VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load

File information
Safety rating:
Behavior list
Basic Information
MD5:e6397b3f37010575224ea2f8df3a0c26
Package names:com.qq
Minimum operating environment:Android 1.5
copyright:Android
Key behavior
Behavior description:跨进程写入数据
details:TargetProcess = C:\Program Files\Internet Explorer\iexplore.exe, WriteAddress = 0x00040000, Size = 0x00000020 TargetPID = 0x00000eb4
TargetProcess = C:\Program Files\Internet Explorer\iexplore.exe, WriteAddress = 0x00040020, Size = 0x00000034 TargetPID = 0x00000eb4
TargetProcess = C:\Program Files\Internet Explorer\iexplore.exe, WriteAddress = 0x7ffd3238, Size = 0x00000004 TargetPID = 0x00000eb4
TargetProcess = C:\Program Files\Internet Explorer\iexplore.exe, WriteAddress = 0x00040000, Size = 0x00000020 TargetPID = 0x000000c0
TargetProcess = C:\Program Files\Internet Explorer\iexplore.exe, WriteAddress = 0x00040020, Size = 0x00000034 TargetPID = 0x000000c0
TargetProcess = C:\Program Files\Internet Explorer\iexplore.exe, WriteAddress = 0x7ffdc238, Size = 0x00000004 TargetPID = 0x000000c0
Behavior description:设置特殊文件夹属性
details:C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies
C:\Users\Administrator\AppData\Local\Microsoft\Windows\History\History.IE5
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\PrivacIE\Low
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\IECompatCache\Low
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\IETldCache\Low
C:\Users\Administrator\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
C:\Users\Administrator\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
C:\Users\Administrator\AppData\Local\Microsoft\Feeds Cache
C:\Users\Administrator\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012019061320190614
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\IECompatCache
Behavior description:设置消息钩子
details:C:\Windows\system32\IEFRAME.dll
Process behavior
Behavior description:创建进程
details:[0x00000eb4]ImagePath = C:\Program Files\Internet Explorer\iexplore.exe, CmdLine = "C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:2896 CREDAT:79873
[0x000000c0]ImagePath = C:\Program Files\Internet Explorer\iexplore.exe, CmdLine = "C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:2896 CREDAT:14342
Behavior description:跨进程写入数据
details:TargetProcess = C:\Program Files\Internet Explorer\iexplore.exe, WriteAddress = 0x00040000, Size = 0x00000020 TargetPID = 0x00000eb4
TargetProcess = C:\Program Files\Internet Explorer\iexplore.exe, WriteAddress = 0x00040020, Size = 0x00000034 TargetPID = 0x00000eb4
TargetProcess = C:\Program Files\Internet Explorer\iexplore.exe, WriteAddress = 0x7ffd3238, Size = 0x00000004 TargetPID = 0x00000eb4
TargetProcess = C:\Program Files\Internet Explorer\iexplore.exe, WriteAddress = 0x00040000, Size = 0x00000020 TargetPID = 0x000000c0
TargetProcess = C:\Program Files\Internet Explorer\iexplore.exe, WriteAddress = 0x00040020, Size = 0x00000034 TargetPID = 0x000000c0
TargetProcess = C:\Program Files\Internet Explorer\iexplore.exe, WriteAddress = 0x7ffdc238, Size = 0x00000004 TargetPID = 0x000000c0
File behavior
Behavior description:创建文件
details:C:\Users\Administrator\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{EECB6A2F-C072-11E7-828E-080027488980}.dat
C:\Users\Administrator\AppData\Local\Temp\~DFB5009DC7EB4CF390.TMP
C:\Users\Administrator\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{EECB6A30-C072-11E7-828E-080027488980}.dat
C:\Users\Administrator\AppData\Local\Temp\~DF1B56EAD15153C4E9.TMP
C:\Users\Administrator\AppData\Local\Temp\JavaDeployReg.log
C:\Users\Administrator\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012019061320190614\index.dat
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2KQWVTOD\favicon[1].ico
C:\Users\Administrator\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2KQWVTOD\qsml[1].aspx
C:\Users\Administrator\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{E31A1D3F-8D33-11E9-828E-080027488980}.dat
C:\Users\Administrator\AppData\Local\Temp\~DF5D6824D393D23454.TMP
C:\Users\Administrator\AppData\Local\Temp\~DF0610DA31B90AC757.TMP
C:\Users\Administrator\AppData\Local\Temp\~DFBED20A0823DE621E.TMP
C:\Users\Administrator\AppData\Local\Temp\~DFD420B3F64A308122.TMP
C:\Users\Administrator\AppData\Local\Temp\~DF90291140E2801D38.TMP
Behavior description:创建可执行文件
details:C:\Users\Administrator\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
Behavior description:查找文件
details:FileName = C:\Program Files\Common Files\Adobe
FileName = C:\Program Files\Common Files\Adobe\Acrobat
FileName = C:\Program Files\Common Files\Adobe\Acrobat\ActiveX
FileName = C:\Program Files\Java
FileName = C:\Program Files\Java\jre1.8.0_144\bin
FileName = C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll
FileName = C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll
FileName = C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk
FileName = C:\ProgramData\Microsoft\Network\Connections\Pbk\*.pbk
FileName = C:\Windows\system32\Ras\*.pbk
FileName = C:\Users\Administrator\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk
FileName = C:\Users\Administrator\AppData\Roaming\Microsoft\Network\Connections\Pbk\*.pbk
FileName = C:\Windows
FileName = C:\Windows\WinSxS
FileName = C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\MSVCR80.dll
Behavior description:删除文件
details:C:\Users\Administrator\AppData\Local\Temp\~DFB5009DC7EB4CF390.TMP
C:\Users\Administrator\AppData\Local\Temp\~DF1B56EAD15153C4E9.TMP
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2KQWVTOD\favicon[1].ico
C:\Users\Administrator\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2KQWVTOD\qsml[1].aspx
C:\Users\Administrator\AppData\Local\Temp\~DF5D6824D393D23454.TMP
C:\Users\Administrator\AppData\Local\Temp\~DF0610DA31B90AC757.TMP
C:\Users\Administrator\AppData\Local\Temp\~DFBED20A0823DE621E.TMP
C:\Users\Administrator\AppData\Local\Temp\~DFD420B3F64A308122.TMP
C:\Users\Administrator\AppData\Local\Temp\~DF90291140E2801D38.TMP
C:\Users\Administrator\AppData\Local\Temp\~DFA819BE86379B02F9.TMP
C:\Users\Administrator\AppData\Local\Temp\~DFFCA54A0650CF6EC3.TMP
Behavior description:设置特殊文件夹属性
details:C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies
C:\Users\Administrator\AppData\Local\Microsoft\Windows\History\History.IE5
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\PrivacIE\Low
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\IECompatCache\Low
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\IETldCache\Low
C:\Users\Administrator\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
C:\Users\Administrator\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
C:\Users\Administrator\AppData\Local\Microsoft\Feeds Cache
C:\Users\Administrator\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012019061320190614
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\IECompatCache
Behavior description:修改文件内容
details:C:\Users\Administrator\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{EECB6A2F-C072-11E7-828E-080027488980}.dat ---> Offset = 512
C:\Users\Administrator\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{EECB6A2F-C072-11E7-828E-080027488980}.dat ---> Offset = 0
C:\Users\Administrator\AppData\Local\Temp\~DFB5009DC7EB4CF390.TMP ---> Offset = 16383
C:\Users\Administrator\AppData\Local\Temp\~DFB5009DC7EB4CF390.TMP ---> Offset = 12288
C:\Users\Administrator\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{EECB6A2F-C072-11E7-828E-080027488980}.dat ---> Offset = 3072
C:\Users\Administrator\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{EECB6A2F-C072-11E7-828E-080027488980}.dat ---> Offset = 1536
C:\Users\Administrator\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{EECB6A30-C072-11E7-828E-080027488980}.dat ---> Offset = 512
C:\Users\Administrator\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{EECB6A30-C072-11E7-828E-080027488980}.dat ---> Offset = 0
C:\Users\Administrator\AppData\Local\Temp\~DF1B56EAD15153C4E9.TMP ---> Offset = 16383
C:\Users\Administrator\AppData\Local\Temp\~DF1B56EAD15153C4E9.TMP ---> Offset = 12288
C:\Users\Administrator\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{EECB6A30-C072-11E7-828E-080027488980}.dat ---> Offset = 3072
C:\Users\Administrator\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{EECB6A30-C072-11E7-828E-080027488980}.dat ---> Offset = 1536
C:\Users\Administrator\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012019061320190614\index.dat ---> Offset = 0
C:\Users\Administrator\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico ---> Offset = 0
C:\Users\Administrator\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{E31A1D3F-8D33-11E9-828E-080027488980}.dat ---> Offset = 512
Network behavior
Behavior description:下载文件
details:URLDownloadToFileW: http://ww****om/favicon.ico ---> C:\Users\Administrator\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
C:\Users\Administrator\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
Behavior description:连接指定站点
details:InternetConnectA: ServerName = ww****om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x00000000
InternetConnectA: ServerName = ap****om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x00000000
InternetConnectA: ServerName = ur****om, PORT = 443, UserName = , Password = , hSession = 0x00cc0010, hConnect = 0x00cc0014, Flags = 0x00000200
Behavior description:打开HTTP连接
details:InternetOpenA: UserAgent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E), hSession = 0x00cc0004
InternetOpenA: UserAgent: VCSoapClient, hSession = 0x00cc0010
Behavior description:建立到一个指定的套接字连接
details:URL: ww****om, IP: **.133.40.**:80, SOCKET = 0x00000574
URL: ap****om, IP: **.133.40.**:80, SOCKET = 0x000004cc
URL: ap****om, IP: **.133.40.**:80, SOCKET = 0x000005a4
URL: ww****om, IP: **.133.40.**:80, SOCKET = 0x0000043c
URL: ww****om, IP: **.133.40.**:80, SOCKET = 0x000006e4
URL: ur****om, IP: **.133.40.**:443, SOCKET = 0x00000604
Behavior description:读取网络文件
details:hFile = 0x00cc000c, BytesToRead =2048, BytesRead = 2048.
hFile = 0x00cc0018, BytesToRead =4095, BytesRead = 4095.
Behavior description:发送HTTP包
details:GET /favicon.ico HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: ww****om Connection: Keep-Alive
GET /qsml.aspx?query=1&maxwidth=296&rowheight=21&sectionHeight=420&FORM=IE8SSC&market=zh-cn HTTP/1.1 Accept: */* Accept-Language: zh-cn User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: ap****om Connection: Keep-Alive
GET /qsml.aspx?query=123456&maxwidth=296&rowheight=21&sectionHeight=420&FORM=IE8SSC&market=zh-cn HTTP/1.1 Accept: */* Accept-Language: zh-cn User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: ap****om Connection: Keep-Alive
GET / HTTP/1.1 Accept: */* Accept-Language: zh-cn User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: ww****om Connection: Keep-Alive
Behavior description:打开HTTP请求
details:HttpOpenRequestA: ww****om:80/favicon.ico, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x00600010
HttpOpenRequestA: ap****om:80/qsml.aspx?query=1&maxwidth=296&rowheight=21&sectionheight=420&form=ie8ssc&market=zh-cn, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x00400210
HttpOpenRequestA: ap****om:80/qsml.aspx?query=123456&maxwidth=296&rowheight=21&sectionheight=420&form=ie8ssc&market=zh-cn, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x00400210
HttpOpenRequestA: ww****om:80/, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x00400200
HttpOpenRequestA: ur****om:443/urs.asmx?msurs-client-key=%2bupjoztqfxzmlgebq7r3dq%3d%3d&msurs-patented-lock=r4v8zh%2bqhae%3d, hConnect = 0x00cc0014, hRequest = 0x00cc0018, Verb: POST, Referer: , Flags = 0x04880300
Behavior description:按名称获取主机地址
details:GetAddrInfoW: ww****om
GetAddrInfoW: ap****om
GetAddrInfoW: ur****om
Registry behavior
Behavior description:修改注册表
details:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings
\REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{EECB6A2F-C072-11E7-828E-080027488980}
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{92780B25-18CC-41C8-B9BE-3C9C571A8263}\iexplore\Count
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{92780B25-18CC-41C8-B9BE-3C9C571A8263}\iexplore\Time
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\iexplore\Count
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\iexplore\Time
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\iexplore\LoadTime
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore\Count
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore\Time
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore\LoadTime
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore\Count
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore\Time
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore\LoadTime
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ED8C108E-4349-11D2-91A4-00C04F7969E8}\iexplore\Type
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ED8C108E-4349-11D2-91A4-00C04F7969E8}\iexplore\Flags
Behavior description:删除注册表键值
details:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL
\REGISTRY\USER\S-*_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\C:\Windows\system32\WFS.exe
\REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\0\Expiration
Behavior description:删除注册表键
details:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017110320171104\
Other behavior
Behavior description:检测自身是否被调试
details:IsDebuggerPresent
Behavior description:创建互斥体
details:Local\!BrowserEmulation!SharedMemory!Mutex
Local\ZoneAttributeCacheCounterMutex
Local\ZonesCacheCounterMutex
Local\ZonesLockedCacheCounterMutex
RasPbFile
ConnHashTable<2896>_HashTable_Mutex
Local\ZonesCounterMutex
Local\!IETld!Mutex
Local\RSS Eventing Connection Database Mutex 00000b50
Local\Feed Eventing Shared Memory Mutex S-*
Local\c:!users!administrator!appdata!local!microsoft!feeds cache!
Local\!PrivacIE!SharedMemory!Mutex
SmartScreen_UrsCacheMutex_2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2High_S-*
Local\c:!users!administrator!appdata!local!microsoft!windows!history!history.ie5!mshist012019061320190614!
Local\!IECompat!Mutex
Behavior description:创建事件对象
details:EventName = Isolation Signal Registry Event (EECB6A2D-C072-11E7-828E-080027488980, 0)
EventName = IE_EarlyTabStart_0xedc
EventName = Isolation Signal Registry Event (EECB6A2E-C072-11E7-828E-080027488980, 0)
EventName = OleDfRootE55ADC2FB5BE63E3
EventName = OleDfRoot4DFA1DB443BDC2CC
EventName = Local\RSS Eventing Event Event 00000b50
EventName = IEFrame.EventCheckDefaultBrowser
EventName = IE_EarlyTabStart_0x870
EventName = Isolation Signal Registry Event (E31A1D3E-8D33-11E9-828E-080027488980, 0)
EventName = OleDfRootC8F2713E5EB3AD2A
EventName = Local\Feed Arbitration Lock Event [ Process : 0x00000b50 ]
EventName = Local\Feed Arbitration Unlock Event [ Process : 0x00000b50 ]
EventName = OleDfRoot6DD15CF17D525BA2
EventName = OleDfRoot700346DE961DABE5
EventName = OleDfRootF126892891832041
Behavior description:查找指定窗口
details:NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,]
NtUserFindWindowEx: [Class,Window] = [MS_AutodialMonitor,]
NtUserFindWindowEx: [Class,Window] = [MS_WebCheckMonitor,]
NtUserFindWindowEx: [Class,Window] = [Static,]
Behavior description:窗口信息
details:Pid = 2896, Hwnd=0x16017a, Text = 导航栏, ClassName = WorkerW.
Pid = 2896, Hwnd=0xd0240, Text = 地址组合控制, ClassName = ToolbarWindow32.
Pid = 2896, Hwnd=0xb016a, Text = 页面控制, ClassName = ToolbarWindow32.
Pid = 2896, Hwnd=0xd0264, Text = 搜索组合控制, ClassName = ToolbarWindow32.
Pid = 2896, Hwnd=0xc015a, Text = 搜索控制, ClassName = ToolbarWindow32.
Pid = 2896, Hwnd=0x80286, Text = 命令栏, ClassName = ToolbarWindow32.
Pid = 2896, Hwnd=0x10020e, Text = 收藏夹命令栏, ClassName = ToolbarWindow32.
Pid = 2896, Hwnd=0x1201c4, Text = LinksBand, ClassName = LinksBandClass.
Pid = 2896, Hwnd=0x901d0, Text = 收藏夹栏, ClassName = ToolbarWindow32.
Pid = 2896, Hwnd=0xb027e, Text = 添加到收藏夹栏, ClassName = ToolbarWindow32.
Pid = 3764, Hwnd=0xc01b6, Text = 菜单栏, ClassName = WorkerW.
Pid = 3764, Hwnd=0x802be, Text = 缩放级别, ClassName = ToolbarWindow32.
Pid = 2896, Hwnd=0xf022e, Text = C:\Users\Administrator\AppData\Local\%temp%\%temp%\****.html - Windows Internet Explorer, ClassName = IEFrame.
Pid = 2896, Hwnd=0xe0204, Text = 123456, ClassName = Edit.
Pid = 2896, Hwnd=0x500f4, Text = 123456, ClassName = Edit.
Behavior description:打开事件
details:\SECURITY\LSA_AUTHENTICATION_INITIALIZED
Isolation Signal Registry Event (EECB6A2D-C072-11E7-828E-080027488980, 0)
\KernelObjects\MaximumCommitCondition
Global\SvcctrlStartEvent_A3752DX
MSFT.VSA.COM.DISABLE.2896
MSFT.VSA.IEC.STATUS.6c736db0
Isolation Signal Registry Event (EECB6A2E-C072-11E7-828E-080027488980, 0)
IE_EarlyTabStart_0xedc
Global\TabletHardwarePresent
Local\MSCTF.CtfActivated.Default1
Local\MSCTF.AsmCacheReady.Default1
MSFT.VSA.COM.DISABLE.3764
Local\RSS Eventing Event Event 00000b50
Isolation Signal Registry Event (E31A1D3E-8D33-11E9-828E-080027488980, 0)
IE_EarlyTabStart_0x870
Behavior description:可执行文件签名信息
details:C:\Users\Administrator\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico(签名验证: 未通过)
Behavior description:隐藏指定窗口
details:[Window,Class] = [,BrowserFrameGripperClass]
[Window,Class] = [,AddressDisplay Control]
[Window,Class] = [缩放级别,ToolbarWindow32]
[Window,Class] = [,msctls_progress32]
[Window,Class] = [,CtrlNotifySink]
[Window,Class] = [http://www.yixun.com/ - Windows Internet Explorer,IEFrame]
[Window,Class] = [,UniversalSearchBand]
[Window,Class] = [,TravelBand]
[Window,Class] = [,CommandBarClass]
[Window,Class] = [,ReBarWindow32]
[Window,Class] = [,TabBandClass]
[Window,Class] = [,SysLink]
[Window,Class] = [,Static]
[Window,Class] = [文件大小未知,Static]
[Window,Class] = [打开此类文件前总是询问(&W),Button]
Behavior description:可执行文件MD5
details:C:\Users\Administrator\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico ---> d0966601ecd6239a9ce0241c9aa21571
Behavior description:打开互斥体
details:Local\_!MSFTHISTORY!_
Local\c:!users!administrator!appdata!local!microsoft!windows!temporary internet files!content.ie5!
Local\c:!users!administrator!appdata!roaming!microsoft!windows!cookies!
Local\c:!users!administrator!appdata!local!microsoft!windows!history!history.ie5!
Local\WininetStartupMutex
Local\WininetConnectionMutex
Local\WininetProxyRegistryMutex
Local\!BrowserEmulation!SharedMemory!Mutex
RasPbFile
Local\!IETld!Mutex
Local\MSCTF.Asm.MutexDefault1
Local\RSS Eventing Connection Database Mutex 00000b50
Local\c:!users!administrator!appdata!local!microsoft!feeds cache!
_!SHMSFTHISTORY!_
Local\c:!users!administrator!appdata!local!microsoft!windows!history!history.ie5!mshist012019061320190614!
Behavior description:加载新释放的文件
details:Image: C:\Users\Administrator\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico.
Activities
Activity nameTypes of
com.tencent.qq.SplashActivityandroid.intent.action.MAIN
com.tencent.qq.SplashActivityandroid.intent.category.DEFAULT
com.tencent.qq.SplashActivityandroid.intent.category.LAUNCHER
com.tencent.qq.ChatWindowsActivityandroid.intent.qq.action.send
com.tencent.qq.ChatWindowsActivityandroid.intent.category.DEFAULT
com.tencent.qq.SearchBuddyActivityandroid.intent.action.VIEW
com.tencent.qq.SearchBuddyActivityandroid.intent.action.SEARCH
Dangerous function
Function nameinformation
java/net/URL;->openConnection连接URL
java/net/HttpURLConnection;->connect连接URL
java/net/URLConnection;->connect连接URL
TelephonyManager;->getDeviceId搜集用户手机IMEI码、电话号码、系统版本号等信息
TelephonyManager;->getLine1Number获取手机号
TelephonyManager;->getSimSerialNumber获取SIM序列号
ContentResolver;->query读取联系人、短信等数据库
SmsManager;->sendTextMessage发送普通短信
HttpClient;->execute请求远程服务器
DefaultHttpClient;->execute发送HTTP请求
getRuntime获取命令行环境
java/lang/Runtime;->exec执行字符串命令
android/app/NotificationManager;->notify信息通知栏
ActivityManager;->restartPackage中断进程,可用于关闭杀软
Startup mode
nameinformation
com.android.AndroidActionReceiver
com.android.AndroidActionReceiver开机启动服务
Permission list
License nameinformation
com.android.launcher.permission.INSTALL_SHORTCUT创建快捷方式
android.permission.WAKE_LOCK手机屏幕关闭后后台进程仍运行
android.permission.DEVICE_POWER电源管理
android.permission.RESTART_PACKAGES重启其他程序
android.permission.RECEIVE_WAP_PUSH接收wap push信息
android.permission.READ_CONTACTS读取联系人信息
android.permission.ACCESS_COARSE_LOCATION获取粗略的位置(通过wifi、基站)
android.permission.READ_PHONE_STATE读取电话状态
android.permission.READ_SMS读取短信
android.permission.VIBRATE允许设备震动
android.permission.ACCESS_FINE_LOCATION获取精确的位置(通过GPS)
android.permission.ACCESS_CACHE_FILESYSTEM
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED
android.permission.ACCESS_DRM
android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS
android.permission.ACCESS_NETWORK_STATE读取网络状态(2G或3G)
android.permission.INSTALL_DRM
android.permission.WRITE_OWNER_DATA
android.permission.WRITE_CALENDAR写入日程提醒
android.permission.WRITE_CONTACTS写入联系人信息
android.permission.WRITE_SETTINGS读写系统设置项
android.permission.WRITE_SMS写短信
android.permission.WRITE_SYNC_SETTINGS写入同步设置
android.permission.ACCESS_WIFI_STATE读取wifi网络状态
android.permission.WRITE_APN_SETTINGS改写APN设置(如:cmwap)
android.permission.CHANGE_NETWORK_STATE变更网络状态
android.permission.RECEIVE_BOOT_COMPLETED接收开机启动广播
android.permission.RECEIVE_SMS监控接收短信
android.permission.SEND_SMS发送短信
android.permission.INTERNET连接网络(2G或3G)
android.permission.WRITE_EXTERNAL_STORAGE写外部存储器(如:SD卡)
com.android.browser.permission.READ_HISTORY_BOOKMARKS读取浏览器书签
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS写浏览器书签
Service list
name
com.tencent.qq.QQService
com.android.MainService
Providers
nameinformation
com.tencent.qq.SearchContentProvider
File List
file name Check code
META-INF/MANIFEST.MF 0x39182ac2
META-INF/CERT.SF 0x3cec7904
META-INF/CERT.RSA 0xc60ae9a
res/drawable/h027.png 0x66401776
res/drawable/faceback_manager.png 0xbf75d414
res/drawable/status_online.png 0x7cd2350a
res/drawable/chat_next_page.xml 0x24607e24
res/layout/albumgriditem.xml 0x791571d4
res/drawable/f086.png 0xca949cf
res/drawable/btn_browser_home_1.png 0xb2ed9c73
res/drawable/comments.png 0x20e027d3
res/drawable/btn_check_on.png 0x7e79fba4
res/drawable/qqshare.png 0xa14d9c17
res/drawable/h015.png 0x3bc8a465
res/layout/albumlist.xml 0xd3283c10
res/drawable/group_msg_block.png 0xe6a8306f
res/drawable/inputbgright.png 0x3780657c
res/drawable/chat_next_page_nor.png 0xe9f94bd6
res/layout/loadingbar.xml 0x2ececca8
res/drawable/icon_qqsite.png 0x6c97965d
res/drawable/h072.png 0xdca629bb
res/drawable/h102.png 0xcf01dd51
res/drawable/f047.png 0x990c9ead
res/drawable/btn_browser_draw_collapse.xml 0x385fc6c3
res/layout/contact_group_item.xml 0x6f6f323d
res/drawable/black_box.xml 0xea0cb5ea
res/layout/search_result.xml 0x7dad4c9f
res/drawable/addcomment.png 0x44a3d026
res/drawable/icon_taobao.png 0x66298330
res/layout/appview.xml 0x44db189e
res/drawable/widget_add_nor.png 0x1740a4c1
res/drawable/h055.png 0x13b2b757
res/drawable/f083.png 0xb62fb21
res/menu/offline_recentlist.xml 0x64da619d
res/drawable/h056.png 0xf3d7c9c
res/drawable/expand.png 0x9b34c27e
res/drawable/status_offline.png 0xc3d5e728
res/layout/uploaddialog.xml 0xd7374b11
res/drawable/btn_browser_stop_2.png 0xa8693e5d
res/drawable/chat_keypad.png 0xe591d4de
res/drawable-hdpi-v4/chat_next_page_nor.png 0x2b5a2082
res/drawable/icon_qqmail.png 0xf79498d9
res/drawable/headicon.xml 0x5c96e819
res/drawable/bottombar_qzone_selected.png 0x3c3de463
res/drawable/login_input.png 0xc9bb1c3e
res/drawable/icon_soso.png 0x91cf2110
res/drawable/status_invisible.png 0x2d4847a3
res/layout/qq_app_frame_layout.xml 0x8ea60617
res/drawable/chat_keypad_button.xml 0x3d34f423
res/drawable/hand_more.png 0x31abb24
res/drawable-hdpi-v4/chat_quit_nor.png 0xbb66d00b
res/drawable/default_bg.jpg 0xd0ab6d05
res/layout/groupitem.xml 0xd8d3ac85
res/drawable-hdpi-v4/chat_quit_over.png 0x4f56d3d
res/layout/about_view_layout.xml 0xb84f6b62
res/drawable/h048.png 0xcffed95b
res/drawable/comments1.png 0x694bd56c
res/drawable/senddisable.png 0xc6fb0e90
res/drawable/expander_group.xml 0x34545e7f
res/drawable/chat_talkselect.png 0x5f15fdca
res/drawable/friendshop.png 0xde64fd39
res/drawable/camera_normal.png 0xf8310aaf
res/layout/photocommentlistheader.xml 0xab9beaea
res/drawable/h021.png 0x5999d767
res/drawable/bottombar_navigation_unselected.png 0x4c319525
res/drawable/dogear_1_0.png 0x718a7252
res/drawable/sysmsg.png 0xfdef4785
res/drawable/h042.png 0xbcea1102
res/drawable/chat_emo_select_down.png 0x3e046f7a
res/drawable-land/default_bg_hdpi.jpg 0xbaecfee0
res/drawable/login_back.png 0x3985e9a
res/layout/profileview.xml 0xbf13399f
res/drawable/f051.png 0xe871a27e
res/drawable/l5.png 0xe31bd20c
res/drawable/f072.png 0x8c2e03df
res/drawable/widget_qq.xml 0x711c1551
res/layout/customed_tab_widget.xml 0xfbd0d289
res/drawable/chat_next_page_over.png 0xf1acf5bc
res/layout/qq_option_list_item_1.xml 0xf52439fa
res/drawable/h025.png 0xfcb2d7a0
res/drawable/l8.png 0x7d2b405e
res/drawable/h006.png 0x18443096
res/drawable/f004.png 0xb5529359
res/drawable-hdpi-v4/bottombar_qzone_selected.png 0x1343529b
res/layout/help_view_layout.xml 0xb83f6df0
res/drawable/h008.png 0x2f80601f
res/drawable/bottombar_qzone_unselected.png 0x9d2e246a
res/drawable/btn_qzone_refresh_unselected.png 0x35145b56
res/drawable/bottombar_qzone_disable.png 0x62472bfa
res/drawable/refresh1.png 0x925f0beb
res/drawable/menu.png 0x86476ed6
res/drawable/qq_scrollbar.png 0xb99d058e
res/drawable/bbs.png 0xb34abc3c
res/drawable/icon_163.png 0xc70bd851
res/layout/qq_main.xml 0x593d412c
res/drawable/f049.png 0x434e9c87
res/drawable/f099.png 0xecdd2a31
res/drawable/h106.png 0xc4cb1f5a
res/layout/buddymenu.xml 0x40dc6f5f
res/drawable/btn_check_on_pressed.png 0x838cd771
res/drawable/comment3.png 0x627d6557
res/drawable/more_account_select_bg.xml 0xd0febb3a
res/drawable-hdpi-v4/cancel_down.png 0xe3b91b67
res/drawable/option_selected.png 0x7dc02bb
res/drawable/black_opaque_box.xml 0xb8eafce
res/drawable-hdpi-v4/cancel_nor.png 0x5887a9ec
res/layout/qq_dialog_progress_content.xml 0x81d66024
res/drawable-hdpi-v4/tab3_normal.png 0x8f886b7e
res/drawable/delete_history_button_over.png 0x16f713c5
res/menu/login_menu_list.xml 0x941d2660
res/layout/testfile.xml 0xa92d983b
res/drawable/refresh4.png 0x5b7ffbce
res/drawable/dogear_1_1.png 0x19b58bb6
res/drawable/f046.png 0xaba3705e
res/drawable/f076.png 0xb10f0963
res/drawable/splashanim.xml 0x348505fb
res/drawable/h080.png 0xb3fc42f1
res/layout/feedlistheader.xml 0x22ef1648
res/drawable/camera_focus.png 0xb71c9b2f
res/drawable/cancel_nor.png 0x578a945a
res/layout/restore_layout.xml 0x17275158
res/drawable/chat_input_over.png 0x383a329a
res/drawable/lockspace.png 0x3007a47b
res/layout/personcenterheaderview.xml 0xfc29500c
res/drawable/h101.png 0x96075bed
res/layout/verifydialog.xml 0xc7c3c22b
res/drawable/qqdialog_bottom.png 0xfe31d2d6
res/drawable-hdpi-v4/input.png 0x662eacd
res/drawable/bottom.png 0x240cb16f
res/layout/login_verify_code_view.xml 0xd99a026f
res/drawable/profilebg.png 0x980dfa2a
res/drawable/sendnormal.png 0xe186fc78
res/layout/srvmsg.xml 0x4e464669
res/drawable/icon_unread_msg.png 0xcdf7d883
res/drawable/qq_edit_text1.xml 0xe3028b90
res/drawable/tab3_over.png 0x6d1e56a4
res/drawable/h099.png 0xce377f9b
res/drawable/f073.png 0x11e8bed4
res/drawable/f039.png 0x6f312764
res/drawable/mis_usemobile.png 0xc8076267
res/drawable/d_send.xml 0x7f6931b
res/layout/change_altername_dialog.xml 0xc13879c5
res/layout/widget_dialog.xml 0xd3c7774d
res/layout/blogcommentemptyview.xml 0x5f07417d
res/drawable/dialogshootbg.png 0x5e9ce3d5
res/drawable/synchronize_blog_enable.png 0xa23362d0
res/drawable/f006.png 0x507a5f32
res/drawable/edit_sign_back.png 0x4850ebc2
res/layout-land/chat_header_linear.xml 0x2e5a3e24
res/layout/listfootrefresh.xml 0x242e364b
res/drawable/bgline.png 0x479bb54b
res/layout/widget_contact_group_item.xml 0xc10eb5b1
res/drawable/progressbar2.png 0x92e37438
res/drawable/chat_quit_over.png 0x236f8023
res/drawable-hdpi-v4/option_selected.png 0x475de718
res/drawable/menu_help.png 0xda673281
res/drawable/icon_messagebox.png 0x33bf79b3
res/drawable/qqdialog_bg_top.png 0x536b4bc2
res/layout/friend_group_list.xml 0xafa9cedb
res/drawable/f053.png 0xeb620949
res/drawable/homepage2.png 0x57aeefc
res/drawable/h111.png 0x2d59e0b
res/drawable/saydialog.png 0xd29971fc
res/drawable/buttonbackground.xml 0x7fc44da3
res/drawable/qq_indeterminate_progress.xml 0x52503dce
res/drawable/f103.png 0x7a571931
res/drawable/feedlist_bg.xml 0x1581bf67
res/drawable/f036.png 0xcbbd86e7
res/layout/black_manager.xml 0x9a19f0bb
res/drawable/btn_browser_back_3.png 0x89d57f91
res/layout/qq_info_list_item_2.xml 0x32d92455
res/drawable/h135.png 0xe425ee1e
res/layout/chat_header_gallery.xml 0xd4ffb7
res/drawable/icon_qqfarm.png 0xd5dc2509
res/layout/message_box.xml 0x927aa944
res/layout/del_confirm_input_pwd_verify_view.xml 0x509ea1b
res/drawable/chat_setting.png 0x3b8a4504
res/drawable/menu_sys_opt.png 0x2dd2dd5
res/drawable/title_03.png 0xdb9df916
res/drawable/f030.png 0x5d530316
res/raw/navigation.xml 0xe62deb51
res/drawable/more_account_dialog_bg.png 0x30596359
res/drawable/h119.png 0xf54bb4fb
res/drawable-hdpi-v4/chat_history_over.png 0xfb4984b8
res/drawable/h131.png 0xa5bccb78
res/drawable/btn_browser_stop_1.png 0xc0b81cd8
res/drawable/commentinputbg.png 0xa15b50c9
res/drawable/f029.png 0x2e567444
res/drawable/narrow_select.png 0xc4ce917f
res/drawable/qq_dialog_alert_icon.png 0x530c8093
res/drawable/f094.png 0xa158e5a
res/drawable/menu_sys_del_all_history.png 0x22f7d24f
res/drawable/shurukuang.png 0x8e458bb3
res/drawable-land/topbar_select.png 0xe7740115
res/drawable/net_setting_menu_icon.png 0x30ea7a93
res/drawable/delete_group_over.png 0x90dc067a
res/drawable/ad_msg_bg.xml 0x1581bf67
res/drawable/h094.png 0x2026b8a7
res/drawable/chat_emotion_button.xml 0x215f5d6d
res/drawable/line.png 0xefb6219e
res/drawable/sendfocus.png 0xc06dafeb
res/menu/recentlist.xml 0xff8e00e0
res/drawable/h029.png 0x3c12c1d0
res/xml/searchable.xml 0xe488241a
res/drawable/h052.png 0x703ca49d
res/menu/webview_menu_list.xml 0x981dde82
res/drawable/h034.png 0x43fb5c2a
res/drawable/f087.png 0xd35eaeeb
res/drawable/usecenter4.png 0xfdf8e839
res/drawable/back_btn.xml 0x819e9d36
res/drawable-land/default_bg.jpg 0x48d2cab8
res/drawable/qqback_nor.png 0xc0cacc9f
res/drawable/personnalnote.png 0xb32b5fa8
res/drawable/back.png 0x81476367
res/drawable/selectitem.xml 0x3eeb5fa4
res/drawable/h136.png 0xdd3a4405
res/drawable/icon_sina.png 0xb9c20a2c
res/drawable/usercenter.png 0xf354a542
res/drawable/f007.png 0x4dceb6d8
res/drawable/expand_group_bar.xml 0x3c284764
res/drawable/feedlistdividerbg.PNG 0x21d53ea8
res/drawable/l10.png 0xc01481e1
res/drawable/l4.png 0x12d6026
res/drawable/qq_btn_radio_off.png 0x53d6b8aa
res/layout/info_show_friend.xml 0xa51646b
res/layout/modify_friend_group.xml 0x1cac2815
res/drawable/contenttopline.png 0x2c04e07f
res/drawable/h013.png 0xe02a8bff
res/drawable/shurukuangfocus.png 0x1c753c2a
res/drawable/h019.png 0x62335eef
res/drawable-hdpi-v4/icon_away.png 0x40184fb9
res/drawable/qq_btn.xml 0x9892e15d
res/drawable/f027.png 0x2435a5c
res/drawable/menu_setting.png 0x7a9ff539
res/drawable/btn_browser_board_bg.png 0x5efb671a
res/drawable/chat_lin_quit.xml 0x9c5e46ea
res/drawable/expand_column_bg.png 0x71c4bc86
res/drawable/btn_browser_draw_3.png 0x74ba02ab
res/drawable-hdpi-v4/icon.png 0xdf2f8dff
res/drawable/cancel_over.png 0xe9ad847e
res/drawable/themeinstall.png 0x8355cdb3
res/drawable/tab2.xml 0x5575a9ff
res/layout/progressbar.xml 0x79c21cca
res/drawable/inputbgleft.png 0x8a1c67cd
res/drawable/f065.png 0xacf103da
res/drawable/f043.png 0x66806043
res/drawable/usecenter3.png 0x40cb12b4
res/drawable/qq_btn_check.xml 0x7cb357d7
res/drawable/text.png 0x943e7589
res/drawable/select_over.png 0x2dbcefe9
res/layout/add_friend_by_id.xml 0xb1252ce1
res/drawable/icon_item_bg.xml 0xbb3958ec
res/drawable-hdpi-v4/tab1_over.png 0xf4745318
res/layout-land/customed_tab_widget.xml 0x8301ebac
res/drawable/export_history_button.xml 0x6bec91b8
res/drawable/contextbtn.xml 0x72dd9717
res/layout/search_buddy.xml 0xaed8b03a
res/drawable/f045.png 0xdda7b905
res/drawable-hdpi-v4/chat_next_page_over.png 0xaf5dba0a
res/drawable/dialogcontext.png 0x74aefade
res/drawable/sendcommentfocus.png 0x931a77d6
res/layout/blogfeedview.xml 0x920aaf0c
res/drawable/h041.png 0xd1382d49
res/drawable/progressbar.xml 0xdc4e68b2
res/drawable/buttonbackground_p.png 0xce4734ee
res/drawable-hdpi-v4/hand_more.png 0x94fc4e7e
assets/skinconfig_hdpi_test.xml 0x3f502dad
res/drawable/d_homepage.xml 0x99b1364f
res/drawable/input_over.png 0x383a329a
res/drawable/headblue.png 0x4717f7b3
res/drawable-hdpi-v4/icon_invisiable.png 0xb34f3073
res/drawable/smiley.jpg 0x7047b35a
res/drawable/qq_btn_disable.png 0xb049ec00
res/drawable/setting_over.png 0x150f2fe7
res/drawable/widget_select_over.png 0x3c90de99
res/drawable/edit.png 0x546de8a8
res/drawable/f096.png 0x857dd45f
res/drawable/f035.png 0xba8e93c
res/drawable/icon_bg_over.png 0x413f7e41
res/drawable/buttonbackground_n.png 0xb924212d
res/drawable/chat_msg_item_bottom.png 0x21b979df
res/drawable/newsign.png 0x26194acc
res/drawable/btn_browser_messagebox.png 0x2d32edab
res/drawable/h096.png 0xc0256635
res/drawable/f089.png 0xe8c06c
res/drawable/d_menu.xml 0x6b6f978d
res/drawable/horizontalprogress.xml 0xf073a324
res/layout/photodetail.xml 0x14c2bd0a
res/drawable/chat_history_over.png 0xc8e0b843
res/drawable/f068.png 0xd426b644
res/drawable/feed_back.png 0x6c8d9fd7
res/drawable/button2_down.png 0x7ac34262
res/drawable/f031.png 0x7ab734f7
res/drawable/l9.png 0xc2c9b1e1
res/drawable/login_head.xml 0x9eb99955
res/drawable/personhead.png 0xebb37591
res/drawable/chat_history_button.xml 0x8b9382e4
res/drawable/group_maskmsg_big.png 0x1fe52f37
res/drawable-hdpi-v4/chat_his_dis.png 0x714f0dc7
res/drawable/f011.png 0x7aa39fae
res/drawable/h092.png 0xfd5a2d0e
res/drawable/head.png 0x36b6c98e
res/layout/splash_layout.xml 0xfd45f39b
res/color/qq_checkbox_text_color.xml 0x2c233bc6
res/drawable/usercenter2.png 0xe5459cbe
res/drawable/dialogbackground.png 0xb9fdd93d
res/drawable-hdpi-v4/narrow_select.png 0x36731c58
res/drawable/h103.png 0x9509216e
res/layout/logining_layout.xml 0xe3123da9
res/layout/chat_header_linear.xml 0xbbbdf5a2
res/drawable/f092.png 0x4f4f885d
res/xml/setting.xml 0xd7a6295b
res/layout/simple_progress_dialog.xml 0x1f1f0a4f
res/drawable/qq_btn_pressed.png 0xe5802ed8
res/drawable/loverszone.png 0xda5a0d09
res/drawable/btn_browser_back.xml 0xf4e99928
res/drawable/buttonbackground_s.png 0x7b293750
res/drawable/status_away.png 0x20019599
res/drawable/btn_check_off_selected.png 0x63b482a
res/drawable/h098.png 0x4c31d10a
res/anim/slide_out_left.xml 0xb13d45a1
res/drawable/h113.png 0xdc4e451b
res/layout/qq_bottom_back.xml 0xaf1227b8
res/layout/qq_simple_transient_notification.xml 0x33039e0f
res/drawable/d_usercenter.xml 0x86c92985
res/drawable/refresh7.png 0x4d5dae2a
res/drawable/chat_keypad_over.png 0x1710db4f
res/drawable/h004.png 0xeb78a6c8
res/layout-land/loginpage.xml 0xbfa42564
res/drawable/h108.png 0xe595cda2
res/drawable-hdpi-v4/bottombar_icon1_over.png 0xe3ab90a3
res/drawable/btn_browser_bg.png 0x64382c4c
res/drawable/more_account_select_bg_selected.png 0xd58a6d74
res/drawable/h109.png 0x5d485cb8
assets/skinconfig_hdpi.xml 0x51d5d314
res/drawable/faceback.png 0x53c67e87
res/drawable/h128.png 0x3cd0ac11
res/drawable/d_input.xml 0x69740d3
res/drawable/topbg.png 0x309660b6
res/drawable/f064.png 0x508ee0e5
res/drawable/h121.png 0x5917f12e
res/drawable/l2.png 0x813315f7
res/drawable/chat_prev_page.xml 0xeb1a5e1b
res/drawable/progressbar1.png 0xc1c5df04
res/drawable/icon_offline.png 0x1a406ee2
res/layout/feedlist_group_item.xml 0xfcce6f1b
res/drawable/h079.png 0xce46f198
res/drawable/bottombar_navigation_disable.png 0xf1d3044f
res/drawable/h060.png 0xfe8b3fdb
res/drawable/item_bg.png 0xa922fab9
res/drawable/h125.png 0xe11023c7
res/drawable/h077.png 0xf452d94d
res/drawable/icon_unlogin.png 0x365f74ea
res/drawable/qq_btn_radio_off_pressed.png 0x17e28728
res/drawable/uploadcancel1.png 0x6879f2f8
res/drawable/sendcommentdisable.png 0xe0814824
res/menu/chatwindow.xml 0x3ad5ae68
res/drawable/menu_logout.png 0xab23cbef
res/drawable/f066.png 0x5c244729
res/drawable/vline.png 0x75106b09
res/drawable/h001.png 0xe3c8b452
res/drawable/sendcommentnormal.png 0xb1ba558d
res/drawable/h075.png 0x9f2f4ffa
res/drawable/h023.png 0x6f6c5726
res/drawable/h127.png 0xbaae5bcc
res/drawable/widget_back.png 0xc74bb27e
res/drawable/h028.png 0x526abeff
res/drawable-hdpi-v4/input_over.png 0xe4e6f420
res/raw/global.mp3 0xea1e9b03
res/drawable/info_show_bg.png 0xf740b360
res/drawable/h026.png 0x6520cc8
res/drawable/h100.png 0x83e975
res/drawable/f022.png 0xaa01584f
res/drawable/chat_folder.png 0xce3297af
res/drawable/btn_browser_refresh.xml 0x46947684
res/drawable/btn_browser_draw_2.png 0xdb4203d5
res/drawable/f055.png 0x22659a26
res/drawable/qq_btn_radio_on.png 0x64797771
res/drawable/chat_option_button.xml 0xaff497ea
res/drawable/title.png 0x13e989cb
res/layout/photogriditem.xml 0x906b5a91
res/drawable/h045.png 0x340277f1
res/drawable/photo2.png 0x3cb18aff
res/drawable/h031.png 0x5661d1da
res/drawable/text_line.png 0xc2c3783
res/drawable/f054.png 0x11691b34
res/drawable/btn_mail_detail.png 0x469ffa45
res/drawable/h063.png 0x93ef999b
res/drawable/f063.png 0xba5e82f0
res/drawable/f024.png 0xe2032d3b
res/drawable/logininput1.png 0xc7fcee4c
res/layout/personcenter.xml 0x5446faac
res/drawable-hdpi-v4/icon_offline.png 0x1a406ee2
res/drawable/rename_group_button.xml 0xe30f7a18
res/drawable-hdpi-v4/delete_history_button_over.png 0x8333319e
res/drawable/delete_history_button_nor.png 0xf05a601
res/drawable/chat_folder_down.png 0xb9588271
res/drawable/h104.png 0xb91a2ce3
res/drawable/title_02.png 0x8febb2c2
res/drawable/exit_menu_icon.png 0x27dcac37
res/drawable/f050.png 0xd6a72393
res/drawable/refresh3.png 0xed9673f8
res/drawable/friends.png 0xb80d1999
res/drawable/erroricon.png 0x2d7b4bed
res/drawable/f071.png 0x89b27611
res/drawable/chat_setting_over.png 0x150f2fe7
res/drawable/h053.png 0xc1c2df51
res/drawable/f097.png 0xe1a64bb4
res/drawable/f003.png 0x853f0b5f
res/drawable/widget_button_back.png 0x47cb7005
res/drawable/icon_away.png 0xd74b75d8
res/drawable/feedlistselector.xml 0x40773fd2
res/drawable/divider.png 0x3aee512
res/drawable/f032.png 0x7daac2e8
res/layout/setting_manager.xml 0x74b488b7
res/drawable/f079.png 0x84d684ad
res/drawable/h066.png 0x29ef92a1
res/drawable/icon_tech.png 0xd393d012
res/drawable/chat_emo_select_over.png 0xc0035017
res/drawable/qzone_feedlist_group.png 0x954d1265
res/drawable/tab2_normal.png 0xf6be591d
res/drawable/f085.png 0xfb9059e0
res/anim/loading.xml 0xed567e42
res/drawable/h084.png 0x5ed0695
res/drawable/refresh5.png 0xe6ce78ff
res/layout/qq_option_list_item_7.xml 0xfa0988ff
res/drawable-hdpi-v4/hand_new.png 0x904c9e0a
res/drawable/f020.png 0x6386230d
res/drawable/more_select.xml 0xb951b169
res/drawable/go_next_icon.png 0x6329fc1b
res/drawable/icon_phenix.png 0x856ecacc
res/drawable/title_line.png 0xeffda93a
res/drawable/d_uploadcancel.xml 0x2723af74
res/drawable/icon_news.png 0x1b4c2cbc
res/layout/blogfeedviewheader.xml 0x20c6d144
res/drawable/h039.png 0x354d60ba
res/drawable/f017.png 0x8d4c8cca
res/drawable/h044.png 0x79f7f14f
res/layout/main.xml 0x11a47a1
res/drawable-hdpi-v4/tab2_normal.png 0xb3943cd8
res/layout/userinfo.xml 0x18815566
res/drawable/bottombar_1.xml 0x80e21cf2
res/layout/delbuddy.xml 0xdc38e842
res/drawable/f041.png 0xcc5fd1cf
res/drawable/camera_s.png 0x2b12c9d3
res/drawable-hdpi-v4/bottombar_navigation_unselected.png 0x4a8f8634
res/drawable/qqdialog_center.png 0xa021c65d
res/drawable-hdpi-v4/qqback_nor.png 0xea7710ef
res/color/qqbtn_text_color.xml 0xd5255c97
res/drawable/cancelnormal.png 0xaebcb5e
res/layout/blogcommentview.xml 0xec99814f
res/drawable/bottombar_icon2.png 0x1d18704f
res/drawable/setting.png 0x1c634a34
res/drawable/f001.png 0x88a90fe4
res/drawable/icon_bg.png 0xf83cc500
res/layout/richtoast.xml 0x8b34c6c3
res/drawable/sendcommentpress.png 0x21d9df53
res/drawable/h086.png 0xf75cc803
res/drawable/f038.png 0x350e22b7
res/drawable/chat_paopao.png 0x84c45c63
res/drawable/qq_dialog_err_icon.png 0x4db3d862
res/drawable/widget_line.png 0xfd326321
res/layout/personcenterlistitem.xml 0x924e667e
res/drawable/icon_constellation.png 0x227d3e19
res/drawable/bottombar_icon3.png 0xb34a6c67
res/drawable/f090.png 0xd47e9fb4
res/drawable/log_pic.png 0x62b5d4f5
res/drawable/menu_sys_search_buddy.png 0x1d266420
res/drawable/cancelpress.png 0x2e301939
res/drawable/chat_folder_button.xml 0xc599d232
res/drawable-hdpi-v4/bottombar_icon1.png 0x4604449f
res/drawable/friendnote.png 0xe65944da
res/drawable/qq_btn_normal.png 0x2a4b5f0f
res/drawable/tab3_normal.png 0x942ef439
res/layout/dialogchoosephoto.xml 0x21a18593
res/drawable/qq_edit_text2.xml 0x37f337
res/drawable/group_head.png 0x3139963d
res/layout/browser.xml 0x8e7225b
res/drawable/refresh2.png 0xeecfb28d
res/drawable/usericon.png 0xf85f7dd4
res/drawable/paopao.png 0x63accc41
res/drawable-hdpi-v4/back_over.png 0xea7710ef
res/drawable/f067.png 0xf9fe9dc9
res/drawable/h035.png 0xab295265
res/drawable/f081.png 0x891db308
res/drawable/f033.png 0x52a5cfdd
res/drawable/h088.png 0xf6c4cd8
res/drawable/splash.png 0xd13c5de9
res/drawable/emo_bg.xml 0x1581bf67
res/drawable/btn_browser_home_2.png 0x2b4ec89c
res/drawable/f042.png 0x4e83eee4
res/drawable/uploadcancel.png 0xb2b61818
res/layout/config_view.xml 0xee3611d7
res/layout/groupinfo.xml 0x39d80c51
res/drawable/refresh6.png 0x9e6a702e
res/drawable/h123.png 0x7b776f37
res/drawable/f013.png 0x56904a35
res/layout-land/chat_header_gallery.xml 0x5011b776
res/layout/friend_manager.xml 0x278f1728
res/drawable/gallery_background_1.xml 0xa772b046
res/layout/notification_app_running.xml 0x40f87804
res/drawable/btn_browser_draw_1.png 0xb4292f2
res/layout/feed.xml 0xcc20e2f4
res/drawable/h133.png 0xa9e3388f
res/drawable/qq.png 0xa551540c
res/layout/customed_menu.xml 0xd61855ec
res/drawable/camera.xml 0x94335540
res/drawable/tab1_normal.png 0x2695995e
res/drawable/f088.png 0xf95ab21d
res/drawable/help_menu_icon.png 0x68c36d05
res/drawable/back_down.png 0xab0ee755
res/drawable/h074.png 0xbb841fe4
res/drawable/qq_toast_frame.png 0x5d613eca
res/drawable/h082.png 0xe2e294e5
res/drawable/h057.png 0xc523ecde
res/layout/mail_msg.xml 0x7f46f046
res/drawable/h022.png 0xdfac812a
res/drawable/sendpress.png 0x31a4985f
res/drawable/h095.png 0xfc5dbd70
res/drawable/f037.png 0xe8301925
res/drawable/title_01.png 0xdb29957
res/drawable/homepage.png 0x6bc6a80a
res/drawable/up.png 0x2ea6816
res/drawable/defaultphoto.png 0x195433f1
res/drawable/statue_silence.png 0xc9701372
res/drawable/f040.png 0x12e7419c
res/drawable/d_shurukuang.xml 0xf0a8ef45
res/drawable/h118.png 0xc7a37204
res/drawable/chat_selectitem.xml 0xf5941cd5
res/drawable/menu_item_bg.xml 0xadb9b9b1
res/drawable/btn_browser_refresh_1.png 0x5f37840f
res/drawable/h030.png 0xcbf87506
res/drawable/h002.png 0x54ddfc5f
res/drawable/d_comments.xml 0x16b5b437
res/layout/contact_header.xml 0x1fb5988e
res/drawable/expand_column_bg_over.png 0x379555db
res/drawable/logining_anim.xml 0x8bec2ec1
res/drawable/menu2.png 0xd6b3d993
res/layout/singlephoto.xml 0xb2710784
res/drawable/highlight_item.xml 0xd04f03d9
res/drawable/left.png 0x577b3f9
res/layout/add_friend_verify.xml 0xdc72da59
res/drawable/chat_quit_down.png 0x4597ea83
res/layout/qq_info_list_item_1.xml 0x3b8e7f89
res/drawable/qqdialog_bg_bottom.png 0xc61d1442
res/drawable/a.xml 0xd23b7e02
res/drawable/narrow.png 0xae16e1c2
res/drawable/phonepet.png 0x55def1e9
res/drawable/chat_his_dis.png 0x6adb3d4f
assets/cache_green.png 0xe8eaf83c
res/drawable/tab2_over.png 0x11c7b5f9
res/drawable/h107.png 0x98554db6
res/drawable/homepageheadbg.png 0xfd8e92a0
res/drawable/edit_over.png 0xeb45ee81
res/drawable/cancelfocus.png 0xb2aaf36e
res/drawable/export_history_button_nor.png 0x9b355ee7
res/drawable-hdpi-v4/btn_qzone_refresh_unselected.png 0xab522dc4
res/drawable-hdpi-v4/bottombar_navigation_disable.png 0xc4d4114b
res/drawable/btn_qzone_refresh_selected.png 0xf00299a9
res/layout/simeple_top_texttitle.xml 0x56c92dab
res/layout/bloglistitem.xml 0xa90a20ac
res/drawable/f075.png 0xf3fb9183
res/drawable/h081.png 0x62afd8f5
res/drawable/chat_divider.png 0xea514098
res/drawable/f091.png 0x7460e0f7
res/drawable/h114.png 0x2312e5a4
res/drawable/opt_selectitem.xml 0xf5941cd5
res/drawable/dialogshootbgright.png 0xfb222cae
res/drawable/h071.png 0x25affa
res/drawable/menu_exit.png 0xcfd96d54
res/drawable/menu_person_opt.png 0x1c08ebe7
res/drawable/d_sendbutton.xml 0x6de8f76d
res/drawable/f028.png 0xc705f132
res/drawable/synchronize_blog_disable.png 0x3d37a478
res/drawable/btn_check_off_pressed.png 0xc0e05837
res/drawable/btn_browser_draw.xml 0xcdeed85f
res/layout/add_friend_by_cond.xml 0x32d8d15d
res/drawable-hdpi-v4/bottombar_navigation_selected.png 0x89422500
res/drawable/f057.png 0xef6f2a37
res/drawable/btn_browser_back_2.png 0x275b0fff
res/drawable/chat_input.png 0x6484aae4
res/layout/qq_bottom_cancel.xml 0xf1df0faa
res/drawable/f044.png 0x6e837e7a
res/drawable/qzone_feedlist_select.png 0x9e447b59
res/layout/friend_group_manager_item.xml 0xee77a1ae
res/raw/msg.mp3 0xe802ff01
res/drawable/preview_bg.png 0xb80d65af
res/drawable/f016.png 0x7fe53af9
res/drawable/back_over.png 0x5c0cad3b
res/drawable/d_photo.xml 0xc7f33058
res/drawable/f019.png 0xa948dac7
res/layout/qq_option_list_item_3.xml 0xda846ca
res/drawable/qq_btn_selected.png 0x4d148545
res/layout/qq_dialog_simple_content1.xml 0xd70d1979
res/drawable/f005.png 0x12656bf1
res/drawable/h020.png 0xa8ec84b4
res/drawable/chat_emotion_over.png 0x14813fd1
res/drawable/icon_sohu.png 0x7085028c
res/drawable/f101.png 0x6df75808
res/drawable-hdpi-v4/tab1_normal.png 0x7171dc87
res/drawable-hdpi-v4/bottombar_icon3.png 0x2b2aeaef
res/drawable/bodylisttop.png 0x3434b882
res/drawable/f002.png 0x5880323b
res/drawable/widget_select.png 0x579cdd76
res/drawable/f012.png 0xb26e9f3
res/layout/appitem.xml 0x3f34cc33
assets/skinconfig_mdpi_test.xml 0x4464521c
res/drawable-hdpi-v4/bottombar_qzone_disable.png 0xb35c2f36
res/drawable/h120.png 0x693a290f
res/drawable/h040.png 0x5319f742
res/drawable/delete_history_button.xml 0xe813a5f5
res/drawable/photo.png 0xf5c67ef5
res/drawable/buddy_detail_g.png 0xc8b2adce
res/drawable/h038.png 0xe0dcf546
res/drawable/hand_new.png 0xc57863d2
res/drawable/usecenter.png 0xdbc60d4b
res/drawable-hdpi-v4/bottombar_qzone_unselected.png 0x15e7266d
AndroidManifest.xml 0xe768d6b8
res/drawable/h047.png 0x9a502ce8
res/drawable/h018.png 0xb2a8e1c2
res/drawable/btn_browser_stop.xml 0x701bf83f
res/drawable/f077.png 0x9f26d78
res/layout/inputdialog.xml 0xb7fd7592
res/drawable/h009.png 0xbf86be79
res/drawable/close.png 0x67f712e5
res/drawable/loadingdialogbackground.png 0xf5ae4bb
res/drawable/dialogshootbgleft.png 0x87abde20
res/drawable-hdpi-v4/btn_qzone_refresh_selected.png 0x3b054f2e
res/anim/slide_top_to_bottom.xml 0x4ccb16f6
res/layout/widget_word_4.xml 0xa73a6285
res/drawable/btn_browser_forward_1.png 0x61614cbe
res/drawable/btn_browser_draw_4.png 0xc1c0cf8
res/drawable/open.png 0x579c0824
classes.dex 0x2d858425
res/drawable/btn_browser_back_1.png 0x4c44fa38
res/drawable/chat_quit_nor.png 0x1720cb1d
res/drawable/f061.png 0x4e6f4b17
res/drawable-hdpi-v4/narrow.png 0xfd506ff0
res/drawable/h115.png 0xa1160c55
res/drawable/h134.png 0xd87b3074
res/drawable/h046.png 0x32b93421
res/drawable/icon_unread_system_msg.png 0xeb61dd0d
res/drawable-hdpi-v4/back_down.png 0xdd03e40d
res/drawable/bottombar_navigation_selected.png 0x9d26de66
res/drawable/h130.png 0x3eded7ad
res/layout/loginpage.xml 0xe781d641
res/drawable/h007.png 0x1d4def2c
res/drawable/add_group.png 0xacd38892
res/drawable/d_cancel.xml 0x979e14ce
res/drawable/tabline.png 0x21205a4e
res/drawable/bottombar_icon1_over.png 0x2d2235e7
res/drawable/h064.png 0x10503e62
res/drawable/photobg.png 0x4990e470
res/drawable/statue_sound.png 0x442575b5
res/drawable/seekbarthumb.xml 0xa7d25153
res/drawable/refresh8.png 0xc85779d1
res/layout/chat_header_double.xml 0x6490e5a1
res/drawable/h132.png 0x3cc044ba
res/drawable/h138.png 0x34b4b1c1
res/drawable-hdpi-v4/login_input.png 0x662eacd
res/drawable/h033.png 0x895755b6
res/drawable/default_person_lit.png 0x74e31291
res/drawable/cancel_down.png 0xa62857b4
res/drawable/h014.png 0x7f1e33a0
res/layout/photogridview.xml 0xff2b71a7
res/drawable/h005.png 0x5f736a79
res/drawable/f070.png 0x93a138e9
res/drawable/l6.png 0x7cd22200
res/drawable/reply1.png 0x3bcdc37b
res/drawable/homepagetab.png 0x80810e17
res/drawable/topface_back.png 0x2fd55ce3
res/layout/list_item_navigation.xml 0x5aaf767f
res/drawable/menu_sys_add_buddy.png 0x5df8d3af
res/layout/qq_option_list_item_6.xml 0xd93f3a21
res/drawable-hdpi-v4/export_history_button_nor.png 0x2a45ec8f
res/layout/chat_history.xml 0xb90dc2a8
res/drawable/f009.png 0xeb1842e2
res/drawable-hdpi-v4/hand_load.png 0x580b20c1
res/layout/qq_ok_cancel_pane.xml 0x5a579545
res/drawable/cancelupload.png 0x262d4048
res/drawable/chat_emotion_select.xml 0x355dc6f9
res/drawable/moodedit.png 0x79a2d142
res/drawable/h105.png 0x91b5f517
res/layout/homepage.xml 0xcfa1604
res/drawable/delete_group_button.xml 0x2ebae094
res/drawable/f015.png 0x48b35b8a
res/layout/recent_list_item.xml 0xa5ab34b7
res/drawable/qq_btn_radio_off_selected.png 0x3f23aac2
res/drawable/qq_edit_login.xml 0x56b48cbe
res/drawable/h087.png 0xd82659e5
res/layout/qq_dialog_frame.xml 0x411d9105
res/layout/saynamegroup.xml 0x5346b693
res/drawable/h068.png 0x82da9f6c
res/drawable/h093.png 0x9e81fe63
res/layout-land/qq_main_header.xml 0x30770e87
res/layout/chating_txt.xml 0x1a86dfe1
res/layout/add_friend.xml 0x1b6443fe
res/layout/del_confirm_view.xml 0x8ed04e22
res/drawable/privacy.png 0x856b7836
res/layout/qq_transient_notification.xml 0x6c47e546
res/drawable/qq_dialog_default_icon.png 0xc845d242
res/layout/group_member_list.xml 0x947a97a1
res/layout/request_done.xml 0x4744a01
res/drawable/feedback.png 0xd9fb514b
res/drawable/camera_press.png 0x823eae99
res/drawable/menu_submenu_background.png 0xa4313ca4
res/drawable/button2.png 0xd2aada35
res/layout/qq_option_list_item_2.xml 0x1f4f3944
res/drawable/h083.png 0xfb7ef372
res/drawable/inputnormal.png 0x9a45e11d
res/layout/loadingdialog.xml 0x790d6549
res/drawable/f048.png 0xb83cab17
res/drawable-hdpi-v4/chat_prev_page_over.png 0xa532f240
res/drawable/log_text.png 0x52291f69
res/drawable/f078.png 0xb5f5fb49
res/drawable/icon_invisiable.png 0x289fcb17
res/drawable/icon_3g.PNG 0xaf1bf18d
res/drawable/select.png 0x8e0e5ee5
res/drawable/chat_close_cur.png 0xf9d03f92
res/drawable/comment.png 0x514337bf
res/drawable/f098.png 0x14ca0e94
res/drawable/h010.png 0xf4b44f8f
res/layout/qq_edit_sign.xml 0xddc25809
res/drawable/h054.png 0x355bdc26
res/drawable/releaseformore.png 0xe281109a
res/drawable/opt_selectitem_bg.xml 0xcc3de218
res/drawable/button2_over.png 0xd476aec7
res/drawable/seekbar.xml 0xf35fcf93
res/drawable-hdpi-v4/icon_online.png 0x42a5e7d
res/drawable-hdpi-v4/chat_quit_down.png 0x14e694b9
assets/skinconfig_mdpi.xml 0x57f0df18
res/drawable/h122.png 0xf68c6c3e
res/drawable/h058.png 0x74cb0364
res/drawable/h062.png 0xd0bbb8c6
res/drawable/chat_edittext.xml 0xce38e268
res/drawable/btn_check_on_selected.png 0x5657a099
res/drawable/inputfocus.png 0x6a083ed9
res/layout/using_skin_uninstall_dialog.xml 0x29971d77
res/drawable/mypage.png 0x31379187
assets/cache_black.png 0x6a86e0de
res/drawable/clear_acct_menu_icon.png 0xe26ca7ce
res/drawable/chat_prev_page_nor.png 0xf05cae8a
res/drawable/tab1_over.png 0x36896f1f
res/drawable/widget_item.xml 0x8d92cc0f
res/layout/comment.xml 0x7a627352
res/drawable/d_back.xml 0xd54fdea3
res/drawable/widget_newmessage.png 0x8b5d4cc2
res/drawable/f025.png 0x92b2b463
res/layout/title.xml 0x1fd9c5c1
res/drawable/info_divider.png 0xf08f36c
res/drawable-hdpi-v4/icon_unread_msg.png 0x6dc5306d
res/drawable/carport.png 0x14215247
res/drawable/menu_home.png 0x3c45115d
res/drawable/widget_transparent.png 0x314a3aa
res/drawable/btn_browser_forward_2.png 0xae267e74
res/drawable/star.png 0x921082f4
assets/cache_night.png 0xedaaedb1
res/drawable/h017.png 0x208a96ac
res/drawable/h070.png 0x77f0e50b
res/drawable/h097.png 0xb1d34882
res/layout/add_friend_by_nick.xml 0x5988cefb
res/drawable-hdpi-v4/tab3_over.png 0xbc6e0f3d
res/drawable/saydialogdetail.png 0x6d944a65
res/drawable/f023.png 0x8a10b5e6
res/drawable/qzone_input.png 0xd17f8c38
res/drawable/default_theme.png 0x77fe6c96
res/layout/commentlistheader.xml 0x89a41539
res/drawable/dragtorefresh.png 0x160e9ad9
res/drawable-hdpi-v4/chat_prev_page_nor.png 0xe7b9320a
res/drawable/option_normal.png 0x503a7085
res/drawable/menu_refresh.png 0xb72218ac
res/layout/commentsview.xml 0x9611a3f3
res/drawable/rename_group_nor.png 0xbd109074
res/drawable/inputbg.png 0xef949b2c
res/drawable/f100.png 0xb479f922
res/drawable/cmtcntbg.png 0x2ae12624
res/drawable/cancel_btn.xml 0x215d5d0a
res/drawable/h090.png 0x4092841f
res/drawable/btn_qzone_refresh_pressed.png 0xf00299a9
res/drawable/comment2.png 0xfcdcdb2
res/drawable/icon_qqblog.png 0x6d0285f4
res/drawable/synchronize_signature_enable.png 0xb9316d8e
res/drawable/h116.png 0x97e0dd99
res/drawable/pointerline.png 0x17d5df86
res/drawable/moodinputbg.png 0xecd5f2b6
res/drawable/h073.png 0x89b7e086
res/drawable/btn_browser_forward.xml 0x982bbd0e
res/drawable/qq_btn_radio_on_pressed.png 0xd28982e6
res/drawable/chat_close_all.png 0x46d211e
res/drawable/personcenter.png 0x866d6bfe
res/layout/contact_list.xml 0x49a6f80d
res/layout/qq_dialog_list_item_1.xml 0x377e0a7e
res/drawable/h124.png 0x1bba4196
res/drawable/chat_prev_page_over.png 0x728ce148
res/drawable/d_new.xml 0x5f98acc
res/drawable/f010.png 0x9ea19f22
res/drawable/widget_add_over.png 0xa6d5326c
res/drawable/tipsicon.png 0x638597dd
res/layout/child_list_item.xml 0x7e39bbe3
res/drawable/synchronize_signature_disable.png 0x3552ee35
res/drawable/f018.png 0xb778c732
res/layout/ad_msg.xml 0x6c112c0d
res/drawable/f060.png 0x930ea73f
res/drawable-hdpi-v4/export_history_button_over.png 0xc37eb84b
res/drawable/tab1.xml 0xc6e0d575
res/drawable/f080.png 0xb97564f8
res/drawable/widget_add_delete.xml 0xab17743b
res/drawable/picture_frame.png 0xcee4d8f2
res/drawable/h091.png 0x79654c5d
res/drawable/reply.png 0xd34f5a08
res/drawable/topbar_select.png 0x74c0f8f2
res/layout/info_show_group.xml 0xc8ebc90c
res/drawable/chat_folder_over.png 0x24eb6a64
res/drawable/f062.png 0x56e42a37
res/layout/buddylist_head.xml 0xa9b6a84c
res/drawable/widget_qq_nor.png 0xed69a591
res/layout/bottominput.xml 0xaee46e95
res/drawable/h050.png 0x2e266e96
res/drawable/f059.png 0xba6640f1
res/drawable/h049.png 0xd40d8db3
res/drawable/right.png 0x4411b31b
res/drawable/chating_title.png 0x8f608d43
res/layout/qq_option_list_item_5.xml 0x7abf47d9
res/drawable/logininput2.png 0xf9eb343d
res/drawable/h076.png 0x168ad00f
res/drawable/option.xml 0xc5ccccd6
res/drawable/qqdialog_top_body.png 0xe3d0e1e7
res/drawable-hdpi-v4/delete_history_button_nor.png 0xff614307
res/drawable/hand_load.png 0xb88d1e6f
res/drawable/menu_common_act.png 0x316018bb
res/drawable/f102.png 0x77632faa
res/drawable/h012.png 0x328ac994
res/drawable/f034.png 0x39a2a2fc
res/drawable/h032.png 0x2057db4
res/drawable/openablum.png 0x16a58b03
res/layout/qq_transient_notification_err.xml 0x6360b773
res/drawable/btn_browser_home.xml 0x4a518066
res/drawable-hdpi-v4/cancel_over.png 0x5887a9ec
res/drawable/menu_clean_rec.png 0x22f7d24f
res/drawable/back1.png 0x821bf4ae
res/drawable-hdpi-v4/chat_history.png 0x63307d16
res/layout/chatwindows.xml 0x89435383
res/drawable/f082.png 0xd8a14e13
res/layout/setting.xml 0x34661e7d
res/layout/qq_option_list_item_4.xml 0x37a52842
res/drawable/btn_browser_refresh_2.png 0xbd240ab0
res/layout/login_verify_code_err_view.xml 0xfc70d883
res/drawable/h126.png 0xa3208c59
res/drawable/delete_group_nor.png 0xf1ad6af2
res/drawable/inputfocus2.png 0xa1a8a7d5
res/layout/del_confirm_input_password_view.xml 0x3ef56f35
res/drawable/chat_msg_item_top.png 0x733e0f0
res/menu/offline_grouplist.xml 0xcbafc45b
res/drawable/h089.png 0xc8e51669
res/drawable/menu_recv_gmsg.png 0xf9656475
res/drawable/menu_sys_block_gmsg.png 0xcd2847b7
res/drawable/f106.png 0x77231850
res/drawable/f058.png 0xacc49348
res/drawable/f021.png 0x6bec2598
res/drawable/btn_check_off.png 0x3c25eab
res/layout/qq_main_header.xml 0xffc2181e
res/drawable/h016.png 0xe924f576
res/drawable/tips1.png 0x15504cfc
res/drawable/icon_qzone.png 0xa20b9345
res/drawable/icon_online.png 0x2b39a6e6
res/drawable/h051.png 0xd55251ad
res/drawable/waiting.png 0xac3147a0
res/drawable/f026.png 0xb5a08c98
res/menu/grouplist.xml 0x56dccd6a
res/drawable/widget_qq_over.png 0x746a7367
res/drawable/h085.png 0xd0285560
res/layout/offline_progress_dialog.xml 0xfea47090
res/layout/feedviewblog.xml 0x83e0b0ae
resources.arsc 0x8337089
res/drawable/farm.png 0xf4c4b50
res/drawable/f056.png 0xa9456e49
res/drawable/icon_pp.png 0x26db830c
res/drawable/export_history_button_over.png 0x5e4c6a43
res/layout/appwebview.xml 0x254997c5
res/drawable/h110.png 0x60ffd826
res/drawable/f105.png 0xb39686f4
res/drawable/chat_list_bg.png 0xdfda274d
res/drawable/qq_btn_radio.xml 0x9459b207
res/layout/replydialog.xml 0xd04804ba
res/drawable/qq_btn_radio_on_selected.png 0x5dde1069
res/layout-land/chatwindows.xml 0x19a0a956
res/drawable/mood_photobg.png 0x4dadbe6d
res/drawable-hdpi-v4/icon_unread_system_msg.png 0xfbd8c993
res/drawable/f014.png 0x576c8fbf
res/drawable/h117.png 0xe430c17
res/drawable/l3.png 0x1e6e3bb3
res/drawable/bg.PNG 0xf4c4b8fd
res/drawable/f052.png 0x9d8038a9
res/layout/widget_child_list_item.xml 0xb82ab15a
assets/cache_outdoor.png 0x4bee6fa9
res/drawable/icon_finance.png 0xc9b521de
res/layout/helpviewxml.xml 0x526a2104
res/layout/commentwithdivider.xml 0xb6369512
res/layout/buddylist_select.xml 0x542792d2
res/drawable/bottombar_2.xml 0x7b9784c1
res/drawable/h003.png 0x92dd554d
res/drawable/h112.png 0x7a61fd36
res/drawable/icon.png 0xb4292c6f
res/drawable/chat_msg_item_mid.png 0xf2fcadb0
res/drawable/tab11.png 0x918ced78
res/layout/feedlist.xml 0xbc2ee829
res/drawable/h069.png 0x43bec9
res/xml/widget.xml 0x9c773c3c
res/drawable/f074.png 0x8b0a6da1
res/layout/newsign.xml 0x8e3370f5
res/drawable/f069.png 0xd65007ba
res/drawable/f084.png 0xac24120a
res/layout/albumlistitem.xml 0xb04571f5
res/layout/friend_info_show_header.xml 0x29880e39
res/drawable/f104.png 0x5c337794
res/drawable/default_bg_hdpi.jpg 0xf30c9663
res/layout/buddylist_item.xml 0x5ac52196
res/drawable-hdpi-v4/tab2_over.png 0x8f1c6b32
res/drawable/l7.png 0x8d0ef4a4
res/drawable/f008.png 0x725b33ea
res/drawable/icon_book.png 0xde1f20c6
res/drawable/btn_browser_forward_3.png 0x9bfe033f
res/drawable/h137.png 0xd22ab163
res/drawable/h043.png 0x7a73218b
res/drawable/h011.png 0xffc312d9
res/drawable/tab3.xml 0xf5c70b94
res/drawable/f093.png 0x4a2221ac
res/drawable/faceicon.xml 0x932c8ca8
res/drawable/themedownload.png 0xff159626
res/layout/group_list_item.xml 0x5a7e07c4
res/drawable/h061.png 0xf92af6a1
res/drawable/chat_emotion.png 0xc67c5034
res/drawable/chat_history.png 0x43b26096
res/drawable/icon_entertainment.png 0x4034eeb4
res/menu/offline_friendlist.xml 0x988988c9
res/drawable/f095.png 0xc1fa1656
res/drawable/d_reply.xml 0x29b266e6
res/layout/friend_group_manager_bottom.xml 0xaadbeade
res/drawable/h078.png 0x8ca52f34
res/drawable/h037.png 0x14677f44
res/drawable/l1.png 0x67b0570b
res/drawable/statue_vibrate.png 0xd7c26d48
res/drawable/down.png 0x7f1dc006
res/drawable/h065.png 0xb204b823
res/menu/friendlist.xml 0x1a0239fc
res/layout/info_show_unit.xml 0xa51e99e7
res/drawable/h129.png 0x650cbbaf
res/drawable/bottombar_navigation.xml 0xba0b5621
res/drawable/mypage2.png 0x3d03129d
res/layout/qq_dialog_simple_content.xml 0x7f405163
res/drawable/h067.png 0xa1eb64e6
res/layout/stranger_manager.xml 0x9ea97f48
res/layout/group_manager.xml 0x85d17294
res/drawable/h036.png 0xea3fe67f
res/drawable/bottombar_icon1.png 0xf9271f4d
res/layout/feedlistfooter.xml 0xbac8d67f
res/drawable-hdpi-v4/option_normal.png 0x4c34a255
res/drawable/f000.png 0xa8359f76
res/drawable/photodefault.png 0xef348158
res/drawable/rename_group_over.png 0x4eb72677
res/layout/msg_item.xml 0xfa600812
res/drawable/icon_sport.png 0x67f413d9
res/layout/lanch.xml 0x34752012
res/drawable/usecenter2.png 0xa0de15e7
res/drawable/input.png 0xc9bb1c3e
res/drawable/h024.png 0xd3cb3bb4
res/drawable/bottombar_qzone.xml 0xb134186b
res/drawable/icon_stock.png 0x344023e7
res/layout/logindialog.xml 0xc24099c3
res/drawable/h059.png 0x75196b71
res/drawable/themeup.png 0xd1602854
res/drawable/btn_qzone_refresh.xml 0x510c5c39
Run screenshot
VirSCAN

About VirSCAN | Privacy Policy | Contact us | Links | Help VirSCAN
Translated by Keith Miller, United States
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号