VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load

File information
Safety rating:
Behavior list
Basic Information
MD5:a3a095a29b15347cb044d114169d63b3
Package names:com.github.shadowsocks
Minimum operating environment:Android 4.1, 4.1.1
copyright:Android
Key behavior
Behavior description:检测自身是否被调试
details:N/A
Behavior description:设置特殊文件夹属性
details:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds Cache
C:\Documents and Settings\Administrator\IECompatCache
Behavior description:获取TickCount值
details:TickCount = 1076546, SleepMilliseconds = 250.
TickCount = 1078546, SleepMilliseconds = 250.
Process behavior
Behavior description:隐藏窗口创建进程
details:ImagePath = , CmdLine = C:\WINDOWS\system32\cmd.exe /c regedit /s c:\windows\temp\Homepage.dll
Behavior description:创建进程
details:ImagePath = C:\Program Files\Internet Explorer\iexplore.exe, CmdLine = "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome
ImagePath = C:\Program Files\Internet Explorer\iexplore.exe, CmdLine = "C:\Program Files\Internet Explorer\IEXPLORE.EXE" SCODEF:2136 CREDAT:79873
ImagePath = C:\WINDOWS\system32\cmd.exe, CmdLine = C:\WINDOWS\system32\cmd.exe /c regedit /s c:\windows\temp\Homepage.dll
ImagePath = C:\WINDOWS\regedit.exe, CmdLine = regedit /s c:\windows\temp\Homepage.dll
ImagePath = C:\Program Files\Internet Explorer\iexplore.exe, CmdLine = "C:\Program Files\Internet Explorer\IEXPLORE.EXE" SCODEF:2348 CREDAT:79873
File behavior
Behavior description:创建文件
details:C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\RecoveryStore.{A322E4FE-26E2-11E6-91BE-7B****28}.dat
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF7F1B.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\aut13.tmp
C:\WINDOWS\Temp\Homepage.dll
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6P4O8QNJ\wpad[1].dat
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{A322E4FF-26E2-11E6-91BE-7B****28}.dat
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF9AD7.tmp
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6P4O8QNJ\2345_com[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6P4O8QNJ\favicon[1].ico
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\RecoveryStore.{A87DCD24-26E2-11E6-91BE-7B****28}.dat
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF170A.tmp
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{A87DCD25-26E2-11E6-91BE-7B****28}.dat
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF2C55.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\Kno14.tmp
Behavior description:创建可执行文件
details:C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
C:\Documents and Settings\Administrator\Local Settings\Temp\Kno14.tmp
Behavior description:覆盖已有文件
details:C:\Documents and Settings\Administrator\Local Settings\Temp\aut13.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\Kno14.tmp
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6P4O8QNJ\dnserrordiagoff[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IUKHR8T2\ErrorPageTemplate[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6TLOMATB\errorPageStrings[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\httpErrorPagesScripts[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6TLOMATB\noConnect[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\bullet[2]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IUKHR8T2\background_gradient[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\down[2]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\favcenter[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IUKHR8T2\tools[2]
Behavior description:查找文件
details:FileName = C:\Documents and Settings
FileName = C:\Documents and Settings\Administrator
FileName = C:\Documents and Settings\Administrator\Local Settings
FileName = C:\Documents and Settings\Administrator\Local Settings\Temp
FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%
Behavior description:删除文件
details:C:\Documents and Settings\Administrator\Local Settings\Temp\~DF7F1B.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\aut13.tmp
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6P4O8QNJ\wpad[1].dat
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF9AD7.tmp
C:\WINDOWS\Temp\Homepage.dll
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6P4O8QNJ\2345_com[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6P4O8QNJ\favicon[1].ico
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF170A.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF2C55.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\Kno14.tmp
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IUKHR8T2\dnserrordiagoff[2]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6TLOMATB\ErrorPageTemplate[2]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\errorPageStrings[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6TLOMATB\httpErrorPagesScripts[1]
Behavior description:重命名文件
details:C:\WINDOWS\system32\drivers\etc\hosts ---> C:\Windows\System32\drivers\etc\old.hosts
Behavior description:设置特殊文件夹属性
details:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds Cache
C:\Documents and Settings\Administrator\IECompatCache
Behavior description:修改文件内容
details:C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\RecoveryStore.{A322E4FE-26E2-11E6-91BE-7B****28}.dat ---> Offset = 512
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\RecoveryStore.{A322E4FE-26E2-11E6-91BE-7B****28}.dat ---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF7F1B.tmp ---> Offset = 16383
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF7F1B.tmp ---> Offset = 12288
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\RecoveryStore.{A322E4FE-26E2-11E6-91BE-7B****28}.dat ---> Offset = 3072
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\RecoveryStore.{A322E4FE-26E2-11E6-91BE-7B****28}.dat ---> Offset = 1536
C:\Documents and Settings\Administrator\Local Settings\Temp\aut13.tmp ---> Offset = 0
C:\WINDOWS\Temp\Homepage.dll ---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{A322E4FF-26E2-11E6-91BE-7B****28}.dat ---> Offset = 512
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{A322E4FF-26E2-11E6-91BE-7B****28}.dat ---> Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF9AD7.tmp ---> Offset = 16383
C:\Documents and Settings\Administrator\Local Settings\Temp\~DF9AD7.tmp ---> Offset = 12288
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{A322E4FF-26E2-11E6-91BE-7B****28}.dat ---> Offset = 3072
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{A322E4FF-26E2-11E6-91BE-7B****28}.dat ---> Offset = 1536
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico ---> Offset = 0
Network behavior
Behavior description:联网打开网址
details:InternetOpenUrlA: http://**.133.40.**:128/wpad.dat, hInternet = 0x00cc0004, Flags = 0x80000010
InternetOpenUrlA: http://**.133.40.**:128/wpad.dat, hInternet = 0x00cc0010, Flags = 0x00000010
Behavior description:下载文件
details:URLDownloadToFileW: http://ww****om/favicon.ico ---> C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
URLDownloadToFileW: https://go****om/fwlink/?LinkId=141260 ---> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Kno14.tmp
Behavior description:打开HTTP连接
details:InternetOpenA: UserAgent: Mozilla/4.0 (compatible; MSIE 8.0; Win32; Trident/4.0), hSession = 0x00cc0004
InternetOpenA: UserAgent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; KB974489), hSession = 0x00cc0004
InternetOpenA: UserAgent: Mozilla/4.0 (compatible; MSIE 8.0; Win32; Trident/4.0), hSession = 0x00cc0010
InternetOpenA: UserAgent: VCSoapClient, hSession = 0x00cc0010
Behavior description:连接指定站点
details:InternetConnectA: ServerName = **.133.40.**, PORT = 128, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x80000010
InternetConnectA: ServerName = ww****om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x00000000
InternetConnectA: ServerName = **.133.40.**, PORT = 128, UserName = , Password = , hSession = 0x00cc0010, hConnect = 0x00cc0014, Flags = 0x00000010
InternetConnectA: ServerName = ur****om, PORT = 443, UserName = , Password = , hSession = 0x00cc0010, hConnect = 0x00cc0014, Flags = 0x00000200
InternetConnectA: ServerName = go****om, PORT = 443, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x00800000
Behavior description:打开指定IE网页
details:http://ww****om/?kc004576p
Behavior description:建立到一个指定的套接字连接
details:URL: wpad, IP: **.133.40.**:128, SOCKET = 0x000004b4
URL: wpad, IP: **.133.40.**:128, SOCKET = 0x00000548
URL: ww****om, IP: **.133.40.**:80, SOCKET = 0x0000054c
URL: ww****om, IP: **.133.40.**:80, SOCKET = 0x000005b0
URL: ww****om, IP: **.133.40.**:80, SOCKET = 0x0000052c
URL: ur****om, IP: **.133.40.**:443, SOCKET = 0x000005e8
URL: wpad, IP: **.133.40.**:128, SOCKET = 0x000004b0
URL: go****om, IP: **.133.40.**:443, SOCKET = 0x00000500
URL: ww****om, IP: **.133.40.**:80, SOCKET = 0x000005c8
Behavior description:读取网络文件
details:hFile = 0x00cc000c, BytesToRead =4010, BytesRead = 4010.
hFile = 0x00cc0018, BytesToRead =4010, BytesRead = 4010.
hFile = 0x00cc000c, BytesToRead =4096, BytesRead = 4096.
Behavior description:发送HTTP包
details:GET /wpad.dat HTTP/1.1 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32; Trident/4.0) Host: **.133.40.**:128 Cache-Control: no-cache
GET /wpad.dat HTTP/1.1 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32; Trident/4.0) Host: **.133.40.**:128
GET /?kc004576p HTTP/1.1 Accept: */* Accept-Language: zh-cn User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; KB974489) Accept-Encoding: gzip, deflate Host: ww****om Connection: Keep-Alive
GET /favicon.ico HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; KB974489) Host: ww****om Connection: Keep-Alive
GET /?kc004576p HTTP/1.1 Accept: */* Accept-Language: zh-cn Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; KB974489) Host: ww****om Connection: Keep-Alive
Behavior description:打开HTTP请求
details:HttpOpenRequestA: **.133.40.**:128/wpad.dat, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x80000010
HttpOpenRequestA: ww****om:80/?kc004576p, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x00400000
HttpOpenRequestA: **.133.40.**:128/wpad.dat, hConnect = 0x00cc0014, hRequest = 0x00cc0018, Verb: GET, Referer: , Flags = 0x00000010
HttpOpenRequestA: ww****om:80/favicon.ico, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x00600010
HttpOpenRequestA: ww****om:80/?kc004576p, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x00400010
HttpOpenRequestA: ur****om:443/urs.asmx?msurs-client-key=3mwr1dck/36fr87vcjuova%3d%3d&msurs-patented-lock=vpnlt0sopwe%3d, hConnect = 0x00cc0014, hRequest = 0x00cc0018, Verb: POST, Referer: , Flags = 0x04880300
HttpOpenRequestA: go****om:443/fwlink/?linkid=141260, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x00c00010
Behavior description:按名称获取主机地址
details:GetAddrInfoW: computer
GetAddrInfoW: wpad
GetAddrInfoW: ww****om
GetAddrInfoW: ur****om
GetAddrInfoW: go****om
Registry behavior
Behavior description:删除注册表键
details:\REGISTRY\USER\S-*\Software\Microsoft\CTF\TIP\{1188450c-fdab-47ae-80d8-c9633f71be64}\LanguageProfile\0x00000000\{63800dac-e7ca-4df9-9a5c-20765055488d}\
\REGISTRY\USER\S-*\Software\Microsoft\CTF\TIP\{1188450c-fdab-47ae-80d8-c9633f71be64}\LanguageProfile\0x00000000\
\REGISTRY\USER\S-*\Software\Microsoft\CTF\TIP\{1188450c-fdab-47ae-80d8-c9633f71be64}\LanguageProfile\
\REGISTRY\USER\S-*\Software\Microsoft\CTF\TIP\{1188450c-fdab-47ae-80d8-c9633f71be64}\
\REGISTRY\USER\S-*_CLASSES\CLSID\{CAFEEFAC-0018-0000-0091-ABCDEFFEDCBA}\InprocServer32\
\REGISTRY\USER\S-*_CLASSES\CLSID\{CAFEEFAC-0018-0000-0091-ABCDEFFEDCBA}\
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0091-ABCDEFFEDCBA}\InprocServer32\
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0091-ABCDEFFEDCBA}\
\REGISTRY\USER\S-*_CLASSES\CLSID\{CAFEEFAC-0018-0000-0091-ABCDEFFEDCBB}\InprocServer32\
\REGISTRY\USER\S-*_CLASSES\CLSID\{CAFEEFAC-0018-0000-0091-ABCDEFFEDCBB}\
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0091-ABCDEFFEDCBB}\InprocServer32\
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0091-ABCDEFFEDCBB}\
\REGISTRY\USER\S-*_CLASSES\CLSID\{CAFEEFAC-0018-0000-0091-ABCDEFFEDCBC}\InprocServer32\
\REGISTRY\USER\S-*_CLASSES\CLSID\{CAFEEFAC-0018-0000-0091-ABCDEFFEDCBC}\
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0091-ABCDEFFEDCBC}\InprocServer32\
Behavior description:删除注册表键值
details:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL
\REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\0\Expiration
\REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\1\Expiration
Behavior description:修改注册表
details:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\VerCache
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DBC80044-A445-435B-BC74-9C25C1C588A9}\VerCache
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings
\REGISTRY\USER\S-*\Software\Microsoft\Internet Explorer\Recovery\Active\{A322E4FE-26E2-11E6-91BE-7B****28}
\REGISTRY\USER\S-*\Software\Microsoft\CTF\TIP\{1188450c-fdab-47ae-80d8-c9633f71be64}\LanguageProfile\0x00000000\{63800dac-e7ca-4df9-9a5c-20765055488d}\Enable
\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{1EA4DBF0-3C3B-11CF-810C-00AA00389B71}\1.1\0\win32\
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\iexplore\Count
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\iexplore\Time
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\iexplore\LoadTime
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\iexplore\LoadTimeCount
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore\Type
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore\Flags
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore\Count
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore\Time
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore\LoadTime
Other behavior
Behavior description:检测自身是否被调试
details:N/A
Behavior description:创建互斥体
details:CTF.LBES.MutexDefaultS-*
CTF.Compart.MutexDefaultS-*
CTF.Asm.MutexDefaultS-*
CTF.Layouts.MutexDefaultS-*
CTF.TMD.MutexDefaultS-*
CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-*
Local\!BrowserEmulation!SharedMemory!Mutex
Local\ZoneAttributeCacheCounterMutex
Local\ZonesCacheCounterMutex
Local\ZonesLockedCacheCounterMutex
RasPbFile
ConnHashTable<2136>_HashTable_Mutex
Local\ZonesCounterMutex
oleacc-msaa-loaded
Local\RSS Eventing Connection Database Mutex 00000858
Behavior description:创建事件对象
details:EventName = Global\userenv: User Profile setup event
EventName = DINPUTWINMM
EventName = Isolation Signal Registry Event (A322E4FB-26E2-11E6-91BE-7B****28, 0)
EventName = IE_EarlyTabStart_0x85c
EventName = Isolation Signal Registry Event (A322E4FC-26E2-11E6-91BE-7B****28, 0)
EventName = Local\IEDDEExecuteEvent
EventName = Global\crypt32LogoffEvent
EventName = Local\RSS Eventing Event Event 00000858
EventName = Local\88c_29
EventName = IEFrame.EventCheckDefaultBrowser
EventName = Isolation Signal Registry Event (A87DCD21-26E2-11E6-91BE-7B****28, 0)
EventName = IE_EarlyTabStart_0x930
EventName = Isolation Signal Registry Event (A87DCD22-26E2-11E6-91BE-7B****28, 0)
EventName = MSCTF.SendReceive.Event.MFI.IC
EventName = MSCTF.SendReceiveConection.Event.MFI.IC
Behavior description:查找指定窗口
details:NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,]
NtUserFindWindowEx: [Class,Window] = [IEFrame,]
NtUserFindWindowEx: [Class,Window] = [RegEdit_RegEdit,]
NtUserFindWindowEx: [Class,Window] = [Static,]
NtUserFindWindowEx: [Class,Window] = [MS_AutodialMonitor,]
NtUserFindWindowEx: [Class,Window] = [MS_WebCheckMonitor,]
NtUserFindWindowEx: [Class,Window] = [CicLoaderWndClass,]
Behavior description:获取TickCount值
details:TickCount = 1076546, SleepMilliseconds = 250.
TickCount = 1078546, SleepMilliseconds = 250.
Behavior description:调整进程token权限
details:SE_LOAD_DRIVER_PRIVILEGE
Behavior description:可执行文件签名信息
details:C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico(签名验证: 未通过)
C:\Documents and Settings\Administrator\Local Settings\Temp\Kno14.tmp(签名验证: 未通过)
Behavior description:调用Sleep函数
details:[1]: MilliSeconds = 250.
Behavior description:隐藏指定窗口
details:[Window,Class] = [AutoIt v3,AutoIt v3]
[Window,Class] = [,BrowserFrameGripperClass]
[Window,Class] = [缩放级别,ToolbarWindow32]
[Window,Class] = [,msctls_progress32]
[Window,Class] = [,SysLink]
[Window,Class] = [,Static]
[Window,Class] = [文件大小未知,Static]
[Window,Class] = [打开此类文件前总是询问(&W),Button]
[Window,Class] = [发行者:,Static]
[Window,Class] = [Windows Internet Explorer,IEFrame]
[Window,Class] = [,UniversalSearchBand]
[Window,Class] = [,TravelBand]
[Window,Class] = [,CommandBarClass]
[Window,Class] = [,ReBarWindow32]
[Window,Class] = [,TabBandClass]
Behavior description:可执行文件MD5
details:C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico ---> fe1d0ee5901dd167ee9b28eece31786c
C:\Documents and Settings\Administrator\Local Settings\Temp\Kno14.tmp ---> fe1d0ee5901dd167ee9b28eece31786c
Activities
Activity nameTypes of
com.github.shadowsocks.Shadowsocksandroid.intent.action.MAIN
com.github.shadowsocks.Shadowsocksandroid.intent.category.LAUNCHER
com.github.shadowsocks.Shadowsocksandroid.intent.category.LEANBACK_LAUNCHER
com.github.shadowsocks.ProfileManagerActivitycom.github.shadowsocks.ProfileManagerActivity
com.github.shadowsocks.ProfileManagerActivityandroid.intent.action.VIEW
com.github.shadowsocks.ProfileManagerActivityandroid.nfc.action.NDEF_DISCOVERED
com.github.shadowsocks.ProfileManagerActivityandroid.intent.category.DEFAULT
com.github.shadowsocks.ProfileManagerActivityandroid.intent.category.BROWSABLE
com.github.shadowsocks.TaskerActivitycom.twofortyfouram.locale.intent.action.EDIT_SETTING
com.github.shadowsocks.ShadowsocksQuickSwitchActivitycom.github.shadowsocks.QUICK_SWITCH
com.github.shadowsocks.ShadowsocksQuickSwitchActivityandroid.intent.category.DEFAULT
Dangerous function
Function nameinformation
LocationManager;->getLastKnownLocation获取地址位置
ContentResolver;->query读取联系人、短信等数据库
java/net/URL;->openConnection连接URL
java/net/HttpURLConnection;->connect连接URL
HttpClient;->execute请求远程服务器
getRuntime获取命令行环境
java/lang/Runtime;->exec执行字符串命令
Startup mode
nameinformation
com.github.shadowsocks.ShadowsocksReceiver开机启动服务
com.github.shadowsocks.ShadowsocksReceiver
com.github.shadowsocks.TaskerReceiver
Permission list
License nameinformation
android.permission.INTERNET连接网络(2G或3G)
android.permission.ACCESS_NETWORK_STATE读取网络状态(2G或3G)
android.permission.RECEIVE_BOOT_COMPLETED接收开机启动广播
android.permission.NFC允许NFC通讯
Service list
name
com.github.shadowsocks.ShadowsocksRunnerService
com.github.shadowsocks.ShadowsocksNatService
com.github.shadowsocks.ShadowsocksVpnService
File List
file name Check code
META-INF/MANIFEST.MF 0x73d17f8
META-INF/CERT.SF 0x8ab43864
META-INF/CERT.RSA 0xb2442956
res/drawable-anydpi-v21/ic_device_nfc.xml 0x52eef0ed
res/anim/design_snackbar_in.xml 0x89444de8
res/drawable-hdpi-v4/ic_start_connected.png 0x5abcce0
res/drawable-hdpi-v4/common_plus_signin_btn_icon_light_disabled.9.png 0x1148f987
res/drawable-hdpi-v4/abc_list_longpressed_holo.9.png 0x81b12fde
res/drawable-xxhdpi-v4/abc_ic_star_half_black_16dp.png 0xc2e4c8df
res/drawable-mdpi-v4/common_google_signin_btn_icon_dark_normal.9.png 0x1148f987
res/drawable-hdpi-v4/ic_content_add.png 0x88b2a3b0
res/drawable-xhdpi-v4/common_plus_signin_btn_text_dark_normal.9.png 0x1148f987
res/drawable-xxhdpi-v4/common_plus_signin_btn_text_dark_pressed.9.png 0x1148f987
res/drawable-xhdpi-v4/ic_start_idle.png 0xeeb063de
res/layout-v17/select_dialog_singlechoice_material.xml 0xcb248282
res/drawable-xxxhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0xf1bef8b4
res/drawable-tvdpi-v4/common_google_signin_btn_text_dark_normal.9.png 0x1148f987
res/layout/toolbar_light_dark.xml 0x63526c42
res/drawable-mdpi-v4/common_google_signin_btn_text_dark_normal.9.png 0x1148f987
res/drawable-tvdpi-v4/common_plus_signin_btn_text_light_focused.9.png 0x1148f987
res/drawable/abc_list_selector_background_transition_holo_light.xml 0xff8319d8
res/drawable-mdpi-v4/common_google_signin_btn_text_light_normal.9.png 0x1148f987
res/drawable-tvdpi-v4/common_plus_signin_btn_icon_light_focused.9.png 0x1148f987
res/color/abc_primary_text_disable_only_material_dark.xml 0x2c66bcc
res/drawable-xxhdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0x9e0d73d
res/drawable-xhdpi-v4/common_google_signin_btn_text_light_focused.9.png 0x1148f987
res/layout/abc_alert_dialog_button_bar_material.xml 0x4cd2b109
assets/x86/pdnsd 0xa3e740d8
res/drawable-mdpi-v4/common_full_open_on_phone.png 0x88b2a3b0
res/drawable-xxhdpi-v4/abc_ic_star_black_16dp.png 0x4e7252de
res/drawable-tvdpi-v4/common_google_signin_btn_icon_dark_normal.9.png 0x1148f987
res/drawable-xxhdpi-v4/common_google_signin_btn_icon_light_normal.9.png 0x1148f987
res/drawable-mdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0x3a0eb435
resources.arsc 0x3089e2df
res/drawable-xxxhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0x30ad7ddb
res/drawable-hdpi-v4/ic_start_idle.png 0xb6d0156
res/drawable-xhdpi-v4/abc_list_selector_disabled_holo_light.9.png 0x70973db6
res/drawable-hdpi-v4/fab_add.png 0xd16ce77d
res/drawable-mdpi-v4/abc_list_pressed_holo_dark.9.png 0x686b7a66
res/drawable-xhdpi-v4/common_google_signin_btn_text_dark_normal.9.png 0x1148f987
res/drawable-xxhdpi-v4/abc_list_pressed_holo_dark.9.png 0x823780d0
res/drawable/abc_list_selector_background_transition_holo_dark.xml 0xad127204
res/drawable-xhdpi-v4/abc_btn_radio_to_on_mtrl_000.png 0xc25600a3
res/drawable-hdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0x7ab89543
res/drawable-mdpi-v4/ic_start_idle.png 0x39139ef8
res/drawable-xxhdpi-v4/common_google_signin_btn_text_light_pressed.9.png 0x1148f987
META-INF/services/sun.net.spi.nameservice.NameServiceDescriptor 0xd7ca5a4a
res/drawable-hdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0x6c11debe
res/drawable/common_plus_signin_btn_text_dark.xml 0xd7e65643
res/drawable-hdpi-v4/abc_btn_check_to_on_mtrl_015.png 0xd2d6badf
res/drawable/abc_cab_background_top_material.xml 0x789cac73
res/drawable-xhdpi-v4/common_google_signin_btn_icon_light_disabled.9.png 0x1148f987
res/drawable-xxxhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0xfbe70b8a
META-INF/maven/com.google.zxing/android-integration/pom.xml 0xaa20c38f
res/color/abc_primary_text_material_light.xml 0x6589cfed
res/drawable-tvdpi-v4/common_google_signin_btn_text_dark_focused.9.png 0x1148f987
res/layout/abc_screen_simple_overlay_action_mode.xml 0x5c0e01b1
res/drawable-hdpi-v4/ic_navigation_close.png 0x797d0695
res/drawable-xxhdpi-v4/common_plus_signin_btn_text_light_pressed.9.png 0x1148f987
res/drawable-xhdpi-v4/common_google_signin_btn_icon_dark_focused.9.png 0x1148f987
res/drawable-xhdpi-v4/abc_ic_menu_moreoverflow_mtrl_alpha.png 0x74300c2e
res/layout-v17/notification_template_big_media_narrow.xml 0xabb47755
res/layout/layout_apps_item.xml 0x85c0a750
res/drawable-xxhdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0x18b63779
res/color/abc_primary_text_disable_only_material_light.xml 0x6d5db9f3
res/drawable-xhdpi-v4/common_plus_signin_btn_icon_dark_normal.9.png 0x1148f987
res/anim/abc_fade_in.xml 0xd7e65643
res/drawable-xhdpi-v4/common_plus_signin_btn_text_light_normal.9.png 0x1148f987
res/drawable-xhdpi-v4/ic_social_share.png 0xdf8d5338
res/drawable-xhdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png 0x1d64bf65
res/drawable-mdpi-v4/common_google_signin_btn_icon_dark_disabled.9.png 0x1148f987
res/drawable-mdpi-v4/common_plus_signin_btn_icon_dark_pressed.9.png 0x1148f987
res/anim/abc_popup_exit.xml 0x49fe54d9
res/drawable-hdpi-v4/common_plus_signin_btn_text_light_pressed.9.png 0x1148f987
res/drawable-ldrtl-hdpi-v17/abc_spinner_mtrl_am_alpha.9.png 0xa596c3d0
res/drawable-ldrtl-xhdpi-v17/abc_ic_ab_back_mtrl_am_alpha.png 0x6e4b8840
res/color/abc_search_url_text.xml 0x7a209cfc
res/drawable-mdpi-v4/common_plus_signin_btn_text_light_focused.9.png 0x1148f987
res/drawable-mdpi-v4/ic_image_camera_alt.png 0xde7f5bbd
com/j256/ormlite/core/README.txt 0x96c32b4f
res/drawable-tvdpi-v4/common_google_signin_btn_text_dark_disabled.9.png 0x1148f987
res/drawable-mdpi-v4/abc_ic_star_half_black_16dp.png 0x12ff6ea1
res/drawable-xhdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x4853c2d6
res/drawable-xhdpi-v4/common_plus_signin_btn_icon_light_focused.9.png 0x1148f987
res/drawable-mdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0xb413fe
res/anim/fab_slide_out_to_left.xml 0x38f42f2c
res/drawable-xxxhdpi-v4/abc_ic_search_api_mtrl_alpha.png 0x169d42ad
res/drawable-hdpi-v4/common_google_signin_btn_text_dark_normal.9.png 0x1148f987
res/drawable-xxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0x9aaa658d
res/drawable-tvdpi-v4/common_google_signin_btn_icon_light_normal.9.png 0x1148f987
res/drawable-ldrtl-mdpi-v17/abc_ic_ab_back_mtrl_am_alpha.png 0xf9fb6fee
res/drawable-xxxhdpi-v4/abc_ic_star_half_black_36dp.png 0x7984126b
res/anim/fab_scale_down.xml 0x39b905f6
res/drawable-hdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0x3df2f3
res/drawable-xxxhdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png 0x23f1af9d
res/drawable-hdpi-v4/common_plus_signin_btn_text_light_focused.9.png 0x1148f987
res/drawable-xhdpi-v4/common_google_signin_btn_text_light_normal.9.png 0x1148f987
res/drawable-xhdpi-v4/abc_btn_radio_to_on_mtrl_015.png 0x2f4b54d0
res/drawable-anydpi-v21/ic_start_connected.xml 0xff99cd0f
res/drawable/common_google_signin_btn_icon_light.xml 0xd7e65643
res/layout/complete_fab.xml 0xa56e522e
res/layout/design_navigation_item_subheader.xml 0x96e150d7
res/anim/design_bottom_sheet_slide_out.xml 0xcf5a1c5
res/drawable-xxhdpi-v4/common_google_signin_btn_text_dark_normal.9.png 0x1148f987
res/drawable-hdpi-v4/ic_stat_shadowsocks.png 0x6826d9ae
res/layout/design_layout_snackbar.xml 0x654f5dcd
res/drawable-hdpi-v4/abc_ic_star_black_36dp.png 0x9e7a76b4
res/drawable-hdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0xee0f1fea
res/drawable-tvdpi-v4/common_google_signin_btn_text_light_focused.9.png 0x1148f987
res/drawable-xhdpi-v4/abc_ic_menu_share_mtrl_alpha.png 0x9c576c6f
res/drawable-hdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0x4afe65be
res/layout-v17/layout_main.xml 0xccd8e27a
res/anim/fab_scale_up.xml 0x8053a67e
res/drawable-ldrtl-hdpi-v17/abc_ic_ab_back_mtrl_am_alpha.png 0xfc0e839d
res/drawable-xhdpi-v4/ic_content_copy.png 0xde11e45b
res/drawable-xxhdpi-v4/abc_ic_voice_search_api_mtrl_alpha.png 0xc34e844d
res/drawable-xxhdpi-v4/common_google_signin_btn_text_dark_pressed.9.png 0x1148f987
res/drawable-xxhdpi-v4/ic_content_copy.png 0xf405eeb7
res/drawable-hdpi-v4/common_plus_signin_btn_icon_light_focused.9.png 0x1148f987
res/drawable-mdpi-v4/common_google_signin_btn_icon_dark_focused.9.png 0x1148f987
res/layout/design_bottom_sheet_dialog.xml 0xd7e65643
res/layout/abc_dialog_title_material.xml 0x7685c849
res/drawable-xhdpi-v4/ic_start_connected.png 0xc610105d
res/layout/notification_template_part_time.xml 0xc2b45a66
res/drawable-hdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0x177537a
res/drawable-xxhdpi-v4/common_google_signin_btn_text_light_disabled.9.png 0x1148f987
res/drawable-mdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0x5ceac6c5
res/drawable-mdpi-v4/common_plus_signin_btn_text_dark_focused.9.png 0x1148f987
res/drawable-xxhdpi-v4/ic_done.png 0xafbc2097
res/drawable-xxxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0xbfd66b8e
res/drawable-xxhdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0xc57037f7
res/anim/abc_popup_enter.xml 0xa271c268
res/drawable-xxhdpi-v4/common_google_signin_btn_icon_light_pressed.9.png 0x1148f987
res/drawable-hdpi-v4/abc_list_focused_holo.9.png 0x8e4da209
res/drawable-hdpi-v4/common_plus_signin_btn_text_dark_pressed.9.png 0x1148f987
res/drawable-hdpi-v4/common_google_signin_btn_icon_light_disabled.9.png 0x1148f987
res/drawable-hdpi-v4/ic_content_paste.png 0x7626be2c
res/drawable-xxhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0xa6022e86
res/drawable/common_google_signin_btn_icon_dark.xml 0xd7e65643
res/drawable-xhdpi-v4/common_plus_signin_btn_text_dark_disabled.9.png 0x1148f987
res/layout/design_navigation_item_header.xml 0xd7e65643
res/drawable-xhdpi-v4/common_google_signin_btn_text_light_pressed.9.png 0x1148f987
res/drawable-xxhdpi-v4/common_plus_signin_btn_icon_light_pressed.9.png 0x1148f987
META-INF/maven/net.glxn.qrgen/core/pom.properties 0x28402928
META-INF/NOTICE.txt 0x36a068fb
res/drawable-anydpi-v21/ic_social_share.xml 0xd5b1424d
res/drawable-xhdpi-v4/common_plus_signin_btn_icon_light_disabled.9.png 0x1148f987
res/layout-v17/abc_alert_dialog_material.xml 0xd4a46ef3
res/drawable-tvdpi-v4/common_plus_signin_btn_icon_light_pressed.9.png 0x1148f987
res/drawable-xxhdpi-v4/common_plus_signin_btn_icon_light_focused.9.png 0x1148f987
assets/x86/tun2socks 0x509dbad8
res/drawable-hdpi-v4/common_plus_signin_btn_text_dark_focused.9.png 0x1148f987
res/layout-v17/abc_dialog_title_material.xml 0x6221b2ca
res/layout/layout_tasker.xml 0x67f6fcc9
res/drawable-tvdpi-v4/common_google_signin_btn_icon_dark_pressed.9.png 0x1148f987
res/drawable-mdpi-v4/abc_ic_star_black_36dp.png 0xd0e85dc2
META-INF/maven/com.google.zxing/core/pom.xml 0xae7326c
res/drawable-xxhdpi-v4/abc_btn_check_to_on_mtrl_000.png 0xa8af72f3
res/layout/abc_search_view.xml 0x238cfc76
res/drawable-xhdpi-v4/common_plus_signin_btn_text_light_focused.9.png 0x1148f987
res/drawable-xxhdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0x106eaea5
res/drawable-anydpi-v21/ic_content_paste.xml 0x28b7174e
res/drawable-xxhdpi-v4/common_google_signin_btn_text_dark_focused.9.png 0x1148f987
res/drawable/abc_ratingbar_full_material.xml 0xf00f836e
res/drawable-hdpi-v4/common_plus_signin_btn_icon_light_pressed.9.png 0x1148f987
res/anim/fab_slide_out_to_right.xml 0xd6aaedcd
res/drawable-mdpi-v4/common_google_signin_btn_text_dark_disabled.9.png 0x1148f987
res/drawable-xhdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png 0x9528ac54
res/drawable-mdpi-v4/ic_content_copy.png 0x90d0e626
res/drawable-v21/abc_ratingbar_small_material.xml 0xbed7f6fc
res/drawable-xhdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0xf70ddcc0
res/drawable-xxxhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0x67f80d81
res/drawable-xxhdpi-v4/abc_list_focused_holo.9.png 0x19c09c27
res/drawable-mdpi-v4/ic_navigation_close.png 0xe6e0b788
res/drawable-xxhdpi-v4/common_plus_signin_btn_text_dark_normal.9.png 0x1148f987
res/drawable-hdpi-v4/common_google_signin_btn_icon_dark_focused.9.png 0x1148f987
res/drawable-hdpi-v4/ic_image_camera_alt.png 0xb80f9293
res/drawable-mdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png 0x42b50c39
res/raw/gtm_analytics 0xe923cb20
res/layout-v17/notification_template_part_time.xml 0x519f0fb3
res/anim/design_bottom_sheet_slide_in.xml 0x8dae6790
res/color/common_google_signin_btn_text_dark.xml 0xd7e65643
res/drawable-xxhdpi-v4/abc_btn_check_to_on_mtrl_015.png 0xded73bad
lib/armeabi-v7a/libsystem.so 0x8cb88597
res/menu/app_manager_menu.xml 0xde0b9827
res/layout/design_menu_item_action_area.xml 0x290eb1a5
res/drawable-hdpi-v4/common_google_signin_btn_icon_dark_disabled.9.png 0x1148f987
res/layout-v21/layout_apps.xml 0x235d49ec
res/drawable-xhdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0x4cfa2def
res/drawable-xxhdpi-v4/common_plus_signin_btn_icon_dark_normal.9.png 0x1148f987
res/drawable-mdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0xd393324b
res/drawable-anydpi-v21/ic_navigation_close.xml 0xd407ec0a
res/drawable-tvdpi-v4/common_plus_signin_btn_icon_light_normal.9.png 0x1148f987
META-INF/maven/com.github.kevinsawicki/http-request/pom.properties 0xf3e5e640
res/layout-v17/notification_template_part_chronometer.xml 0x5868aa9c
res/drawable-ldrtl-xxxhdpi-v17/abc_spinner_mtrl_am_alpha.9.png 0x89333811
res/drawable-xxxhdpi-v4/abc_switch_track_mtrl_alpha.9.png 0xc9ce620d
res/drawable-xhdpi-v4/common_google_signin_btn_icon_dark_pressed.9.png 0x1148f987
res/layout/design_layout_snackbar_include.xml 0x30eb1706
res/drawable-hdpi-v4/common_google_signin_btn_icon_light_normal.9.png 0x1148f987
res/drawable-hdpi-v4/ic_content_copy.png 0xd57d76ce
res/drawable-ldrtl-mdpi-v17/abc_ic_menu_copy_mtrl_am_alpha.png 0xaa02981b
META-INF/maven/com.github.kevinsawicki/http-request/pom.xml 0x26006c5a
res/drawable-hdpi-v4/common_google_signin_btn_text_light_pressed.9.png 0x1148f987
res/drawable-mdpi-v4/abc_popup_background_mtrl_mult.9.png 0x3bdea6d1
res/layout/abc_popup_menu_item_layout.xml 0xbbfb181f
META-INF/maven/com.google.zxing/android-integration/pom.properties 0x3cd2f6e7
res/drawable-xhdpi-v4/common_plus_signin_btn_icon_light_pressed.9.png 0x1148f987
res/drawable-xxhdpi-v4/abc_ic_search_api_mtrl_alpha.png 0x4ae55ef4
res/drawable-ldrtl-hdpi-v17/abc_ic_menu_cut_mtrl_alpha.png 0x40b2c4ff
res/drawable-mdpi-v4/common_plus_signin_btn_text_dark_disabled.9.png 0x1148f987
res/layout/abc_expanded_menu_layout.xml 0x585fd06d
res/drawable-xhdpi-v4/common_plus_signin_btn_text_light_pressed.9.png 0x1148f987
res/drawable/common_plus_signin_btn_icon_light.xml 0xd7e65643
res/drawable-xhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0x361544c6
res/drawable-xxhdpi-v4/ic_content_create.png 0xff55b73a
com/j256/ormlite/core/LICENSE.txt 0xa1af30f1
res/drawable-tvdpi-v4/common_plus_signin_btn_icon_dark_focused.9.png 0x1148f987
res/drawable-xhdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0xfbc5d182
res/layout/abc_screen_toolbar.xml 0xfb855e3
assets/armeabi-v7a/ss-tunnel 0x1c096342
res/drawable-xhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0x3c9d3a47
res/drawable-xxhdpi-v4/common_google_signin_btn_icon_light_focused.9.png 0x1148f987
res/drawable/abc_btn_borderless_material.xml 0xf341af1c
res/layout/abc_alert_dialog_material.xml 0x79b2e078
META-INF/maven/commons-net/commons-net/pom.properties 0x9b1ffb27
res/color-v23/abc_color_highlight_material.xml 0x80afe6b6
res/drawable-xxhdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0x3c63a657
res/drawable-mdpi-v4/abc_ic_voice_search_api_mtrl_alpha.png 0xb3683671
res/drawable-xxhdpi-v4/common_google_signin_btn_text_light_focused.9.png 0x1148f987
res/drawable-xxhdpi-v4/common_plus_signin_btn_icon_light_normal.9.png 0x1148f987
res/drawable-xhdpi-v4/common_google_signin_btn_icon_light_pressed.9.png 0x1148f987
res/drawable-xxhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0xd6692ce7
res/drawable/abc_tab_indicator_material.xml 0x20683102
res/drawable-xxxhdpi-v4/abc_btn_radio_to_on_mtrl_000.png 0x503533d
res/drawable-xhdpi-v4/common_google_signin_btn_text_dark_pressed.9.png 0x1148f987
res/drawable-anydpi-v21/ic_start_busy.xml 0xfba69054
res/drawable-xhdpi-v4/common_plus_signin_btn_text_dark_pressed.9.png 0x1148f987
res/drawable-xhdpi-v4/common_plus_signin_btn_icon_dark_focused.9.png 0x1148f987
res/drawable-xhdpi-v4/common_google_signin_btn_text_light_disabled.9.png 0x1148f987
res/drawable-mdpi-v4/common_plus_signin_btn_text_dark_normal.9.png 0x1148f987
res/drawable-xhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0x73a7ec47
com/j256/ormlite/android/README.txt 0x47d61fa4
res/drawable-tvdpi-v4/common_plus_signin_btn_text_light_pressed.9.png 0x1148f987
res/drawable-xhdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0x7a6dbe65
res/drawable-xxhdpi-v4/abc_btn_rating_star_on_mtrl_alpha.png 0x629c77aa
res/drawable-xxhdpi-v4/abc_list_selector_disabled_holo_light.9.png 0xe7485cd9
res/drawable-mdpi-v4/abc_ic_star_black_16dp.png 0x856fb244
res/layout-v17/select_dialog_multichoice_material.xml 0x7ca569e1
res/drawable-xhdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0xeaa0434b
res/drawable-xxhdpi-v4/common_plus_signin_btn_text_light_focused.9.png 0x1148f987
res/layout-v17/design_layout_snackbar_include.xml 0x79bd88ca
res/drawable-hdpi-v4/ic_done.png 0xcd46392b
res/drawable-hdpi-v4/ic_start_busy.png 0x461503fa
res/drawable-xhdpi-v4/common_google_signin_btn_text_dark_disabled.9.png 0x1148f987
res/layout/abc_activity_chooser_view_list_item.xml 0x1ea657
META-INF/maven/com.google.zxing/core/pom.properties 0xb436a5ba
res/drawable-xxhdpi-v4/common_plus_signin_btn_icon_light_disabled.9.png 0x1148f987
res/drawable-xhdpi-v4/ic_content_paste.png 0x1f9a2383
res/drawable-mdpi-v4/abc_cab_background_top_mtrl_alpha.9.png 0xb6857dd0
res/drawable-xhdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0x7695afd7
res/drawable-xxhdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png 0x99fcf98c
res/layout/abc_action_bar_title_item.xml 0x815be532
META-INF/maven/commons-net/commons-net/pom.xml 0x18024c80
res/drawable/abc_btn_check_material.xml 0xe2f70d0a
res/drawable-xxxhdpi-v4/abc_btn_radio_to_on_mtrl_015.png 0xc093c658
res/anim/abc_slide_out_bottom.xml 0xd7e65643
res/drawable-hdpi-v4/abc_ic_voice_search_api_mtrl_alpha.png 0x810396dd
res/drawable-hdpi-v4/common_google_signin_btn_text_dark_focused.9.png 0x1148f987
res/drawable-mdpi-v4/ic_social_share.png 0x6bd6b8b2
res/layout-v17/notification_template_lines.xml 0x43b98d16
res/drawable/abc_btn_radio_material.xml 0x2960f785
META-INF/maven/com.j256.ormlite/ormlite-android/pom.properties 0xa07b686a
res/drawable-xxhdpi-v4/ic_action_settings.png 0x28e268bd
res/drawable-hdpi-v4/ic_action_settings.png 0x6ba88d6c
res/drawable-xhdpi-v4/abc_ic_search_api_mtrl_alpha.png 0xc477ec04
res/drawable-xxxhdpi-v4/abc_ic_menu_share_mtrl_alpha.png 0x79d8a8f5
res/layout/notification_template_big_media.xml 0xc2329cb1
res/drawable-ldrtl-hdpi-v17/abc_ic_menu_copy_mtrl_am_alpha.png 0xa0f62259
res/drawable-xxhdpi-v4/abc_list_longpressed_holo.9.png 0x236b6e98
res/drawable-hdpi-v4/common_google_signin_btn_icon_dark_normal.9.png 0x1148f987
res/drawable-mdpi-v4/ic_content_add.png 0x88b2a3b0
res/drawable-hdpi-v4/abc_list_selector_disabled_holo_light.9.png 0x2fe07457
res/drawable-mdpi-v4/abc_ic_search_api_mtrl_alpha.png 0x35cde56b
res/drawable/abc_cab_background_internal_bg.xml 0x9c5b1555
res/drawable/abc_item_background_holo_light.xml 0x5c0f0b25
res/drawable-tvdpi-v4/common_google_signin_btn_icon_light_pressed.9.png 0x1148f987
res/drawable-xhdpi-v4/common_plus_signin_btn_text_light_disabled.9.png 0x1148f987
res/drawable-xxxhdpi-v4/abc_ic_voice_search_api_mtrl_alpha.png 0xe71406bd
res/drawable-hdpi-v4/common_google_signin_btn_text_light_normal.9.png 0x1148f987
res/drawable-xxhdpi-v4/common_plus_signin_btn_icon_dark_focused.9.png 0x1148f987
res/drawable-mdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x4f16ccfc
res/anim/fab_slide_in_from_left.xml 0xff4f8c46
res/drawable/abc_seekbar_track_material.xml 0xd86c6936
res/drawable-xhdpi-v4/ic_launcher.png 0xb3d4dd56
res/drawable-hdpi-v4/common_plus_signin_btn_icon_dark_pressed.9.png 0x1148f987
res/drawable-hdpi-v4/abc_switch_track_mtrl_alpha.9.png 0x18025bff
res/drawable-ldrtl-xxxhdpi-v17/abc_ic_menu_cut_mtrl_alpha.png 0x175c7e0d
res/drawable-tvdpi-v4/common_plus_signin_btn_text_dark_pressed.9.png 0x1148f987
res/drawable-hdpi-v4/abc_ic_star_half_black_36dp.png 0xbeda6a07
res/drawable-ldrtl-xhdpi-v17/abc_spinner_mtrl_am_alpha.9.png 0x64a842b9
res/layout/select_dialog_item_material.xml 0x4bef64e8
res/drawable-xhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0x4ea879b2
res/drawable-xxhdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png 0x958ccd29
res/drawable-mdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0xfb4249d4
res/drawable-xhdpi-v4/abc_list_longpressed_holo.9.png 0x84a788a6
res/anim/fab_slide_in_from_right.xml 0xb4fa6c61
res/layout-v17/notification_template_media.xml 0xbcbb8237
res/drawable-xxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0xbba9274f
res/drawable-hdpi-v4/ic_launcher.png 0x608bf544
res/drawable-mdpi-v4/common_plus_signin_btn_icon_dark_normal.9.png 0x1148f987
res/drawable/abc_text_cursor_material.xml 0x9fd1fc63
res/drawable-mdpi-v4/common_plus_signin_btn_icon_light_pressed.9.png 0x1148f987
res/drawable-mdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0x618c81e3
res/drawable-xxxhdpi-v4/abc_ic_star_black_16dp.png 0xfcad8798
res/layout/design_navigation_menu.xml 0xd7e65643
res/drawable-ldrtl-xhdpi-v17/abc_ic_menu_copy_mtrl_am_alpha.png 0x799952ab
res/drawable-xhdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0x63ee6937
res/drawable-hdpi-v4/ic_content_create.png 0xf92b0e66
res/layout/abc_list_menu_item_layout.xml 0xb6760ca3
res/color/abc_secondary_text_material_light.xml 0x4482923e
res/drawable-mdpi-v4/fab_add.png 0xee1abec4
res/color/switch_thumb_material_light.xml 0x88431043
res/drawable-hdpi-v4/abc_list_pressed_holo_light.9.png 0x7c69f413
META-INF/maven/com.j256.ormlite/ormlite-core/pom.xml 0x42400fc1
res/drawable-mdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0xc9be2766
res/drawable/abc_btn_colored_material.xml 0x1522b03
res/anim/abc_slide_out_top.xml 0xd7e65643
res/layout/abc_list_menu_item_radio.xml 0x77e7d1b2
res/layout/abc_screen_simple.xml 0x8b8fc2f3
res/drawable-mdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0xa852580c
res/drawable-mdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0xb58b040f
res/layout/layout_profiles.xml 0x558767d
res/drawable-xxhdpi-v4/ic_content_add.png 0x88b2a3b0
res/drawable-xhdpi-v4/common_google_signin_btn_icon_dark_normal.9.png 0x1148f987
res/layout-v21/toolbar_light_dark.xml 0xfe8b9803
res/drawable-hdpi-v4/abc_ic_search_api_mtrl_alpha.png 0xfab182db
res/drawable/abc_switch_thumb_material.xml 0x88e00ae
res/drawable-xxhdpi-v4/ic_image_camera_alt.png 0xfcef5248
res/layout/abc_action_menu_layout.xml 0xb341efb
res/drawable-hdpi-v4/abc_btn_rating_star_on_mtrl_alpha.png 0x942c1ae5
res/layout/abc_list_menu_item_icon.xml 0xcc5d575b
res/drawable-mdpi-v4/abc_ic_commit_search_api_mtrl_alpha.png 0x7c9563d2
res/drawable-xhdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x75b1fdd3
res/drawable-xhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0x1f563a0b
res/drawable-xxhdpi-v4/ic_start_connected.png 0x5e109d92
res/drawable-mdpi-v4/abc_textfield_search_default_mtrl_alpha.9.png 0x19a0052e
res/drawable-mdpi-v4/ic_device_nfc.png 0xdb87090f
res/layout-v21/layout_tasker.xml 0x30f8f980
res/drawable-mdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0xfca95bf
res/drawable-xxhdpi-v4/fab_add.png 0x75fde086
res/drawable-ldrtl-xxhdpi-v17/abc_spinner_mtrl_am_alpha.9.png 0x48f4c207
res/drawable-xxhdpi-v4/common_google_signin_btn_icon_dark_focused.9.png 0x1148f987
res/layout/design_layout_tab_text.xml 0xd7e65643
res/drawable-hdpi-v4/common_google_signin_btn_text_light_focused.9.png 0x1148f987
res/drawable-hdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0x84e76f0
res/drawable-xxhdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x2d5a2100
res/anim-v21/design_bottom_sheet_slide_in.xml 0x407d5645
res/drawable-anydpi-v21/ic_content_create.xml 0xe02abfa9
res/drawable-hdpi-v4/common_google_signin_btn_icon_dark_pressed.9.png 0x1148f987
res/drawable-hdpi-v4/ic_device_nfc.png 0xce06601c
res/drawable-xxhdpi-v4/ic_navigation_close.png 0x145b35a0
res/drawable-xxhdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0x5902ed5c
res/drawable-ldrtl-xxxhdpi-v17/abc_ic_menu_copy_mtrl_am_alpha.png 0x9917cc6e
res/drawable-xhdpi-v4/abc_switch_track_mtrl_alpha.9.png 0x4ebe0617
META-INF/maven/net.glxn.qrgen/core/pom.xml 0x6e82be45
assets/armeabi-v7a/pdnsd 0x94251442
res/drawable-xxxhdpi-v4/abc_tab_indicator_mtrl_alpha.9.png 0x74529d2e
res/layout/abc_action_bar_view_list_nav_layout.xml 0xd7e65643
res/drawable-ldrtl-xxhdpi-v17/abc_ic_menu_copy_mtrl_am_alpha.png 0xf0736659
res/drawable-hdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0x7ebcc8c0
res/anim/abc_slide_in_bottom.xml 0xd7e65643
res/drawable-mdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0xf8dbf6f6
assets/x86/ss-tunnel 0x5f3262d6
assets/pages/about.html 0xa2cd16b2
res/layout/notification_template_part_chronometer.xml 0x8d12d546
res/drawable-xhdpi-v4/abc_list_pressed_holo_light.9.png 0x5314692b
res/drawable-xxhdpi-v4/abc_ic_star_half_black_36dp.png 0x59efa63f
res/drawable/oval_complete.xml 0x4fde6ec5
res/layout/design_navigation_menu_item.xml 0xaacd2a6d
res/layout/layout_quick_switch.xml 0x2dd3ec20
res/layout/abc_action_menu_item_layout.xml 0x5e37f0c3
res/drawable-tvdpi-v4/common_google_signin_btn_text_light_normal.9.png 0x1148f987
res/drawable-xhdpi-v4/abc_list_pressed_holo_dark.9.png 0x98f7c81a
res/drawable-xxxhdpi-v4/abc_ic_clear_mtrl_alpha.png 0x360a1279
res/drawable-xhdpi-v4/common_google_signin_btn_icon_light_normal.9.png 0x1148f987
res/drawable-anydpi-v21/ic_start_idle.xml 0x7a86062d
res/drawable-xxhdpi-v4/common_plus_signin_btn_text_light_disabled.9.png 0x1148f987
AndroidManifest.xml 0x1b498694
res/drawable-hdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0x64228504
com/j256/ormlite/android/LICENSE.txt 0xa1af30f1
res/drawable-mdpi-v4/common_google_signin_btn_text_dark_focused.9.png 0x1148f987
res/drawable-hdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0x41665102
res/drawable-mdpi-v4/common_google_signin_btn_text_light_pressed.9.png 0x1148f987
res/drawable-xhdpi-v4/common_plus_signin_btn_text_dark_focused.9.png 0x1148f987
res/drawable-xxhdpi-v4/abc_ic_star_black_36dp.png 0x6a5a81cd
res/layout/abc_search_dropdown_item_icons_2line.xml 0x3abac04e
res/layout-v17/abc_search_view.xml 0xe45465d9
res/drawable-mdpi-v4/common_google_signin_btn_icon_light_disabled.9.png 0x1148f987
res/color-v11/abc_background_cache_hint_selector_material_dark.xml 0x6cc30d0c
res/drawable-xhdpi-v4/abc_ic_go_search_api_mtrl_alpha.png 0x261d8779
res/drawable-xxxhdpi-v4/abc_ic_star_black_36dp.png 0xbcb10555
lib/x86/libsystem.so 0x694b520d
res/drawable-xhdpi-v4/abc_scrubber_control_off_mtrl_alpha.png 0x9a191c7
res/drawable-xhdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0x9973aa6c
res/drawable-xhdpi-v4/abc_ic_voice_search_api_mtrl_alpha.png 0x6a1947c3
res/drawable-xhdpi-v4/abc_ab_share_pack_mtrl_alpha.9.png 0xce477835
res/layout/layout_apps.xml 0x61d618f
res/drawable-xhdpi-v4/ic_start_busy.png 0x8e51245f
res/drawable-hdpi-v4/common_google_signin_btn_icon_light_focused.9.png 0x1148f987
res/layout-v21/layout_main.xml 0xb2a31036
res/drawable-tvdpi-v4/common_full_open_on_phone.png 0x88b2a3b0
META-INF/maven/com.j256.ormlite/ormlite-core/pom.properties 0x14dfdea5
res/drawable-mdpi-v4/common_plus_signin_btn_text_dark_pressed.9.png 0x1148f987
res/drawable/abc_seekbar_thumb_material.xml 0xf5569f09
res/anim/abc_fade_out.xml 0xd7e65643
res/drawable-hdpi-v4/ic_social_share.png 0x757444d4
res/drawable-xxhdpi-v4/ic_start_busy.png 0xde1e036f
res/drawable-xhdpi-v4/common_google_signin_btn_text_dark_focused.9.png 0x1148f987
res/drawable-xxhdpi-v4/common_google_signin_btn_icon_dark_disabled.9.png 0x1148f987
res/drawable-xxxhdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png 0x8151ea77
res/drawable-ldrtl-mdpi-v17/abc_ic_menu_cut_mtrl_alpha.png 0xab38d99d
res/drawable-xhdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0xbf40ca92
res/drawable-mdpi-v4/ic_done.png 0x8cf82645
res/drawable-xxhdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0x49d49756
res/drawable-xxhdpi-v4/common_plus_signin_btn_icon_dark_pressed.9.png 0x1148f987
res/drawable-anydpi-v21/ic_image_camera_alt.xml 0x8fdc763a
res/drawable-hdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0xbed682a
res/raw/gtm_default_container 0x16f0a35c
res/drawable-v21/abc_edit_text_material.xml 0x8624a46c
res/drawable-xxxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0xf3246a3
res/layout-sw600dp-v13/design_layout_snackbar.xml 0x29d217e2
res/drawable-hdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png 0x8b470fb3
res/drawable-xxxhdpi-v4/abc_btn_check_to_on_mtrl_000.png 0x5521e5e4
res/layout-v21/abc_screen_toolbar.xml 0x9bab329b
res/drawable-hdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0x65b9786e
res/drawable-mdpi-v4/ic_launcher.png 0xc613aaf0
res/drawable-hdpi-v4/abc_btn_radio_to_on_mtrl_000.png 0x81fde458
res/drawable-mdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png 0xbef16ffd
res/drawable-hdpi-v4/common_plus_signin_btn_icon_dark_disabled.9.png 0x1148f987
res/drawable-mdpi-v4/common_google_signin_btn_icon_light_normal.9.png 0x1148f987
res/drawable-anydpi-v21/ic_content_add.xml 0xd7e65643
res/drawable/abc_list_selector_holo_light.xml 0x4ca62f47
res/drawable-xhdpi-v4/abc_ic_star_black_36dp.png 0x2504ba40
res/drawable-mdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0x8098f44a
res/drawable-mdpi-v4/abc_btn_radio_to_on_mtrl_015.png 0xdda46a95
res/drawable-mdpi-v4/common_plus_signin_btn_text_light_normal.9.png 0x1148f987
res/anim/design_snackbar_out.xml 0x501bbe4c
res/drawable-xxhdpi-v4/common_google_signin_btn_text_light_normal.9.png 0x1148f987
res/drawable-xhdpi-v4/ic_navigation_close.png 0x69f988d4
res/drawable-hdpi-v4/common_plus_signin_btn_text_dark_disabled.9.png 0x1148f987
res/drawable-mdpi-v4/ic_content_create.png 0xca66ff7c
res/drawable-hdpi-v4/abc_ic_star_black_16dp.png 0x47b59945
res/drawable-tvdpi-v4/common_google_signin_btn_icon_dark_focused.9.png 0x1148f987
res/drawable-hdpi-v4/abc_popup_background_mtrl_mult.9.png 0x84fecf87
res/drawable-xhdpi-v4/abc_list_focused_holo.9.png 0xbde23956
res/color/common_plus_signin_btn_text_dark.xml 0xd7e65643
res/drawable-hdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0xafd79c5c
res/drawable-xxhdpi-v4/abc_switch_track_mtrl_alpha.9.png 0xaebb8ee7
res/drawable-xxhdpi-v4/common_plus_signin_btn_icon_dark_disabled.9.png 0x1148f987
res/drawable-hdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png 0x43a4f630
res/drawable-mdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png 0xf5a76b35
res/drawable-xxhdpi-v4/ic_content_paste.png 0x2de7ccca
res/drawable-v21/abc_action_bar_item_background_material.xml 0xb794af16
assets/x86/ss-local 0xcef1d2d
res/drawable-hdpi-v4/abc_ic_menu_moreoverflow_mtrl_alpha.png 0x50f85767
res/drawable-xhdpi-v4/abc_ic_clear_mtrl_alpha.png 0x2428d049
res/drawable-xxhdpi-v4/common_plus_signin_btn_text_dark_disabled.9.png 0x1148f987
res/drawable-xhdpi-v4/common_plus_signin_btn_icon_dark_pressed.9.png 0x1148f987
res/drawable-xxhdpi-v4/abc_ic_clear_mtrl_alpha.png 0x64cc865a
res/drawable/abc_dialog_material_background_dark.xml 0x8444f3b1
res/drawable-xhdpi-v4/common_plus_signin_btn_icon_light_normal.9.png 0x1148f987
res/anim/abc_shrink_fade_out_from_bottom.xml 0xebf504ed
res/drawable-hdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0xaa35a06e
res/drawable-xxhdpi-v4/abc_btn_rating_star_off_mtrl_alpha.png 0x6ddcc53b
res/drawable/abc_dialog_material_background_light.xml 0xf1db352c
res/layout-v17/abc_alert_dialog_button_bar_material.xml 0x1f156bfc
res/drawable-hdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png 0x3ef0a9a
res/layout/layout_main.xml 0x9c4ca468
res/layout/select_dialog_multichoice_material.xml 0x47915c9f
res/drawable-mdpi-v4/abc_btn_radio_to_on_mtrl_000.png 0xa99067f3
res/drawable-xxhdpi-v4/abc_ic_menu_moreoverflow_mtrl_alpha.png 0xe057a912
res/drawable-mdpi-v4/common_google_signin_btn_icon_light_pressed.9.png 0x1148f987
res/drawable-xhdpi-v4/abc_popup_background_mtrl_mult.9.png 0x79067b02
res/layout/abc_action_mode_bar.xml 0x7d31db07
res/anim/design_fab_in.xml 0x4cc1d922
res/layout/notification_media_action.xml 0xd9c73626
res/drawable-xhdpi-v4/abc_btn_rating_star_off_mtrl_alpha.png 0x62a72073
res/layout/layout_profiles_item.xml 0x10adc7f4
res/drawable-xhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0x7fcf83a
res/drawable-xxhdpi-v4/abc_list_pressed_holo_light.9.png 0x813ae23c
res/layout-w400dp-v13/layout_main_stat_title.xml 0xd8f35084
res/drawable/abc_item_background_holo_dark.xml 0xd1b21c63
res/drawable-xxhdpi-v4/abc_textfield_search_activated_mtrl_alpha.9.png 0x77c42d34
res/drawable-mdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0xe2078e4d
res/drawable-tvdpi-v4/common_plus_signin_btn_icon_dark_normal.9.png 0x1148f987
res/drawable-mdpi-v4/ic_action_settings.png 0x35ba59fa
res/drawable-xhdpi-v4/abc_ic_star_half_black_16dp.png 0xb4ad7f4a
res/drawable-tvdpi-v4/common_plus_signin_btn_icon_dark_pressed.9.png 0x1148f987
res/drawable-xxhdpi-v4/abc_ic_menu_selectall_mtrl_alpha.png 0x6a35729
res/layout/abc_list_menu_item_checkbox.xml 0x1435fdd9
res/drawable-xxhdpi-v4/ic_stat_shadowsocks.png 0xf4df3a35
res/drawable-xhdpi-v4/ic_stat_shadowsocks.png 0x35e79e72
res/drawable-xxhdpi-v4/ic_launcher.png 0xb546eae7
res/layout-v17/layout_apps_item.xml 0xa674ad5e
res/color/abc_secondary_text_material_dark.xml 0xd79ded44
META-INF/LICENSE.txt 0x86e2b4b4
res/drawable-tvdpi-v4/common_google_signin_btn_text_light_pressed.9.png 0x1148f987
res/drawable-xxxhdpi-v4/abc_btn_check_to_on_mtrl_015.png 0x2ea066c3
res/drawable-xxhdpi-v4/common_google_signin_btn_text_dark_disabled.9.png 0x1148f987
res/color/common_google_signin_btn_text_light.xml 0xd7e65643
res/drawable/common_plus_signin_btn_text_light.xml 0xd7e65643
res/drawable-hdpi-v4/abc_btn_radio_to_on_mtrl_015.png 0x7d495873
res/drawable-mdpi-v4/abc_ic_menu_share_mtrl_alpha.png 0x96765ab6
res/drawable-xxhdpi-v4/abc_popup_background_mtrl_mult.9.png 0x4eb949f2
res/drawable-mdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x75b1fdd3
res/drawable-mdpi-v4/common_google_signin_btn_icon_dark_pressed.9.png 0x1148f987
res/layout/notification_template_media.xml 0xb95a409f
res/drawable-tvdpi-v4/common_plus_signin_btn_text_dark_disabled.9.png 0x1148f987
res/drawable-mdpi-v4/abc_ic_star_half_black_36dp.png 0xeba3a879
res/drawable-mdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0x551f7c98
res/drawable-hdpi-v4/abc_ic_menu_share_mtrl_alpha.png 0xbd27d384
res/drawable-hdpi-v4/common_plus_signin_btn_text_light_normal.9.png 0x1148f987
res/color/common_plus_signin_btn_text_light.xml 0xd7e65643
res/drawable-hdpi-v4/abc_ic_clear_mtrl_alpha.png 0x3f976daa
res/layout/notification_template_lines.xml 0x7e3bbbd6
res/layout-v17/layout_profiles_item.xml 0xa0283dd2
res/layout/support_simple_spinner_dropdown_item.xml 0xee55f8e9
res/drawable-xxxhdpi-v4/abc_spinner_mtrl_am_alpha.9.png 0x31e97e9f
META-INF/maven/net.glxn.qrgen/android/pom.xml 0xe84992bd
res/xml/tracker.xml 0x119c479f
res/drawable-xxhdpi-v4/abc_ic_menu_cut_mtrl_alpha.png 0x185907e3
res/drawable-xxhdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0xde24ebe0
res/drawable-hdpi-v4/common_google_signin_btn_text_dark_disabled.9.png 0x1148f987
res/layout-v17/layout_profiles.xml 0x1be06148
res/layout/abc_select_dialog_material.xml 0x9b6c079d
res/anim/abc_slide_in_top.xml 0xd7e65643
res/drawable-hdpi-v4/abc_list_divider_mtrl_alpha.9.png 0x75b1fdd3
res/drawable-hdpi-v4/abc_list_pressed_holo_dark.9.png 0x62993bc8
res/drawable-xxhdpi-v4/common_google_signin_btn_icon_dark_pressed.9.png 0x1148f987
assets/armeabi-v7a/ss-local 0x8a637037
res/drawable-anydpi-v21/ic_action_settings.xml 0x18e54dab
res/layout/layout_main_stat_title.xml 0x86801b07
res/drawable-xhdpi-v4/abc_btn_rating_star_on_mtrl_alpha.png 0x3f85a1e
res/color/abc_primary_text_material_dark.xml 0xf696b097
res/drawable-xxhdpi-v4/common_plus_signin_btn_text_dark_focused.9.png 0x1148f987
res/drawable-xxhdpi-v4/ic_device_nfc.png 0x16f174d1
res/drawable-ldrtl-xxhdpi-v17/abc_ic_menu_cut_mtrl_alpha.png 0xed023aa
res/drawable-hdpi-v4/common_google_signin_btn_icon_light_pressed.9.png 0x1148f987
res/drawable-mdpi-v4/common_plus_signin_btn_text_light_disabled.9.png 0x1148f987
res/anim/design_fab_out.xml 0x8d676b4b
res/color-v11/abc_background_cache_hint_selector_material_light.xml 0x36d8bd51
assets/armeabi-v7a/tun2socks 0xf19228d0
res/drawable-mdpi-v4/common_google_signin_btn_text_light_disabled.9.png 0x1148f987
res/drawable-tvdpi-v4/common_google_signin_btn_text_dark_pressed.9.png 0x1148f987
res/drawable-xxhdpi-v4/abc_btn_radio_to_on_mtrl_015.png 0xf3ffd69a
res/drawable-hdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0x98851569
res/drawable-hdpi-v4/common_plus_signin_btn_text_light_disabled.9.png 0x1148f987
res/drawable-v21/abc_ratingbar_indicator_material.xml 0x5b57a222
res/drawable-anydpi-v21/ic_content_copy.xml 0xf532852
META-INF/maven/com.j256.ormlite/ormlite-android/pom.xml 0xf515683b
res/drawable-xxhdpi-v4/common_plus_signin_btn_text_light_normal.9.png 0x1148f987
res/drawable-xhdpi-v4/common_plus_signin_btn_icon_dark_disabled.9.png 0x1148f987
res/drawable/common_plus_signin_btn_icon_dark.xml 0xd7e65643
res/drawable-mdpi-v4/common_google_signin_btn_text_light_focused.9.png 0x1148f987
res/drawable/abc_ratingbar_indicator_material.xml 0xdbcfdb9a
res/drawable/abc_textfield_search_material.xml 0x82e87b85
res/drawable-xxhdpi-v4/ic_start_idle.png 0x6022a240
res/drawable-xxhdpi-v4/abc_ic_menu_share_mtrl_alpha.png 0x9a10d9b4
res/drawable/common_google_signin_btn_text_light.xml 0xd7e65643
res/drawable-mdpi-v4/common_google_signin_btn_icon_light_focused.9.png 0x1148f987
res/drawable-mdpi-v4/ic_start_busy.png 0x8966fa38
res/drawable-mdpi-v4/ic_start_connected.png 0x6a5ffa0c
res/drawable-v23/abc_control_background_material.xml 0xc6f2d9c1
res/drawable-xhdpi-v4/ic_action_settings.png 0x504e3c7d
res/drawable-v21/abc_btn_colored_material.xml 0x675fadef
res/drawable-xxhdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0x35329a
res/drawable-xxhdpi-v4/abc_menu_hardkey_panel_mtrl_mult.9.png 0xe97125d2
res/drawable-ldrtl-xxhdpi-v17/abc_ic_ab_back_mtrl_am_alpha.png 0x39727113
res/drawable/abc_list_selector_holo_dark.xml 0xd3230273
res/drawable-mdpi-v4/abc_btn_rating_star_on_mtrl_alpha.png 0x7c076115
res/drawable-mdpi-v4/abc_list_longpressed_holo.9.png 0x78c37895
res/drawable-xxhdpi-v4/abc_btn_radio_to_on_mtrl_000.png 0x990215e6
res/layout-v17/notification_template_big_media.xml 0xc3c4929b
res/drawable-mdpi-v4/common_plus_signin_btn_text_light_pressed.9.png 0x1148f987
res/drawable-tvdpi-v4/common_plus_signin_btn_text_light_disabled.9.png 0x1148f987
res/drawable-xhdpi-v4/abc_ic_star_half_black_36dp.png 0xc4d238e2
res/drawable-ldrtl-xhdpi-v17/abc_ic_menu_cut_mtrl_alpha.png 0xeeeff9f6
res/drawable-xhdpi-v4/fab_add.png 0x540f531a
res/drawable-tvdpi-v4/common_plus_signin_btn_text_dark_focused.9.png 0x1148f987
res/drawable-mdpi-v4/common_plus_signin_btn_icon_dark_disabled.9.png 0x1148f987
res/drawable/abc_ratingbar_small_material.xml 0xecbbc468
res/drawable-mdpi-v4/common_plus_signin_btn_icon_dark_focused.9.png 0x1148f987
res/drawable-tvdpi-v4/common_google_signin_btn_icon_light_disabled.9.png 0x1148f987
res/layout/abc_action_bar_up_container.xml 0xd7e65643
res/drawable/abc_spinner_textfield_background_material.xml 0x9a0921a0
res/drawable-tvdpi-v4/common_plus_signin_btn_icon_dark_disabled.9.png 0x1148f987
res/drawable-hdpi-v4/abc_ic_go_search_api_mtrl_alpha.png 0xd78ee352
res/drawable-hdpi-v4/abc_btn_rating_star_off_mtrl_alpha.png 0xd068d324
res/drawable-mdpi-v4/ic_stat_shadowsocks.png 0xda460f54
assets/x86/redsocks 0xf14d8180
res/drawable-hdpi-v4/abc_ic_menu_copy_mtrl_am_alpha.png 0x2b90c5b3
res/drawable-ldrtl-mdpi-v17/abc_spinner_mtrl_am_alpha.9.png 0xb1c14ea7
res/drawable-hdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.png 0x78a5c614
res/drawable-mdpi-v4/common_plus_signin_btn_icon_light_normal.9.png 0x1148f987
res/layout/notification_media_cancel_action.xml 0xbdbb1451
res/drawable-hdpi-v4/common_full_open_on_phone.png 0x88b2a3b0
res/drawable-mdpi-v4/abc_ic_go_search_api_mtrl_alpha.png 0x588712d0
res/drawable-xxhdpi-v4/common_google_signin_btn_icon_dark_normal.9.png 0x1148f987
res/drawable-ldrtl-xxxhdpi-v17/abc_ic_ab_back_mtrl_am_alpha.png 0xf5c17862
res/drawable-mdpi-v4/abc_ic_clear_mtrl_alpha.png 0x696fbaf9
res/drawable-xxhdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0xa028728e
META-INF/maven/dnsjava/dnsjava/pom.xml 0xfa1e80e3
res/drawable-hdpi-v4/common_plus_signin_btn_text_dark_normal.9.png 0x1148f987
res/drawable-xxhdpi-v4/abc_textfield_default_mtrl_alpha.9.png 0x4d07b4a9
res/drawable-xhdpi-v4/abc_ic_ab_back_mtrl_am_alpha.png 0x56441eab
res/drawable-hdpi-v4/abc_scrubber_primary_mtrl_alpha.9.png 0x415336be
res/drawable-mdpi-v4/abc_switch_track_mtrl_alpha.9.png 0xd6b37a0c
res/drawable-xxxhdpi-v4/abc_ic_star_half_black_16dp.png 0x95347f97
res/drawable/abc_edit_text_material.xml 0x3e0c77db
res/drawable-mdpi-v4/abc_btn_check_to_on_mtrl_015.png 0xa32a8346
res/drawable-xhdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0x41c39ada
res/drawable-hdpi-v4/abc_list_selector_disabled_holo_dark.9.png 0x78f6af53
res/drawable-hdpi-v4/common_plus_signin_btn_icon_light_normal.9.png 0x1148f987
res/drawable-xhdpi-v4/abc_btn_check_to_on_mtrl_015.png 0x726c24c9
res/drawable-xxhdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x2fa093c4
res/drawable-xhdpi-v4/abc_ic_star_black_16dp.png 0x3ea1a3b0
res/drawable-xxhdpi-v4/abc_ic_go_search_api_mtrl_alpha.png 0x978987bf
res/drawable-hdpi-v4/common_plus_signin_btn_icon_dark_normal.9.png 0x1148f987
res/drawable-mdpi-v4/abc_list_selector_disabled_holo_light.9.png 0xd6426851
res/drawable-mdpi-v4/ic_content_paste.png 0xe647119
META-INF/maven/dnsjava/dnsjava/pom.properties 0xadc6d868
res/anim/abc_grow_fade_in_from_bottom.xml 0x4ec7348f
res/drawable/design_fab_background.xml 0x516623a0
res/drawable-mdpi-v4/abc_list_pressed_holo_light.9.png 0x32efca3
res/layout/design_layout_tab_icon.xml 0xd7e65643
res/anim-v21/design_bottom_sheet_slide_out.xml 0xf38dafed
res/color/switch_thumb_material_dark.xml 0x1b5c6f39
res/layout/abc_screen_content_include.xml 0xfdac8fa2
res/drawable-tvdpi-v4/common_plus_signin_btn_text_light_normal.9.png 0x1148f987
res/drawable-tvdpi-v4/common_google_signin_btn_icon_light_focused.9.png 0x1148f987
res/drawable-hdpi-v4/abc_btn_check_to_on_mtrl_000.png 0xd03742f2
res/drawable-xhdpi-v4/ic_device_nfc.png 0x6ab55f49
res/drawable-xxhdpi-v4/abc_btn_switch_to_on_mtrl_00012.9.png 0xa809869a
res/drawable-xxxhdpi-v4/abc_ic_menu_moreoverflow_mtrl_alpha.png 0xb7cc364f
res/drawable-mdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.png 0xf51c3a20
res/drawable-mdpi-v4/abc_btn_check_to_on_mtrl_000.png 0xd152fae1
res/drawable/common_google_signin_btn_text_dark.xml 0xd7e65643
res/drawable-hdpi-v4/common_ic_googleplayservices.png 0x88b2a3b0
res/layout/select_dialog_singlechoice_material.xml 0xcdea3ddb
res/drawable-hdpi-v4/abc_ic_star_half_black_16dp.png 0xa97f155c
res/drawable-hdpi-v4/common_google_signin_btn_text_dark_pressed.9.png 0x1148f987
res/drawable-xxhdpi-v4/common_full_open_on_phone.png 0x88b2a3b0
res/layout/design_navigation_item_separator.xml 0x3ef5e21
res/drawable-tvdpi-v4/common_plus_signin_btn_text_dark_normal.9.png 0x1148f987
res/drawable-mdpi-v4/common_google_signin_btn_text_dark_pressed.9.png 0x1148f987
res/layout/abc_action_mode_close_item_material.xml 0x7858c6e4
res/drawable/design_snackbar_background.xml 0x5c0db54e
res/drawable-mdpi-v4/abc_list_focused_holo.9.png 0xb1ab9d03
res/drawable-tvdpi-v4/common_google_signin_btn_text_light_disabled.9.png 0x1148f987
META-INF/maven/net.glxn.qrgen/android/pom.properties 0x12f43026
res/drawable-mdpi-v4/abc_ic_menu_moreoverflow_mtrl_alpha.png 0x97ddfe41
res/drawable-tvdpi-v4/common_google_signin_btn_icon_dark_disabled.9.png 0x1148f987
assets/armeabi-v7a/redsocks 0x947511ce
res/drawable-xxhdpi-v4/ic_social_share.png 0xfce405ee
res/drawable-mdpi-v4/common_plus_signin_btn_icon_light_focused.9.png 0x1148f987
res/drawable-xhdpi-v4/common_google_signin_btn_icon_light_focused.9.png 0x1148f987
res/drawable-mdpi-v4/common_plus_signin_btn_icon_light_disabled.9.png 0x1148f987
res/drawable-xxxhdpi-v4/abc_ic_menu_paste_mtrl_am_alpha.png 0xa9f4da32
res/drawable-mdpi-v4/abc_btn_rating_star_off_mtrl_alpha.png 0x452502c2
res/drawable-xhdpi-v4/common_google_signin_btn_icon_dark_disabled.9.png 0x1148f987
res/drawable-xhdpi-v4/abc_scrubber_track_mtrl_alpha.9.png 0x1a186496
res/layout/abc_activity_chooser_view.xml 0xd7e65643
res/drawable-hdpi-v4/common_google_signin_btn_text_light_disabled.9.png 0x1148f987
res/drawable-xhdpi-v4/ic_content_create.png 0xa7c53fc4
res/drawable/abc_btn_default_mtrl_shape.xml 0x5c7d3a04
res/drawable-mdpi-v4/abc_btn_switch_to_on_mtrl_00001.9.png 0x4ff28e22
res/drawable-tvdpi-v4/common_plus_signin_btn_icon_light_disabled.9.png 0x1148f987
res/drawable-xhdpi-v4/ic_done.png 0x19579468
res/menu/profile_manager_menu.xml 0x6392a2dd
res/xml/pref_all.xml 0xded52de2
assets/fonts/Iceland.ttf 0xb389e84
res/drawable-xhdpi-v4/ic_content_add.png 0x88b2a3b0
res/drawable-xhdpi-v4/abc_btn_check_to_on_mtrl_000.png 0xcfba78ba
res/drawable-xxhdpi-v4/common_google_signin_btn_icon_light_disabled.9.png 0x1148f987
res/drawable-hdpi-v4/common_plus_signin_btn_icon_dark_focused.9.png 0x1148f987
res/drawable-hdpi-v4/abc_textfield_activated_mtrl_alpha.9.png 0x103aeb6a
res/drawable-xhdpi-v4/common_full_open_on_phone.png 0x88b2a3b0
res/layout/notification_template_big_media_narrow.xml 0xa963851d
res/drawable-xhdpi-v4/ic_image_camera_alt.png 0x59860b84
res/layout/design_navigation_item.xml 0x1ac1e47a
classes.dex 0x2778d30c
Run screenshot
VirSCAN

About VirSCAN | Privacy Policy | Contact us | Links | Help VirSCAN
中国反网络病毒联盟
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号