VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, VirSCAN can scan compressed files with password 'infected' or 'virus'.

Language
Server load
Server Load

File information
Safety rating:
Behavior list
Basic Information
MD5:6187a62eb270390235f62ccf81f2ef48
Package names:net.flyee.hotnews
Minimum operating environment:Android 2.3.3, 2.3.4
copyright:Android
Key behavior
Behavior description:设置特殊文件属性
details:C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe
Behavior description:获取TickCount值
details:TickCount = 276781, SleepMilliseconds = 60000.
TickCount = 276828, SleepMilliseconds = 60000.
TickCount = 276843, SleepMilliseconds = 60000.
TickCount = 276859, SleepMilliseconds = 60000.
TickCount = 276875, SleepMilliseconds = 60000.
TickCount = 276890, SleepMilliseconds = 60000.
TickCount = 276906, SleepMilliseconds = 60000.
TickCount = 277078, SleepMilliseconds = 60000.
TickCount = 277109, SleepMilliseconds = 60000.
TickCount = 277125, SleepMilliseconds = 60000.
TickCount = 277140, SleepMilliseconds = 60000.
TickCount = 277156, SleepMilliseconds = 60000.
TickCount = 220822, SleepMilliseconds = 10.
Behavior description:设置特殊文件夹属性
details:C:\Documents and Settings\Administrator\Local Settings\%temp%\996E
Behavior description:设置消息钩子
details:C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe
C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe
Behavior description:修改注册表_启动项
details:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Windows
Process behavior
Behavior description:隐藏窗口创建进程
details:ImagePath = , CmdLine = C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe
Behavior description:创建本地线程
details:TargetProcess: %temp%\****.exe, InheritedFromPID = 2000, ProcessID = 2708, ThreadID = 2760, StartAddress = 00408540, Parameter = 00000000
TargetProcess: %temp%\****.exe, InheritedFromPID = 2000, ProcessID = 2708, ThreadID = 2800, StartAddress = 77E56C7D, Parameter = 000AE288
TargetProcess: %temp%\****.exe, InheritedFromPID = 2000, ProcessID = 2708, ThreadID = 2804, StartAddress = 769AE43B, Parameter = 000B0BF0
TargetProcess: %temp%\****.exe, InheritedFromPID = 2000, ProcessID = 2708, ThreadID = 2808, StartAddress = 77E56C7D, Parameter = 000B1378
TargetProcess: rundll32.exe, InheritedFromPID = 2708, ProcessID = 2876, ThreadID = 2884, StartAddress = 00408540, Parameter = 00000000
Behavior description:创建新文件进程
details:[0x00000b3c]ImagePath = C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe, CmdLine = "C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe"
Behavior description:枚举进程
details:N/A
File behavior
Behavior description:创建文件
details:C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe
Behavior description:创建可执行文件
details:C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe
Behavior description:复制文件
details:C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe ---> C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe
Behavior description:设置特殊文件属性
details:C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe
Behavior description:查找文件
details:FileName = C:\Documents and Settings
FileName = C:\Documents and Settings\Administrator
FileName = C:\Documents and Settings\Administrator\Local Settings
FileName = C:\Documents and Settings\Administrator\Local Settings\Temp
FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%
FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe
FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\996E
FileName = C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe
FileName = C:\Documents and Settings\Administrator\Application Data\Microsoft\Office
FileName = C:\Documents and Settings\Administrator\Application Data
FileName = C:\Documents and Settings\Administrator\Application Data\Microsoft
Behavior description:设置特殊文件夹属性
details:C:\Documents and Settings\Administrator\Local Settings\%temp%\996E
Behavior description:修改文件内容
details:C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe ---> Offset = 0
C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe ---> Offset = 65536
C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe ---> Offset = 131072
C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe ---> Offset = 196608
C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe ---> Offset = 262144
Registry behavior
Behavior description:修改注册表
details:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Msversion
Behavior description:修改注册表_Explorer文件显示相关属性
details:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt
Behavior description:修改注册表_启动项
details:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Windows
Other behavior
Behavior description:创建互斥体
details:CTF.LBES.MutexDefaultS-*
CTF.Compart.MutexDefaultS-*
CTF.Asm.MutexDefaultS-*
CTF.Layouts.MutexDefaultS-*
CTF.TMD.MutexDefaultS-*
CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-*
AHK Keybd
Behavior description:创建事件对象
details:EventName = DINPUTWINMM
Behavior description:查找指定窗口
details:NtUserFindWindowEx: [Class,Window] = [AutoHotkey,C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe]
NtUserFindWindowEx: [Class,Window] = [#32771,]
NtUserFindWindowEx: [Class,Window] = [AutoHotkey,C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe]
Behavior description:打开事件
details:HookSwitchHookEnabledEvent
MSFT.VSA.COM.DISABLE.2708
MSFT.VSA.IEC.STATUS.6c736db0
\SECURITY\LSA_AUTHENTICATION_INITIALIZED
Behavior description:获取TickCount值
details:TickCount = 276781, SleepMilliseconds = 60000.
TickCount = 276828, SleepMilliseconds = 60000.
TickCount = 276843, SleepMilliseconds = 60000.
TickCount = 276859, SleepMilliseconds = 60000.
TickCount = 276875, SleepMilliseconds = 60000.
TickCount = 276890, SleepMilliseconds = 60000.
TickCount = 276906, SleepMilliseconds = 60000.
TickCount = 277078, SleepMilliseconds = 60000.
TickCount = 277109, SleepMilliseconds = 60000.
TickCount = 277125, SleepMilliseconds = 60000.
TickCount = 277140, SleepMilliseconds = 60000.
TickCount = 277156, SleepMilliseconds = 60000.
TickCount = 220822, SleepMilliseconds = 10.
Behavior description:枚举窗口
details:N/A
Behavior description:可执行文件签名信息
details:C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe(签名验证: 未通过)
Behavior description:调用Sleep函数
details:[1]: MilliSeconds = 60000.
[2]: MilliSeconds = 60000.
[3]: MilliSeconds = 60000.
[4]: MilliSeconds = 60000.
[5]: MilliSeconds = 60000.
[6]: MilliSeconds = 60000.
[7]: MilliSeconds = 60000.
[8]: MilliSeconds = 60000.
[9]: MilliSeconds = 60000.
[10]: MilliSeconds = 60000.
[1]: MilliSeconds = 10.
[2]: MilliSeconds = 0.
Behavior description:隐藏指定窗口
details:[Window,Class] = [C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe,AutoHotkey]
[Window,Class] = [C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe,AutoHotkey]
Behavior description:可执行文件MD5
details:C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\rundll32.exe ---> 2eb5d76180ce7b3241b281fa79ab3483
Behavior description:打开互斥体
details:ShimCacheMutex
Activities
Activity nameTypes of
com.sun.sunmobi.test.AdViewActivityandroid.intent.action.MAIN
com.sun.sunmobi.test.AdViewActivityandroid.intent.category.LAUNCHER
Dangerous function
Function nameinformation
android/app/NotificationManager;->notify信息通知栏
ContentResolver;->query读取联系人、短信等数据库
LocationManager;->getLastKnownLocation获取地址位置
getRuntime获取命令行环境
TelephonyManager;->getDeviceId搜集用户手机IMEI码、电话号码、系统版本号等信息
java/net/URL;->openConnection连接URL
HttpClient;->execute请求远程服务器
DefaultHttpClient;->execute发送HTTP请求
java/lang/Runtime;->exec执行字符串命令
Startup mode
nameinformation
com.sun.SunMobiBroadcastReceiver应用安装时启动服务
com.sun.SunMobiBroadcastReceiver应用卸载时启动服务
com.sun.SunMobiBroadcastReceiver屏幕解锁启动服务
com.sun.SunMobiBroadcastReceiver网络连接改变时启动服务
com.sun.SunMobiBroadcastReceiver
com.sun.SunMobiBroadcastReceiver
com.sun.SunMobiBroadcastReceiverWIFI状态改变时启动服务
com.sun.SunMobiBroadcastReceiver
com.sun.SunMobiBroadcastReceiver
com.sun.SunMobiBroadcastReceiver
com.marswin89.marsdaemon.config.DaemonReceiver
Permission list
License nameinformation
android.permission.INTERNET连接网络(2G或3G)
android.permission.ACCESS_NETWORK_STATE读取网络状态(2G或3G)
android.permission.MOUNT_UNMOUNT_FILESYSTEMS挂载、反挂载外部文件系统
android.permission.CHANGE_NETWORK_STATE变更网络状态
android.permission.CHANGE_WIFI_STATE改变WIFI连接状态
android.permission.WRITE_EXTERNAL_STORAGE写外部存储器(如:SD卡)
android.permission.GET_ACCOUNTS访问账户列表
android.permission.GET_TASKS获取有关当前或最近运行的任务信息
android.permission.REAL_GET_TASKS
android.permission.READ_PHONE_STATE读取电话状态
Service list
name
com.sun.SunMobiService
com.marswin89.marsdaemon.config.AppMonitorService
com.marswin89.marsdaemon.config.SysDaemonService
File List
file name Check code
AndroidManifest.xml 0xf2e69d70
assets/armeabi-v7a/daemon 0x1453c4a2
assets/armeabi/daemon 0x196aa90f
assets/x86/daemon 0x30f10547
res/anim/abc_fade_in.xml 0x2f94166b
res/anim/abc_fade_out.xml 0x396f7a13
res/anim/abc_grow_fade_in_from_bottom.xml 0xb8fbd669
res/anim/abc_popup_enter.xml 0xddee8fe8
res/anim/abc_popup_exit.xml 0x36611959
res/anim/abc_shrink_fade_out_from_bottom.xml 0x1dc9e60b
res/anim/abc_slide_in_bottom.xml 0x73663fbe
res/anim/abc_slide_in_top.xml 0x41f8f3af
res/anim/abc_slide_out_bottom.xml 0x51b9c50a
res/anim/abc_slide_out_top.xml 0x4f613364
res/color-v11/abc_background_cache_hint_selector_material_dark.xml 0x39cf77ca
res/color-v11/abc_background_cache_hint_selector_material_light.xml 0xd7e3a72d
res/color-v23/abc_color_highlight_material.xml 0x46c6e598
res/color/abc_background_cache_hint_selector_material_dark.xml 0x7f66ef21
res/color/abc_background_cache_hint_selector_material_light.xml 0x36d03a22
res/color/abc_primary_text_disable_only_material_dark.xml 0xe8af8ced
res/color/abc_primary_text_disable_only_material_light.xml 0x87345ed2
res/color/abc_primary_text_material_dark.xml 0x714e4027
res/color/abc_primary_text_material_light.xml 0xe2513f5d
res/color/abc_search_url_text.xml 0x2dc43020
res/color/abc_secondary_text_material_dark.xml 0xd9532359
res/color/abc_secondary_text_material_light.xml 0x4a4c5c23
res/color/switch_thumb_material_dark.xml 0x462fc291
res/color/switch_thumb_material_light.xml 0xd530bdeb
res/color/tab_text_selector.xml 0x707b118b
res/drawable-ldrtl-xxhdpi-v17/abc_ic_ab_back_mtrl_am_alpha.png 0x49b8e510
res/drawable-ldrtl-xxhdpi-v17/abc_ic_menu_copy_mtrl_am_alpha.png 0x1d5aea2b
res/drawable-ldrtl-xxhdpi-v17/abc_ic_menu_cut_mtrl_alpha.png 0xed023aa
res/drawable-ldrtl-xxhdpi-v17/abc_spinner_mtrl_am_alpha.9.png 0x48f4c207
res/drawable-v11/abc_textfield_search_material.xml 0xce463838
res/drawable-v21/abc_action_bar_item_background_material.xml 0xb794af16
res/drawable-v21/abc_btn_colored_material.xml 0xddce8b75
res/drawable-v21/abc_edit_text_material.xml 0xab0346c1
res/drawable-v21/abc_ratingbar_indicator_material.xml 0x5b57a222
res/drawable-v21/abc_ratingbar_small_material.xml 0xbed7f6fc
res/drawable-v23/abc_control_background_material.xml 0xc6e88bf4
res/drawable-xxhdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0x7758fe71
res/drawable-xxhdpi-v4/abc_btn_check_to_on_mtrl_000.png 0xa8af72f3
res/drawable-xxhdpi-v4/abc_btn_check_to_on_mtrl_015.png 0x47977e9
res/drawable-xxhdpi-v4/abc_btn_radio_to_on_mtrl_000.png 0xcfc747f2
res/drawable-xxhdpi-v4/abc_btn_radio_to_on_mtrl_015.png 0xdbaceef4
res/drawable-xxhdpi-v4/abc_btn_rating_star_off_mtrl_alpha.png 0xb4580cf
res/drawable-xxhdpi-v4/abc_btn_rating_star_on_mtrl_alpha.png 0xbf3a37c9
res/drawable-xxhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0xe3ff53b2
res/drawable-xxhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0x7f666710
res/drawable-xxhdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0x7cd87445
res/drawable-xxhdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png 0x99fcf98c
res/drawable-xxhdpi-v4/abc_ic_clear_mtrl_alpha.png 0xf7eea1df
res/drawable-xxhdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0x75e2a0e0
res/drawable-xxhdpi-v4/abc_ic_go_search_api_mtrl_alpha.png 0x978987bf
res/drawable-xxhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0x49d49756
res/drawable-xxhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0x185907e3
res/drawable-xxhdpi-v4/abc_ic_menu_moreoverflow_mtrl_alpha.png 0xadb065b2
res/drawable-xxhdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png 0xde8d92d0
res/drawable-xxhdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png 0x6a35729
res/drawable-xxhdpi-v4/abc_ic_menu_share_mtrl_alpha.png 0x49556dc6
res/drawable-xxhdpi-v4/abc_ic_search_api_mtrl_alpha.png 0x79e1cda0
res/drawable-xxhdpi-v4/abc_ic_star_black_16dp.png 0x15d856d
res/drawable-xxhdpi-v4/abc_ic_star_black_36dp.png 0x3e52d827
res/drawable-xxhdpi-v4/abc_ic_star_half_black_16dp.png 0xcd5c10f5
res/drawable-xxhdpi-v4/abc_ic_star_half_black_36dp.png 0x65d095bf
res/drawable-xxhdpi-v4/abc_ic_voice_search_api_mtrl_alpha.png 0xfedf00ca
res/drawable-xxhdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x2d5a2100
res/drawable-xxhdpi-v4/abc_list_focused_holo.9.png 0x19c09c27
res/drawable-xxhdpi-v4/abc_list_longpressed_holo.9.png 0x236b6e98
res/drawable-xxhdpi-v4/abc_list_pressed_holo_dark.9.png 0x823780d0
res/drawable-xxhdpi-v4/abc_list_pressed_holo_light.9.png 0x813ae23c
res/drawable-xxhdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0xdddaae2e
res/drawable-xxhdpi-v4/abc_list_selector_disabled_holo_light.9.png 0x1ff1856f
res/drawable-xxhdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0xe97125d2
res/drawable-xxhdpi-v4/abc_popup_background_mtrl_mult.9.png 0x478db1d1
res/drawable-xxhdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0xc57037f7
res/drawable-xxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0x35329a
res/drawable-xxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0x9aaa658d
res/drawable-xxhdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0x5902ed5c
res/drawable-xxhdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0xa028728e
res/drawable-xxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0xbba9274f
res/drawable-xxhdpi-v4/abc_switch_track_mtrl_alpha.9.png 0xf785991a
res/drawable-xxhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0xd6692ce7
res/drawable-xxhdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x2fa093c4
res/drawable-xxhdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0x4d07b4a9
res/drawable-xxhdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0x77c42d34
res/drawable-xxhdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0x9e0d73d
res/drawable-xxhdpi-v4/icon.png 0x3de79579
res/drawable/abc_btn_borderless_material.xml 0xf341af1c
res/drawable/abc_btn_check_material.xml 0xe2f70d0a
res/drawable/abc_btn_colored_material.xml 0x1522b03
res/drawable/abc_btn_default_mtrl_shape.xml 0x1bfb1317
res/drawable/abc_btn_radio_material.xml 0x2960f785
res/drawable/abc_cab_background_internal_bg.xml 0x9c5b1555
res/drawable/abc_cab_background_top_material.xml 0x789cac73
res/drawable/abc_dialog_material_background_dark.xml 0xeb79f366
res/drawable/abc_dialog_material_background_light.xml 0x62cb9c9e
res/drawable/abc_edit_text_material.xml 0x7cabfc07
res/drawable/abc_item_background_holo_dark.xml 0xd1b21c63
res/drawable/abc_item_background_holo_light.xml 0x5c0f0b25
res/drawable/abc_list_selector_background_transition_holo_dark.xml 0xad127204
res/drawable/abc_list_selector_background_transition_holo_light.xml 0xff8319d8
res/drawable/abc_list_selector_holo_dark.xml 0xd3230273
res/drawable/abc_list_selector_holo_light.xml 0x4ca62f47
res/drawable/abc_ratingbar_full_material.xml 0xf00f836e
res/drawable/abc_ratingbar_indicator_material.xml 0xdbcfdb9a
res/drawable/abc_ratingbar_small_material.xml 0xecbbc468
res/drawable/abc_seekbar_thumb_material.xml 0xf5569f09
res/drawable/abc_seekbar_track_material.xml 0xd86c6936
res/drawable/abc_spinner_textfield_background_material.xml 0x50f52bca
res/drawable/abc_switch_thumb_material.xml 0x88e00ae
res/drawable/abc_tab_indicator_material.xml 0x20683102
res/drawable/abc_text_cursor_material.xml 0x9fd1fc63
res/drawable/abc_textfield_search_material.xml 0x7892e84b
res/layout-v13/select_dialog_multichoice_material.xml 0xdacb80b7
res/layout-v13/select_dialog_singlechoice_material.xml 0x50b0e1f3
res/layout-v17/abc_alert_dialog_button_bar_material.xml 0xde77883b
res/layout-v17/abc_alert_dialog_material.xml 0x8e38d1b2
res/layout-v17/abc_dialog_title_material.xml 0xab8974ad
res/layout-v17/abc_search_view.xml 0xf3b3168b
res/layout-v17/notification_template_big_media.xml 0x1297cf64
res/layout-v17/notification_template_big_media_narrow.xml 0x6a6608a2
res/layout-v17/notification_template_lines.xml 0x6c453d38
res/layout-v17/notification_template_media.xml 0x37e261f6
res/layout-v17/notification_template_part_chronometer.xml 0xbee16f4a
res/layout-v17/notification_template_part_time.xml 0xb716ca65
res/layout-v17/select_dialog_multichoice_material.xml 0xd190ed1b
res/layout-v17/select_dialog_singlechoice_material.xml 0x66110678
res/layout-v21/abc_screen_toolbar.xml 0xc788c163
res/layout/abc_action_bar_title_item.xml 0x5251148a
res/layout/abc_action_bar_up_container.xml 0x8e13a1ec
res/layout/abc_action_bar_view_list_nav_layout.xml 0x7b62cb91
res/layout/abc_action_menu_item_layout.xml 0x6727d5be
res/layout/abc_action_menu_layout.xml 0x1433d97a
res/layout/abc_action_mode_bar.xml 0x5567cb3d
res/layout/abc_action_mode_close_item_material.xml 0xe2aebb04
res/layout/abc_activity_chooser_view.xml 0x9b1a7caa
res/layout/abc_activity_chooser_view_list_item.xml 0xa9e0a70a
res/layout/abc_alert_dialog_button_bar_material.xml 0xee27361e
res/layout/abc_alert_dialog_material.xml 0x4c20566b
res/layout/abc_dialog_title_material.xml 0x3cec3ce
res/layout/abc_expanded_menu_layout.xml 0xd6e154bc
res/layout/abc_list_menu_item_checkbox.xml 0xdff1263c
res/layout/abc_list_menu_item_icon.xml 0xe9661915
res/layout/abc_list_menu_item_layout.xml 0xb7e85714
res/layout/abc_list_menu_item_radio.xml 0xbc230a57
res/layout/abc_popup_menu_item_layout.xml 0xe265f162
res/layout/abc_screen_content_include.xml 0xe005f52e
res/layout/abc_screen_simple.xml 0xe48e9d68
res/layout/abc_screen_simple_overlay_action_mode.xml 0x2df393d9
res/layout/abc_screen_toolbar.xml 0x9154a396
res/layout/abc_search_dropdown_item_icons_2line.xml 0xdf5648ff
res/layout/abc_search_view.xml 0xb6108795
res/layout/abc_select_dialog_material.xml 0xa7a97fc9
res/layout/activity_adview.xml 0x2fd08d6d
res/layout/activity_batmboi_test.xml 0xfbb3c1d8
res/layout/activity_batmobi_test.xml 0x9f3a16d3
res/layout/aditem.xml 0xb7f73071
res/layout/batmobi_ad_banner_layout.xml 0xb9536635
res/layout/batmobi_ad_error_layout.xml 0xbff20148
res/layout/batmobi_ad_interstitial_layout.xml 0xe55878c5
res/layout/batmobi_ad_native_item.xml 0xb2f50f0
res/layout/batmobi_ad_native_layout.xml 0x9303aa1
res/layout/batmobi_ad_rectangle_layout.xml 0x551cb7ae
res/layout/big_banner_activity.xml 0x29ce6fee
res/layout/fragment_interstitial.xml 0xcd6eb559
res/layout/interstitial_fragment.xml 0xeb79dc2d
res/layout/main_layout.xml 0x930ed2e
res/layout/mnative_activity.xml 0xb85ff848
res/layout/notification_layout.xml 0x139873c0
res/layout/notification_media_action.xml 0x5980ac32
res/layout/notification_media_cancel_action.xml 0xd3f6e335
res/layout/notification_template_big_media.xml 0xe2f3648a
res/layout/notification_template_big_media_narrow.xml 0x349ff857
res/layout/notification_template_lines.xml 0x4ca99199
res/layout/notification_template_media.xml 0x324f11f8
res/layout/notification_template_part_chronometer.xml 0xf2488351
res/layout/notification_template_part_time.xml 0xbdee0c71
res/layout/select_dialog_item_material.xml 0xaa763be1
res/layout/select_dialog_multichoice_material.xml 0xc1133f71
res/layout/select_dialog_singlechoice_material.xml 0xe87fcd8c
res/layout/small_banner_activity.xml 0x3460ecd7
res/layout/support_simple_spinner_dropdown_item.xml 0x65acb3f3
res/mipmap-hdpi-v4/ic_launcher.png 0xa2837e35
res/mipmap-mdpi-v4/ic_launcher.png 0x3ce32aa9
res/mipmap-xhdpi-v4/ic_launcher.png 0xa9b28428
res/mipmap-xhdpi-v4/lv_item_bg.9.png 0x8b668f71
res/mipmap-xhdpi-v4/public_tab_switcher_long_zj.png 0x12b93c3f
res/mipmap-xhdpi-v4/sun.png 0xefbed74b
res/mipmap-xxhdpi-v4/ic_launcher.png 0xc137cca8
res/mipmap-xxhdpi-v4/sun.png 0xc7f2c2e1
res/mipmap-xxxhdpi-v4/ic_launcher.png 0xd28c71b
resources.arsc 0x12ef0384
classes.dex 0x67a4545b
lib/x86/libdaemon_api20.so 0x3734ca2b
lib/x86/libdaemon_api21.so 0x5b17a8d1
lib/armeabi-v7a/libdaemon_api20.so 0x4ca22daf
lib/armeabi-v7a/libdaemon_api21.so 0xcadb74fe
lib/armeabi/libdaemon_api20.so 0xd4be9468
lib/armeabi/libdaemon_api21.so 0x6c23220e
META-INF/MANIFEST.MF 0x9bb4474a
META-INF/CERT.SF 0x5deb56ee
META-INF/CERT.RSA 0xbe9a8b1f
Run screenshot
VirSCAN

About VirSCAN | Privacy Policy | Contact us | Links | Help VirSCAN
Translated by Keith Miller, United States
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号