent: http://www.woniulock.com/countcomp.php?md5=f750c487afa08b09dfd169ccf45e22fb&compName=COMPUTER&setuptime=2017-06-25&qq=s2002108&sys=Microsoft Windows XP 5.1 32bit&ver=5.3&usever=4.0&domain=http://www.woniulock.com/ Host: ww****om
GET /taobaoke.php?domain=http://www.woniulock.com/ HTTP/1.1 User-Agent: http://www.woniulock.com/taobaoke.php?domain=http://www.woniulock.com/ Host: ww****om
GET /visiturl.php?qq=s2002108 HTTP/1.1 User-Agent: http://www.woniulock.com/visiturl.php?qq=s2002108 Host: ww****om
GET /getMd5Ver.php?md5=f750c487afa08b09dfd169ccf45e22fb HTTP/1.1 User-Agent: http://www.woniulock.com/getMd5Ver.php?md5=f750c487afa08b09dfd169ccf45e22fb Host: ww****om
HEAD /downfile/loadfor32_2.0.rar HTTP/1.1 User-Agent: download Host: ww****om Content-Length: 0 Cache-Control: no-cache
HEAD /downfile/loadfor32_2.0.rar HTTP/1.1 User-Agent: download Host: ww****om Content-Length: 0 Cache-Control: no-cache Connection: Keep-Alive
GET /getIdByMd5.php?md5=f750c487afa08b09dfd169ccf45e22fb HTTP/1.1 User-Agent: http://www.woniulock.com/getIdByMd5.php?md5=f750c487afa08b09dfd169ccf45e22fb Host: ww****om
行为描述: 打开HTTP请求
详情信息: HttpOpenRequestA: ww****om:80/favicon.ico, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x00600010
HttpOpenRequestA: ww****cn:80/, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
HttpOpenRequestA: ci****om:80/ip2city.asp, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
HttpOpenRequestA: ww****om:80/, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
HttpOpenRequestA: ww****om:80/getwinmm.php?type=1&compname=computer&visitenow=03:17:19 &code=f44048e7&ip=&sys=microsoft windows xp 5.1 32bit&ver=5.3&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
HttpOpenRequestA: ww****om:80/insertcompdata.php?&compname=computer&sys=microsoft windows xp 5.1 32bit&setuptime=2017-06-25&qq=s2002108&md5=f750c487afa08b09dfd169ccf45e22fb, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
HttpOpenRequestA: ww****om:80/countcomp.php?md5=f750c487afa08b09dfd169ccf45e22fb&compname=computer&setuptime=2017-06-25&qq=s2002108&sys=microsoft windows xp 5.1 32bit&ver=5.3&usever=4.0&domain=http://www.woniulock.com/, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
HttpOpenRequestA: ww****om:80/taobaoke.php?domain=http://www.woniulock.com/, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
HttpOpenRequestA: ww****om:80/visiturl.php?qq=s2002108, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
HttpOpenRequestA: ww****om:80/getmd5ver.php?md5=f750c487afa08b09dfd169ccf45e22fb, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
HttpOpenRequestA: ww****om:80/downfile/loadfor32_2.0.rar, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: HEAD, Referer: , Flags = 0x80000000
HttpOpenRequestA: ww****om:80/getidbymd5.php?md5=f750c487afa08b09dfd169ccf45e22fb, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x04000000
行为描述: 按名称获取主机地址
详情信息: GetAddrInfoW: ww****om
GetAddrInfoW: ww****cn
GetAddrInfoW: ci****om
注册表行为
VirSCANVirSCAN
行为描述: 修改注册表
详情信息: \REGISTRY\USER\S-*\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\PanDownload.exe
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8D6E9E7B-57C4-4080-AAAE-5DC03C45B9D7}\InProcServer32\
\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\MyOverlayIcon\
\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}\InprocServer32\
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}\InprocServer32\
\REGISTRY\USER\S-*\Software\Microsoft\Windows NT\CurrentVersion\ProductName
\REGISTRY\USER\S-*\Software\Microsoft\Windows NT\CurrentVersion\CurrentVersion
\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{1EA4DBF0-3C3B-11CF-810C-00AA00389B71}\1.1\0\win32\
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Explorer\FaultCount
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Explorer\FaultTime
\REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\Main\Window_Placement
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{61066b64-7a09-11e4-91b2-806d6172696f}\Generation
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{67ff5543-c5c9-11e0-9f6d-806d6172696f}\Generation
\REGISTRY\USER\S-*\SessionInformation\ProgramCount
\REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\Desktop\Components\0\Position
行为描述: 删除注册表键值
详情信息: \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL
\REGISTRY\MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW\DWFileTreeRoot
\REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\0\Expiration
\REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\1\Expiration
行为描述: 修改注册表_服务项
详情信息: \REGISTRY\MACHINE\SYSTEM\ControlSet002\Services\reload\Start
\REGISTRY\MACHINE\SYSTEM\ControlSet002\Services\reload\ImagePath
行为描述: 删除注册表键
详情信息: \REGISTRY\MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW\
行为描述: 修改注册表_启动项
详情信息: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\0OverlayIcon\
其他行为
VirSCANVirSCAN
行为描述: 创建互斥体
详情信息: CTF.LBES.MutexDefaultS-*
CTF.Compart.MutexDefaultS-*
CTF.Asm.MutexDefaultS-*
CTF.Layouts.MutexDefaultS-*
CTF.TMD.MutexDefaultS-*
CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-*
Local\ZonesCounterMutex
Local\ZoneAttributeCacheCounterMutex
Local\ZonesCacheCounterMutex
Local\ZonesLockedCacheCounterMutex
MSCTF.Shared.MUTEX.ELH
MSCTF.Shared.MUTEX.EAI
oleacc-msaa-loaded
Local\RSS Eventing Connection Database Mutex 00000844
Local\Feed Eventing Shared Memory Mutex S-*
行为描述: 创建事件对象
详情信息: EventName = DINPUTWINMM
EventName = Wait For Buffer Return
EventName = MSCTF.SendReceive.Event.EAI.IC
EventName = MSCTF.SendReceiveConection.Event.EAI.IC
EventName = _fCanRegisterWithShellService
EventName = Local\RSS Eventing Event Event 00000844
EventName = IEFrame.EventCheckDefaultBrowser
EventName = Local\Feed Arbitration Lock Event [ Process : 0x00000844 ]
EventName = Local\Feed Arbitration Unlock Event [ Process : 0x00000844 ]
EventName = Global\crypt32LogoffEvent
EventName = CTF.ThreadMarshalInterfaceEvent.000008F0.00000000.00000000
EventName = CTF.ThreadMIConnectionEvent.000008F0.00000000.00000000
EventName = MSCTF.SendReceive.Event.API.IC
EventName = MSCTF.SendReceiveConection.Event.API.IC
EventName = CTF.ThreadMarshalInterfaceEvent.000008F0.00000000.00000001
行为描述: 常规加载驱动
详情信息: \??\C:\Program Files\Common Files\System\uiprotect.sys
行为描述: 查找指定窗口
详情信息: NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,]
NtUserFindWindowEx: [Class,Window] = [CicLoaderWndClass,]
NtUserFindWindowEx: [Class,Window] = [UIMainFrame,]
NtUserFindWindowEx: [Class,Window] = [Proxy Desktop,]
NtUserFindWindowEx: [Class,Window] = [BaseBar,ChanApp]
NtUserFindWindowEx: [Class,Window] = [SysListView32,]
NtUserFindWindowEx: [Class,Window] = [SHELLDLL_DefView,]
NtUserFindWindowEx: [Class,Window] = [,hookforbrowser]
NtUserFindWindowEx: [Class,Window] = [Static,]
NtUserFindWindowEx: [Class,Window] = [,xxxx_xxxx]
NtUserFindWindowEx: [Class,Window] = [MS_AutodialMonitor,]
NtUserFindWindowEx: [Class,Window] = [MS_WebCheckMonitor,]
NtUserFindWindowEx: [Class,Window] = [OleMainThreadWndClass,]
NtUserFindWindowEx: [Class,Window] = [SystemTray_Main,]
NtUserFindWindowEx: [Class,Window] = [CSCHiddenWindow,]
行为描述: 打开事件
详情信息: HookSwitchHookEnabledEvent
_fCanRegisterWithShellService
\SECURITY\LSA_AUTHENTICATION_INITIALIZED
CTF.ThreadMIConnectionEvent.000007B4.00000000.00000052
CTF.ThreadMarshalInterfaceEvent.000007B4.00000000.00000052
MSCTF.SendReceiveConection.Event.ELH.IC
MSCTF.SendReceive.Event.ELH.IC
MSFT.VSA.COM.DISABLE.2224
MSFT.VSA.IEC.STATUS.6c736db0
Global\SvcctrlStartEvent_A3752DX
Local\RSS Eventing Event Event 00000844
msgina: ShellReadyEvent
\INSTALLATION_SECURITY_HOLD
Global\crypt32LogoffEvent
CTF.ThreadMIConnectionEvent.000008F0.00000000.00000000
行为描述: 获取User基本信息
详情信息: Level = 2.
行为描述: 获取TickCount值
详情信息: TickCount = 5443625, SleepMilliseconds = 250.
行为描述: 调整进程token权限
详情信息: SE_LOAD_DRIVER_PRIVILEGE
SE_DEBUG_PRIVILEGE
SE_ASSIGNPRIMARYTOKEN_PRIVILEGE
SE_AUDIT_PRIVILEGE
SE_BACKUP_PRIVILEGE
SE_CHANGE_NOTIFY_PRIVILEGE
SE_CREATE_PAGEFILE_PRIVILEGE
SE_CREATE_PERMANENT_PRIVILEGE
SE_CREATE_TOKEN_PRIVILEGE
SE_INC_BASE_PRIORITY_PRIVILEGE
SE_INCREASE_QUOTA_PRIVILEGE
SE_LOCK_MEMORY_PRIVILEGE
SE_PROF_SINGLE_PROCESS_PRIVILEGE
SE_REMOTE_SHUTDOWN_PRIVILEGE
SE_RESTORE_PRIVILEGE
行为描述: 枚举窗口
详情信息: N/A
行为描述: 可执行文件签名信息
详情信息: C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\krnln.fnr(签名验证: 未通过)
C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\shell.fne(签名验证: 未通过)
C:\Documents and Settings\Administrator\Local Settings\Temp\PanDownload.exe(签名验证: 未通过)
C:\Documents and Settings\Administrator\Local Settings\Temp\LockPage.exe(签名验证: 未通过)
C:\Program Files\Common Files\System\safemonn32.dll(签名验证: 未通过)
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico(签名验证: 未通过)
行为描述: 调用Sleep函数
详情信息: [1]: MilliSeconds = 250.
行为描述: 隐藏指定窗口
详情信息: [Window,Class] = [xxxx_xxxx,#32770]
[Window,Class] = [,BrowserFrameGripperClass]
[Window,Class] = [,UIMainFrame]
行为描述: 可执行文件MD5
详情信息: C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\krnln.fnr ---> 97c8fe752e354b2945e4c593a87e4a8b
C:\Documents and Settings\Administrator\Local Settings\Temp\E_4\shell.fne ---> d63851f89c7ad4615565ca300e8b8e27
C:\Documents and Settings\Administrator\Local Settings\Temp\PanDownload.exe ---> 文件过大!
C:\Documents and Settings\Administrator\Local Settings\Temp\LockPage.exe ---> a859806132be4042a242d42ae30f1664
C:\Program Files\Common Files\System\safemonn32.dll ---> e920cb8eb27afb4535f009e11b523b88
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico ---> fe1d0ee5901dd167ee9b28eece31786c
行为描述: 打开互斥体
详情信息: ShimCacheMutex
Local\!IETld!Mutex
DBWinMutex
Ie4Setup.Mutext
Local\RSS Eventing Connection Database Mutex 00000844
Local\WininetStartupMutex
Local\_!MSFTHISTORY!_
Local\c:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Local\c:!documents and settings!administrator!cookies!
Local\c:!documents and settings!administrator!local settings!history!history.ie5!
Local\c:!documents and settings!administrator!local settings!application data!microsoft!feeds cache!
Local\WininetConnectionMutex
Local\WininetProxyRegistryMutex
Local\c:!documents and settings!administrator!ietldcache!
CtfmonInstMutexDefaultS-*
行为描述: 加载新释放的文件
详情信息: Image: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\E_4\krnln.fnr.
Image: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\E_4\shell.fne.
Image: C:\Program Files\Common Files\System\safemonn32.dll.
Activities
VirSCANVirSCAN
活动名 类型
com.iapp.app.logoActivity android.intent.action.MAIN
com.iapp.app.logoActivity android.intent.category.LAUNCHER
危险函数
VirSCANVirSCAN
函数名称 信息
android/app/NotificationManager;->notify 信息通知栏
LocationManager;->getLastKnownLocation 获取地址位置
ContentResolver;->query 读取联系人、短信等数据库
java/net/URL;->openConnection 连接URL
HttpClient;->execute 请求远程服务器
DefaultHttpClient;->execute 发送HTTP请求
Camera;->open 开启相机
TelephonyManager;->getDeviceId 搜集用户手机IMEI码、电话号码、系统版本号等信息
MediaRecorder;->setAudioSource 开启录音功能
MediaRecorder;->setVideoSource 开启视频录制
权限列表
VirSCANVirSCAN
许可名称 信息
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.INTERNET 连接网络(2G或3G)
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.CAMERA 访问照相机设备
android.permission.VIBRATE 允许设备震动
android.permission.READ_EXTERNAL_STORAGE 读外部存储器(如:SD卡)
android.permission.MOUNT_UNMOUNT_FILESYSTEMS 挂载、反挂载外部文件系统
android.permission.RECORD_AUDIO 录音(使用AudioRecord)
android.permission.SYSTEM_ALERT_WINDOW 显示系统窗口
android.permission.FLASHLIGHT 访问闪光灯
文件列表
VirSCANVirSCAN
文件名 校验码
META-INF/MANIFEST.MF 0x176c5ad6
META-INF/CERT.SF 0x3aa64142
META-INF/CERT.RSA 0x493a70b6
AndroidManifest.xml 0x1df76874
assets/lib.so 0x3ef28fba
assets/res/02671402aee.png 0xa3ed241d
assets/res/1.jpg 0x924abced
assets/res/2.jpg 0x5efed3a0
assets/res/3.jpg 0x5fa82824
assets/res/4.jpg 0x6a734eb6
assets/res/547292.png 0xb3aab857
assets/res/833969.png 0xe91391d2
assets/res/950943.png 0x69b409f0
assets/res/a.png 0xec50e078
assets/res/abc_ic_ab_back_mtrl_am_alpha.png 0x23f1af9d
assets/res/abc_ic_menu_moreoverflow_mtrl_alpha.png 0xb056041c
assets/res/ad_img_load.png 0x23f11b17
assets/res/android.png 0xd93c5dee
assets/res/bai311.png 0xd2196ad3
assets/res/bai414.png 0x66627778
assets/res/beep.ogg 0x1bac0bfc
assets/res/ic_navigation_white_24dp.png 0x77624c5d
assets/res/ic_settings_black_24dp.png 0x20f433a0
assets/res/icon_fans_comment_normal.png 0x76e1fe32
assets/res/icon_loading_progress.png 0x3615d34
assets/res/icon_setup_normal.png 0x20a42d66
assets/res/loading_big.png 0x2be08b8
assets/res/loading_gif.png 0x971db6a3
assets/res/mobile.png 0xe242f87d
assets/res/moo.png 0xb6b760e7
assets/res/pvv.png 0x7324b15
assets/res/settings_check_off.png 0x4ba0513b
assets/res/settings_check_on.png 0xec4e8271
assets/res/shadow_bottom.png 0xe309e8a4
assets/res/yyb_friends.png 0xf969c41e
classes.dex 0x2fac8efd
lib/armeabi-v7a/libygsiyu.so 0xad2b5ed6
lib/armeabi/libygsiyu.so 0x8143ceed
lib/x86/libygsiyu.so 0x689c763a
res/anim/abc_fade_in.xml 0x2f94166b
res/anim/abc_fade_out.xml 0x396f7a13
res/anim/abc_grow_fade_in_from_bottom.xml 0xd9f09e0
res/anim/abc_popup_enter.xml 0x5cd73f80
res/anim/abc_popup_exit.xml 0xb758a931
res/anim/abc_shrink_fade_out_from_bottom.xml 0xa8ad3982
res/anim/abc_slide_in_bottom.xml 0x73663fbe
res/anim/abc_slide_in_top.xml 0x41f8f3af
res/anim/abc_slide_out_bottom.xml 0x51b9c50a
res/anim/abc_slide_out_top.xml 0x4f613364
res/anim/fade.xml 0xdea0186f
res/anim/hold.xml 0xe88a6ff3
res/anim/hyperspace_in.xml 0x4e158c9e
res/anim/hyperspace_out.xml 0x38820aba
res/anim/my_alpha_action.xml 0xdb4301e2
res/anim/my_scale_action.xml 0xd52bce0c
res/anim/push_left_in.xml 0xd22cac64
res/anim/push_left_in2.xml 0xd22cac64
res/anim/push_left_out.xml 0x22adf124
res/anim/push_left_out2.xml 0x22adf124
res/anim/push_up_in.xml 0xcdca50c3
res/anim/push_up_out.xml 0x6b4d2b46
res/anim/scale_rotate.xml 0x8327f408
res/anim/scale_translate.xml 0x90a76167
res/anim/scale_translate_rotate.xml 0x2bbe82af
res/anim/slide_down_out.xml 0xb15d52ac
res/anim/slide_left.xml 0x1c98ba48
res/anim/slide_right.xml 0x572d5a6f
res/anim/slide_up_in.xml 0x33ea183
res/anim/wave_scale.xml 0x56cc4796
res/anim/zoom_enter.xml 0x75a5d582
res/anim/zoom_exit.xml 0xdb9e8694
res/color-v11/abc_background_cache_hint_selector_material_dark.xml 0x7b570c28
res/color-v11/abc_background_cache_hint_selector_material_light.xml 0x214cbc75
res/color-v23/abc_color_highlight_material.xml 0x5b973f50
res/color/abc_background_cache_hint_selector_material_dark.xml 0xb71cf25d
res/color/abc_background_cache_hint_selector_material_light.xml 0x395e4363
res/color/abc_primary_text_disable_only_material_dark.xml 0x65a5f53f
res/color/abc_primary_text_disable_only_material_light.xml 0xf6ba8a45
res/color/abc_primary_text_material_dark.xml 0x79d43312
res/color/abc_primary_text_material_light.xml 0xc46a0fa
res/color/abc_search_url_text.xml 0x53b37346
res/color/abc_secondary_text_material_dark.xml 0xeacb4c68
res/color/abc_secondary_text_material_light.xml 0x9f59df80
res/color/switch_thumb_material_dark.xml 0x796ec42
res/color/switch_thumb_material_light.xml 0x94899338
res/drawable-hdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0x64228504
res/drawable-hdpi-v4/abc_btn_check_to_on_mtrl_000.png 0x74f15b22
res/drawable-hdpi-v4/abc_btn_check_to_on_mtrl_015.png 0x347f06cc
res/drawable-hdpi-v4/abc_btn_radio_to_on_mtrl_000.png 0xa580de72
res/drawable-hdpi-v4/abc_btn_radio_to_on_mtrl_015.png 0x714e0a91
res/drawable-hdpi-v4/abc_btn_rating_star_off_mtrl_alpha.png 0x817a051a
res/drawable-hdpi-v4/abc_btn_rating_star_on_mtrl_alpha.png 0xb411cc6f
res/drawable-hdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0x11706987
res/drawable-hdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0x1764993
res/drawable-hdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0x3df2f3
res/drawable-hdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png 0x4d559b7f
res/drawable-hdpi-v4/abc_ic_clear_mtrl_alpha.png 0x799ebe47
res/drawable-hdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0x7ea78a3e
res/drawable-hdpi-v4/abc_ic_go_search_api_mtrl_alpha.png 0xfc73d072
res/drawable-hdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0x836988f5
res/drawable-hdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0xbc3edf09
res/drawable-hdpi-v4/abc_ic_menu_moreoverflow_mtrl_alpha.png 0xd2a2c4d0
res/drawable-hdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png 0x4b50c4ad
res/drawable-hdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png 0x743a9b21
res/drawable-hdpi-v4/abc_ic_menu_share_mtrl_alpha.png 0x60f120a
res/drawable-hdpi-v4/abc_ic_search_api_mtrl_alpha.png 0x9c3f63ba
res/drawable-hdpi-v4/abc_ic_star_black_16dp.png 0xdbbcee79
res/drawable-hdpi-v4/abc_ic_star_black_36dp.png 0xfefc0dde
res/drawable-hdpi-v4/abc_ic_star_half_black_16dp.png 0xeff95437
res/drawable-hdpi-v4/abc_ic_star_half_black_36dp.png 0xe1a5c56
res/drawable-hdpi-v4/abc_ic_voice_search_api_mtrl_alpha.png 0xa3db01a5
res/drawable-hdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x9f45a479
res/drawable-hdpi-v4/abc_list_focused_holo.9.png 0x8e4da209
res/drawable-hdpi-v4/abc_list_longpressed_holo.9.png 0x81b12fde
res/drawable-hdpi-v4/abc_list_pressed_holo_dark.9.png 0x62993bc8
res/drawable-hdpi-v4/abc_list_pressed_holo_light.9.png 0x7c69f413
res/drawable-hdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0xe50f1648
res/drawable-hdpi-v4/abc_list_selector_disabled_holo_light.9.png 0x43f655e6
res/drawable-hdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0xbed682a
res/drawable-hdpi-v4/abc_popup_background_mtrl_mult.9.png 0xda0d75a8
res/drawable-hdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0x87a95710
res/drawable-hdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0x7c2d3dcb
res/drawable-hdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0x6ba280e1
res/drawable-hdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0x415336be
res/drawable-hdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0x65b9786e
res/drawable-hdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0x7ab89543
res/drawable-hdpi-v4/abc_switch_track_mtrl_alpha.9.png 0x18025bff
res/drawable-hdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0x6c11debe
res/drawable-hdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x103aeb6a
res/drawable-hdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0xaa35a06e
res/drawable-hdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0xafd79c5c
res/drawable-hdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0xee0f1fea
res/drawable-hdpi-v4/ic_launcher.png 0xf248df62
res/drawable-hdpi-v4/img_back_g.png 0xd76a7ae4
res/drawable-hdpi-v4/img_delete.png 0x43f56755
res/drawable-hdpi-v4/img_down_go.png 0x7d3df75
res/drawable-hdpi-v4/img_down_inst.png 0xfb87f64e
res/drawable-hdpi-v4/img_down_ok.png 0x52b4a04f
res/drawable-hdpi-v4/img_down_open.png 0xd7a95a9a
res/drawable-hdpi-v4/img_down_select_all.png 0x7a44c6a1
res/drawable-hdpi-v4/img_down_select_no.png 0x3391aa0f
res/drawable-hdpi-v4/img_down_select_off.png 0x918e12ef
res/drawable-hdpi-v4/img_down_stop.png 0xb699afdc
res/drawable-hdpi-v4/img_iapp.png 0xd57594e2
res/drawable-hdpi-v4/img_ing.png 0x7b38c0ae
res/drawable-hdpi-v4/img_list_img.png 0x2e015f64
res/drawable-hdpi-v4/img_list_mp3.png 0x84c94797
res/drawable-hdpi-v4/img_list_mp4.png 0xd2caf87d
res/drawable-hdpi-v4/img_list_myu.png 0x8a8394d3
res/drawable-hdpi-v4/img_list_object.png 0x3767032f
res/drawable-hdpi-v4/img_list_txt.png 0xb1747efb
res/drawable-hdpi-v4/img_list_xml.png 0x5f84b459
res/drawable-hdpi-v4/img_list_zip.png 0xae92324
res/drawable-hdpi-v4/img_menu.png 0x6e8fc407
res/drawable-ldrtl-hdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png 0xb5157429
res/drawable-ldrtl-hdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0x5b37968c
res/drawable-ldrtl-hdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0x5842f18c
res/drawable-ldrtl-hdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0xa596c3d0
res/drawable-ldrtl-mdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png 0xaaf195a5
res/drawable-ldrtl-mdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0x10f9ca4f
res/drawable-ldrtl-mdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0x8c99babb
res/drawable-ldrtl-mdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0xb1c14ea7
res/drawable-ldrtl-xhdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png 0x183f0445
res/drawable-ldrtl-xhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0xac092729
res/drawable-ldrtl-xhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0x257e3129
res/drawable-ldrtl-xhdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0x64a842b9
res/drawable-ldrtl-xxhdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png 0x2410865f
res/drawable-ldrtl-xxhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0x335d861c
res/drawable-ldrtl-xxhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0xd511ead1
res/drawable-ldrtl-xxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0x48f4c207
res/drawable-ldrtl-xxxhdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png 0x20cdc21d
res/drawable-ldrtl-xxxhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0xabd6747f
res/drawable-ldrtl-xxxhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0x26079ff1
res/drawable-ldrtl-xxxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0x2ff6ecc
res/drawable-mdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0xa852580c
res/drawable-mdpi-v4/abc_btn_check_to_on_mtrl_000.png 0xfaaf439
res/drawable-mdpi-v4/abc_btn_check_to_on_mtrl_015.png 0x6c18aa07
res/drawable-mdpi-v4/abc_btn_radio_to_on_mtrl_000.png 0xfdd05be0
res/drawable-mdpi-v4/abc_btn_radio_to_on_mtrl_015.png 0xffdb8904
res/drawable-mdpi-v4/abc_btn_rating_star_off_mtrl_alpha.png 0x8c457b6b
res/drawable-mdpi-v4/abc_btn_rating_star_on_mtrl_alpha.png 0xab7e9f96
res/drawable-mdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0xa7483509
res/drawable-mdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0xd76b7b1e
res/drawable-mdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0xb6857dd0
res/drawable-mdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png 0xb2e9a498
res/drawable-mdpi-v4/abc_ic_clear_mtrl_alpha.png 0xe790a0d0
res/drawable-mdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0x32483490
res/drawable-mdpi-v4/abc_ic_go_search_api_mtrl_alpha.png 0xbed90f7c
res/drawable-mdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0x7cef9caa
res/drawable-mdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0x42efd0f1
res/drawable-mdpi-v4/abc_ic_menu_moreoverflow_mtrl_alpha.png 0xebc07e4
res/drawable-mdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png 0xbab9dddb
res/drawable-mdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png 0xb3728438
res/drawable-mdpi-v4/abc_ic_menu_share_mtrl_alpha.png 0xbe19401d
res/drawable-mdpi-v4/abc_ic_search_api_mtrl_alpha.png 0x7a6d4b49
res/drawable-mdpi-v4/abc_ic_star_black_16dp.png 0xd2747cc6
res/drawable-mdpi-v4/abc_ic_star_black_36dp.png 0x8eade8c4
res/drawable-mdpi-v4/abc_ic_star_half_black_16dp.png 0x376d09c1
res/drawable-mdpi-v4/abc_ic_star_half_black_36dp.png 0xd99f62d9
res/drawable-mdpi-v4/abc_ic_voice_search_api_mtrl_alpha.png 0xb6b2ac0c
res/drawable-mdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x9f45a479
res/drawable-mdpi-v4/abc_list_focused_holo.9.png 0xb1ab9d03
res/drawable-mdpi-v4/abc_list_longpressed_holo.9.png 0x78c37895
res/drawable-mdpi-v4/abc_list_pressed_holo_dark.9.png 0x686b7a66
res/drawable-mdpi-v4/abc_list_pressed_holo_light.9.png 0x32efca3
res/drawable-mdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0x551f7c98
res/drawable-mdpi-v4/abc_list_selector_disabled_holo_light.9.png 0xd6426851
res/drawable-mdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0xe2078e4d
res/drawable-mdpi-v4/abc_popup_background_mtrl_mult.9.png 0x3c2b73c5
res/drawable-mdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0xc5139d00
res/drawable-mdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0x3150efb2
res/drawable-mdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0x92d4681d
res/drawable-mdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0x3a0eb435
res/drawable-mdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0xd393324b
res/drawable-mdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0xe9abec02
res/drawable-mdpi-v4/abc_switch_track_mtrl_alpha.9.png 0xd6b37a0c
res/drawable-mdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0xb58b040f
res/drawable-mdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x4f16ccfc
res/drawable-mdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0xf8dbf6f6
res/drawable-mdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0xfb4249d4
res/drawable-mdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0x19a0052e
res/drawable-mdpi-v4/ic_launcher.png 0x6a84dfd9
res/drawable-mdpi-v4/img_iapp.png 0xfcad59f4
res/drawable-mdpi-v4/navbar.9.png 0xdcbb720d
res/drawable-v11/abc_textfield_search_material.xml 0xce463838
res/drawable-v21/abc_action_bar_item_background_material.xml 0xb794af16
res/drawable-v21/abc_btn_colored_material.xml 0x4280b364
res/drawable-v21/abc_edit_text_material.xml 0x627c56de
res/drawable-v21/abc_ratingbar_indicator_material.xml 0x5b57a222
res/drawable-v21/abc_ratingbar_small_material.xml 0xbed7f6fc
res/drawable-v23/abc_control_background_material.xml 0xb2678245
res/drawable-xhdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0xcf127e45
res/drawable-xhdpi-v4/abc_btn_check_to_on_mtrl_000.png 0x9dc49f7d
res/drawable-xhdpi-v4/abc_btn_check_to_on_mtrl_015.png 0xb578b0b6
res/drawable-xhdpi-v4/abc_btn_radio_to_on_mtrl_000.png 0xb67a40bc
res/drawable-xhdpi-v4/abc_btn_radio_to_on_mtrl_015.png 0x48c0aa49
res/drawable-xhdpi-v4/abc_btn_rating_star_off_mtrl_alpha.png 0x7ca23195
res/drawable-xhdpi-v4/abc_btn_rating_star_on_mtrl_alpha.png 0x810875a7
res/drawable-xhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0xcd563567
res/drawable-xhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0x3e9a5317
res/drawable-xhdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0xf70ddcc0
res/drawable-xhdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png 0x2208bbf4
res/drawable-xhdpi-v4/abc_ic_clear_mtrl_alpha.png 0x59653fcd
res/drawable-xhdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0x4d465d62
res/drawable-xhdpi-v4/abc_ic_go_search_api_mtrl_alpha.png 0x3994a8c0
res/drawable-xhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0xa7e68a05
res/drawable-xhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0x1c6691ae
res/drawable-xhdpi-v4/abc_ic_menu_moreoverflow_mtrl_alpha.png 0xb9a1d654
res/drawable-xhdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png 0xdb4a104
res/drawable-xhdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png 0xc7885a40
res/drawable-xhdpi-v4/abc_ic_menu_share_mtrl_alpha.png 0xbf9dc0ff
res/drawable-xhdpi-v4/abc_ic_search_api_mtrl_alpha.png 0xd0ddade2
res/drawable-xhdpi-v4/abc_ic_star_black_16dp.png 0x8f39f3
res/drawable-xhdpi-v4/abc_ic_star_black_36dp.png 0x374f1282
res/drawable-xhdpi-v4/abc_ic_star_half_black_16dp.png 0xa306a485
res/drawable-xhdpi-v4/abc_ic_star_half_black_36dp.png 0x6b6d8b7a
res/drawable-xhdpi-v4/abc_ic_voice_search_api_mtrl_alpha.png 0x8776b055
res/drawable-xhdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x9f45a479
res/drawable-xhdpi-v4/abc_list_focused_holo.9.png 0xbde23956
res/drawable-xhdpi-v4/abc_list_longpressed_holo.9.png 0x84a788a6
res/drawable-xhdpi-v4/abc_list_pressed_holo_dark.9.png 0x98f7c81a
res/drawable-xhdpi-v4/abc_list_pressed_holo_light.9.png 0x5314692b
res/drawable-xhdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0x41748705
res/drawable-xhdpi-v4/abc_list_selector_disabled_holo_light.9.png 0x1c2ff2be
res/drawable-xhdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0x63ee6937
res/drawable-xhdpi-v4/abc_popup_background_mtrl_mult.9.png 0x5343eaf
res/drawable-xhdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0xabc8be5c
res/drawable-xhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0x11f71e70
res/drawable-xhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0x7c6aeb4d
res/drawable-xhdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0xbf40ca92
res/drawable-xhdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0x1a186496
res/drawable-xhdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0x458f09df
res/drawable-xhdpi-v4/abc_switch_track_mtrl_alpha.9.png 0x4ebe0617
res/drawable-xhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0x361544c6
res/drawable-xhdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x4853c2d6
res/drawable-xhdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0x7a6dbe65
res/drawable-xhdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0xeaa0434b
res/drawable-xhdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0x4cfa2def
res/drawable-xhdpi-v4/ic_launcher.png 0xa227fc8a
res/drawable-xhdpi-v4/img_iapp.png 0xb9e8e577
res/drawable-xxhdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0x7758fe71
res/drawable-xxhdpi-v4/abc_btn_check_to_on_mtrl_000.png 0x94f2a26f
res/drawable-xxhdpi-v4/abc_btn_check_to_on_mtrl_015.png 0xbe6202c4
res/drawable-xxhdpi-v4/abc_btn_radio_to_on_mtrl_000.png 0x4c84ff8a
res/drawable-xxhdpi-v4/abc_btn_radio_to_on_mtrl_015.png 0x8409c614
res/drawable-xxhdpi-v4/abc_btn_rating_star_off_mtrl_alpha.png 0xf7330862
res/drawable-xxhdpi-v4/abc_btn_rating_star_on_mtrl_alpha.png 0xf8645745
res/drawable-xxhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0xe3ff53b2
res/drawable-xxhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0xb888b755
res/drawable-xxhdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0x7cd87445
res/drawable-xxhdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png 0x9de04f3d
res/drawable-xxhdpi-v4/abc_ic_clear_mtrl_alpha.png 0x5a9a6442
res/drawable-xxhdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0x9c96c544
res/drawable-xxhdpi-v4/abc_ic_go_search_api_mtrl_alpha.png 0x53da0904
res/drawable-xxhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0x2076590
res/drawable-xxhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0xed54c33a
res/drawable-xxhdpi-v4/abc_ic_menu_moreoverflow_mtrl_alpha.png 0xd4313c3e
res/drawable-xxhdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png 0xd9456a27
res/drawable-xxhdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png 0xee5349d8
res/drawable-xxhdpi-v4/abc_ic_menu_share_mtrl_alpha.png 0xf6f48e1c
res/drawable-xxhdpi-v4/abc_ic_search_api_mtrl_alpha.png 0xc01fb8ab
res/drawable-xxhdpi-v4/abc_ic_star_black_16dp.png 0x5ab712b9
res/drawable-xxhdpi-v4/abc_ic_star_black_36dp.png 0xa6cf7e1
res/drawable-xxhdpi-v4/abc_ic_star_half_black_16dp.png 0x9ccb2530
res/drawable-xxhdpi-v4/abc_ic_star_half_black_36dp.png 0xc388831a
res/drawable-xxhdpi-v4/abc_ic_voice_search_api_mtrl_alpha.png 0xcdbe91d1
res/drawable-xxhdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x19b7f846
res/drawable-xxhdpi-v4/abc_list_focused_holo.9.png 0x19c09c27
res/drawable-xxhdpi-v4/abc_list_longpressed_holo.9.png 0x236b6e98
res/drawable-xxhdpi-v4/abc_list_pressed_holo_dark.9.png 0x823780d0
res/drawable-xxhdpi-v4/abc_list_pressed_holo_light.9.png 0x813ae23c
res/drawable-xxhdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0xdddaae2e
res/drawable-xxhdpi-v4/abc_list_selector_disabled_holo_light.9.png 0x1ff1856f
res/drawable-xxhdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0xe97125d2
res/drawable-xxhdpi-v4/abc_popup_background_mtrl_mult.9.png 0x478db1d1
res/drawable-xxhdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0x44428171
res/drawable-xxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0x560a527a
res/drawable-xxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0x916a150c
res/drawable-xxhdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0x5902ed5c
res/drawable-xxhdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0xa028728e
res/drawable-xxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0xbba9274f
res/drawable-xxhdpi-v4/abc_switch_track_mtrl_alpha.9.png 0xf785991a
res/drawable-xxhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0xd6692ce7
res/drawable-xxhdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x2fa093c4
res/drawable-xxhdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0x4d07b4a9
res/drawable-xxhdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0x77c42d34
res/drawable-xxhdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0x9e0d73d
res/drawable-xxhdpi-v4/ic_launcher.png 0x2a4a99d1
res/drawable-xxhdpi-v4/img_iapp.png 0x4fdfd6a6
res/drawable-xxxhdpi-v4/abc_btn_check_to_on_mtrl_000.png 0x226f3157
res/drawable-xxxhdpi-v4/abc_btn_check_to_on_mtrl_015.png 0xb39b6532
res/drawable-xxxhdpi-v4/abc_btn_radio_to_on_mtrl_000.png 0xc64a3649
res/drawable-xxxhdpi-v4/abc_btn_radio_to_on_mtrl_015.png 0x785397a7
res/drawable-xxxhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0x4f6e087d
res/drawable-xxxhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0xa817850a
res/drawable-xxxhdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png 0xd277dedc
res/drawable-xxxhdpi-v4/abc_ic_clear_mtrl_alpha.png 0xec7c0cad
res/drawable-xxxhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0xba01d78a
res/drawable-xxxhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0xf381f0b0
res/drawable-xxxhdpi-v4/abc_ic_menu_moreoverflow_mtrl_alpha.png 0xb056041c
res/drawable-xxxhdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png 0x39ad65c6
res/drawable-xxxhdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png 0x952378b5
res/drawable-xxxhdpi-v4/abc_ic_menu_share_mtrl_alpha.png 0xd183ee02
res/drawable-xxxhdpi-v4/abc_ic_search_api_mtrl_alpha.png 0xe102bb65
res/drawable-xxxhdpi-v4/abc_ic_star_black_16dp.png 0xed643efb
res/drawable-xxxhdpi-v4/abc_ic_star_black_36dp.png 0xcf8f9d01
res/drawable-xxxhdpi-v4/abc_ic_star_half_black_16dp.png 0xf0f0c7ff
res/drawable-xxxhdpi-v4/abc_ic_star_half_black_36dp.png 0x72839b05
res/drawable-xxxhdpi-v4/abc_ic_voice_search_api_mtrl_alpha.png 0x204db219
res/drawable-xxxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0x4a5cd1ed
res/drawable-xxxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0xee7e8b29
res/drawable-xxxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0x3bd11453
res/drawable-xxxhdpi-v4/abc_switch_track_mtrl_alpha.9.png 0x1a7d6c07
res/drawable-xxxhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0x74529d2e
res/drawable-xxxhdpi-v4/img_iapp.png 0x7f8876ae
res/drawable/abc_btn_borderless_material.xml 0xf341af1c
res/drawable/abc_btn_check_material.xml 0xe2f70d0a
res/drawable/abc_btn_colored_material.xml 0x1522b03
res/drawable/abc_btn_default_mtrl_shape.xml 0x94236625
res/drawable/abc_btn_radio_material.xml 0x2960f785
res/drawable/abc_cab_background_internal_bg.xml 0x9c5b1555
res/drawable/abc_cab_background_top_material.xml 0x789cac73
res/drawable/abc_dialog_material_background_dark.xml 0xf26269b9
res/drawable/abc_dialog_material_background_light.xml 0x87fdaf24
res/drawable/abc_edit_text_material.xml 0x365ecec6
res/drawable/abc_item_background_holo_dark.xml 0xd1b21c63
res/drawable/abc_item_background_holo_light.xml 0x5c0f0b25
res/drawable/abc_list_selector_background_transition_holo_dark.xml 0xad127204
res/drawable/abc_list_selector_background_transition_holo_light.xml 0xff8319d8
res/drawable/abc_list_selector_holo_dark.xml 0xd3230273
res/drawable/abc_list_selector_holo_light.xml 0x4ca62f47
res/drawable/abc_ratingbar_full_material.xml 0xf00f836e
res/drawable/abc_ratingbar_indicator_material.xml 0xdbcfdb9a
res/drawable/abc_ratingbar_small_material.xml 0xecbbc468
res/drawable/abc_seekbar_thumb_material.xml 0xf5569f09
res/drawable/abc_seekbar_track_material.xml 0xd86c6936
res/drawable/abc_spinner_textfield_background_material.xml 0x291ca69f
res/drawable/abc_switch_thumb_material.xml 0x88e00ae
res/drawable/abc_tab_indicator_material.xml 0x20683102
res/drawable/abc_text_cursor_material.xml 0x9fd1fc63
res/drawable/abc_textfield_search_material.xml 0x7892e84b
res/drawable/ui_app_tab_clicks.xml 0xa6de3e82
res/drawable/ui_app_tab_clicks_select.xml 0x2f995002
res/drawable/ui_app_tab_clicks_unselect.xml 0x3f9de6be
res/drawable/ui_clicks_00.xml 0xbbf0b393
res/drawable/ui_clicks_00_select.xml 0xee9472ac
res/drawable/ui_clicks_00_unselect.xml 0x92a88605
res/drawable/ui_progressbar.xml 0x79204641
res/layout-v13/select_dialog_multichoice_material.xml 0x505d5691
res/layout-v13/select_dialog_singlechoice_material.xml 0xda2637d5
res/layout-v17/abc_alert_dialog_button_bar_material.xml 0xb404fb7d
res/layout-v17/abc_alert_dialog_material.xml 0x974ed80
res/layout-v17/abc_dialog_title_material.xml 0xb1785b0c
res/layout-v17/abc_search_view.xml 0x848f56fc
res/layout-v17/notification_template_big_media.xml 0x3c379f74
res/layout-v17/notification_template_big_media_narrow.xml 0x89097afb
res/layout-v17/notification_template_lines.xml 0xe4b63510
res/layout-v17/notification_template_media.xml 0x29b7fa8e
res/layout-v17/notification_template_part_chronometer.xml 0xf8b5be5f
res/layout-v17/notification_template_part_time.xml 0xf1421b70
res/layout-v17/select_dialog_multichoice_material.xml 0xa6a5f684
res/layout-v17/select_dialog_singlechoice_material.xml 0x11241de7
res/layout-v21/abc_screen_toolbar.xml 0xdeace488
res/layout-v9/abc_select_dialog_material.xml 0x3ef6520c
res/layout-v9/ui_downlist.xml 0x80261cef
res/layout/abc_action_bar_title_item.xml 0xa745b312
res/layout/abc_action_bar_up_container.xml 0xb0b662fa
res/layout/abc_action_bar_view_list_nav_layout.xml 0x3b7fb5a6
res/layout/abc_action_menu_item_layout.xml 0x57139df
res/layout/abc_action_menu_layout.xml 0x10a76152
res/layout/abc_action_mode_bar.xml 0x19d94e5a
res/layout/abc_action_mode_close_item_material.xml 0xa149f09e
res/layout/abc_activity_chooser_view.xml 0x9a26286b
res/layout/abc_activity_chooser_view_list_item.xml 0xf17a54ff
res/layout/abc_alert_dialog_button_bar_material.xml 0xe803a6f0
res/layout/abc_alert_dialog_material.xml 0xfce12892
res/layout/abc_dialog_title_material.xml 0xd6da6187
res/layout/abc_expanded_menu_layout.xml 0x6a583165
res/layout/abc_list_menu_item_checkbox.xml 0xf85b2a2a
res/layout/abc_list_menu_item_icon.xml 0x1825e3a4
res/layout/abc_list_menu_item_layout.xml 0x6ca737a1
res/layout/abc_list_menu_item_radio.xml 0x9b890641
res/layout/abc_popup_menu_item_layout.xml 0x7247ac0d
res/layout/abc_screen_content_include.xml 0xfcb152fa
res/layout/abc_screen_simple.xml 0x7e853c52
res/layout/abc_screen_simple_overlay_action_mode.xml 0xf1a7e2fe
res/layout/abc_screen_toolbar.xml 0xdc2fc6dd
res/layout/abc_search_dropdown_item_icons_2line.xml 0x6ae1b4e1
res/layout/abc_search_view.xml 0xb7eb9de6
res/layout/abc_select_dialog_material.xml 0x2bd8a334
res/layout/notification_media_action.xml 0xf70e67e3
res/layout/notification_media_cancel_action.xml 0x4e34dc2a
res/layout/notification_template_big_media.xml 0xb5381819
res/layout/notification_template_big_media_narrow.xml 0xdc52977f
res/layout/notification_template_lines.xml 0xb11cac43
res/layout/notification_template_media.xml 0xafbb5e2
res/layout/notification_template_part_chronometer.xml 0x4020e104
res/layout/notification_template_part_time.xml 0xf866e24
res/layout/select_dialog_item_material.xml 0x3f73aed6
res/layout/select_dialog_multichoice_material.xml 0xff0c15d1
res/layout/select_dialog_singlechoice_material.xml 0xd660e72c
res/layout/support_simple_spinner_dropdown_item.xml 0x9bee4093
res/layout/ui_downlist.xml 0x52bf4aa2
res/layout/ui_downlist_listitem.xml 0xb893a5d3
res/layout/ui_qr_camera.xml 0x5959cf1c
res/layout/ui_qr_main.xml 0x68bbb5d2
res/layout/ui_run_mian.xml 0xa16933ee
res/layout/ui_webview.xml 0x7aa106d0
res/raw/beep.ogg 0x1bac0bfc
res/raw/realm_properties 0x76e960ad
resources.arsc 0x8bbe684a
运行截图
VirSCANVirSCAN
VirSCAN