VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load

VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

File information

Scanner results
Scanner results:7%Scanner(s) (3/39)found malware!
Behavior analysis report:         Habo file analysis
Time: 2014-11-04 15:32:39 (CST)
Scanner Engine Ver Sig Ver Sig Date Scan result Time
ahnlab 9.9.9 9.9.9 2013-05-28 Found nothing 3
antivir 1.9.2.0 1.9.159.0 7.11.182.228 Found nothing 16
antiy 114701 AVL141003 2014-10-04 Found nothing 5
arcavir 1.0 2011 2014-05-30 Found nothing 11
asquared 9.0.0.4157 9.0.0.4157 2014-07-30 Found nothing 4
avast 141103-1 4.7.4 2014-11-03 Found nothing 31
avg 2109/7906 10.0.1405 2014-10-17 Found nothing 3
baidu 2.0.1.0 4.1.3.52192 2.0.1.0 Found nothing 1
baidusd 1.0 1.0 2014-04-02 Found nothing 1
bitdefender 7.57535 7.90123 2014-11-03 Found nothing 9
clamav 19574 0.97.5 2014-11-02 Found nothing 2
comodo 15023 5.1 2014-10-03 Found nothing 3
ctch 4.6.5 5.3.14 2013-12-01 Found nothing 1
drweb 5.0.2.3300 5.0.1.1 2014-10-31 Found nothing 58
fortinet 23.108, 23.108 5.1.158 2014-11-03 Found nothing 1
fprot 4.6.2.117 6.5.1.5418 2014-11-03 Found nothing 5
fsecure 2014-04-02-01 9.13 2014-04-02 Found nothing 12
gdata 24.3819 24.3819 2014-08-29 Found nothing 11
hauri 2.73 2.73 2014-06-13 Found nothing 1
ikarus 1.06.01 V1.32.31.0 2014-11-03 AdWare.AndroidOS.AdDisplay 16
jiangmin 16.0.100 1.0.0.0 2014-07-28 Found nothing 18
kaspersky 5.5.33 5.5.33 2014-04-01 Found nothing 22
kingsoft 2.1 2.1 2013-09-22 Found nothing 3
mcafee 7520 5400.1158 2014-08-04 Found nothing 9
nod32 0436 3.0.21 2014-09-18 a variant of Android/AdDisplay.Dowgin.AC application 1
panda 9.05.01 9.05.01 2014-06-15 Found nothing 7
pcc 11.254.05 9.500-1005 2014-11-03 Found nothing 2
qh360 1.0.1 1.0.1 1.0.1 Found nothing 12
qqphone 1.0.0.0 1.0.0.0 2014-11-04 易盟(a.notifyad.1mob) 1
quickheal 14.00 14.00 2014-06-14 Found nothing 5
rising 25.17.00.04 25.17.00.04 2014-06-02 Found nothing 3
sophos 5.04 3.51.0 2014-08-05 Found nothing 8
sunbelt 3.9.2589.2 3.9.2589.2 2014-06-13 Found nothing 3
symantec 20141028.001 1.3.0.24 2014-10-28 Found nothing 2
tachyon 9.9.9 9.9.9 2013-12-27 Found nothing 6
thehacker 6.8.0.5 6.8.0.5 2014-06-12 Found nothing 3
tws 17.47.17308 1.0.2.2108 2014-06-16 Found nothing 8
vba 3.12.26.3 3.12.26.3 2014-11-03 Found nothing 6
virusbuster 15.0.957.1 5.5.2.13 2014-11-03 Found nothing 17
权限列表
许可名称 信息
android.permission.INTERNET 连接网络(2G或3G)
android.permission.ACCESS_NETWORK_STATE 读取网络状态(2G或3G)
android.permission.ACCESS_WIFI_STATE 读取wifi网络状态
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.GET_TASKS 获取有关当前或最近运行的任务信息
android.permission.ACCESS_COARSE_LOCATION 获取粗略的位置(通过wifi、基站)
android.permission.SYSTEM_ALERT_WINDOW 显示系统窗口
文件信息
VirSCANVirSCAN
安全评分 :74
基本信息
VirSCANVirSCAN
MD5:d583af1c9a97762b9c9c31936846ea19
文件大小:5.58MB
上传时间: 2014-09-22 10:36:30 (CST)
包名:com.ktgame.daddy
最低运行环境:Android 1.6
版权:ktstudio
关键行为
VirSCANVirSCAN
行为描述: 设置特殊文件夹属性
详情信息: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
行为描述: 隐藏指定窗口
详情信息: [Window,Class] = [,ComboLBox]
行为描述: 按名称获取主机地址
详情信息: wpad.
reserve-hk.apple.com
文件行为
VirSCANVirSCAN
行为描述: 写权限映射文件
详情信息: Global\Cor_Private_IPCBlock_v4_1760
Global\Cor_SxSPublic_IPCBlock_1760
\Documents and Settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
Global\NLS_CodePage_936_3_2_0_0
行为描述: 设置特殊文件夹属性
详情信息: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
网络行为
VirSCANVirSCAN
行为描述: 按名称获取主机地址
详情信息: wpad.
reserve-hk.apple.com
注册表行为
VirSCANVirSCAN
行为描述: 修改注册表
详情信息: \REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\GDIPlus\FontCachePath
\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{8CC497C9-A1DF-11CE-8098-00AA0047BE5D}\1.0\
\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{8CC497C9-A1DF-11CE-8098-00AA0047BE5D}\1.0\FLAGS\
\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{8CC497C9-A1DF-11CE-8098-00AA0047BE5D}\1.0\0\win32\
\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{8CC497C9-A1DF-11CE-8098-00AA0047BE5D}\1.0\HELPDIR\
\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\1.0\0\win32\
\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8CC497C0-A1DF-11CE-8098-00AA0047BE5D}\
\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8CC497C0-A1DF-11CE-8098-00AA0047BE5D}\ProxyStubClsid\
\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8CC497C0-A1DF-11CE-8098-00AA0047BE5D}\ProxyStubClsid32\
\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8CC497C0-A1DF-11CE-8098-00AA0047BE5D}\TypeLib\
\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8CC497C0-A1DF-11CE-8098-00AA0047BE5D}\TypeLib\Version
\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8CC497C2-A1DF-11CE-8098-00AA0047BE5D}\
\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8CC497C2-A1DF-11CE-8098-00AA0047BE5D}\ProxyStubClsid\
\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8CC497C2-A1DF-11CE-8098-00AA0047BE5D}\ProxyStubClsid32\
\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8CC497C2-A1DF-11CE-8098-00AA0047BE5D}\TypeLib\
其他行为
VirSCANVirSCAN
行为描述: 窗口信息
详情信息: Pid = 1760, Hwnd=0xc01c2, Text = 全自动开启, ClassName = WindowsForms10.BUTTON.app.0.2bf8098_r21_ad1.
Pid = 1760, Hwnd=0xb01c6, Text = 点击支持我, ClassName = WindowsForms10.STATIC.app.0.2bf8098_r21_ad1.
Pid = 1760, Hwnd=0xb0184, Text = 买鞋免费送BOT, ClassName = WindowsForms10.STATIC.app.0.2bf8098_r21_ad1.
Pid = 1760, Hwnd=0xb01b0, Text = 64500366, ClassName = WindowsForms10.EDIT.app.0.2bf8098_r21_ad1.
Pid = 1760, Hwnd=0xa018c, Text = 发送短信到, ClassName = WindowsForms10.BUTTON.app.0.2bf8098_r21_ad1.
Pid = 1760, Hwnd=0xd01a4, Text = 127.0.0.1, ClassName = WindowsForms10.COMBOBOX.app.0.2bf8098_r21_ad1.
Pid = 1760, Hwnd=0xa0196, Text = 127.0.0.1, ClassName = Edit.
Pid = 1760, Hwnd=0xc01b4, Text = 4567, ClassName = WindowsForms10.EDIT.app.0.2bf8098_r21_ad1.
Pid = 1760, Hwnd=0xb0170, Text = 测试发送, ClassName = WindowsForms10.BUTTON.app.0.2bf8098_r21_ad1.
Pid = 1760, Hwnd=0xb01ce, Text = 等待手机, ClassName = WindowsForms10.BUTTON.app.0.2bf8098_r21_ad1.
Pid = 1760, Hwnd=0xb016c, Text = 手机型号:, ClassName = WindowsForms10.STATIC.app.0.2bf8098_r21_ad1.
Pid = 1760, Hwnd=0xb0174, Text = 自动识别器, ClassName = WindowsForms10.STATIC.app.0.2bf8098_r21_ad1.
Pid = 1760, Hwnd=0xd0190, Text = 图片验证码, ClassName = WindowsForms10.STATIC.app.0.2bf8098_r21_ad1.
Pid = 1760, Hwnd=0xc01b6, Text = 复制, ClassName = WindowsForms10.BUTTON.app.0.2bf8098_r21_ad1.
Pid = 1760, Hwnd=0xe01b8, Text = 短信配置区(手机设置对应IP和端口点击Connect), ClassName = WindowsForms10.STATIC.app.0.2bf8098_r21_ad1.
行为描述: 隐藏指定窗口
详情信息: [Window,Class] = [,ComboLBox]
行为描述: 创建互斥体
详情信息: RasPbFile
动态列表行为
VirSCANVirSCAN
行为描述: 启动服务
详情信息: com.android.musicfx.Compatibility$Service
com.android.mms.transaction.SmsReceiverService
行为描述: 读取文件
详情信息: path:/proc/783/cmdline length:105
path:/proc/797/cmdline length:105
path:/proc/809/cmdline length:105
path:/proc/840/cmdline length:105
path:/proc/850/cmdline length:105
path:/data/data/com.ktgame.daddy/cache/feiwo_dir/data/data/com.ktgame.daddy/files/-2054404330 length:105
path:/data/data/com.ktgame.daddy/cache/feiwo_dir/data/data/com.ktgame.daddy/files/-2054404330 length:105
path:/proc/885/cmdline length:105
path:/proc/887/cmdline length:105
path:/proc/909/cmdline length:105
path:/proc/911/cmdline length:105
行为描述: 数据加密
详情信息: {u'operation': u'keyalgo', u'algorithm': u'DES', u'key': u'54, 97, 102, 55, 103, 107, 114, 97'}
{u'operation': u'decryption', u'data': u'setting', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'action', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'log', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'global', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'logic', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'error', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'global_log-', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'down', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'cache', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'request', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'cachelist', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'retry_request', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'DownloadManager is not yet initialize', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u' \u51c6\u5907\u4e0b\u8f7d\u4e2d\uff0c\u8bf7\u5230\u901a\u77e5\u680f\u67e5\u770b...', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u4e0b\u8f7d\u5931\u8d25', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u6b63\u5728\u4e0b\u8f7d ', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u53ef\u4ee5\u5b89\u88c5', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'yyyy-MM-dd', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'yyyy-MM-dd HH:mm:ss', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'credits_app', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'credits_game', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'credits_other', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'lastAdId', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'isEnd', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u6b63\u5728\u52a0\u8f7d\u2026', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u62b1\u6b49\uff01\u7f51\u7edc', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u597d\u50cf\u6709\u70b9\u4e0d\u7ed9\u529b\u5462~', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u518d\u7ed9\u6211\u4e00\u6b21\u673a\u4f1a\u5427', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u6ca1\u6709\u53ef\u7b7e\u5230\u7684\u5e94\u7528,', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5feb\u53bb\u5b89\u88c5\u5427\uff01', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u4f60\u592a\u5389\u5bb3\u4e86', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u6240\u6709\u7684\u4efb\u52a1\u90fd\u5b8c\u6210\u4e86', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u83b7\u53d6\u65b9\u6cd5\uff1a', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u672a\u5b8c\u6210\u4efb\u52a1\u524d\u5378\u8f7d\u5c06\u524d\u529f\u5c3d\u5f03', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u8be5\u5e94\u7528\u60a8\u5df2\u7ecf\u88c5\u8fc7\u5566~\u65e0\u6cd5\u83b7\u53d6\u5956\u52b1\u2026', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u8be6\u7ec6\u4ecb\u7ecd\uff1a', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u65f6\u4e0b\u6b63\u706b\u7206\u6d41\u884c', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5c0f\u65f6\u540e\u53ef\u4ee5\u7b7e\u5230', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u79d2\u540e\u53ef\u4ee5\u7b7e\u5230', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5206\u949f\u540e\u53ef\u4ee5\u7b7e\u5230', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5e76\u83b7\u5f97', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u53ef\u4ee5\u7b7e\u5230', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5df2\u5230\u7b7e\u5230\u4e0a\u9650\uff0c\u4e0d\u518d\u83b7\u53d6\u79ef\u5206', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u60a8\u8fd8\u672a\u5230\u53ef\u7b7e\u5230\u65f6\u95f4,\u6b64\u6b21\u7b7e\u5230\u4e0d\u83b7\u5f97\u79ef\u5206', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5b89\u88c5\u6ce8\u518c', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u7b7e\u5230\uff08\u4f7f\u7528\u4e24\u5206\u949f\u4ee5\u4e0a\uff09', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u83b7 \u53d6', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u4e0b\u8f7d\u6210\u529f', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u6b63\u5728\u52aa\u529b\u4e0b\u8f7d\u4e2d', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u586b\u6587\u5b57', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u514d\u8d39\u83b7\u53d6\u79ef\u5206', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u70ed\u95e8\u5e94\u7528', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u70ed\u95e8\u6e38\u620f', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u7b7e\u5230\u4efb\u52a1', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5df2\u5b8c\u6210', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u9700\u8bd5\u7528', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'isNoShowBoot', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'number', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u7248\u672c: ', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5927\u5c0f: ', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'Mb', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'adInfo', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'resourcesAddr', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'adType', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_la_title_back.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_credits_icon.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_la_da_horizontal_line.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_la_horizontal_line.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_la_vertical_line.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_la_tv_bg.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_recommend_safety_certification.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_da_new_notifi.9.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_transaction_btn_bg.9.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_da_new_notifi_push.9.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_la_horizontal_line_push.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_la_title_back_push.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_notifi_btn_push.9.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_notifi_pressed_btn_push.9.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_safety_certification_push.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_notifi_btn.9.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_notifi_pressed_btn.9.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_load_more_bg.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_loading.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u6bcf\u65e5', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u6b21\u83b7\u53d6\u79ef\u5206\u7684\u673a\u4f1a\u5df2\u7528\u5b8c\u2026', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u4eca\u65e5\u5b89\u88c5\u4e0d\u518d\u83b7\u53d6\u79ef\u5206', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u8d5e\uff01\u5b89\u88c5\u6210\u529f\u5566~\u6ce8\u518c\u65b0\u8d26\u53f7~', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5c31\u80fd\u83b7\u53d6\u79ef\u5206\u54af~', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u597d\u5427', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u79ef\u5206\u4e0d\u591f\u4e86\u5427\uff1f', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u627e\u6211\u83b7\u53d6\u79ef\u5206!', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_cancle_icon.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u8be5\u670d\u52a1\u6682\u65f6\u5173\u95ed', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u8bf7\u7a0d\u5019\u5237\u65b0', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u60a8\u7533\u8bf7\u7684appKey\u6682\u672a\u901a\u8fc7\u5ba1\u6838', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u8bf7\u67e5\u770bappKey\u7684\u5ba1\u6838\u72b6\u6001', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5c55\u5f00 \u2228', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u6536\u8d77 \u2227', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u79ef\u5206', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u66f4\u591a', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5f85\u7b7e\u5230', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u53ef\u7b7e\u5230', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u6253 \u5f00', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5df2\u5168\u90e8\u5230\u624b\uff0c\u53bb\u5bfb\u627e\u65b0\u4efb\u52a1\u5427~', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5df2\u5378\u8f7d\uff0c\u65e0APK\uff1a\u8bf7\u91cd\u65b0\u4e0b\u8f7d\u8be5\u5e94\u7528\uff0c\u7b7e\u5230\u6709\u79ef\u5206~', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5df2\u5378\u8f7d\uff0c\u6709APK\uff1a\u8bf7\u91cd\u65b0\u5b89\u88c5\u8be5\u5e94\u7528\uff0c\u7b7e\u5230\u6709\u79ef\u5206~', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u7f51\u7edc\u4e2d\u65ad\uff0c\u8bf7\u8054\u7f51\u91cd\u65b0\u767b\u5f55', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u652f\u4ed8\u6210\u529f\u83b7\u5f97', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'packageName', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_interstitial_dl_normal.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_interstitial_dl_pressed.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_interstitial_close.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'push', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'Service onCreate...', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u' \u6b21\u63a8\u9001\u6210\u529f\uff0c\u6b63\u5728\u4e0b\u8f7d...', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u' \u6b21\u51c6\u5907\u4e2d\uff0c\u4e0a\u6b21\u63a8\u9001\u65f6\u95f4:', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u' \u6b21\u63a8\u9001\u5931\u8d25\uff0c\u6ca1\u6709\u7f51\u7edc', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u' \u6b21\u63a8\u9001\u5931\u8d25\uff0c\u6ca1\u6709\u53ef\u63a8\u9001\u6570\u636e', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u' \u6b21\u63a8\u9001\u5931\u8d25\uff0c\u8d85\u8fc7\u6700\u5927\u63a8\u9001\u6b21\u6570\uff1a', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u' \u4e00\u5929\u5185\u6709\u8fc7wifi\u5e76\u4e14\u5f53\u524d\u4e0d\u662fwifi\uff0c\u4e0d\u63a8\u9001', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u63a8\u9001\u5931\u8d25\uff0c\u4e24\u6b21\u63a8\u9001\u65f6\u95f4\u5c0f\u4e8e:', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u63a8\u9001\u5931\u8d25\uff0c\u4e0d\u5728\u63a8\u9001\u65f6\u95f4\u6bb5\u5185', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u53ef\u4ee5\u63a8\u9001\uff0c\u6700\u5927\u63a8\u9001\u6b21\u6570\u4e3a\uff1a', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u' \u6b21\u4e0b\u8f7d\u5b8c\u6210\uff0c\u53d1\u51fa\u63a8\u9001', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u' \u6b21push\u63a8\u9001\u5931\u8d25\uff0c\u4e0b\u8f7d\u9519\u8bef\uff0c\u76f4\u63a5\u63a8\u9001...', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u52a0\u8f7d\u5931\u8d25', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'appDir', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'webUrl', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'baseUrl', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'data', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'install_apk', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'open_web', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'download_apk', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'download_apk_progress', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'init', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'destroy', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'onAdClicked', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u4e3a\u7f13\u5b58\u6dfb\u52a0\u5df2\u5b89\u88c5\u7a0b\u5e8f\u5931\u8d25\uff0c\u6ca1\u6709\u627e\u5230\u5df2\u5b89\u88c5\u7a0b\u5e8f\u7684\u7f13\u5b58\u5217\u8868\uff0c\u4e0d\u505a\u5e7f\u544a\u6392\u9664\u5904\u7406', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u6dfb\u52a0\u5b89\u88c5\u8f6f\u4ef6\u5230\u8f6f\u4ef6\u5217\u8868:', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u6392\u9664\u5df2\u5b89\u88c5\u7684packageName\uff1a', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5e7f\u544a\u5df2\u7ecf\u5168\u90e8\u5c55\u793a\u5b8c\u6bd5\uff0c\u5199\u5165\u53d8\u91cf', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u' \u5185\u5b58\u88ab\u9500\u6bc1\uff08\u5f02\u5e38\uff09\uff0c\u91cd\u65b0init...', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5220\u9664cachelist\u6570\u636e\u6210\u529f: ', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u4e0b\u8f7d\u6210\u529f (packagename, id, size)(\u53ef\u80fd\u6253\u5370\u4e24\u6b21log) :', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u' \u88ab\u5b89\u88c5\uff0c\u5f00\u5173:', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u6587\u4ef6\u6821\u9a8c\u5931\u8d25', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u' \u8bf7\u91cd\u8bd5', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u7f51\u7edc\u5f02\u5e38', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u8f6f\u4ef6\u88ab\u5b89\u88c5\uff0c\u4e0d\u662f\u5408\u683c\u7684\u8f6f\u4ef6\uff0cgetBusinssBuilder \u4e3a\u7a7a:', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u8f6f\u4ef6\u88ab\u5b89\u88c5\uff0c\u4e0d\u662f\u5408\u683c\u7684\u8f6f\u4ef6\uff0c\u4ece\u5185\u5b58\u4e2d\u83b7\u53d6\u83b7\u53d6appInfo\u4e3a\u7a7a:', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u8f6f\u4ef6\u88ab\u5b89\u88c5\uff0c\u4e0d\u662f\u5408\u683c\u7684\u8f6f\u4ef6\uff0c\u8d85\u8fc7\u89c4\u5b9a\u7684\u65f6\u95f4\u4e86:', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'BusinssDirector', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'DownloadManager', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'CacheFilter', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'CiphererFilter', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_recommend_da_details_line.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_recommend_rloding_1.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_recommend_rloding_2.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_recommend_rloding_3.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_recommend_rloding_4.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_recommend_right_arrow.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_recommend_loadfaild_icon.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u52a0\u8f7d\u5931\u8d25!', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u8bf7\u68c0\u67e5\u60a8\u7684\u7f51\u7edc\u914d\u7f6e', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'r_cache_recommend', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'r_cache_ad_list_re', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'r_cache_list', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'r_cache_lastadid', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'r_hasbound_key', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_recommend_check_false.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_recommend_check_true.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u5e94\u7528\u5217\u8868', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u53d1\u73b0\u66f4\u591a\u597d\u5e94\u7528', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'\u7acb\u5373\u8fdb\u5165 >', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'by_found_bg.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_recommend_surprise.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwo_dir', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'1.2', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'android', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'bayilaoye#66#88', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'http://', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'Mozilla/5.0(Linux;U;Android 2.2.1;en-us;Nexus One Build.FRG83) AppleWebKit/553.1(KHTML,like Gecko) Version/4.0 Mobile Safari/533.1', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'ad_gzip', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'appkey', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'sdkVersion', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'Connection', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'close', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u"[`~!@#$%^&*()+=|{}':;',\\[\\].<>/?~\uff01@#\uffe5%\u2026\u2026&*\uff08\uff09\u2014\u2014+|{}\u3010\u3011\u2018\uff1b\uff1a\u201d\u201c\u2019\u3002\uff0c\u3001\uff1f]", u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'client.adfeiwo.com:9110/terminal/ad/', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'42.62.4.165:9110/terminal/ad/', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'int.dpool.sina.com.cn/iplookup/iplookup.php', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'ok', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'no', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'd_action', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'feiwomob', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'/cache_', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'/global_cache', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'cache_adlist', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'cache_userinfo', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'cache_actions', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'push_setting', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'cache_append', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'cache_global', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'getAdList.do?t=', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'getAdInfo.do?t=', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'listener.do?t=', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'deviceInfo.do?t=', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'type', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'/cache/images', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'com.screen.main.coverscreen.close', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'com.screen.main.package.install', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'com.intent.add.cre.dits.broadcast', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'dm_close.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'dm_download.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'dm_open.png', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'tiantian', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'_setting_cache', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'cache_filename', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'adcache_time', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'adshow_the_number', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'ad_validity_time', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'clickDown', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'autoDown', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'showstallBar', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'uninstallBar', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'autoOpen', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'fullscreenDown', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'config_filename', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'creditsCacheFilenames', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'creditsKey', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'credits_install_time', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'credits_signed_number', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'credits_check_in_time', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'credits_ad_list_cache_key', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'creditsWallUnit', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'android.intent.action.PACKAGE_ADDED', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'android.intent.action.PACKAGE_REMOVED', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'android.intent.action.PACKAGE_ALREADY_INSTALL', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'com.apk.down.action_', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'do_adId', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'do_size', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'do_startting', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'do_progress', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'do_complete', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'do_success', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'do_path', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'do_packageName', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'do_adinfo', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'apkCachePath', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'CreditsWall', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'pay', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'pay.package.name', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'install', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'signIn', u'algorithm': u'DES'}
{u'operation': u'decryption', u'data': u'developer', u'algorithm': u'DES'}
行为描述: 数据泄露
详情信息: sink:File operation:write data:data:{"downloadAppInfo":{},"imei":"357242043237511","installApp":[{"packageName":"com.android.gesture.bui
行为描述: 类加载
详情信息: path:/system/app/PicoTts.apk
path:/system/app/MusicFX.apk
path:/system/framework/am.jar
path:/data/app/com.ktgame.daddy-1.apk
行为描述: 写入文件
详情信息: path:/data/data/com.android.gallery3d/shared_prefs/com.android.gallery3d_preferences.xml length:105
path:/data/data/com.android.musicfx/shared_prefs/musicfx.xml length:105
path:/data/data/com.android.gallery3d/shared_prefs/com.android.gallery3d_preferences.xml length:105
path:/data/data/com.ktgame.daddy/cache/feiwo_dir/data/data/com.ktgame.daddy/files/-2054404330 length:105
path:/data/data/com.ktgame.daddy/cache/feiwo_dir/data/data/com.ktgame.daddy/files/-2054404330 length:105
Activities
VirSCANVirSCAN
活动名 类型
Main android.intent.action.MAIN
Main android.intent.category.LAUNCHER
危险函数
VirSCANVirSCAN
函数名称 信息
ContentResolver;->query 读取联系人、短信等数据库
java/net/URL;->openConnection 连接URL
java/net/URLConnection;->connect 连接URL
getRuntime 获取命令行环境
HttpClient;->execute 请求远程服务器
java/net/HttpURLConnection;->connect 连接URL
TelephonyManager;->getLine1Number 获取手机号
java/lang/Runtime;->exec 执行字符串命令
android/app/NotificationManager;->notify 信息通知栏
TelephonyManager;->getDeviceId 搜集用户手机IMEI码、电话号码、系统版本号等信息
TelephonyManager;->getSimSerialNumber 获取SIM序列号
启动方式
VirSCANVirSCAN
名称 信息
com.feiwo.receiver.InReceiver 应用安装时启动服务
com.feiwo.receiver.InReceiver 应用卸载时启动服务
com.feiwo.receiver.ConnectReceiver 网络连接改变时启动服务
com.feiwo.receiver.ConnectReceiver 屏幕解锁启动服务
com.feiwo.receiver.ConnectReceiver 开机启动服务
权限列表
VirSCANVirSCAN
许可名称 信息
android.permission.INTERNET 连接网络(2G或3G)
android.permission.ACCESS_NETWORK_STATE 读取网络状态(2G或3G)
android.permission.ACCESS_WIFI_STATE 读取wifi网络状态
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.GET_TASKS 获取有关当前或最近运行的任务信息
android.permission.ACCESS_COARSE_LOCATION 获取粗略的位置(通过wifi、基站)
android.permission.SYSTEM_ALERT_WINDOW 显示系统窗口
文件列表
VirSCANVirSCAN
文件名 校验码
assets/resource/0103b6320d7d2ad4463a0db16531f75a.pk 0x450fc807
assets/resource/03ea0354e252213a5c4987e948563666.pk 0xc6a164e9
assets/resource/04ec33111c551def47f79396268e7b2f.pk 0x6554059c
assets/resource/0563b62856bda357dcfd9d16e3e578eb.pk 0x237aaa52
assets/resource/05df1207e370623f38f40472c58fdd06.pk 0x68cc98dc
assets/resource/07ab228343c1d798f6281c67dee94cc6.pk 0x77cb44b5
assets/resource/08e23032fe0e47b023a634569127aa16.pk 0xd6a5b88e
assets/resource/09ad7728eb2c57b4d28c931aaaf40776.pk 0xbac3517a
assets/resource/09f5ee0a11881e12876cf03fb3f4edab.pk 0x9a289408
assets/resource/0a465781b81f091c688358ea5da1a3d4.pk 0xc23bc839
assets/resource/0c77aee3846cd90bf4a368979c371253.pk 0x112d14ed
assets/resource/0e5c7bfbf976a9d74e3ff02def1fceb6.pk 0x4d6da9fc
assets/resource/0f170bd031963258fdb65665f172c8e9.pk 0x70ef4e8e
assets/resource/1309defad4e9fc392c807f2740f72013.pk 0xbcdfe2fb
assets/resource/13dabc13093911493d3f9b036ed7e4e2.pk 0xd2b979cd
assets/resource/13edfaea787da6b79acd5704834deb97.pk 0x5ebefd02
assets/resource/1457d9d614030895232e25281230ec1c.pk 0xaf58a04c
assets/resource/18ffc61573a12771c10bfee9a9d9f878.pk 0x8ceb1b6c
assets/resource/1958a8aa4161173619fd39c3f759cb7f.pk 0x9ef81f40
assets/resource/1a680babd6a0e2dafb6a11f93379c092.pk 0x70751068
assets/resource/1aa7e89b0b6c9e8e1ee175e118e46815.pk 0xde50cdc8
assets/resource/1b4766420ce01fbb8683246baea149e0.pk 0x64e40d31
assets/resource/1c093ddccad12f4b8823c7dc14c506ae.pk 0x4aa5ed9f
assets/resource/1f9c87a535fe0205a7b7ff35e949a2e4.pk 0x6bca615f
assets/resource/2069d535c8de4f3a21c87acbf02e24c7.pk 0x36363edb
assets/resource/22177cd90f7f631a80c14fdf7c600be8.pk 0x273ff47
assets/resource/26099e43973f509b22c1aa8aa6cd593e.pk 0x93951324
assets/resource/26df06ce4ebf4d5347564b5290464325.pk 0x3d64d04c
assets/resource/28c801254e135e9569e5257dc0abf97a.pk 0x9705db40
assets/resource/28e81832f4fd30518b90efb48b171bf7.pk 0x9858cb41
assets/resource/295dda5263b0df3acef74de8b624d1d0.pk 0xe3f9f8e8
assets/resource/29df22314f996ecbc4644c66e38ff82f.pk 0xd0b8bcb7
assets/resource/29fb3762c8e380c10ddb5227b08a0f5e.pk 0xa0651681
assets/resource/2b428f80b2ea3dd1aa8b5a80a341de11.pk 0x4c2c9bad
assets/resource/2b73ef62c3359035952f0cb27e03d6bc.pk 0xc619030b
assets/resource/2c2f34041c67ca18623a220e790fdb02.pk 0x7050bca0
assets/resource/2cc6d912108cbb744849db7a84c59037.pk 0xf185c38d
assets/resource/2d5fbcc6b167b0bbb7ee597cc7c17846.pk 0x93a053ba
assets/resource/2fce3568217cf5091fdad57b17c8fd9b.pk 0xf715a4bd
assets/resource/3058e8e76488b1cf6256b7c033276f2a.pk 0xb6541eb2
assets/resource/318a86a76d7c0ac0658f5114f8f01e70.pk 0xc295031c
assets/resource/3319f6cc32e77064d9198ffa520c6e0f.pk 0x9bb9fbfa
assets/resource/331c38d530754b62d4927b16ceaaeac9.pk 0x966bf095
assets/resource/33e810bf0fb99ea255f41d1f010fe26f.pk 0x17e1dafd
assets/resource/36029bd28de6ba7b2328912b6f2dd68a.pk 0x9a9f4a6b
assets/resource/397a71f49788badbff63ce0625de652e.pk 0x3e2bdeb7
assets/resource/39fc3bdf8b5910b30159e82de11a914c.pk 0x9e8ec608
assets/resource/3f8bb12055aa0f15d48f09ead60d9de8.pk 0x9a3f7630
assets/resource/402877cf684d47e549092ef831351e2f.pk 0x244db042
assets/resource/461f7d53350a35ed370bf50534d079c9.pk 0x2e01f603
assets/resource/4945921451d01b56e5ac2d4664db9a1d.pk 0x3b34d69f
assets/resource/4ac2a8076d857028cfd56fb81fc2b6f1.pk 0xcbb97177
assets/resource/4c0346be5e155856782dd3df9dfc2e4d.pk 0x1f65dc2e
assets/resource/4dc617ef23ca973237c4c2ced31de961.pk 0xbe077d8b
assets/resource/4e0fa8ed94a86ee7d06f8a85663572f8.pk 0xbb63fbc2
assets/resource/4e18382c4a6fa8248c0cbe0b5afccd95.pk 0x7739430e
assets/resource/50b51761ca54322991dae1fc9611963a.pk 0x6f44f6d4
assets/resource/5308b5de53b195fc75d81f570d628426.pk 0xdedc3dd2
assets/resource/53b34b76cd0e7526d4473506c800c96b.pk 0xf1ae7882
assets/resource/5546b305455695561bdd60cbc0190554.pk 0x8a2c98ff
assets/resource/5577c054c04ed1af7fe313176d587c3b.pk 0x2b5e0e69
assets/resource/5624ba029114a876048c279b567a9ef1.pk 0x275c72dd
assets/resource/562d1e8000d8438c282337c4e3ae4c5a.pk 0x8e351d8b
assets/resource/56ce0c1b1939ba998d692e7d45751781.pk 0xdb777399
assets/resource/56d3989163864b3629af2c4cdc99797b.pk 0xc33f8012
assets/resource/57920e8d8866dbb88c09cc5e84220891.pk 0x30258ed1
assets/resource/59aa058cee15b4ff2f842fb7627dae5e.pk 0xf291509
assets/resource/5a2337b5e023d1422b2638fe8d2890b8.pk 0xb8e3ffe7
assets/resource/5ab860fb47634c91eb8e7a5b7a04b116.pk 0xc6d438b9
assets/resource/5c9285148f90cd5b691127d355f5d4c0.pk 0x157e35d2
assets/resource/5d86676fed1d2a440fb405759b5cee28.pk 0xb0b6d9e4
assets/resource/5f4b2461e5c3551d13c6522f6cbbd56f.pk 0xfaf27f2d
assets/resource/619abd9476b9fb5a95ee54563f714e96.pk 0x6d61c6e6
assets/resource/62335f993eaa6e97d6b7d7421e1a71dc.pk 0x81e7dcc6
assets/resource/64af847445704d23a0920ed6ae7af63c.pk 0xb7ee3db9
assets/resource/6513f0ade9d1c3649e60aac7b028ecb6.pk 0xe88bb5f5
assets/resource/6650939ec4fd9dcadcfc3ed3e0842695.pk 0xc34200f0
assets/resource/680071911ead3931ba488c68c7983672.pk 0xb0c7e043
assets/resource/6941297ecae0dda6e8bb3258f89c2e3b.pk 0x5035e0e8
assets/resource/6c505cb2bfe14ce93786c31f0e00b05b.pk 0x6c2b5a9d
assets/resource/6cede70019cec78300b98a101eef446f.pk 0x208a4b90
assets/resource/6ec2be18441416ec5465fd2dee2950d3.pk 0x2a283695
assets/resource/6ecf52abd3861e581949015a8278ae6b.pk 0x47dd96a4
assets/resource/6f63a487a87ab1358fc504809f77e3a7.pk 0x7154e525
assets/resource/70c5f844e084c33664f156904a39ce68.pk 0xfa7399da
assets/resource/71aee93745f9edacec43a8ac28ade03c.pk 0x4fa0b599
assets/resource/722a74bac7c55cbb32377f2fdb7d51d4.pk 0x30537469
assets/resource/72c20c730ba310dddfa343eaba44d050.pk 0x51b3167b
assets/resource/7313836559bbc945fe381f5caa8226b2.pk 0x5ea6507b
assets/resource/73eaf65f58773190487fa8bb7afecc33.pk 0xa887ccf5
assets/resource/74fae814d5e9cdb49d6f794a48e77ddf.pk 0x3deb518d
assets/resource/761b452e88b9378ddbe2b6943cd60921.pk 0xb4a9d738
assets/resource/764dbf15c5439af96a4ba4ba26593934.pk 0x353590bc
assets/resource/76a7884a4d6d1f219e9b9a86be012107.pk 0x75594778
assets/resource/79735827dc413d91e1947f8992582c04.pk 0xa261507f
assets/resource/7c3ff066fe9605b71e586695248e3f58.pk 0x6af8b49
assets/resource/7de2720fb9c46502e76ace874c4e30ad.pk 0xc3f64826
assets/resource/7e69533f01c301be8ac01bc6c9be232b.pk 0x3f8472fe
assets/resource/7f5fc1bcc47ac71c9f9b066bdd7ec87a.pk 0x51b3167b
assets/resource/81097fb76b43aab51cb60da3bda1c9bb.pk 0x1cb8d33e
assets/resource/864964a938c4f2592eefc77f1b35ee58.pk 0xbf402f23
assets/resource/8665087f32738496a5354a7bc35a78eb.pk 0x7a982b04
assets/resource/88defb55b95c784f82d68e81c9c09396.pk 0x55154931
assets/resource/8996d8c138ad7d5af33645cc92979edf.pk 0x4d64b35
assets/resource/8a14748bb5d9cc3c9dddaaf280c8e689.pk 0xacb3d068
assets/resource/8b3f8774d7e08d54da9f62f75dcadfe9.pk 0xc03da1ef
assets/resource/9304c802ba246a538a673deeb6501903.pk 0x460216a5
assets/resource/954c371a7c6736f16a3cd453d07e8dba.pk 0x2c32e7ab
assets/resource/95a79da681747bfbc9834cb8e6f791ba.pk 0x1e67c66d
assets/resource/97a12252bc7202d8de49a68d2a49f3d3.pk 0x7b6929ba
assets/resource/9834e819637aff98ca7f61f0917b743d.pk 0x22036358
assets/resource/9aed7e85241110e4234e4c876c699ffc.pk 0xc11c7b1f
assets/resource/9c8a14f1cd2dfd59691a42ed6c10c5f8.pk 0x16cad135
assets/resource/9cfb31208a13dc31162e79675a08845c.pk 0xb2d9d3c7
assets/resource/9dc1ac9eb646c311a6bf9d94032e6085.pk 0xb500a739
assets/resource/9ff2bb3e61f56a0f210ab5dc0cdb2ed0.pk 0xddd65254
assets/resource/a28c8aed253705c7cf22a0c07a691564.pk 0x6a18434a
assets/resource/a4627ca125227c641a93e10f695d4921.pk 0x52c48939
assets/resource/a5e1cea5c797e1640a516aea6b98fc52.pk 0x7c17b8c3
assets/resource/a63cf2dbfaf8befee3e032dd2c7aea89.pk 0x21f782ed
assets/resource/a827f28f44529b97a96166932039f95d.pk 0x126455d7
assets/resource/a86fa2433da7440546bbbfca1a98429b.pk 0x34146eba
assets/resource/a945bc5e81cc6175e703f11052734215.pk 0x3f484d3f
assets/resource/a9ff122e9405493564cfbc027e632638.pk 0x3f8472fe
assets/resource/aa14dcd93a6698cc429a41d9c7a6e6b5.pk 0xc216fd5d
assets/resource/aa7cf51c0d12867d5dc1dbb34784a7b3.pk 0x4154cb88
assets/resource/aac49eea089332148c961203266fcc16.pk 0xf43f657e
assets/resource/ae80025f9b3ff56f6bedc2bdcb16a0ac.pk 0x80d67bd8
assets/resource/af6430b706150de07d036b09d91e230e.pk 0xfc2be383
assets/resource/b046e8bf4625cda5eeb3ca6b67c7b371.pk 0x8ba37b81
assets/resource/b103701438d1ba1098a44a26723ce5ae.pk 0x74db900b
assets/resource/b11369f5fc7f55b2cb5f4be66c307495.pk 0xb60389f6
assets/resource/b15b73eade6585818de243c9e954bf84.pk 0x71f3a4f4
assets/resource/b2e03634f4571ccf36f78b5957d2f821.pk 0x64667c63
assets/resource/b698d247083e61308fc32c8270747d37.pk 0x5a881c4f
assets/resource/b6dd346803b82ad49a36e6e2c6110e46.pk 0x4cf1185c
assets/resource/b6ffc87d934662dda0a44e97478982ad.pk 0x5791b3e
assets/resource/b86bd266f5750bf89cd0039b3dc7f7ab.pk 0x5acdb527
assets/resource/bbe5a661d3375178a7b61b57dd1c70c3.pk 0xc3cd67e5
assets/resource/bcc6a49e6f991bfa6f0bbdb2d8871865.pk 0x4afbfc06
assets/resource/bcd415d51fc7f9577b3dd05138273756.pk 0xd594ac3a
assets/resource/c36ab88557389fcb00fdcaf994acbe97.pk 0x6be64d2f
assets/resource/c656369a8d8783c48cb1f51bbc70c78b.pk 0xd3f2150f
assets/resource/c676ac2b6a44e850dcbb5d4044dd3f08.pk 0x68876d35
assets/resource/c717ece7a157d7b22f48acd88090e6db.pk 0x728afafb
assets/resource/c94a6c3dbf9c0fe1c727b07f844da4ac.pk 0x807d43ca
assets/resource/c95d7d9a4bd8c8db180ee0f554434e3e.pk 0xa267b2e8
assets/resource/c9762e5915f7c204f71ed47f493105f4.pk 0xd1c0aa23
assets/resource/ca84bdc48c05293a0f644dff3de56390.pk 0x7c767a65
assets/resource/cb1b39eea2ad5cc15f69fcd3e33d54d3.pk 0x23cef88a
assets/resource/cc859688118dd9ce8473fc6c6c82d893.pk 0x29026428
assets/resource/cd4bf2017f4ef2a1ba02c49968a69e80.pk 0x37e7155
assets/resource/d2ddc95d40d0d866a997e8a4e040fe2c.pk 0x989d40e2
assets/resource/d3dd4784c8653e6104687fa8bf25f530.pk 0xb0a1bb56
assets/resource/d4eb41e856e539af940c473d8b304493.pk 0xf4e225da
assets/resource/d54a677bd5a087c8357092549ce5b071.pk 0x70fe1003
assets/resource/d72fd9a85769385f5fcfaa4ab79b4abd.pk 0x5c048140
assets/resource/d8a0684bed7b04cca599734ab21457e4.pk 0xb9df8815
assets/resource/d907eb203c98b038b87ac9bba33e59bc.pk 0x9c772e15
assets/resource/da9f04f6692c5973af617c252012cab8.pk 0x448cf346
assets/resource/dbaac7a8580cb3cea5be7c8e28bc25da.pk 0xea6bd868
assets/resource/dda51d8b209512591dd4f41c46a7093a.pk 0xeb6ac963
assets/resource/ddad20a6faeacb2c0be668866a0b72e2.pk 0x72c8a68b
assets/resource/dfb59957e61062b8d29e0280c469f0dd.pk 0x697882ad
assets/resource/e20ce3b1ca357a3c9428550d206206a1.pk 0x3808d489
assets/resource/e289c97fea2171bad6fc7ad8d3f10668.pk 0x688d6b89
assets/resource/e56f5027c01eae1e6226365389f4b861.pk 0x724061f7
assets/resource/e800d49df7e0fab8d8fb4bb6f747d02a.pk 0x14998d55
assets/resource/e891e8030fb632d5f9f785e8f44f42ea.pk 0x70ef4e8e
assets/resource/ede144063f2a944652b71ddd5001c2c7.pk 0xe68fa4de
assets/resource/ee02108f8ae9926a47b492073ef9d0fe.pk 0xcd2ce999
assets/resource/efe9f626d28ff1a7d0ba4287d70644a0.pk 0x5c2af1a
assets/resource/f03edfc51200582f749ad8d25fc0d15e.pk 0x998d4a98
assets/resource/f220a8bc693b309617cbdf67c3e9c8b1.pk 0x5d82fe72
assets/resource/f24f392874408162a2e081e35994e626.pk 0x3dea8f7d
assets/resource/f312fc69553c1107a98e4b449e00b392.pk 0x83b8ac27
assets/resource/f3355832789e9e85cc7a303f0deb7b86.pk 0xb6cba00d
assets/resource/f4041864c99fa33a93963fc10b4ac9af.pk 0x3bca5863
assets/resource/f4e151f2940e435404696493c3062e94.pk 0x85cd4e5a
assets/resource/fa2f61f49ec4c9b6c6953d6dc3772b39.pk 0x1dec909d
assets/resource/fa92beb89a563e0671269e4b01a0ed4a.pk 0x2767e50c
assets/resource/fad1ebcd48117fdcc116f8262ae7dd8f.pk 0x6eadc37
assets/resource/fc2d914a75fb0dfba14fae30285767f9.pk 0xccd877a5
assets/resource/fd4141118688c6f07ca23190521bdfa1.pk 0xfeb054bd
assets/resource/ff283def931f1153ff0d5181de54cb7a.pk 0xbd2663d0
assets/sound/bg_map0.ogg 0x33ef41d2
assets/sound/bg_map1.ogg 0x65595b95
assets/sound/bg_map2.ogg 0x15600a9a
assets/sound/box0.ogg 0xc3b8642a
assets/sound/box1.ogg 0xb2fbfff4
assets/sound/box2.ogg 0x2cecddb
assets/sound/box3.ogg 0xc8ae128
assets/sound/box4.ogg 0x70e1d0dc
assets/sound/box5.ogg 0x8e67af5f
assets/sound/box6.ogg 0x30b6a52f
assets/sound/btn.ogg 0x1d3a9f94
assets/sound/btn1.ogg 0xd9246a3f
assets/sound/buy.ogg 0xe2603fd6
assets/sound/cheer.ogg 0x89cbfb03
assets/sound/click.ogg 0x36b3dafc
assets/sound/coin.ogg 0xfbc2f829
assets/sound/error.ogg 0xf15fda28
assets/sound/page.ogg 0x15b65621
assets/sound/readygo.ogg 0xa3c34e80
assets/sound/right.ogg 0x7c519e76
assets/sound/shot.wav 0x34e28726
assets/sound/start.ogg 0xf8191603
assets/sound/wrong.ogg 0x898b2c87
res/drawable/ic_launcher.png 0xa227fc8a
res/layout/forward.xml 0xea588788
AndroidManifest.xml 0x2c52e8ca
resources.arsc 0x528e74a9
res/drawable-hdpi/icon.png 0xcebe2391
res/drawable-ldpi/icon.png 0xcebe2391
res/drawable-mdpi/icon.png 0xcebe2391
res/drawable-xhdpi/icon.png 0x98ae7737
classes.dex 0xeea3b92e
assets/loon_logo.png 0x40d070f8
assets/feiwo_interstitial_close.png 0xdf07e88f
assets/feiwo_interstitial_dl_normal.png 0x78fc4bb8
assets/feiwo_interstitial_dl_pressed.png 0x40262ef4
assets/feiwo_la_da_horizontal_line.png 0x53359994
assets/feiwo_la_title_back.png 0x3b9cc739
assets/feiwo_recommend_check_false.png 0xf0f4baeb
assets/feiwo_recommend_check_true.png 0x16d0f970
assets/feiwo_recommend_da_details_line.png 0x58d61164
assets/feiwo_recommend_loadfaild_icon.png 0x1ef0ef7c
assets/feiwo_recommend_right_arrow.png 0xc5e88c19
assets/feiwo_recommend_rloding_1.png 0x65ab2d1b
assets/feiwo_recommend_rloding_2.png 0xc7b200b
assets/feiwo_recommend_rloding_3.png 0xdd079eca
assets/feiwo_recommend_rloding_4.png 0xd874b81f
assets/feiwo_recommend_safety_certification.png 0x1766599d
assets/feiwo_recommend_surprise.png 0x231ef625
META-INF/MANIFEST.MF 0xaf69726f
META-INF/CERT.SF 0x79f2cd40
META-INF/CERT.RSA 0xa83cf866
运行截图
VirSCANVirSCAN
VirSCAN