1, E' possibile CARICARE qualsiasi file, ma c'& un limite di 20 MB per file. 2,
VirSCAN supporta la decompressione Rar/Zip, ma deve essere minore di 20 file. 3, VirSCAN pu& eseguire la scansione dei file compressi con password 'infected' o 'virus'.
Portuguese Brazil
Русский
укра?нська
Nederlands
Espa?ol (Latin America)
Carico del server
Informazione file
Nome File :
(File not down)
Dimensione File : byte
Tipo file :application/zip
文件行为分析
Risultati dei scanner
Risultati dei scanner:<font color="#%Scanner(s)(0/32)ha trovato malware!
Tempo: <font color="#16-06-28 14:53:49 (CST)
Ver. Engine
Vers. Firma
Data Firma
Risultati dei scanner
AVL SDK 3.0
Trovato nulla
9.0.0.4324
9.0.0.4324
Trovato nulla
Trovato nulla
Trovato nulla
4.1.3.52192
Trovato nulla
Trovato nulla
bitdefender
Trovato nulla
Trovato nulla
5.0.2.3300
Trovato nulla
23.345, 23.345
Trovato nulla
6.5.1.5418
Trovato nulla
Trovato nulla
Trovato nulla
V1.32.31.0
Trovato nulla
Trovato nulla
Trovato nulla
Trovato nulla
Trovato nulla
Trovato nulla
Trovato nulla
9.500-1005
Trovato nulla
Trovato nulla
Trovato nulla
Trovato nulla
25.76.04.01
25.76.04.01
Trovato nulla
Trovato nulla
Trovato nulla
Trovato nulla
Trovato nulla
17.47.17308
1.0.2.2108
Trovato nulla
Trovato nulla
virusbuster
15.0.985.0
Trovato nulla
■Heuristic/Suspicious ■Exact
AVVISO: I risultati non sono precisi al 100% e può essere segnalato come un falso positivo da parte di alcuni scanners quando e se il malware è stato trovato. Si prega di giudicare questi risultati da soli.
Copia negli appunti
许可名称信息
android.permission.VIBRATE允许设备震动
android.permission.INTERNET连接网络（2G或3G）
android.permission.READ_PHONE_STATE读取电话状态
android.permission.ACCESS_WIFI_STATE读取wifi网络状态
android.permission.ACCESS_NETWORK_STATE读取网络状态（2G或3G）
android.permission.WRITE_EXTERNAL_STORAGE写外部存储器（如：SD卡）
android.permission.WRITE_SETTINGS读写系统设置项
android.permission.WAKE_LOCK手机屏幕关闭后后台进程仍运行
android.permission.GET_TASKS获取有关当前或最近运行的任务信息
android.permission.USE_CREDENTIALS获取认证令牌
android.permission.MANAGE_ACCOUNTS管理账户
android.permission.AUTHENTICATE_ACCOUNTS验证账户
android.permission.RECEIVE_BOOT_COMPLETED接收开机启动广播
android.permission.MOUNT_UNMOUNT_FILESYSTEMS挂载、反挂载外部文件系统
android.permission.SYSTEM_ALERT_WINDOW显示系统窗口
com.baidu.permission.SHARE
android.permission.READ_CONTACTS读取联系人信息
android.permission.WRITE_CONTACTS写入联系人信息
android.permission.READ_SMS读取短信
android.permission.WRITE_SMS写短信
android.permission.READ_CALL_LOG读取通话记录
android.permission.WRITE_CALL_LOG写入通话记录
android.permission.CHANGE_WIFI_STATE改变WIFI连接状态
android.permission.ACCESS_COARSE_LOCATION获取粗略的位置（通过wifi、基站）
android.permission.ACCESS_FINE_LOCATION获取精确的位置（通过GPS）
android.permission.ACCESS_MOCK_LOCATION获取模拟定位信息
android.permission.READ_LOGS读取系统日志
android.permission.CAMERA访问照相机设备
android.permission.DISABLE_KEYGUARD禁用键盘锁
android.permission.BROADCAST_STICKY发送持久广播
com.android.launcher.permission.INSTALL_SHORTCUT创建快捷方式
com.android.launcher.permission.UNINSTALL_SHORTCUT删除快捷方式
android.permission.SEND_SMS发送短信
android.permission.CALL_PHONE拨打电话
android.permission.SET_ACTIVITY_WATCHER设置Activity观察器
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.RECORD_AUDIO录音（使用AudioRecord）
android.hardware.sensor.accelerometer
android.permission.GET_ACCOUNTS访问账户列表
android.permission.CHANGE_NETWORK_STATE变更网络状态
android.permission.REORDER_TASKS系统任务排序
com.android.launcher.permission.READ_SETTINGS读取快捷方式信息
com.android.launcher.permission.WRITE_SETTINGS
android.permission.CHANGE_WIFI_MULTICAST_STATE变更WIFI多播状态
android.permission.BROADCAST_PACKAGE_REMOVED删除应用时广播
android.permission.READ_EXTERNAL_STORAGE读外部存储器（如：SD卡）
安全评分 :
包名:com.baidu.netdisk
最低运行环境:Android 2.3, 2.3.1, 2.3.2
版权:Android
行为描述:检测自身是否被调试
详情信息:N/A
行为描述:设置特殊文件夹属性
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
行为描述:设置消息钩子
详情信息:C:\Documents and Settings\Administrator\Local Settings\%temp%\.743838.exe_7zdump\cfgdll.dll
行为描述:获取TickCount值
详情信息:TickCount = 545937, SleepMilliseconds = 60000.
TickCount = 545984, SleepMilliseconds = 60000.
TickCount = 546015, SleepMilliseconds = 60000.
TickCount = 546031, SleepMilliseconds = 60000.
TickCount = 546062, SleepMilliseconds = 60000.
TickCount = 546078, SleepMilliseconds = 60000.
TickCount = 546093, SleepMilliseconds = 60000.
TickCount = 546109, SleepMilliseconds = 60000.
TickCount = 546125, SleepMilliseconds = 60000.
TickCount = 546140, SleepMilliseconds = 60000.
TickCount = 546156, SleepMilliseconds = 60000.
TickCount = 546171, SleepMilliseconds = 60000.
TickCount = 546218, SleepMilliseconds = 60000.
TickCount = 546406, SleepMilliseconds = 60000.
TickCount = 546437, SleepMilliseconds = 60000.
行为描述:创建本地线程
详情信息:C:\Documents and Settings\Administrator\Local Settings\%temp%\.717289.exe_7zdump\nokiss战士双暴本.exe
C:\Documents and Settings\Administrator\Local Settings\%temp%\.717644.exe_7zdump\nokiss战士双暴本.exe
C:\Documents and Settings\Administrator\Local Settings\%temp%\.717987.exe_7zdump\nokiss战士双暴本.exe
C:\Documents and Settings\Administrator\Local Settings\%temp%\.718330.exe_7zdump\nokiss战士双暴本.exe
C:\Documents and Settings\Administrator\Local Settings\%temp%\.718672.exe_7zdump\nokiss战士双暴本.exe
C:\Documents and Settings\Administrator\Local Settings\%temp%\.719013.exe_7zdump\nokiss战士双暴本.exe
C:\Documents and Settings\Administrator\Local Settings\%temp%\.719354.exe_7zdump\nokiss战士双暴本.exe
C:\Documents and Settings\Administrator\Local Settings\%temp%\.719694.exe_7zdump\nokiss战士双暴本.exe
C:\Documents and Settings\Administrator\Local Settings\%temp%\.720034.exe_7zdump\nokiss战士双暴本.exe
C:\Documents and Settings\Administrator\Local Settings\%temp%\.720380.exe_7zdump\nokiss战士双暴本.exe
C:\Documents and Settings\Administrator\Local Settings\%temp%\.720724.exe_7zdump\nokiss战士双暴本.exe
C:\Documents and Settings\Administrator\Local Settings\%temp%\.721067.exe_7zdump\nokiss战士双暴本.exe
C:\Documents and Settings\Administrator\Local Settings\%temp%\.721414.exe_7zdump\nokiss战士双暴本.exe
C:\Documents and Settings\Administrator\Local Settings\%temp%\.721758.exe_7zdump\nokiss战士双暴本.exe
C:\Documents and Settings\Administrator\Local Settings\%temp%\.722102.exe_7zdump\nokiss战士双暴本.exe
行为描述:进程退出
详情信息:N/A
行为描述:枚举进程
详情信息:N/A
行为描述:创建文件
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temp\4.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\5.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\6.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\7.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\8.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\9.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\plugin.zip
C:\Documents and Settings\Administrator\Local Settings\Temp\mymacro.zip
C:\Documents and Settings\Administrator\Local Settings\Temp\ad-mymacro9.xml
C:\Documents and Settings\Administrator\Local Settings\Temp\adcon\mm\tmpad.xml
C:\Documents and Settings\Administrator\Application Data\qmacro\qdisp.dll
C:\Documents and Settings\Administrator\Local Settings\%temp%\.683055.exe_7zdump\cfgdll.dll
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\wpad[1].dat
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\mmcount[1].aspx
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\liveupdate8[1].dat
行为描述:创建可执行文件
详情信息:C:\Documents and Settings\Administrator\Application Data\qmacro\qdisp.dll
C:\Documents and Settings\Administrator\Local Settings\%temp%\.702383.exe_7zdump\cfgdll.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\adcon\mm\liveupdate8.dat.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\ad-mymacro9.xml.tmp
行为描述:覆盖已有文件
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\navcancl[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\navcancl[2]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\ErrorPageTemplate[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6TLOMATB\errorPageStrings[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\ErrorPageTemplate[2]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\errorPageStrings[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6TLOMATB\httpErrorPagesScripts[2]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6TLOMATB\background_gradient[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\info_48[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6TLOMATB\bullet[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IUKHR8T2\httpErrorPagesScripts[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6TLOMATB\background_gradient[2]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6TLOMATB\info_48[1]
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\bullet[2]
行为描述:查找文件
详情信息:FileName = C:\Documents and Settings
FileName = C:\Documents and Settings\Administrator
FileName = C:\Documents and Settings\Administrator\Application Data
FileName = C:\Documents and Settings\Administrator\Local Settings
FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\.799072.exe_7zdump
FileName = C:\Documents and Settings\Administrator\Local Settings\%temp%\.799426.exe_7zdump\nokiss战士双暴本.exe
FileName = C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Connections\Pbk\*.pbk
FileName = C:\WINDOWS\system32\Ras\*.pbk
FileName = C:\Documents and Settings\Administrator\Application Data\Microsoft\Network\Connections\Pbk\*.pbk
FileName = C:\WINDOWS
FileName = C:\WINDOWS\system32
FileName = C:\WINDOWS\system32\urlmon.dll
FileName = C:\WINDOWS\system32\ieframe.dll
行为描述:删除文件
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temp\4.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\5.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\6.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\7.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\8.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\9.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\plugin.zip
C:\Documents and Settings\Administrator\Local Settings\Temp\mymacro.zip
C:\Documents and Settings\Administrator\Local Settings\Temp\adcon\mm\tmpad.xml
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\wpad[1].dat
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\mmcount[1].aspx
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\liveupdate8[1].dat
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\ad-mymacro8-p[1].htm
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\ad-mymacro[1].xml
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C1OS62RY\ad-mymacro8-b[1].htm
行为描述:重命名文件
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temp\adcon\mm\liveupdate8.dat.tmp ---& C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\adcon\mm\liveupdate8.dat
C:\Documents and Settings\Administrator\Local Settings\Temp\ad-mymacro9.xml.tmp ---& C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ad-mymacro9.xml
行为描述:设置特殊文件夹属性
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
行为描述:修改文件内容
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temp\4.tmp ---& Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\5.tmp ---& Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\6.tmp ---& Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\7.tmp ---& Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\8.tmp ---& Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\9.tmp ---& Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\plugin.zip ---& Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\mymacro.zip ---& Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\ad-mymacro9.xml ---& Offset = 0
C:\Documents and Settings\Administrator\Local Settings\Temp\adcon\mm\tmpad.xml ---& Offset = 0
C:\Documents and Settings\Administrator\Application Data\qmacro\qdisp.dll ---& Offset = 0
C:\Documents and Settings\Administrator\Application Data\qmacro\qdisp.dll ---& Offset = 4096
C:\Documents and Settings\Administrator\Application Data\qmacro\qdisp.dll ---& Offset = 8192
C:\Documents and Settings\Administrator\Application Data\qmacro\qdisp.dll ---& Offset = 12288
C:\Documents and Settings\Administrator\Application Data\qmacro\qdisp.dll ---& Offset = 16384
行为描述:联网打开网址
详情信息:InternetOpenUrlA: http://hi*************om/xjl/mmcount.aspx?mm=0003BFC0CEEACB653CF2A03FEEE9E2FA0B4DFFF5BF5&randcode=0F753AE741D5EFABDEE93F7E998ADEFBA253D5070
InternetOpenUrlA: http://&FAKE_SERVER_IP&:128/wpad.dat, hInternet = 0x00cc0014, Flags = 0x
InternetOpenUrlA: http://ad*************om/qmacro/ad-mymacro8-b.htm, hInternet = 0x00cc0008, Flags = 0x
行为描述:下载文件
详情信息:URLDownloadToFileW: /qmacro/v9/ad-mymacro.xml ---& C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ad-mymacro9.xml.tmp
URLDownloadToFileW: /qmacro/up_mymacro/liveupdate8.dat ---& C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\adcon\mm\liveupdate8.dat.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\adcon\mm\liveupdate8.dat.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\ad-mymacro9.xml.tmp
行为描述:连接指定站点
详情信息:InternetConnectA: ServerName = do***************om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x
InternetConnectA: ServerName = &FAKE_SERVER_IP&, PORT = 128, UserName = , Password = , hSession = 0x00cc0014, hConnect = 0x00cc0018, Flags = 0x
InternetConnectA: ServerName = hi*************om, PORT = 80, UserName = , Password = , hSession = 0x00cc0010, hConnect = 0x00cc0014, Flags = 0x
InternetConnectA: ServerName = ad*************om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0014, Flags = 0x
InternetConnectA: ServerName = ad*************om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc001c, Flags = 0x
InternetConnectA: ServerName = hi*************om, PORT = 80, UserName = , Password = , hSession = 0x00cc0010, hConnect = 0x00cc0008, Flags = 0x
InternetConnectA: ServerName = ad*************om, PORT = 80, UserName = , Password = , hSession = 0x00cc0008, hConnect = 0x00cc000c, Flags = 0x
InternetConnectA: ServerName = ad*************om, PORT = 80, UserName = , Password = , hSession = 0x00cc0004, hConnect = 0x00cc0008, Flags = 0x
InternetConnectA: ServerName = hi*************om, PORT = 80, UserName = , Password = , hSession = 0x00cc0010, hConnect = 0x00cc001c, Flags = 0x
行为描述:打开HTTP连接
详情信息:InternetOpenA: UserAgent: Mozilla/4.0 ( MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; KB974489), hSession = 0x00cc0004
InternetOpenA: UserAgent: nokiss战士双暴本, hSession = 0x00cc0010
InternetOpenA: UserAgent: Mozilla/4.0 ( MSIE 8.0; Win32; Trident/4.0), hSession = 0x00cc0014
InternetOpenA: UserAgent: nokiss战士双暴本, hSession = 0x00cc0008
行为描述:建立到一个指定的套接字连接
详情信息:URL: wpad, IP: &FAKE_SERVER_IP&:128, SOCKET = 0x
URL: hi*************om, IP: &FAKE_SERVER_IP&:80, SOCKET = 0x
URL: do***************om, IP: &FAKE_SERVER_IP&:80, SOCKET = 0x0000034c
URL: ad*************om, IP: &FAKE_SERVER_IP&:80, SOCKET = 0x
URL: ad*************om, IP: &FAKE_SERVER_IP&:80, SOCKET = 0x
URL: hi*************om, IP: &FAKE_SERVER_IP&:80, SOCKET = 0x
URL: ad*************om, IP: &FAKE_SERVER_IP&:80, SOCKET = 0x0000034c
URL: ad*************om, IP: &FAKE_SERVER_IP&:80, SOCKET = 0x0000032c
URL: hi*************om, IP: &FAKE_SERVER_IP&:80, SOCKET = 0x0000033c
URL: hi*************om, IP: &FAKE_SERVER_IP&:80, SOCKET = 0x0000029c
URL: hi*************om, IP: &FAKE_SERVER_IP&:80, SOCKET = 0x0000026c
URL: hi*************om, IP: &FAKE_SERVER_IP&:80, SOCKET = 0x
URL: ad*************om, IP: &FAKE_SERVER_IP&:80, SOCKET = 0x0000022c
URL: ad*************om, IP: &FAKE_SERVER_IP&:80, SOCKET = 0x
URL: hi*************om, IP: &FAKE_SERVER_IP&:80, SOCKET = 0x
行为描述:读取网络文件
详情信息:hFile = 0x00cc001c, BytesToRead =4010, BytesRead = 4010.
hFile = 0x00cc0018, BytesToRead =4096, BytesRead = 4096.
hFile = 0x00cc000c, BytesToRead =2048, BytesRead = 2048.
hFile = 0x00cc0020, BytesToRead =2048, BytesRead = 2048.
hFile = 0x00cc0014, BytesToRead =4096, BytesRead = 4096.
行为描述:发送HTTP包
详情信息:GET /wpad.dat HTTP/1.1
Accept: */*
User-Agent: Mozilla/4.0 ( MSIE 8.0; Win32; Trident/4.0)
Host: &FAKE_SERVER_IP&:128
6A6C2F6D6D636F756E742ED6D3D616EDE310D0A6E6F6BBDCABFCBABB1A9B1BE0D0A486F2E6F6D0D0A0D0A00
GET /qmacro/up_mymacro/liveupdate8.dat HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 ( MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; KB974489)
Host: do***************om
Connection: Keep-Alive
GET /qmacro/ad-mymacro8-p.htm HTTP/1.1
Accept: */*
Accept-Language: zh-cn
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 ( MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; KB974489)
Host: ad*************om
Connection: Keep-Alive
GET /qmacro/v9/ad-mymacro.xml HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 ( MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; KB974489)
Host: ad*************om
Connection: Keep-Alive
6DFDD622E0D0A6E6F6BBDCABFCBABB1A9B1BE0D0A486F2E6F6D0D0A0D0A00
GET /qmacro/ad-mymacro8-n.htm HTTP/1.1
Accept: */*
Accept-Language: zh-cn
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 ( MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; KB974489)
Host: ad*************om
Connection: Keep-Alive
行为描述:打开HTTP请求
详情信息:HttpOpenRequestA: do***************om:80/qmacro/up_mymacro/liveupdate8.dat, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x
HttpOpenRequestA: &FAKE_SERVER_IP&:128/wpad.dat, hConnect = 0x00cc0018, hRequest = 0x00cc001c, Verb: GET, Referer: , Flags = 0x
HttpOpenRequestA: hi*************om:80/xjl/mmcount.aspx?mm=0003bfc0ceeacb653cf2a03feee9e2fa0b4dfff5bf5&randcode=0f753ae741d5efabdee93f7e998adefba253d5070b00b
HttpOpenRequestA: ad*************om:80/qmacro/ad-mymacro8-p.htm, hConnect = 0x00cc0014, hRequest = 0x00cc0018, Verb: GET, Referer: , Flags = 0x
HttpOpenRequestA: ad*************om:80/qmacro/v9/ad-mymacro.xml, hConnect = 0x00cc001c, hRequest = 0x00cc0020, Verb: GET, Referer: , Flags = 0x
HttpOpenRequestA: ad*************om:80/qmacro/ad-mymacro8-b.htm, hConnect = 0x00cc000c, hRequest = 0x00cc0014, Verb: GET, Referer: , Flags = 0x
HttpOpenRequestA: ad*************om:80/qmacro/ad-mymacro8-n.htm, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x
HttpOpenRequestA: ad*************om:80/qmacro/ad-mymacro8-p.htm, hConnect = 0x00cc0008, hRequest = 0x00cc000c, Verb: GET, Referer: , Flags = 0x
HttpOpenRequestA: ad*************om:80/qmacro/ad-mymacro8-n.htm, hConnect = 0x00cc0014, hRequest = 0x00cc0018, Verb: GET, Referer: , Flags = 0x
行为描述:按名称获取主机地址
详情信息:GetAddrInfoW: computer
GetAddrInfoW: wpad
GetAddrInfoW: do***************om
GetAddrInfoW: hi*************om
GetAddrInfoW: ad*************om
注册表行为
行为描述:删除注册表键
详情信息:\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54F-11cf-A4B0-00AA004A55E8}\Implemented Categories\{F0B7A1A1-9847-11CF-8F20-4}
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54F-11cf-A4B0-00AA004A55E8}\Implemented Categories\{F0B7A1A2-9847-11CF-8F20-4}
\REGISTRY\MACHINE\SOFTWARE\Classes\VBScript\CLSID
\REGISTRY\MACHINE\SOFTWARE\Classes\VBScript\OLEScript
\REGISTRY\MACHINE\SOFTWARE\Classes\VBScript
\REGISTRY\MACHINE\SOFTWARE\Classes\VBS\CLSID
\REGISTRY\MACHINE\SOFTWARE\Classes\VBS\OLEScript
\REGISTRY\MACHINE\SOFTWARE\Classes\VBS
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54F-11cf-A4B0-00AA004A55E8}\ProgID
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54F-11cf-A4B0-00AA004A55E8}\OLEScript
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54F-11cf-A4B0-00AA004A55E8}\Implemented Categories
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54F-11cf-A4B0-00AA004A55E8}\InprocServer32
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54F-11cf-A4B0-00AA004A55E8}
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54F-11cf-A4B0-00AA004A55E8}\Implemented Categories\{0AEE2A92-BCBB-11D0-8C72-00C04FC2B085}
\REGISTRY\MACHINE\SOFTWARE\Classes\VBScript Author\CLSID
行为描述:修改注册表
详情信息:\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0E59F1D5-1FBE-11D0-8FF2-00A0D10038BC}\InprocServer32\
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0E59F1D5-1FBE-11D0-8FF2-00A0D10038BC}\ToolboxBitmap32\
\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{0E59F1D2-1FBE-11D0-8FF2-00A0D10038BC}\1.0\0\win32\
\REGISTRY\MACHINE\SOFTWARE\Classes\VBScript\
\REGISTRY\MACHINE\SOFTWARE\Classes\VBScript\CLSID\
\REGISTRY\MACHINE\SOFTWARE\Classes\VBS\
\REGISTRY\MACHINE\SOFTWARE\Classes\VBS\CLSID\
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54F-11cf-A4B0-00AA004A55E8}\
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54F-11cf-A4B0-00AA004A55E8}\ProgID\
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54F-11cf-A4B0-00AA004A55E8}\InprocServer32\
\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54F-11cf-A4B0-00AA004A55E8}\InprocServer32\ThreadingModel
\REGISTRY\MACHINE\SOFTWARE\Classes\VBScript Author\
\REGISTRY\MACHINE\SOFTWARE\Classes\VBScript Author\CLSID\
\REGISTRY\MACHINE\SOFTWARE\Classes\VBS Author\
\REGISTRY\MACHINE\SOFTWARE\Classes\VBS Author\CLSID\
行为描述:修改注册表_系统动态组件
详情信息:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{4fd-11d2-995d-00c04f98bbc9}\
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{4fd-11d2-995d-00c04f98bbc9}\Version
行为描述:删除注册表键值_IE连接设置
详情信息:\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer
\REGISTRY\USER\S-*\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL
行为描述:删除注册表键值
详情信息:\REGISTRY\MACHINE\SOFTWARE\Microsoft\ESENT\Process\nokiss战士双暴本\DEBUG\Trace Level
行为描述:检测自身是否被调试
详情信息:N/A
行为描述:创建互斥体
详情信息:CTF.LBES.MutexDefaultS-*
<part.MutexDefaultS-*
CTF.Asm.MutexDefaultS-*
CTF.Layouts.MutexDefaultS-*
CTF.TMD.MutexDefaultS-*
CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-*
Local\ZonesCounterMutex
Local\ZoneAttributeCacheCounterMutex
Local\ZonesCacheCounterMutex
Local\ZonesLockedCacheCounterMutex
MSCTF.Shared.MUTEX.ELH
CritOpMutex
Local\!PrivacIE!SharedMemory!Mutex
行为描述:创建事件对象
详情信息:EventName = DINPUTWINMM
EventName = Global\userenv:
User Profile setup event
EventName = B7178
EventName = B818
EventName = B531
EventName = B7423
EventName = B2516
EventName = B855
EventName = Global\crypt32LogoffEvent
EventName = KERNEL32.DLL
EventName = MSCTF.SendReceiveConection.Event.ELH.IC
EventName = MSCTF.SendReceiveConection.Event.MJH.IC
EventName = CTF.ThreadMarshalInterfaceEvent..00012
EventName = CTF.ThreadMIConnectionEvent..00012
EventName = MSCTF.SendReceive.Event.ELH.IKCB
行为描述:查找指定窗口
详情信息:NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,]
NtUserFindWindowEx: [Class,Window] = [MS_AutodialMonitor,]
NtUserFindWindowEx: [Class,Window] = [MS_WebCheckMonitor,]
NtUserFindWindowEx: [Class,Window] = [CicLoaderWndClass,]
NtUserFindWindowEx: [Class,Window] = [OleMainThreadWndClass,]
行为描述:窗口信息
详情信息:Pid = 1880, Hwnd=0x202d4, Text = TAB定位, ClassName = Static.
Pid = 1880, Hwnd=0x202d6, Text = 用来给背景位图定位, ClassName = Static.
Pid = 1880, Hwnd=0x702c0, Text = 软件说明页, ClassName = #32770.
Pid = 1880, Hwnd=0x502ce, Text = Static, ClassName = Button(GroupBox).
Pid = 1880, Hwnd=0x302b6, Text = 双暴本为B模式要求网速快电脑配置好百分90出连, ClassName = Edit.
Pid = 1880, Hwnd=0x10386, Text = 脚本的属性页, ClassName = #32770.
Pid = 1880, Hwnd=0x10388, Text = 启动F5, ClassName = Button.
Pid = 1880, Hwnd=0x1038a, Text = 暂停/继续&无&, ClassName = Button.
Pid = 1880, Hwnd=0x1038c, Text = 中止F12, ClassName = Button.
Pid = 1880, Hwnd=0x1038e, Text = 修改热键, ClassName = Button.
Pid = 1880, Hwnd=0x10390, Text = 保存设置, ClassName = Button.
Pid = 1880, Hwnd=0x10392, Text = 还原设置, ClassName = Button.
Pid = 1880, Hwnd=0x10394, Text = List1, ClassName = SysListView32.
Pid = 1880, Hwnd=0x1039e, Text = 启动F5 暂停/继续&无& 中止F12 全部中止F12, ClassName = Static.
Pid = 1880, Hwnd=0x1036a, Text = 脚本的属性页, ClassName = #32770.
行为描述:获取系统权限
详情信息:SE_LOAD_DRIVER_PRIVILEGE
行为描述:获取TickCount值
详情信息:TickCount = 545937, SleepMilliseconds = 60000.
TickCount = 545984, SleepMilliseconds = 60000.
TickCount = 546015, SleepMilliseconds = 60000.
TickCount = 546031, SleepMilliseconds = 60000.
TickCount = 546062, SleepMilliseconds = 60000.
TickCount = 546078, SleepMilliseconds = 60000.
TickCount = 546093, SleepMilliseconds = 60000.
TickCount = 546109, SleepMilliseconds = 60000.
TickCount = 546125, SleepMilliseconds = 60000.
TickCount = 546140, SleepMilliseconds = 60000.
TickCount = 546156, SleepMilliseconds = 60000.
TickCount = 546171, SleepMilliseconds = 60000.
TickCount = 546218, SleepMilliseconds = 60000.
TickCount = 546406, SleepMilliseconds = 60000.
TickCount = 546437, SleepMilliseconds = 60000.
行为描述:获取光标位置
详情信息:CursorPos = (106,18467), SleepMilliseconds = 60000.
CursorPos = (106,18467), SleepMilliseconds = 50.
CursorPos = (), SleepMilliseconds = 60000.
CursorPos = (), SleepMilliseconds = 900000.
CursorPos = (), SleepMilliseconds = 900000.
CursorPos = (), SleepMilliseconds = 900000.
CursorPos = (), SleepMilliseconds = 900000.
CursorPos = (), SleepMilliseconds = 900000.
CursorPos = (), SleepMilliseconds = 900000.
CursorPos = (), SleepMilliseconds = 900000.
CursorPos = (), SleepMilliseconds = 900000.
CursorPos = (), SleepMilliseconds = 900000.
CursorPos = (), SleepMilliseconds = 900000.
CursorPos = (357,12382), SleepMilliseconds = 900000.
CursorPos = (), SleepMilliseconds = 900000.
行为描述:枚举窗口
详情信息:N/A
行为描述:可执行文件签名信息
详情信息:C:\Documents and Settings\Administrator\Application Data\qmacro\qdisp.dll(签名验证: 通过)
C:\Documents and Settings\Administrator\Local Settings\%temp%\.744818.exe_7zdump\cfgdll.dll(签名验证: 通过)
C:\Documents and Settings\Administrator\Local Settings\Temp\adcon\mm\liveupdate8.dat.tmp(签名验证: 未通过)
C:\Documents and Settings\Administrator\Local Settings\Temp\ad-mymacro9.xml.tmp(签名验证: 未通过)
行为描述:调用Sleep函数
详情信息:[1]: MilliSeconds = 60000.
[2]: MilliSeconds = 900000.
[3]: MilliSeconds = 900000.
[4]: MilliSeconds = 60000.
[5]: MilliSeconds = 100.
[6]: MilliSeconds = 100.
[7]: MilliSeconds = 60000.
[8]: MilliSeconds = 900000.
[9]: MilliSeconds = 900000.
[10]: MilliSeconds = 900000.
行为描述:隐藏指定窗口
详情信息:[Window,Class] = [,Shell Embedding]
[Window,Class] = [Static,Button]
[Window,Class] = [确定,Button]
[Window,Class] = [取消,Button]
[Window,Class] = [应用(&A),Button]
[Window,Class] = [帮助,Button]
[Window,Class] = [,tooltips_class32]
[Window,Class] = [软件说明页,#32770]
[Window,Class] = [关于按键小精灵,#32770]
[Window,Class] = [设置,#32770]
[Window,Class] = [脚本的属性页,#32770]
[Window,Class] = [,SysLink]
[Window,Class] = [,Static]
[Window,Class] = [文件大小未知,Static]
[Window,Class] = [打开此类文件前总是询问(&W),Button]
行为描述:可执行文件MD5
详情信息:C:\Documents and Settings\Administrator\Application Data\qmacro\qdisp.dll ---& a9c59ca6b2b923b6ab5e48
C:\Documents and Settings\Administrator\Local Settings\%temp%\.742845.exe_7zdump\cfgdll.dll ---& cae466bc7eed9b385c7ab
C:\Documents and Settings\Administrator\Local Settings\Temp\adcon\mm\liveupdate8.dat.tmp ---& fe1d0eeee9b28eece31786c
C:\Documents and Settings\Administrator\Local Settings\Temp\ad-mymacro9.xml.tmp ---& fe1d0eeee9b28eece31786c
行为描述:加载新释放的文件
详情信息:Image: C:\Documents and Settings\Administrator\Application Data\qmacro\qdisp.dll.
Image: C:\Documents and Settings\Administrator\Local Settings\%temp%\.783071.exe_7zdump\cfgdll.dll.
Image: C:\Documents and Settings\Administrator\Local Settings\%temp%\.783412.exe_7zdump\cfgdll.dll.
Activities
活动名类型
com.baidu.netdisk.ui.Navigateandroid.intent.action.MAIN
com.baidu.netdisk.ui.Navigatecom.baidu.netdisk.wap.intent.action.DOWNLOAD
com.baidu.netdisk.ui.Navigatecom.baidu.netdisk.wap.intent.action.SAVE
com.baidu.netdisk.ui.Navigatecom.baidu.netdisk.wap.intent.action.PLAY
com.baidu.netdisk.ui.Navigateandroid.intent.action.VIEW
com.baidu.netdisk.ui.Navigateandroid.intent.category.LAUNCHER
com.baidu.netdisk.ui.Navigateandroid.intent.category.DEFAULT
com.baidu.netdisk.ui.Navigateandroid.intent.category.BROWSABLE
com.baidu.netdisk.ui.ShortCutActivityandroid.intent.action.MAIN
com.baidu.netdisk.ui.ShortCutActivityandroid.intent.category.DEFAULT
com.baidu.netdisk.ui.preview.video.VideoPlayerActivitycom.baidu.netdisk.plugin.videoplayer.ACTION_RUN
com.baidu.netdisk.ui.preview.video.DLNAControlerActivitycom.baidu.netdisk.plugin.videoplayer.ACTION_RUN
com.baidu.netdisk.ui.ContactsPickActivityandroid.intent.action.OPEN_SHARE
com.baidu.netdisk.ui.ContactsPickActivityandroid.intent.category.DEFAULT
com.baidu.netdisk.pim.smsmms.ui.SmsmmsBackupMainandroid.intent.action.SEND
com.baidu.netdisk.pim.smsmms.ui.SmsmmsBackupMainandroid.intent.action.SENDTO
com.baidu.netdisk.pim.smsmms.ui.SmsmmsBackupMainandroid.intent.category.DEFAULT
com.baidu.netdisk.pim.smsmms.ui.SmsmmsBackupMainandroid.intent.category.BROWSABLE
com.baidu.netdisk.ui.BTDownloadDialogActivityandroid.intent.action.VIEW
com.baidu.netdisk.ui.BTDownloadDialogActivityandroid.intent.category.DEFAULT
com.baidu.netdisk.ui.ReceiveShareFileActivityandroid.intent.action.SEND
com.baidu.netdisk.ui.ReceiveShareFileActivityandroid.intent.action.SEND_MULTIPLE
com.baidu.netdisk.ui.ReceiveShareFileActivityandroid.intent.category.DEFAULT
com.baidu.netdisk.p2pshare.ui.ReceiverP2PShareFileActivityandroid.intent.action.SEND
com.baidu.netdisk.p2pshare.ui.ReceiverP2PShareFileActivityandroid.intent.action.SEND_MULTIPLE
com.baidu.netdisk.p2pshare.ui.ReceiverP2PShareFileActivityandroid.intent.category.DEFAULT
com.baidu.netdisk.ui.cloudfile.NetdiskFilelistActivityandroid.intent.action.GET_CONTENT
com.baidu.netdisk.ui.cloudfile.NetdiskFilelistActivityandroid.intent.category.DEFAULT
com.baidu.netdisk.ui.view.Wap2NetdiskActivityViewcom.baidu.netdisk.wap.intent.action.VIEW
com.baidu.netdisk.ui.view.Wap2NetdiskActivityViewandroid.intent.category.DEFAULT
com.unionpay.uppay.PayActivityandroid.intent.action.Run
com.unionpay.uppay.PayActivityandroid.intent.category.DEFAULT
com.baidu.netdisk.ui.launch.AuthenticatorActivitycom.baidu.netdisk.action.BACKUP
com.baidu.netdisk.ui.launch.AuthenticatorActivitycom.baidu.netdisk.action.SYNC
com.baidu.netdisk.ui.launch.AuthenticatorActivitycom.baidu.netdisk.action.VIEW_BACKUP_CENTER
com.baidu.netdisk.ui.launch.AuthenticatorActivitycom.baidu.netdisk.action.VIEW_MAIN
com.baidu.netdisk.ui.launch.AuthenticatorActivityandroid.intent.category.DEFAULT
com.baidu.netdisk.ui.open.AuthenticatorActivitycom.baidu.netdisk.action.PREVIEW
com.baidu.netdisk.ui.open.AuthenticatorActivitycom.baidu.netdisk.action.QUERY_PREVIEW
com.baidu.netdisk.ui.open.AuthenticatorActivitycom.baidu.netdisk.action.DOWNLOAD
com.baidu.netdisk.ui.open.AuthenticatorActivitycom.baidu.netdisk.action.QUERY_DOWNLOAD
com.baidu.netdisk.ui.open.AuthenticatorActivitycom.baidu.netdisk.action.UPLOAD
com.baidu.netdisk.ui.open.AuthenticatorActivitycom.baidu.netdisk.action.QUERY_UPLOAD
com.baidu.netdisk.ui.open.AuthenticatorActivitycom.baidu.netdisk.action.GET_DLINK
com.baidu.netdisk.ui.open.AuthenticatorActivityandroid.intent.category.DEFAULT
函数名称信息
ContentR->query读取联系人、短信等数据库
WifiM->setWifiEnabled变更WIFI状态
ContentR->delete删除短信、联系人
java/net/URL;->openConnection连接URL
java/net/HttpURLC->connect连接URL
HttpC->execute请求远程服务器
TelephonyM->getDeviceId搜集用户手机IMEI码、电话号码、系统版本号等信息
TelephonyM->getLine1Number获取手机号
android/app/NotificationM->notify信息通知栏
getRuntime获取命令行环境
java/lang/R->exec执行字符串命令
LocationM->getLastKnownLocation获取地址位置
TelephonyM->getSimSerialNumber获取SIM序列号
C->open开启相机
SmsM->sendTextMessage发送普通短信
com.baidu.netdisk.wxapi.AppRegister
com.baidu.sapi2.share.ShareReceiver
com.baidu.netdisk.push.NetdiskPushMessageReceiver
com.baidu.netdisk.galaxy.GalaxyReceiver
com.baidu.android.pushservice.PushServiceReceiver屏幕解锁启动服务
com.baidu.android.pushservice.RegistrationReceiver应用卸载时启动服务
com.baidu.netdisk.kernel.device.monitor.battery.BatteryMonitor
com.baidu.netdisk.util.AlarmReceiver
com.baidu.netdisk.backup.pim.PimAlarmReceiver
com.baidu.netdisk.module.toolbox.AppInfoBroadcatReceiver应用卸载时启动服务
com.baidu.devicesecurity.receiver.DsMainReceiver网络连接改变时启动服务
com.baidu.devicesecurity.receiver.DSDeviceAdminReceiver屏幕解锁启动服务
com.baidu.cyberplayer.dlna.NetworkChangeReceiverWIFI状态改变时启动服务
com.baidu.netdisk.p2pshare.PhoneStateReceiver
com.baidu.netdisk.cloudp2p.matchcontacts.MatchContactsAlarmReceiver
com.baidu.netdisk.smsmms.broadcast.AccountChangeListener
com.baidu.netdisk.push.AccountChangeListener
com.baidu.netdisk.device.phoneforget.broadcast.AccountChangeListener
com.baidu.netdisk.transferlist.AccountChangeListener
com.baidu.netdisk.util.imageloader.AccountChangeListener
com.baidu.netdisk.calllog.broadcast.AccountChangeListener
com.baidu.netdisk.filesystem.AccountChangeListener
com.baidu.netdisk.cloudp2p.broadcast.AccountChangeListener
com.baidu.netdisk.pim.AccountChangeListener
com.baidu.netdisk.statistics.AccountChangeListener
com.baidu.netdisk.ui.advertise.manager.AccountChangeListener
com.baidu.netdisk.backup.AccountChangeListener
com.baidu.netdisk.device.devicepush.AccountChangeListener
com.baidu.netdisk.cloudimage.broadcast.AccountChangeListener
com.baidu.netdisk.p2pshare.broadcast.AccountChangeListener
com.baidu.pim.smsmms.receiver.SmsReceiver
com.baidu.pim.smsmms.receiver.MmsReceiver
com.baidu.netdisk.cloudfile.utils.AlarmDiffReceiver
com.baidu.netdisk.util.newtips.NewTipsReceiver
com.baidu百度
许可名称信息
android.permission.VIBRATE允许设备震动
android.permission.INTERNET连接网络（2G或3G）
android.permission.READ_PHONE_STATE读取电话状态
android.permission.ACCESS_WIFI_STATE读取wifi网络状态
android.permission.ACCESS_NETWORK_STATE读取网络状态（2G或3G）
android.permission.WRITE_EXTERNAL_STORAGE写外部存储器（如：SD卡）
android.permission.WRITE_SETTINGS读写系统设置项
android.permission.WAKE_LOCK手机屏幕关闭后后台进程仍运行
android.permission.GET_TASKS获取有关当前或最近运行的任务信息
android.permission.USE_CREDENTIALS获取认证令牌
android.permission.MANAGE_ACCOUNTS管理账户
android.permission.AUTHENTICATE_ACCOUNTS验证账户
android.permission.RECEIVE_BOOT_COMPLETED接收开机启动广播
android.permission.MOUNT_UNMOUNT_FILESYSTEMS挂载、反挂载外部文件系统
android.permission.SYSTEM_ALERT_WINDOW显示系统窗口
com.baidu.permission.SHARE
android.permission.READ_CONTACTS读取联系人信息
android.permission.WRITE_CONTACTS写入联系人信息
android.permission.READ_SMS读取短信
android.permission.WRITE_SMS写短信
android.permission.READ_CALL_LOG读取通话记录
android.permission.WRITE_CALL_LOG写入通话记录
android.permission.CHANGE_WIFI_STATE改变WIFI连接状态
android.permission.ACCESS_COARSE_LOCATION获取粗略的位置（通过wifi、基站）
android.permission.ACCESS_FINE_LOCATION获取精确的位置（通过GPS）
android.permission.ACCESS_MOCK_LOCATION获取模拟定位信息
android.permission.READ_LOGS读取系统日志
android.permission.CAMERA访问照相机设备
android.permission.DISABLE_KEYGUARD禁用键盘锁
android.permission.BROADCAST_STICKY发送持久广播
com.android.launcher.permission.INSTALL_SHORTCUT创建快捷方式
com.android.launcher.permission.UNINSTALL_SHORTCUT删除快捷方式
android.permission.SEND_SMS发送短信
android.permission.CALL_PHONE拨打电话
android.permission.SET_ACTIVITY_WATCHER设置Activity观察器
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.RECORD_AUDIO录音（使用AudioRecord）
android.hardware.sensor.accelerometer
android.permission.GET_ACCOUNTS访问账户列表
android.permission.CHANGE_NETWORK_STATE变更网络状态
android.permission.REORDER_TASKS系统任务排序
com.android.launcher.permission.READ_SETTINGS读取快捷方式信息
com.android.launcher.permission.WRITE_SETTINGS
android.permission.CHANGE_WIFI_MULTICAST_STATE变更WIFI多播状态
android.permission.BROADCAST_PACKAGE_REMOVED删除应用时广播
android.permission.READ_EXTERNAL_STORAGE读外部存储器（如：SD卡）
com.baidu.location.f
com.baidu.sapi2.share.ShareService
com.baidu.netdisk.service.NetdiskService
com.baidu.netdisk.service.NetdiskService
com.baidu.android.pushservice.PushService
com.baidu.mandService
com.baidu.pim.smsmms.receiver.HeadlessSmsSendService
com.baidu.cyberplayer.dlna.NetworkDetector
com.baidu.netdisk.backup.BackupService
com.baidu.netdisk.localfile.scanner.LocalFileScannerService
com.baidu.netdisk.cloudimage.service.CloudImageService
com.baidu.netdisk.backup.pim.calllog.service.CallLogBackupService
com.baidu.netdisk.device.devicepush.service.DeviceService
com.baidu.netdisk.open.service.OpenService
com.baidu.netdisk.share.personalpage.service.PersonalPageService
com.baidu.netdisk.provider.FileSystemProvider
com.baidu.netdisk.advertise.provider.AdvertiseProvider
com.baidu.pcs.BaiduAccountProvider
com.baidu.netdisk.account.storage.AccountProvider
com.baidu.netdisk.share.storage.db.OfflineResourcesProvider
com.baidu.netdisk.backup.pim.calllog.provider.CallLogProvider
com.baidu.netdisk.p2pshare.provider.P2PShareProvider
com.baidu.netdisk.cloudp2p.provider.CloudP2PProvider
com.baidu.netdisk.viptips.provider.VipProvider
com.baidu.netdisk.backup.pim.provider.PimProvider
com.baidu.netdisk.open.storage.OpenProvider
com.baidu.netdisk.preview.apprecommend.storage.db.AppRecommendProvider
com.baidu.netdisk.cloudimage.storage.db.CloudImageProvider
com.baidu.netdisk.share.personalpage.storage.db.PersonalPageProvider
com.baidu.netdisk.strengthenapp.storage.StrengthenAppProvider
com.baidu.netdisk.backup.photo.provider.PhotoAlbumBackupProvider
com.baidu.netdisk.backup.video.provider.VideoAlbumBackupProvider
com.baidu.netdisk.backup.directory.provider.DirectoryBackupProvider
classes2.dex
0x9cf3933f
classes.dex
resources.arsc
0x755bb541
AndroidManifest.xml
0x70d7d2bc
assets/StyleSheet/images/07.png
0x6fd2c6ee
assets/StyleSheet/PayResult.css
0x63f61433
assets/WVSuperCache//resource/mobile/v2_1/conf/cashier_mob_min.html
0x2fe46096
assets/WVSuperCache//resource/mobile/v2_1/conf/config.js
0x93913a08
assets/WVSuperCache//resource/mobile/v2_1/cashier_mob.html
0x2fe46096
assets/cfg/a/ResPack.cfg
0xb87098dd
assets/cfg/a/mapstyle.sty
0x7b25c2ef
assets/cfg/a/satellitestyle.sty
0xea314336
assets/cfg/a/trafficstyle.sty
0xdac5f9ad
assets/cfg/h/DVDirectory.cfg
0xa57b0f21
assets/cfg/h/DVHotMap.cfg
0x2aad1b46
assets/cfg/h/DVHotcity.cfg
0x5ccac71b
assets/cfg/h/DVVersion.cfg
0x6d57bd5e
assets/cfg/l/DVDirectory.cfg
0x6de8b254
assets/cfg/l/DVHotMap.cfg
0x9bebb17c
assets/cfg/l/DVHotcity.cfg
0x74f8de31
assets/cfg/l/DVVersion.cfg
0x6d57bd5e
assets/place/arrow.png
0x4e2f81f5
assets/place/iconphone.png
0xbf359880
assets/place/star_gray.png
0xcd11573a
assets/place/star_light.png
0xde8f4927
assets/sapi_theme/btn_back.png
0x1b085341
assets/sapi_theme/logo.png
0xf63e2d70
assets/sapi_theme/style.css
0x6dca8ad0
assets//passport/login.html
0x931b12ac
assets/CMRequire.dat
0x83035f9d
assets/Icon_bus_station.png
0x84ccde13
assets/Icon_end.png
0xa007a87d
assets/Icon_line_node.png
0x6503be71
assets/Icon_mark1.png
0x7e46dd9d
assets/Icon_mark10.png
0x67409be5
assets/Icon_mark2.png
0x4cce7c46
assets/Icon_mark3.png
assets/Icon_mark4.png
0xdf346bc3
assets/Icon_mark5.png
0x35c5c139
assets/Icon_mark6.png
0xcb5b42cf
assets/Icon_mark7.png
0xee6aa423
assets/Icon_mark8.png
0x9833a43b
assets/Icon_mark9.png
0x73cc757f
assets/Icon_start.png
0x4166ff90
assets/Icon_subway_station.png
0x3c460c1b
assets/Icon_walk_route.png
0xaf233846
assets/VerDatset.dat
0xe5a60edf
assets/about.html
0x143a7b44
assets/channel
0xd1768009
assets/config_file.txt
0x38a6efca
assets/icon_scale.9.png
0x41b95abd
assets/logo_h.png
0xcfe13e69
assets/logo_l.png
0xd9bd90a4
assets/open_sdk_file.dat
0x6486cd84
assets/sapi_cert.cer
0x530a23fc
assets/service.cfg
0x7d1582ef
com/baidu/common/pim_tnconfig.ini
0xb427a317
com/baidu/commoncontact/pim_tnconfig.ini
0xb427a317
com/baidu/devicesecurity/util/channel.ini
0xb427a317
com/baidu/devicesecurity/util/config.ini
0xd0fcd39b
com/robotium/solo/RobotiumWeb.js
0xa02ad70f
lib/armeabi/libBDPrecreate_V1_1.so
0x3b0c0da5
lib/armeabi/libBDRC4_V1_1.so
0xa83c40e8
lib/armeabi/libBaiduMapSDK_v3_2_0_15.so
lib/armeabi/libbd_wsp_v1_0.so
0x49844ac5
lib/armeabi/libbdcvf.so
0x6eaa8e2d
lib/armeabi/libbdpush_V2_4.so
0x8d228c3b
lib/armeabi/libcrash_analysis.so
0xaa8b2f6d
lib/armeabi/libentryexstd.so
0xe5c2fc3f
lib/armeabi/libjni-pinyin.so
0xcd50c0a1
lib/armeabi/liblocSDK5.so
0xe4e7705e
org/apache/http/entity/mime/version.properties
0x366d4632
res/anim/alpha_03_10.xml
0x5117c47d
res/anim/alpha_10_00.xml
0xdcfbf7e2
res/anim/anim_feed_op_button.xml
0xdf7b3700
res/anim/anim_hint.xml
res/anim/anim_stay_tips.xml
0x921f1c4d
res/anim/anim_tips.xml
0x87233bef
res/anim/anticlockwise_rotate_animation.xml
0x9d2b88e0
res/anim/appear_prompt.xml
0x9e84ce30
res/anim/bottom_bar_hide.xml
0x58ca89cc
res/anim/bottom_bar_show.xml
0x7132bdaa
res/anim/clockwise_rotate_animation.xml
0x1e6daf93
res/anim/cloud_unzipping.xml
0xcd4f37f7
res/anim/cloudp2p_share_guide_anim.xml
0x1204fce0
res/anim/cycle.xml
res/anim/device_scale_in.xml
0x9fc53662
res/anim/device_scale_out.xml
0xaae6bf18
res/anim/ebpay_slide_from_left.xml
res/anim/ebpay_slide_from_right.xml
0x4039eb25
res/anim/ebpay_slide_to_left.xml
0x1797668e
res/anim/ebpay_slide_to_right.xml
0xda052d14
res/anim/empty_loading_anim.xml
0x9e4612f2
res/anim/empty_loading_animator.xml
0x8ea72ad7
res/anim/fade_in.xml
0x48c50b09
res/anim/fade_out.xml
0xa34a9db8
res/anim/first_guide_cloud_anim.xml
0x6a4614a9
res/anim/first_guide_filebig_anim.xml
res/anim/first_guide_filesmall_anim.xml
0xd3a21dce
res/anim/first_guide_music_anim.xml
0x77a921bd
res/anim/first_guide_people_anim.xml
0x221f0803
res/anim/first_guide_phone_anim.xml
0xfd294f4d
res/anim/first_guide_picture_anim.xml
res/anim/first_guide_rotate_arrow_anim.xml
0xf94acba3
res/anim/first_guide_smsbackup_anim.xml
0x5bcc541f
res/anim/first_guide_stars_anim.xml
res/anim/flash_screen_alpha.xml
0xa1d69592
res/anim/in_from_bottom.xml
0xd2a1740e
res/anim/in_from_right.xml
0x7a5d5e51
res/anim/in_from_top.xml
0xf0960aa2
res/anim/out_from_top.xml
0xc39fe21f
res/anim/out_to_bottom.xml
0x8242498a
res/anim/out_to_left.xml
0x2df3d3fa
res/anim/p2pshare_connect_rotate.xml
0xbc411d46
res/anim/p2pshare_dataline_list_item_anim.xml
0xfab42fce
res/anim/popup_menu_disappear.xml
res/anim/push_bottom_in.xml
0x828c0dad
res/anim/push_bottom_out.xml
res/anim/push_left_in.xml
0x8cba4ef5
res/anim/push_left_in_long_during.xml
0xa6dec7d7
res/anim/push_left_out.xml
0x39940df5
res/anim/push_right_in.xml
0xe91c43fa
res/anim/push_top_in.xml
0xf0960aa2
res/anim/push_top_out.xml
res/anim/second_guide_music_anim.xml
0x1e278b56
res/anim/second_guide_picture_anim.xml
0xf14acbcc
res/anim/second_guide_rope_anim.xml
res/anim/shake.xml
0x4a5ae361
res/anim/slide_from_down_to_top.xml
0xbd7a96e0
res/anim/slide_from_left_to_right.xml
0xaea2aa1a
res/anim/slide_from_right_to_left.xml
0xd52b5aed
res/anim/slide_from_top_to_down.xml
res/anim/third_guide_greenhead_anim.xml
0xd143a5b6
res/anim/third_guide_hand_anim.xml
0x2b321057
res/anim/third_guide_line_anim.xml
0x16aaab7d
res/anim/third_guide_redhead_anim.xml
0x6e87ff8f
res/anim/timeline_guide_circle_anim.xml
0xab071ac9
res/anim/timeline_guide_slide_anim.xml
0x65e4fbc7
res/anim/wallet_base_dismiss_dialog_anim.xml
0x68ce89e6
res/anim/wallet_base_rotate_down.xml
0x9f3da07e
res/anim/wallet_base_rotate_up.xml
0x6a793b41
res/anim/wallet_base_safekeyboard_slide_from_down.xml
0xe009e2dc
res/anim/wallet_base_safekeyboard_slide_to_down.xml
0x3ebf4181
res/anim/wallet_base_show_dialog_anim.xml
0xc28267d9
res/anim/wallet_base_slide_from_left.xml
res/anim/wallet_base_slide_from_right.xml
0x4039eb25
res/anim/wallet_base_slide_to_left.xml
0x1797668e
res/anim/wallet_base_slide_to_right.xml
0xda052d14
res/anim/wallet_nfc_rotate_anticlock.xml
0xf3cc2913
res/anim/wallet_nfc_rotate_clock.xml
0x5667c0eb
res/anim/wave.xml
0xf70f95b6
res/anim/yi_popup_menu_enter.xml
res/anim/yi_popup_menu_exit.xml
0x67b78902
res/anim/yi_popup_submenu_enter.xml
0xed5fffab
res/anim/yi_popup_submenu_exit.xml
0x67b78902
res/color/black_to_gray.xml
0x978d6b56
res/color/black_to_gray_for_selection.xml
0x598778af
res/color/blue_gray_to_gray.xml
0x23ba0bec
res/color/wallet_base_click_text_color.xml
0x9c08f79a
res/color/wallet_base_dialog_btntext_color_selector.xml
0x60895fd6
res/color/wallet_lightapp_title_btntext_color_selector.xml
0x7e124038
res/color/wallet_pwdfree_faces_text_color.xml
0x51482b85
res/color/white_to_semitransparent.xml
res/color/yi_btn_default_1.xml
0xcbbef743
res/color/yi_edittext.xml
0xa9494d83
res/drawable/add_follow_layout_selector.xml
0xb1904fc2
res/drawable/addman_selector.xml
0xafbb5a05
res/drawable/appswitch_btn_checkbox.xml
0x660ecde3
res/drawable/appswitch_btn_radio.xml
res/drawable/background_button_light_gray_selector.xml
res/drawable/background_button_white_with_gray_border.xml
0x688ecca2
res/drawable/background_common_setting_item_botom.xml
0x8b59d3c1
res/drawable/background_common_setting_item_single.xml
0xb6a6deb2
res/drawable/background_feed_card_selector.xml
0xcab22f1d
res/drawable/background_find_phone_info.xml
res/drawable/background_settings_sub_head.xml
0x53a43c69
res/drawable/background_transparent_with_gray_line.xml
0xe23639f5
res/drawable/bd_wallet_pwd_item_selector.xml
res/drawable/bd_wallet_scancode_refresh.xml
res/drawable/bd_wallet_single_item_selector.xml
0x1f29c3c5
res/drawable/black_disable_reverse_drawable.xml
0x9f85e8da
res/drawable/black_white_reverse_drawable.xml
res/drawable/blue_black_reverse_drawable.xml
0x7b5007aa
res/drawable/blue_gray_reverse_drawable.xml
0x99cc5136
res/drawable/blue_tabbargray_reverse_drawable.xml
0x6157560a
res/drawable/blue_white_reverse_drawable.xml
0x84a40bdb
res/drawable/btn_advertise_close_selector.xml
0x58b5402f
res/drawable/btn_advertise_pengyouquan_selector.xml
0x19b5aff3
res/drawable/btn_advertise_qq_selector.xml
0xf7747caa
res/drawable/btn_advertise_weibo_selector.xml
0x9bb4704b
res/drawable/btn_advertise_weixin_selector.xml
0xdc463f64
res/drawable/btn_album_backup_start_selector.xml
0x552d9d36
res/drawable/btn_cloudp2p_add_member.xml
0xb2958715
res/drawable/btn_cloudp2p_more_images.xml
0xd12b4497
res/drawable/btn_cloudp2p_reduce_member.xml
0x9a37018c
res/drawable/btn_del_member_state_selector.xml
0xede695a6
res/drawable/btn_enter_app_selector.xml
0xd1b79862
res/drawable/btn_flash_screen_skip_selector.xml
0xb01b0c01
res/drawable/btn_invate_selector.xml
0x1ddb79e4
res/drawable/btn_map_zoom_in_selector.xml
res/drawable/btn_map_zoom_out_selector.xml
0xe5aba8e1
res/drawable/btn_mute_selector.xml
0xd3142d78
res/drawable/btn_pause_selector.xml
0xdaf64f20
res/drawable/btn_play_selector.xml
0xdd4f45b9
res/drawable/btn_probationary_close_selector.xml
0xe8662434
res/drawable/btn_send_selector.xml
0xce7eb479
res/drawable/btn_textcolor_selector.xml
0x46170c5d
res/drawable/btn_title_refresh.xml
0xf607e922
res/drawable/btn_voice_selector.xml
0x5fac5d88
res/drawable/btn_wifi_scanner_bottom_selector.xml
res/drawable/bucket_explore_item_bg.xml
0x4bd1d677
res/drawable/button_blue_selector.xml
res/drawable/button_blue_white_stroke_selector.xml
0x6d7d1401
res/drawable/button_circle_selector.xml
0x132c7aaa
res/drawable/button_close_small_selector.xml
res/drawable/button_darkgray_selector.xml
0x757b581f
res/drawable/button_gray_selector.xml
0x6a572db6
res/drawable/button_green_selector.xml
0x215fcb53
res/drawable/button_quit_selector.xml
0x3915d76d
res/drawable/button_red_flat_selector.xml
0x892e3687
res/drawable/button_red_selector.xml
0xe81ca66f
res/drawable/button_white_drawable.xml
0xb671c70c
res/drawable/button_write_selector.xml
0xe147a3cd
res/drawable/button_yellow_selector.xml
0xb8d09a98
res/drawable/capacity_bar.xml
0x13c6aafd
res/drawable/category_all.xml
0x64f374bd
res/drawable/category_audio.xml
0x43a9be01
res/drawable/category_document.xml
0x3e3bf598
res/drawable/category_image.xml
0xb052a352
res/drawable/category_video.xml
0x708e60e0
res/drawable/chb_on_off_selector.xml
res/drawable/clear_btn_selector.xml
0xbaea5ad1
res/drawable/cloudp2p_cancel_upload_selector.xml
0xaa99d9c5
res/drawable/cloudp2p_expression_icon_selector.xml
res/drawable/cloudp2p_group_message_received_images_selector.xml
0x9c2cc7e6
res/drawable/cloudp2p_group_message_received_selector.xml
0x141555de
res/drawable/cloudp2p_message_sent_images_selector.xml
0xf5d00026
res/drawable/cloudp2p_message_sent_selector.xml
res/drawable/cloudp2p_people_message_received_selector.xml
0xd8552223
res/drawable/cloudp2p_upload_progress_selector.xml
res/drawable/coded_lock_text_background.xml
0x90079c99
res/drawable/common_checkbox_selector.xml
0x7a39abc0
res/drawable/corner.xml
0xe5cd63a2
res/drawable/custom_seakbar_style.xml
0x81eaa5b0
res/drawable/dialog_button_selector.xml
0xdf3b3b10
res/drawable/dialog_cancel_button_selector.xml
res/drawable/dialog_confirm_button_selector.xml
0x1fc8f506
res/drawable/dialog_list_item_background.xml
0x6e09461e
res/drawable/dialog_red_button_selector.xml
0x3ad89167
res/drawable/dlna_controller_back_btn_selector.xml
0x50e5bff2
res/drawable/dlna_controller_play_btn_selector.xml
0x8eddaa88
res/drawable/dlna_media_speeddown_btn_selector.xml
0x8cfec609
res/drawable/dlna_media_speedup_btn_selector.xml
0x936a2cb8
res/drawable/dlna_media_voldown_btn_selector.xml
0xaa6ecf3e
res/drawable/dlna_media_volup_btn_selector.xml
0xc6c2d893
res/drawable/dlna_pause_btn_selector.xml
0x9132caea
res/drawable/dlna_play_btn_selector.xml
0x107f4b92
res/drawable/download_animation.xml
0xfedd4890
res/drawable/ebpay_bg_checkbox_for_corner_coupon.xml
0x56eb17de
res/drawable/ebpay_bg_checkbox_for_coupon.xml
0x7fcb7588
res/drawable/ebpay_bg_checkbox_seletor.xml
0x3b0f47fe
res/drawable/ebpay_list_selector.xml
0x61315a4c
res/drawable/ebpay_pwd_checkbox_selector.xml
0x6f6048bd
res/drawable/ebpay_textview_bg_selector.xml
0x65b31374
res/drawable/edit_checkbox_selector.xml
0xa3d1d790
res/drawable/edit_text_cancel.xml
0x4912723f
res/drawable/edit_tools_copy_btn.xml
0x86eab135
res/drawable/edit_tools_delete_btn.xml
0x14749b09
res/drawable/edit_tools_download_btn.xml
0x431dc06c
res/drawable/edit_tools_edit_image_btn.xml
0xc75bf2c2
res/drawable/edit_tools_more_btn.xml
0x98b25cb3
res/drawable/edit_tools_move_btn.xml
0x1ed962e3
res/drawable/edit_tools_open_btn.xml
0xf3ac2d5c
res/drawable/edit_tools_p2pshare_btn.xml
0x1b8f9e16
res/drawable/edit_tools_push_btn.xml
0xf49c634c
res/drawable/edit_tools_rename_btn.xml
0xff7f7875
res/drawable/edit_tools_restore_btn.xml
0xadb68c8d
res/drawable/edit_tools_save_btn.xml
0xa35d87fb
res/drawable/edit_tools_share_btn.xml
0xfcb4298a
res/drawable/editview_bg_selector.xml
0x308badbc
res/drawable/expansion_close_selector.xml
res/drawable/fast_scroll_selector.xml
0xb5c91f77
res/drawable/feed_card_background_selector.xml
res/drawable/feed_card_video_play_selector.xml
res/drawable/feed_detail_item_personal_attention_selector.xml
0xdd06fac2
res/drawable/gray_black_reverse_drawable.xml
0xd157f929
res/drawable/gray_white_reverse_drawable.xml
0x55800c47
res/drawable/grid_image_forground.xml
0xfe124b87
res/drawable/grid_image_selected_forground.xml
0xf85eec2e
res/drawable/gridview_item_src_bg_pressed.xml
0xae89a803
res/drawable/gridview_item_src_bg_selector.xml
0xd1a48f30
res/drawable/hotuser_category_selector.xml
0xa704dbcb
res/drawable/icon_checkbox_selector.xml
res/drawable/image_preview_footer_selector.xml
0xc7ed7017
res/drawable/imageview_select_circle_selector.xml
res/drawable/imageview_select_selector.xml
res/drawable/item_expression_select_bg.xml
0xadd81c25
res/drawable/lbspay_back.xml
0x4b4e0580
res/drawable/lbspay_back_bdmap.xml
0xafaa5390
res/drawable/lbspay_bg_custom_checkbox.xml
0xd2f919d1
res/drawable/lbspay_bg_list_item.xml
0xe86108ff
res/drawable/lbspay_button.xml
0x8e5b6410
res/drawable/lbspay_button_bdmap.xml
0xbd4c0d1a
res/drawable/lbspay_gray_button.xml
0x28b59855
res/drawable/lbspay_refresh.xml
0xec1deb3d
res/drawable/lbspay_refresh_bdmap.xml
0xfea4415c
res/drawable/list_bg_pressed_drawable.xml
0x16f3c6a5
res/drawable/list_feed_op_area_selector.xml
res/drawable/list_item_background.xml
0xef8756fc
res/drawable/list_item_white_gray_background.xml
0x8f1fd844
res/drawable/main_list_header_create_folder.xml
0xb44d0fcf
res/drawable/main_list_header_rank.xml
0x53cb06c1
res/drawable/main_list_header_search.xml
0xca930702
res/drawable/numeric_keyboard_button_selector.xml
0x37c9ccce
res/drawable/numeric_keyboard_delete_selector.xml
0x44a6f561
res/drawable/offline_resource_del_bg_selector.xml
0xa5ba05db
res/drawable/other_login_qq_selector.xml
0x223dbcf4
res/drawable/other_login_renren_selector.xml
0x13d121b9
res/drawable/other_login_sina_selector.xml
0x157d4855
res/drawable/p2pshare_replay_selector.xml
0xe6f46cee
res/drawable/p2pshare_transferlist_send_item_bg.xml
0x6bb2d32f
res/drawable/personal_homepage_header_selector.xml
res/drawable/personal_homepage_titl_home_btn_selector.xml
0xc0647c7a
res/drawable/personal_homepage_user_attention_selector.xml
0xa0e5c28a
res/drawable/personal_homepage_user_cancel_follow_selector.xml
0xe4b22e27
res/drawable/pim_contact_time_machine_selector_item_left_button_selector.xml
res/drawable/pim_contact_time_machine_selector_item_middle_button_selector.xml
0x6009b2bf
res/drawable/pim_contact_time_machine_selector_item_right_button_selector.xml
0x2298118a
res/drawable/popup_category_app.xml
0xaa68a42c
res/drawable/popup_category_audio.xml
0x97ce9d0d
res/drawable/popup_category_bt.xml
0x47d0da54
res/drawable/popup_category_document.xml
0x65952b53
res/drawable/popup_category_image.xml
0x1cb8f07c
res/drawable/popup_category_other.xml
0xbb05bc98
res/drawable/popup_category_video.xml
0xf10caeee
res/drawable/popup_menu_item_background.xml
0x3332db7a
res/drawable/progress_vertical.xml
0x92755ffd
res/drawable/progressbar_album_backup_drawable.xml
0x3640ec47
res/drawable/progressbar_app_recommend_download_drawable.xml
0x936650ef
res/drawable/progressbar_drawable.xml
0xa1a1fee0
res/drawable/progressbar_medium_blue.xml
0xcdc7f7cc
res/drawable/progressbar_video_widget_drawable.xml
0x6c70df03
res/drawable/receive_recorder_progress.xml
0x3b2a5169
res/drawable/red_black_reverse_drawable.xml
0x8c2baa97
res/drawable/red_gray_reverse_drawable.xml
0xb3616197
res/drawable/red_tabbargray_reverse_drawable.xml
0xd4af9c6b
res/drawable/rice_btn_check.xml
0x1c1f40b8
res/drawable/rice_btn_radio.xml
0x22c7890c
res/drawable/right_btn_selector.xml
0x51360aeb
res/drawable/runtime_gui_plugin_progressbar.xml
0x839b8360
res/drawable/selector_notification_setting.xml
0xda9908f7
res/drawable/selector_pref_more.xml
0xdbe7959e
res/drawable/single_select_btn_radio_selector.xml
0xbd00e345
res/drawable/sort_checkbox_selector.xml
res/drawable/stat_sys_download.xml
0x6ba46747
res/drawable/stat_sys_upload.xml
0xa8ca66f7
res/drawable/subtitle_adjust_left_btn_selector.xml
0xf800c1f0
res/drawable/subtitle_adjust_right_btn_selector.xml
0x7fe8a927
res/drawable/subtitle_close_btn_selector.xml
0xbc3bc2f5
res/drawable/tab_about_me.xml
0xbb6316e1
res/drawable/tab_btn_selector.xml
res/drawable/tab_discovery.xml
0xd28c4925
res/drawable/tab_filelist.xml
0x69e31d15
res/drawable/tab_latestimage.xml
0x1f0332a7
res/drawable/tab_location.xml
res/drawable/tab_share.xml
0x1df06891
res/drawable/tab_timeline.xml
0xe669043c
res/drawable/text_btn_selector.xml
0xb0afd64e
res/drawable/third_guide_iphone.xml
0x3f9adae1
res/drawable/timeline_axis_center_selector.xml
0x369ed92a
res/drawable/timeline_popup_menu.xml
0xbb71b1c9
res/drawable/title_bar_bg_selector.xml
0x6ed822fc
res/drawable/title_button_black_bg.xml
0xeed3ab26
res/drawable/title_button_selector.xml
0x3df55506
res/drawable/titlebar_back_button_selector.xml
0x110b6bb9
res/drawable/titlebar_background.9.png
0x6225d06c
res/drawable/titlebar_edit_mode_button_selector.xml
0xec881e64
res/drawable/transfer_btn_bg_selector.xml
0x300aca47
res/drawable/transfer_recorder_progress.xml
0x2b60a24f
res/drawable/transparent.xml
0x83de1e00
res/drawable/transport_list_item_btn_box_selector.xml
0xeed3ab26
res/drawable/user_guide_checkbox_selector.xml
0xdd10c9a0
res/drawable/user_guide_close_btn_selector.xml
0xbec41463
res/drawable/vcode_edit_selector.xml
0x399ea0ef
res/drawable/verify_code_text_background.xml
0x94d45b15
res/drawable/video_quick_settings_checkbox_selector.xml
0xa1299d54
res/drawable/video_retry_btn_bg_selector.xml
0xc364507e
res/drawable/videoplayer_delete_item_selector.xml
0x62cffc9a
res/drawable/videoplayer_dlna_item_selector.xml
0xd1c08fa9
res/drawable/videoplayer_download_item_selector.xml
0x7c4faa2e
res/drawable/videoplayer_save_item_selector.xml
0xc8aa5154
res/drawable/videoplayer_share_item_selector.xml
0x3887d9cd
res/drawable/wallet_balance_info_selector.xml
0x73fdcddb
res/drawable/wallet_balance_rect_grey_bg.xml
0x27a25499
res/drawable/wallet_bankdetection_confirm.xml
0x9f70959f
res/drawable/wallet_bankdetection_torch_icon.xml
0xf284a788
res/drawable/wallet_bankdetection_torch_switcher_drawable.xml
0x95367af9
res/drawable/wallet_base_bank_item_selector.xml
0xf6ceee61
res/drawable/wallet_base_bg_clear_selector.xml
0xd20ac4cf
res/drawable/wallet_base_btn.xml
0xffe952ad
res/drawable/wallet_base_btn_switch.xml
0x4cee1812
res/drawable/wallet_base_close_selector.xml
0xb793fdbd
res/drawable/wallet_base_contacts_icon.xml
0x4195ee45
res/drawable/wallet_base_corners_bg.xml
0x178a52f7
res/drawable/wallet_base_dash_btn_selector.xml
0x607b196e
res/drawable/wallet_base_dashed_shape_normal.xml
0x93c15a1c
res/drawable/wallet_base_dashed_shape_press.xml
0xd9363c50
res/drawable/wallet_base_delete.xml
0xab094919
res/drawable/wallet_base_dialog_btn_selector.xml
res/drawable/wallet_base_dialog_leftbtn_selector.xml
0x74fc8bf7
res/drawable/wallet_base_dialog_rightbtn_selector.xml
0x13b33d5c
res/drawable/wallet_base_edit_text_board.xml
0xf747eb22
res/drawable/wallet_base_edit_text_board_for_nfc.xml
0xc2cf7177
res/drawable/wallet_base_history_item_selector.xml
0x4e642630
res/drawable/wallet_base_historyfix_item_selector.xml
0xc80b6824
res/drawable/wallet_base_info_btn_selector.xml
0xbb6d39dd
res/drawable/wallet_base_loading.xml
0xece53655
res/drawable/wallet_base_loading_gray.xml
0xdccb5306
res/drawable/wallet_base_menu_item_bg.xml
0x4197029c
res/drawable/wallet_base_neg_btn_bg.xml
0x8f6f6072
res/drawable/wallet_base_progressbar.xml
0x535a3891
res/drawable/wallet_base_pwdfree_checkbox_selector.xml
0x26d88a4a
res/drawable/wallet_base_pwdfree_faces_selector.xml
0x64ad4418
res/drawable/wallet_base_pwdfree_switch_selector.xml
0xf23e6f37
res/drawable/wallet_base_pwdpay_channel_activity_bg.xml
0xe922a8b5
res/drawable/wallet_base_pwdpay_close_selector.xml
0x70937c10
res/drawable/wallet_base_pwdpay_down_selector.xml
res/drawable/wallet_base_pwdpay_middle_selector.xml
0xb83d15ef
res/drawable/wallet_base_pwdpay_submit_selector.xml
0xb4f774d8
res/drawable/wallet_base_pwdpay_up_selector.xml
0x64e93a1c
res/drawable/wallet_base_refresh_loading.xml
0x8f3f350d
res/drawable/wallet_base_refresh_loading_small.xml
0xaf0b736f
res/drawable/wallet_base_safekeyboard_delkey_selector.xml
0x8360cdf5
res/drawable/wallet_base_safekeyboard_numkey_selector.xml
0x92fb8404
res/drawable/wallet_base_select_bank_item_selector.xml
0xbe85cf2a
res/drawable/wallet_base_service_squared_item_bg.xml
res/drawable/wallet_base_shape_scrollbar.xml
0x42d4ec30
res/drawable/wallet_base_title_back_selector.xml
0x9db9e22c
res/drawable/wallet_fp_bg_face.xml
0xfe446109
res/drawable/wallet_fp_rect_disable.xml
0xd5247909
res/drawable/wallet_fp_rect_gray.xml
0x7e96a278
res/drawable/wallet_fp_rect_red.xml
0x7613411b
res/drawable/wallet_home_indicators.xml
0x96021aa5
res/drawable/wallet_home_indicators_bg.xml
0xda1ee520
res/drawable/wallet_home_item_bg.xml
0xfeacb80b
res/drawable/wallet_home_login_bg.xml
res/drawable/wallet_home_login_shape_default.xml
0x6f128b68
res/drawable/wallet_home_login_shape_pressed.xml
0x6fceb950
res/drawable/wallet_home_shape_indic_normal.xml
0xf8a4e7f8
res/drawable/wallet_home_shape_indic_selected.xml
0xaa2493ca
res/drawable/wallet_home_shape_red_point.xml
0xadfb2d20
res/drawable/wallet_lightapp_menu_sel_1_selector.xml
0xd2eeb03f
res/drawable/wallet_lightapp_menu_sel_bottom_selector.xml
0x151ad402
res/drawable/wallet_lightapp_menu_sel_mid_selector.xml
0xf06c72a5
res/drawable/wallet_lightapp_menu_sel_top_selector.xml
0x41831a39
res/drawable/wallet_lightapp_overflow_selector.xml
0xcefd358e
res/drawable/wallet_lightapp_title_back_selector.xml
0x428714da
res/drawable/wallet_nfc_bg_face.xml
0x750e48bb
res/drawable/wallet_nfc_blue_color_bg_selector.xml
0xd9dc26e4
res/drawable/wallet_nfc_busbank_list_item_bg_normal.xml
0xd0a2cc71
res/drawable/wallet_nfc_buscard_list_item_bg_pressed.xml
0x2fcde3b3
res/drawable/wallet_nfc_goback_btn_selector.xml
res/drawable/wallet_nfc_helpbtn_selector.xml
0xbe9097d8
res/drawable/wallet_nfc_rect_blue.xml
res/drawable/wallet_nfc_rect_gray.xml
0x4086f46e
res/drawable/wallet_personal_blue_color_bg_selector.xml
0x4da8de5b
res/drawable/wallet_personal_circle_blue.xml
0x7a37196b
res/drawable/wallet_personal_circle_white.xml
0x62a5c16d
res/drawable/wallet_personal_my_bank_card_list_item_bg_normal.xml
0xd0a2cc71
res/drawable/wallet_personal_my_bank_card_list_item_bg_pressed.xml
0x2fcde3b3
res/drawable/wallet_personal_overflow.xml
0x29c993b2
res/drawable/wallet_scancode_sel_bank_corners_bg.xml
0xf9977203
res/drawable/wallet_scancode_title_back_selector.xml
0x77b961c4
res/drawable/wallet_traffic_bg_face.xml
0x88ceb50e
res/drawable/wallet_traffic_rect_disable.xml
0xd5247909
res/drawable/wallet_traffic_rect_gray.xml
0x7e96a278
res/drawable/wallet_traffic_rect_red.xml
0x7613411b
res/drawable/warning_button_selector.xml
0x5bfe752e
res/drawable/wifi_scanner_close_hot_selector.xml
0x2acab8e0
res/drawable/yi_btn_default.xml
0xfda2e2b5
res/drawable/yi_btn_list_default.xml
0x703a4a1c
res/drawable/yi_btn_search_default.xml
0xbb29adca
res/drawable/yi_edit_text.xml
0xd42a089f
res/drawable/yi_edit_text_single.xml
0x8862120e
res/drawable/yi_ic_element_popup_menu_background.9.png
0xaef2d7dc
res/drawable/yi_ic_element_window_background.9.png
0xd8d4f961
res/drawable/yi_list_item_text_color_selector_normal.xml
0x1a3a9da3
res/drawable/yi_list_item_text_color_selector_small.xml
0x3d4bb0eb
res/drawable/yi_list_selector_background.xml
res/drawable/yi_panel_background.9.png
0x1f3031c2
res/drawable/yi_progress_horizontal.xml
0xe72476e3
res/drawable/yi_progress_large_blue.xml
0x9a5d07b5
res/drawable/yi_progress_medium_blue.xml
0x8a472484
res/drawable/yi_progress_small_blue.xml
0xa003e1ca
res/drawable/yi_searchedittext_magnifier.xml
0x963de9d9
res/drawable/yi_title_btn.xml
0x98f6c2aa
res/drawable-hdpi-v4/addman_normal.png
0xf17fb969
res/drawable-hdpi-v4/addman_pressed.png
0xe6051f6c
res/drawable-hdpi-v4/agreement_bg.png
0x1558798f
res/drawable-hdpi-v4/appswitch_btn_checkbox_checked.png
0xe7a661b4
res/drawable-hdpi-v4/appswitch_btn_checkbox_normal.png
0x6cd5411d
res/drawable-hdpi-v4/appswitch_btn_radio_checked.png
0xec7190e9
res/drawable-hdpi-v4/appswitch_btn_radio_normal.png
0x465ca28e
res/drawable-hdpi-v4/appswitch_logo_baidu_browser.png
res/drawable-hdpi-v4/baidu_moplus_notificatio}