VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load

VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

File information

Basic Information

MD5: 803713027c8bf8acaf301e2578055d18
Package names: com.fxplay
Minimum operating environment: Android 2.2.x
copyright: Android

Key behavior

Behavior description: 设置特殊文件夹属性
details: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
Behavior description: 获取TickCount值
details: TickCount = 225150, SleepMilliseconds = 10.
TickCount = 225228, SleepMilliseconds = 10.
TickCount = 225244, SleepMilliseconds = 10.
TickCount = 225260, SleepMilliseconds = 10.
TickCount = 225275, SleepMilliseconds = 10.
TickCount = 225291, SleepMilliseconds = 10.
TickCount = 225306, SleepMilliseconds = 10.
TickCount = 225338, SleepMilliseconds = 10.
TickCount = 225353, SleepMilliseconds = 10.
TickCount = 225369, SleepMilliseconds = 10.
TickCount = 225385, SleepMilliseconds = 10.
TickCount = 225666, SleepMilliseconds = 10.
TickCount = 225744, SleepMilliseconds = 10.
TickCount = 225760, SleepMilliseconds = 10.
TickCount = 225853, SleepMilliseconds = 10.

File behavior

Behavior description: 创建文件
details: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\Sysetem[1].exe
C:\Documents and Settings\Administrator\Local Settings\Temp\Sysetem
Behavior description: 创建可执行文件
details: C:\Documents and Settings\Administrator\Local Settings\Temp\Sysetem
Behavior description: 查找文件
details: FileName = C:\Documents and Settings
FileName = C:\Documents and Settings\Administrator
FileName = C:\Documents and Settings\Administrator\Local Settings
FileName = C:\Documents and Settings\Administrator\Local Settings\Temp
FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%
FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\****.exe
FileName = C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Connections\Pbk\*.pbk
FileName = C:\WINDOWS\system32\Ras\*.pbk
FileName = C:\Documents and Settings\Administrator\Application Data\Microsoft\Network\Connections\Pbk\*.pbk
FileName = C:\DOCUME~1
FileName = C:\DOCUME~1\ADMINI~1
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
FileName = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Sysetem
Behavior description: 删除文件
details: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\Sysetem[1].exe
Behavior description: 设置特殊文件夹属性
details: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
Behavior description: 修改文件内容
details: C:\Documents and Settings\Administrator\Local Settings\Temp\Sysetem ---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\Sysetem ---> Offset = 4096
C:\Documents and Settings\Administrator\Local Settings\Temp\Sysetem ---> Offset = 8192
C:\Documents and Settings\Administrator\Local Settings\Temp\Sysetem ---> Offset = 12288
C:\Documents and Settings\Administrator\Local Settings\Temp\Sysetem ---> Offset = 16384

Network behavior

Behavior description: 下载文件
details: C:\Documents and Settings\Administrator\Local Settings\Temp\Sysetem
Behavior description: 连接指定站点
details: InternetConnectA: ServerName = im****om, PORT = 182, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x00000000
Behavior description: 打开HTTP连接
details: InternetOpenA: UserAgent: AutoIt, hSession = 0x00cc0004
Behavior description: 建立到一个指定的套接字连接
details: URL: im****om, IP: **.133.40.**:182, SOCKET = 0x00000358
Behavior description: 读取网络文件
details: hFile = 0x00cc000c, BytesToRead =1024, BytesRead = 1024.
Behavior description: 发送HTTP包
details: GET /d/5oehgehyhi6upjwpp5dpglyv2kq6yu7lvhwmxn3rr5mdglier3s7yotg4xuhct7ihd5r4nha/Sysetem.exe HTTP/1.1 User-Agent: AutoIt Host: im****om:182
Behavior description: 打开HTTP请求
details: HttpOpenRequestA: im****om:182/d/5oehgehyhi6upjwpp5dpglyv2kq6yu7lvhwmxn3rr5mdglier3s7yotg4xuhct7ihd5r4nha/sysetem.exe, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x00000000
Behavior description: 按名称获取主机地址
details: GetAddrInfoW: im****om

Registry behavior

Behavior description: 修改注册表
details: \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\GlobalUserOffline
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings
Behavior description: 删除注册表键值
details: \REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL

Other behavior

Behavior description: 检测自身是否被调试
details: IsDebuggerPresent
Behavior description: 创建互斥体
details: CTF.LBES.MutexDefaultS-*
CTF.Compart.MutexDefaultS-*
CTF.Asm.MutexDefaultS-*
CTF.Layouts.MutexDefaultS-*
CTF.TMD.MutexDefaultS-*
CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-*
RasPbFile
Local\ZonesCounterMutex
Local\ZoneAttributeCacheCounterMutex
Local\ZonesCacheCounterMutex
Local\ZonesLockedCacheCounterMutex
Behavior description: 创建事件对象
details: EventName = DINPUTWINMM
EventName = Global\userenv: User Profile setup event
Behavior description: 获取TickCount值
details: TickCount = 225150, SleepMilliseconds = 10.
TickCount = 225228, SleepMilliseconds = 10.
TickCount = 225244, SleepMilliseconds = 10.
TickCount = 225260, SleepMilliseconds = 10.
TickCount = 225275, SleepMilliseconds = 10.
TickCount = 225291, SleepMilliseconds = 10.
TickCount = 225306, SleepMilliseconds = 10.
TickCount = 225338, SleepMilliseconds = 10.
TickCount = 225353, SleepMilliseconds = 10.
TickCount = 225369, SleepMilliseconds = 10.
TickCount = 225385, SleepMilliseconds = 10.
TickCount = 225666, SleepMilliseconds = 10.
TickCount = 225744, SleepMilliseconds = 10.
TickCount = 225760, SleepMilliseconds = 10.
TickCount = 225853, SleepMilliseconds = 10.
Behavior description: 调整进程token权限
details: SE_LOAD_DRIVER_PRIVILEGE
Behavior description: 打开事件
details: HookSwitchHookEnabledEvent
_fCanRegisterWithShellService
\SECURITY\LSA_AUTHENTICATION_INITIALIZED
Global\SvcctrlStartEvent_A3752DX
\INSTALLATION_SECURITY_HOLD
Behavior description: 可执行文件签名信息
details: C:\Documents and Settings\Administrator\Local Settings\Temp\Sysetem(签名验证: 未通过)
Behavior description: 调用Sleep函数
details: [1]: MilliSeconds = 10.
[2]: MilliSeconds = 10.
[3]: MilliSeconds = 10.
[4]: MilliSeconds = 10.
[5]: MilliSeconds = 10.
[6]: MilliSeconds = 10.
[7]: MilliSeconds = 10.
[8]: MilliSeconds = 10.
[9]: MilliSeconds = 10.
[10]: MilliSeconds = 10.
Behavior description: 隐藏指定窗口
details: [Window,Class] = [AutoIt v3,AutoIt v3]
Behavior description: 可执行文件MD5
details: C:\Documents and Settings\Administrator\Local Settings\Temp\Sysetem ---> fe1d0ee5901dd167ee9b28eece31786c
Behavior description: 打开互斥体
details: ShimCacheMutex
Local\_!MSFTHISTORY!_
Local\c:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Local\c:!documents and settings!administrator!cookies!
Local\c:!documents and settings!administrator!local settings!history!history.ie5!
Local\WininetStartupMutex
Local\WininetConnectionMutex
Local\WininetProxyRegistryMutex
RasPbFile
Local\!IETld!Mutex

Activities

Activity name Types of
com.e4a.runtime.android.StartActivity android.intent.action.MAIN
com.e4a.runtime.android.StartActivity android.intent.category.DEFAULT
com.e4a.runtime.android.StartActivity android.intent.category.LAUNCHER
com.e4a.runtime.android.mainActivity android.intent.action.MAIN
com.e4a.runtime.android.mainActivity android.intent.category.DEFAULT
com.e4a.runtime.components.impl.android.Ok百度视频类库.VideoViewPlayingActivity android.intent.action.VIEW
com.e4a.runtime.components.impl.android.Ok百度视频类库.VideoViewPlayingActivity android.intent.category.DEFAULT
com.e4a.runtime.components.impl.android.Ok百度视频类库.VideoViewPlayingActivity android.intent.category.BROWSABLE
com.e4a.runtime.components.impl.android.Ok百度视频类库.VideoViewPlayingActivity2 android.intent.action.VIEW
com.e4a.runtime.components.impl.android.Ok百度视频类库.VideoViewPlayingActivity2 android.intent.category.DEFAULT
com.e4a.runtime.components.impl.android.Ok百度视频类库.VideoViewPlayingActivity2 android.intent.category.BROWSABLE
com.e4a.runtime.components.impl.android.Ok百度视频类库.VideoViewPlayingActivity4 android.intent.action.VIEW
com.e4a.runtime.components.impl.android.Ok百度视频类库.VideoViewPlayingActivity4 android.intent.category.DEFAULT
com.e4a.runtime.components.impl.android.Ok百度视频类库.VideoViewPlayingActivity4 android.intent.category.BROWSABLE

Permission list

License name information
com.android.launcher.permission.INSTALL_SHORTCUT 创建快捷方式
android.permission.GET_TASKS 获取有关当前或最近运行的任务信息
android.permission.PROCESS_OUTGOING_CALLS 监视、修改有关拨出电话
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.ACCESS_WIFI_STATE 读取wifi网络状态
android.permission.ACCESS_COARSE_LOCATION 获取粗略的位置(通过wifi、基站)
android.permission.CALL_PHONE 拨打电话
android.permission.MODIFY_AUDIO_SETTINGS 修改声音设置
android.permission.MOUNT_UNMOUNT_FILESYSTEMS 挂载、反挂载外部文件系统
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.SYSTEM_ALERT_WINDOW 显示系统窗口
android.permission.MODIFY_PHONE_STATE 修改电话状态
android.permission.INTERNET 连接网络(2G或3G)
android.permission.WRITE_SETTINGS 读写系统设置项
android.permission.VIBRATE 允许设备震动
com.android.launcher.permission.READ_SETTINGS 读取快捷方式信息
android.permission.READ_CALL_LOG 读取通话记录
android.permission.WAKE_LOCK 手机屏幕关闭后后台进程仍运行
android.permission.ACCESS_NETWORK_STATE 读取网络状态(2G或3G)
android.permission.CHANGE_CONFIGURATION 修改当前设置(如:本地化)

Service list

name
com.umeng.update.net.DownloadingService

File List

file name Check code
AndroidManifest.xml 0x9da872bb
classes.dex 0xe24fa3bd
assets/00006.png 0xff5d6014
assets/00011.png 0x8867daea
assets/00012.png 0xeb40bfd9
assets/00021.png 0xcc76ad9a
assets/00022.png 0x963eb656
assets/00045.png 0xa7db9d3d
assets/00046.png 0xc5aa9e61
assets/00053.png 0xa5af8b08
assets/00073.png 0xd19e2bb2
assets/00185.png 0x2c10b95a
assets/00186.png 0x16d9c1ca
assets/00272.png 0x94c170e9
assets/1.png 0x655c4b78
assets/117549.jpg 0xbd89980e
assets/16.png 0xcc01eba0
assets/242.txt 0xf589e821
assets/243.txt 0xb3b189b7
assets/244.txt 0x1e7fc721
assets/245.txt 0x2fd8287
assets/246.txt 0x6fdc9267
assets/2546986354.jpg 0x474770f1
assets/3.png 0xae20ac7a
assets/5496876.jpg 0xf234310f
assets/E4Abanner201643134255.jpg 0x9ea31bb2
assets/E4Abanner201643134537.jpg 0x9ea31bb2
assets/back_normal.png 0xc234a433
assets/back_press.png 0x2623e841
assets/cili1.png 0xc4e140e2
assets/defaultloading.png 0x3222bbd9
assets/defaultloading1.png 0x8fa7bb65
assets/denglu.png 0xee5262dc
assets/df1c96ed51e94819bd68d61a6411cd4a.jpg 0xac9662cf
assets/dhdy.txt 0x50168ed5
assets/dialog_full_holo_light.9.png 0x44d13c40
assets/duanpian1.png 0xe1ad9cd8
assets/fuli1.png 0xf211f34f
assets/gcdsj.txt 0x91b26eed
assets/gcdy.txt 0xe2dda59d
assets/gtdsj.txt 0x6d22923a
assets/gtdy.txt 0xf1dd4c94
assets/guanggao.png 0xea03d0d1
assets/hwdy.txt 0x49b317eb
assets/kdwom.txt 0x1efe6bb2
assets/kdwqj.txt 0xfb6c3711
assets/kdwrl.txt 0xbd908b94
assets/kdwsrq.txt 0x5ec142e1
assets/kdwtx.txt 0xf0d5e8d3
assets/kdwwm.txt 0x92ed9c7
assets/kdwym.txt 0xc38bbe9c
assets/kdwzp.txt 0xaf3bce32
assets/kdwzw.txt 0x0
assets/kdwzx.txt 0x4f44c67
assets/logo.png.png 0x3a8dcdea
assets/meipai.png 0x26c60be8
assets/neihan.png 0xa00b79ea
assets/omdsj.txt 0x3b9b3f22
assets/omdy.txt 0xb77e0d5c
assets/pianku1.png 0xe7ab3193
assets/pic_delete_normal1.png 0x6d53c070
assets/radar_bg.jpg 0x3d902a60
assets/rhdy.txt 0x848b890
assets/sb.txt 0x736a37b6
assets/shezhi1.png 0x7d1e505d
assets/sousuo1.png 0x5757cd0e
assets/suiji1.png 0x71cc806a
assets/timg.jpg 0xa0abd2f
assets/zhibo1.png 0x39bbea47
assets/zzmp.txt 0xd0b473a2
res/drawable/ad_indicator_selected.png 0x3c90412a
res/drawable/btn_style_alert_dialog_button.xml 0x64bd9cdc
res/drawable/btn_style_alert_dialog_cancel.xml 0x17557faf
res/drawable/btn_style_alert_dialog_special.xml 0x52659ee6
res/drawable/caidan_btn_style.xml 0xe7d7fc0b
res/drawable/caidian_lie_style.xml 0xa3e3b0d5
res/drawable/caidian_lies_style.xml 0x3db6e9fa
res/drawable/e4alistview_new_message.png 0x1cdc5409
res/drawable/emoticon_pager_select_normal.png 0xd4b3274c
res/drawable/fancircle_banner_cover.png 0x635e2d55
res/drawable/hou.png 0x356ecd7c
res/drawable/icon.png 0xd2922b9f
res/drawable/moren.png 0x8a1f4b00
res/drawable/next_btn_style.xml 0x4cc8aa92
res/drawable/nohistorydata.png 0x8c959af
res/drawable/ok_win10.xml 0xa5cc4676
res/drawable/ound_easyicon.png 0x9d7c819f
res/drawable/pause_btn_style.xml 0x984f353f
res/drawable/play_btn_style.xml 0x4600827f
res/drawable/player_landscape_more_normal.png 0xcf66ec96
res/drawable/player_landscape_more_press.png 0x38397897
res/drawable/pre_btn_style.xml 0xe3869317
res/drawable/qcloud_player_icon_audio_vol.png 0x73be6b62
res/drawable/qcloud_player_icon_brightness.png 0x3e7ba87b
res/drawable/qian.png 0xf69d578
res/drawable/seekbar_define_style.xml 0x8a985369
res/drawable/seekbar_thumb.xml 0x6eed36e5
res/drawable/tb_munion_icon.xml 0x3c4bbb89
res/drawable/tb_munion_item_selector.xml 0x5e6dbb0b
res/drawable/umeng_common_gradient_green.xml 0x962bb903
res/drawable/umeng_common_gradient_orange.xml 0xd5106ae2
res/drawable/umeng_common_gradient_red.xml 0x133ade08
res/drawable/umeng_update_button_cancel_bg_focused.xml 0xe15186e2
res/drawable/umeng_update_button_cancel_bg_normal.xml 0x7f247f01
res/drawable/umeng_update_button_cancel_bg_selector.xml 0xfa294927
res/drawable/umeng_update_button_cancel_bg_tap.xml 0x8b9edc3
res/drawable/umeng_update_button_check_selector.xml 0xfad1cac7
res/drawable/umeng_update_button_close_bg_selector.xml 0x3f81f9db
res/drawable/umeng_update_button_ok_bg_focused.xml 0xca9ec970
res/drawable/umeng_update_button_ok_bg_normal.xml 0xafd26ea2
res/drawable/umeng_update_button_ok_bg_selector.xml 0x29be81b1
res/drawable/umeng_update_button_ok_bg_tap.xml 0x2b2a0e55
res/drawable/umeng_update_dialog_bg.xml 0x565551a3
res/drawable/umeng_update_title_bg.xml 0x9173f89e
res/drawable/umeng_update_wifi_disable.png 0xe635e071
res/drawable/vive_yuanxing.xml 0x3369162d
res/drawable/zidingyi_anniu_style.xml 0x9177af0c
res/drawable/zidingyi_anniu_style1.xml 0x268d076
res/drawable/zidingyi_anniu_style2.xml 0x1430a5a2
res/layout/canduanxiang.xml 0x6d6d648f
res/layout/controllerplayinging.xml 0xf7309f76
res/layout/controllerplayingok.xml 0xee2e62d6
res/layout/loading_dialog.xml 0xf9a347de
res/layout/tb_munion_aditem.xml 0x160d430e
res/layout/umeng_common_download_notification.xml 0x712aca4b
res/layout/umeng_update_dialog.xml 0x49129b12
resources.arsc 0xcaa0d56b
res/layout-v9/umeng_common_download_notification.xml 0x88e54ecf
res/drawable-hdpi/cyberplayer_listbtn_normal.png 0xa2be03dc
res/drawable-hdpi/cyberplayer_listbtn_pressed.png 0x21de95cb
res/drawable-hdpi/cyberplayer_next_play.png 0x4dbc08ae
res/drawable-hdpi/cyberplayer_next_play_disable.png 0xd9509e6a
res/drawable-hdpi/cyberplayer_next_play_pressed.png 0xecd2fb3a
res/drawable-hdpi/cyberplayer_play_media.png 0x7825fccf
res/drawable-hdpi/cyberplayer_play_media_disable.png 0xd06ad4ea
res/drawable-hdpi/cyberplayer_play_media_pressed.png 0x754abc4d
res/drawable-hdpi/cyberplayer_retreat_media.png 0xc1863e71
res/drawable-hdpi/cyberplayer_retreat_media_disable.png 0x105d69ea
res/drawable-hdpi/cyberplayer_retreat_media_pressed.png 0x107d406d
res/drawable-hdpi/cyberplayer_seekbar_background.png 0x470141ee
res/drawable-hdpi/cyberplayer_seekbar_background_normal.9.png 0xb682f96c
res/drawable-hdpi/cyberplayer_seekbar_background_process.9.png 0x525e50fe
res/drawable-hdpi/cyberplayer_seekbar_background_sound_normal.9.png 0xf670f95b
res/drawable-hdpi/cyberplayer_seekbar_background_sound_process.9.png 0x5e8b1ec9
res/drawable-hdpi/cyberplayer_seekbar_cache.png 0x273eb0ec
res/drawable-hdpi/cyberplayer_seekbar_normal.png 0x60b412f3
res/drawable-hdpi/cyberplayer_seekbar_ratio.png 0x8ec16bd1
res/drawable-hdpi/cyberplayer_seekbar_ratio_white.png 0xa7a8ded9
res/drawable-hdpi/cyberplayer_stop_media.png 0x6395a790
res/drawable-hdpi/cyberplayer_stop_media_disable.png 0xbaafc338
res/drawable-hdpi/cyberplayer_stop_media_pressed.png 0x520b1252
res/drawable-hdpi/cyberplayer_subtitle_setting.png 0xdd3621e6
res/drawable-hdpi/cyberplayer_subtitle_setting_disable.png 0xcb77113f
res/drawable-hdpi/cyberplayer_subtitle_setting_pressed.png 0x9a0a6625
res/drawable-hdpi/cyberplayer_switch_subtitle.png 0xe91d219b
res/drawable-hdpi/cyberplayer_switch_subtitle_disable.png 0x4f852d8c
res/drawable-hdpi/cyberplayer_switch_subtitle_pressed.png 0xf6580cd6
res/drawable-hdpi/cyberplayer_take_snapshot.png 0xab8e7fd5
res/drawable-hdpi/cyberplayer_take_snapshot_disable.png 0x234d73be
res/drawable-hdpi/cyberplayer_take_snapshot_pressed.png 0x241205e
res/drawable-hdpi/cyberplayer_textbtn_background_blue.9.png 0x84105c73
res/drawable-hdpi/cyberplayer_titlebar_return.png 0xaafad296
res/drawable-hdpi/cyberplayer_volumebar_background.9.png 0xd4992489
res/drawable-hdpi/ic_episode_titlebar_videoplayer.png 0xc4f1ae6b
res/drawable-hdpi/ic_episode_titlebar_videoplayer_disable.png 0xaba89ad2
res/drawable-hdpi/ic_episode_titlebar_videoplayer_pressed.png 0x4b8d08e3
res/drawable-hdpi/ic_next_play.png 0x719162df
res/drawable-hdpi/ic_next_play_pressed.png 0x1da89f5
res/drawable-hdpi/ic_play_media.png 0xe1efa842
res/drawable-hdpi/ic_play_media_disable.png 0xd06ad4ea
res/drawable-hdpi/ic_play_media_pressed.png 0x369158f9
res/drawable-hdpi/ic_retreat_media.png 0x62ad09c7
res/drawable-hdpi/ic_retreat_media_disable.png 0x105d69ea
res/drawable-hdpi/ic_retreat_media_pressed.png 0x9e62fb86
res/drawable-hdpi/ic_stop_media.png 0x5e106da4
res/drawable-hdpi/ic_stop_media_pressed.png 0x101fb9db
res/drawable-hdpi/ic_zoom_in_btn_videoplayer.png 0x986da792
res/drawable-hdpi/ic_zoom_in_btn_videoplayer_disable.png 0x590e0a34
res/drawable-hdpi/ic_zoom_in_btn_videoplayer_pressed.png 0xea9b5ca1
res/drawable-hdpi/ic_zoom_out_btn_videoplayer.png 0xa25660f0
res/drawable-hdpi/ic_zoom_out_btn_videoplayer_disable.png 0x1489a84c
res/drawable-hdpi/ic_zoom_out_btn_videoplayer_pressed.png 0x722558a6
res/drawable-hdpi/umeng_update_btn_check_off_focused_holo_light.png 0x63f5fdb0
res/drawable-hdpi/umeng_update_btn_check_off_holo_light.png 0x9dd19bd9
res/drawable-hdpi/umeng_update_btn_check_off_pressed_holo_light.png 0x3f0df474
res/drawable-hdpi/umeng_update_btn_check_on_focused_holo_light.png 0x3a86058e
res/drawable-hdpi/umeng_update_btn_check_on_holo_light.png 0x54ca4df0
res/drawable-hdpi/umeng_update_btn_check_on_pressed_holo_light.png 0xc6e0029f
res/drawable-hdpi/umeng_update_close_bg_normal.png 0xfbb3a5d2
res/drawable-hdpi/umeng_update_close_bg_tap.png 0xa852b3ec
res/drawable-xhdpi/bookmark_expand_icon.png 0x6639221b
res/drawable-xhdpi/bookmark_icon_folder.png 0xae8b5d6b
res/drawable-xhdpi/bookmark_unexpand_icon.png 0xf6e40be6
res/drawable-xhdpi/btn_style_alert_dialog_button_normal.9.png 0x19f80729
res/drawable-xhdpi/btn_style_alert_dialog_button_pressed.9.png 0xca61388e
res/drawable-xhdpi/btn_style_alert_dialog_cancel_normal.9.png 0x2baa5f01
res/drawable-xhdpi/btn_style_alert_dialog_special_normal.9.png 0xfb7979e3
res/drawable-xhdpi/btn_style_alert_dialog_special_pressed.9.png 0x4d13cbda
res/drawable-xhdpi/download_bookmark_toolbar_delete.png 0x3a7249be
res/drawable-xhdpi/download_toolbar_backward.png 0xa3e23cfd
res/drawable-xhdpi/ic_action_search.png 0x3294aee3
res/drawable-xhdpi/menu_exit.png 0x2983d8b8
res/drawable-xhdpi/mo_shang.png 0xf1f9fdba
res/drawable-xhdpi/mo_xia.png 0x6b9aa78a
res/drawable-xhdpi/mo_zhong.png 0x7694836b
res/drawable-xhdpi/ok_win10_1.png 0x3f2da75e
res/drawable-xhdpi/ok_win10_10.png 0xf1b2f71e
res/drawable-xhdpi/ok_win10_11.png 0xbb91fe35
res/drawable-xhdpi/ok_win10_12.png 0x8e59419e
res/drawable-xhdpi/ok_win10_13.png 0x583476b6
res/drawable-xhdpi/ok_win10_14.png 0x7e6d87da
res/drawable-xhdpi/ok_win10_15.png 0x9c5fd291
res/drawable-xhdpi/ok_win10_16.png 0xda091058
res/drawable-xhdpi/ok_win10_17.png 0xabd11b0b
res/drawable-xhdpi/ok_win10_18.png 0x7d50df6d
res/drawable-xhdpi/ok_win10_19.png 0xedd4f106
res/drawable-xhdpi/ok_win10_2.png 0x8c31996e
res/drawable-xhdpi/ok_win10_20.png 0xc2062a6
res/drawable-xhdpi/ok_win10_21.png 0x7b988fc4
res/drawable-xhdpi/ok_win10_22.png 0xb429d99c
res/drawable-xhdpi/ok_win10_23.png 0x8e25fefa
res/drawable-xhdpi/ok_win10_24.png 0x8f107ff3
res/drawable-xhdpi/ok_win10_25.png 0x23650567
res/drawable-xhdpi/ok_win10_26.png 0x7c5fadae
res/drawable-xhdpi/ok_win10_27.png 0xf9812dff
res/drawable-xhdpi/ok_win10_28.png 0x353d2aef
res/drawable-xhdpi/ok_win10_29.png 0xd6403544
res/drawable-xhdpi/ok_win10_3.png 0x30d49bea
res/drawable-xhdpi/ok_win10_30.png 0x4fd184fe
res/drawable-xhdpi/ok_win10_31.png 0xae4fcca7
res/drawable-xhdpi/ok_win10_32.png 0x1811001f
res/drawable-xhdpi/ok_win10_33.png 0xf1647bbe
res/drawable-xhdpi/ok_win10_34.png 0xee51f09b
res/drawable-xhdpi/ok_win10_35.png 0xd4560822
res/drawable-xhdpi/ok_win10_36.png 0xf2f61c5
res/drawable-xhdpi/ok_win10_37.png 0x8c34a715
res/drawable-xhdpi/ok_win10_38.png 0x54f98dd1
res/drawable-xhdpi/ok_win10_39.png 0x5b69bac3
res/drawable-xhdpi/ok_win10_4.png 0x9042ed2
res/drawable-xhdpi/ok_win10_40.png 0x5204a48e
res/drawable-xhdpi/ok_win10_41.png 0x562d4ca1
res/drawable-xhdpi/ok_win10_42.png 0xfbb04908
res/drawable-xhdpi/ok_win10_43.png 0x96e3309e
res/drawable-xhdpi/ok_win10_44.png 0x583476b6
res/drawable-xhdpi/ok_win10_45.png 0x5af76e72
res/drawable-xhdpi/ok_win10_46.png 0xdf187d2f
res/drawable-xhdpi/ok_win10_47.png 0x72bf0510
res/drawable-xhdpi/ok_win10_48.png 0x8c77307a
res/drawable-xhdpi/ok_win10_49.png 0x7d50df6d
res/drawable-xhdpi/ok_win10_5.png 0x1e969f02
res/drawable-xhdpi/ok_win10_50.png 0x93a5e64e
res/drawable-xhdpi/ok_win10_51.png 0x84db4127
res/drawable-xhdpi/ok_win10_52.png 0xf2b97805
res/drawable-xhdpi/ok_win10_53.png 0x9816bea0
res/drawable-xhdpi/ok_win10_54.png 0xa397d7dd
res/drawable-xhdpi/ok_win10_55.png 0x8f107ff3
res/drawable-xhdpi/ok_win10_56.png 0x5819d596
res/drawable-xhdpi/ok_win10_57.png 0xb37a1fd1
res/drawable-xhdpi/ok_win10_58.png 0xd02da4a6
res/drawable-xhdpi/ok_win10_59.png 0x353d2aef
res/drawable-xhdpi/ok_win10_6.png 0xf8a63f04
res/drawable-xhdpi/ok_win10_60.png 0xf3901052
res/drawable-xhdpi/ok_win10_61.png 0xb7a2ff0e
res/drawable-xhdpi/ok_win10_62.png 0xdc899480
res/drawable-xhdpi/ok_win10_63.png 0x1811001f
res/drawable-xhdpi/ok_win10_64.png 0x89777e6b
res/drawable-xhdpi/ok_win10_65.png 0x6ec37229
res/drawable-xhdpi/ok_win10_66.png 0xd849beaa
res/drawable-xhdpi/ok_win10_67.png 0x3bad2405
res/drawable-xhdpi/ok_win10_68.png 0x726b7b15
res/drawable-xhdpi/ok_win10_69.png 0xe59993a2
res/drawable-xhdpi/ok_win10_7.png 0xb5d1e2f4
res/drawable-xhdpi/ok_win10_70.png 0xd1b58aa5
res/drawable-xhdpi/ok_win10_71.png 0xa97f2961
res/drawable-xhdpi/ok_win10_72.png 0xb79aa5b7
res/drawable-xhdpi/ok_win10_73.png 0xbec3199d
res/drawable-xhdpi/ok_win10_74.png 0xf52b6e9b
res/drawable-xhdpi/ok_win10_75.png 0xc4a38d7f
res/drawable-xhdpi/ok_win10_8.png 0xb6af5baf
res/drawable-xhdpi/ok_win10_9.png 0x90a86d8c
res/drawable-xhdpi/round_48px_1071539_easyicon.png 0xc24a6722
res/drawable-xhdpi/yanse_baise.png 0xc1df8226
res/drawable-xhdpi/yanse_baisu.png 0x1da031d2
res/drawable-xhdpi/yanse_huhuise.png 0xbf5ef6c1
res/drawable-xhdpi/yanse_huise.png 0xd8256c99
com/mysql/jdbc/Charsets.properties 0x69dd54f7
com/mysql/jdbc/LocalizedErrorMessages.properties 0xfeb3e525
com/mysql/jdbc/TimeZoneMapping.properties 0xbf7e6456
com/mysql/jdbc/configs/3-0-Compat.properties 0xacce57d8
com/mysql/jdbc/configs/5-0-Compat.properties 0x14053280
com/mysql/jdbc/configs/clusterBase.properties 0x5e9c0403
com/mysql/jdbc/configs/coldFusion.properties 0xd7f1304d
com/mysql/jdbc/configs/fullDebug.properties 0x4e4d6b90
com/mysql/jdbc/configs/maxPerformance.properties 0x23283cdc
com/mysql/jdbc/configs/solarisMaxPerformance.properties 0x76516adf
lib/armeabi/libbspatch.so 0x6333ecec
lib/armeabi/libcyberplayer-core.so 0xb98484e0
lib/armeabi/libcyberplayer.so 0x2350af82
META-INF/MANIFEST.MF 0x7dbe24b9
META-INF/CERT.SF 0xae65f8a0
META-INF/CERT.RSA 0x42648b79

Run screenshot

VirSCAN