Documents and seting在装系统备份wnd7时要备份?
点击联系发帖人
时间：2017-03-03 04:10
1, 您可以上傳任何檔案，但是檔案大小不能超過20MB。 2, 我們支援RAR或ZIP壓縮檔案格式的自動解壓縮，但壓縮檔案中不能夾帶超過20個檔案。 3, 我們可以辨識並檢測密碼為 'infected' 或 'virus' 的壓縮檔案。
Portuguese Brazil
Русский
укра?нська
Nederlands
Espa?ol (Latin America)
伺服器負載程度
檔案名稱 :
（本站不提供任何文件的下載服務）
檔案大小 :1534468 byte
檔案類型 :application/jar
文件行为分析
掃描結果:<font color="#%的防毒軟體(9/39)報告發現病毒
時間: <font color="#14-12-01 13:11:17 (CST)
特徵庫版本
特徵庫日期
沒有發現病毒
7.11.189.158
沒有發現病毒
沒有發現病毒
沒有發現病毒
9.0.0.4157
9.0.0.4157
沒有發現病毒
沒有發現病毒
4.1.3.52192
沒有發現病毒
沒有發現病毒
bitdefender
沒有發現病毒
沒有發現病毒
沒有發現病毒
5.0.2.3300
沒有發現病毒
23.285, 23.285
6.5.1.5418
沒有發現病毒
沒有發現病毒
V1.32.31.0
沒有發現病毒
沒有發現病毒
沒有發現病毒
沒有發現病毒
沒有發現病毒
9.500-1005
沒有發現病毒
沒有發現病毒
沒有發現病毒
25.17.00.04
25.17.00.04
沒有發現病毒
沒有發現病毒
3.9.2589.2
3.9.2589.2
沒有發現病毒
沒有發現病毒
沒有發現病毒
17.47.17308
1.0.2.2108
沒有發現病毒
沒有發現病毒
virusbuster
15.0.981.0
沒有發現病毒
■Heuristic/Suspicious ■Exact
注意: 就算報告發現病毒，也可能是防毒軟體誤報，請根據檢查結果自行判斷
複製到剪切板
许可名称信息
android.permission.WAKE_LOCK手机屏幕关闭后后台进程仍运行
android.permission.INTERNET连接网络（2G或3G）
android.permission.READ_PHONE_STATE读取电话状态
android.permission.ACCESS_NETWORK_STATE读取网络状态（2G或3G）
android.permission.ACCESS_COARSE_LOCATION获取粗略的位置（通过wifi、基站）
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.WRITE_EXTERNAL_STORAGE写外部存储器（如：SD卡）
android.permission.ACCESS_WIFI_STATE读取wifi网络状态
android.permission.CHANGE_WIFI_STATE改变WIFI连接状态
android.permission.RECORD_AUDIO录音（使用AudioRecord）
android.permission.VIBRATE允许设备震动
android.permission.CAMERA访问照相机设备
com.android.browser.permission.READ_HISTORY_BOOKMARKS读取浏览器书签
com.android.launcher.permission.INSTALL_SHORTCUT创建快捷方式
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS写浏览器书签
android.permission.RECEIVE_BOOT_COMPLETED接收开机启动广播
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.DISABLE_KEYGUARD禁用键盘锁
android.permission.SYSTEM_ALERT_WINDOW显示系统窗口
android.permission.GET_TASKS获取有关当前或最近运行的任务信息
android.permission.RESTART_PACKAGES重启其他程序
android.permission.READ_LOGS读取系统日志
android.permission.WRITE_SETTINGS读写系统设置项
安全评分 :70
包名:com..qzone.miaozan
最低运行环境:Android 2.2.x
行为描述:设置特殊文件夹属性
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
行为描述:隐藏指定窗口
详情信息:[Window,Class] = [,ComboLBox]
[Window,Class] = [,ED4F2DB9A3D1BCCFBAD2A0]
[Window,Class] = [,995D92B2-4ED9-43A7-D1746F96]
[Window,Class] = [,Button]
[Window,Class] = [3DP Chip,Static]
[Window,Class] = [3DP Chip ,Static]
[Window,Class] = [,Static]
[Window,Class] = [,Auto-Suggest Dropdown]
[Window,Class] = [,#32770]
[Window,Class] = [显示细节(&D),Button]
行为描述:按名称获取主机地址
行为描述:隐藏窗口创建进程
详情信息:ImagePath = , CmdLine = rundll32.exe &c:\docume~1\admini~1\locals~1\temp\nsf9.tmp\ocsetuphlp.dll&,_rhpid305rheng2@16 408,ed4f2db9a3d1bccfbad2a0,4c677dd5bb9fc,e565a96f9c4b04db8e22
行为描述:创建进程
详情信息:ImagePath = C:\WINDOWS\system32\RunDll32.exe, CmdLine = RunDll32.exe &C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\OCSetupHlp.dll&,_RHPID305RHEng2@16 408,ED4F2DB9A3D1BCCFBAD2A0,4C677DD5BB9FC,E565A96F9C4B04DB8E22
行为描述:写权限映射文件
详情信息:4C677DD5BB9FC
F81-491C-848D-C7BA755E6DFA
DfSharedHeapD8679
\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF867C.tmp
行为描述:创建可执行文件
详情信息:C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\LangDLL.dll
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\System.dll
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\OCSetupHlp.dll
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\InstallOptions.dll
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\nsDialogs.dll
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\StartMenu.dll
C:\Program Files\3DP Chip\3DP_Chip.exe
行为描述:修改文件内容
详情信息:C:\WINDOWS\system32\wbem\Logs\wbemprox.log---& Offset = 0
C:\WINDOWS\system32\wbem\Logs\wbemprox.log---& Offset = 225
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 0
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 74
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\modern-wizard.bmp---& Offset = 49152
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 250
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 224
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 68
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 88
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 122
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 534
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 598
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 708
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 724
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 748
行为描述:设置特殊文件夹属性
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
行为描述:建立到一个指定的套接字连接
详情信息:127.0.0.1:1040
127.0.0.1:1041
127.0.0.1:1042
127.0.0.1:1043
127.0.0.1:1044
127.0.0.1:1045
127.0.0.1:1046
127.0.0.1:1047
127.0.0.1:1048
127.0.0.1:1049
127.0.0.1:1050
127.0.0.1:1051
127.0.0.1:1052
127.0.0.1:1053
127.0.0.1:1054
行为描述:按名称获取主机地址
注册表行为
行为描述:修改注册表
详情信息:\REGISTRY\USER\S-1-5-21----500\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\X\BaseClass
行为描述:删除注册表键
详情信息:\REGISTRY\MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW
行为描述:删除注册表键值
详情信息:\REGISTRY\MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW\DWFileTreeRoot
行为描述:创建互斥体
详情信息:DEFINED_LoadSDKDLL
CRemoteProcApiCalls::m_bShowLoadingScreen
CRemoteProcApiCalls::m_nMaxLoadingScreenOffers
Global\426F00E8-A1B3-4EB2-8FF8-D6E
SHIMLIB_LOG_MUTEX
CSDKApi::m_bSkipAllOffersTriggered
CSDKApi::m_bDeclineOfferTriggered
CSDKApi::m_bShowSkipAllButton
CSDKApi::m_bShowDeclineButton
Global\223CEB62-A2BC-4E33-BA9B-FCAC6DAAB1BE
m_wndDummyAPIMsgWindow
CTrackingCalls::m_bIsRunningFromReboot
CSDKApi::GetTimeMSFromStartup
CSDKApi::DevModeMessage
CSDKApi::m_strClientSessionID
行为描述:隐藏指定窗口
详情信息:[Window,Class] = [,ComboLBox]
[Window,Class] = [,ED4F2DB9A3D1BCCFBAD2A0]
[Window,Class] = [,995D92B2-4ED9-43A7-D1746F96]
[Window,Class] = [,Button]
[Window,Class] = [3DP Chip,Static]
[Window,Class] = [3DP Chip ,Static]
[Window,Class] = [,Static]
[Window,Class] = [,Auto-Suggest Dropdown]
[Window,Class] = [,#32770]
[Window,Class] = [显示细节(&D),Button]
行为描述:查找指定窗口
详情信息:NtUserFindWindowEx: [Class,Window] = [ED4F2DB9A3D1BCCFBAD2A0,]
NtUserFindWindowEx: [Class,Window] = [995D92B2-4ED9-43A7-D1746F96,]
NtUserFindWindowEx: [Class,Window] = [#32770,]
行为描述:获取系统权限
详情信息:SE_LOAD_DRIVER_PRIVILEGE
行为描述:窗口信息
详情信息:Pid = 408, Hwnd=0xb016a, Text = 简体中文, ClassName = ComboBox.
Pid = 408, Hwnd=0xc01d6, Text = OK, ClassName = Button.
Pid = 408, Hwnd=0xd01c8, Text = Cancel, ClassName = Button.
Pid = 408, Hwnd=0xc01c2, Text = Please select a language., ClassName = Static.
Pid = 408, Hwnd=0xd0180, Text = Installer Language, ClassName = #32770.
Pid = 408, Hwnd=0xb0386, Text = 下一步(&N) &, ClassName = Button.
Pid = 408, Hwnd=0x70362, Text = 取消(&C), ClassName = Button.
Pid = 408, Hwnd=0x7035a, Text = 3DP Chip , ClassName = Static.
Pid = 408, Hwnd=0x6033e, Text = 3DP Chip, ClassName = Static.
Pid = 408, Hwnd=0xa038c, Text = 欢迎使用&3DP Chip v14.11&安装向导, ClassName = Static.
Pid = 408, Hwnd=0x903a8, Text = 这个向导将指引你完成&3DP Chip v14.11&的安装进程。
在开始安装之前，建议先关闭其他所有应用程序。这将允许&安装程序&更新指定的, ClassName = Static.
Pid = 408, Hwnd=0x7035e, Text = 3DP Chip v14.11 安装, ClassName = #32770.
Pid = 408, Hwnd=0x703f2, Text = & 上一步(&P), ClassName = Button.
Pid = 408, Hwnd=0xb0386, Text = 我接受(&I), ClassName = Button.
Pid = 408, Hwnd=0x603d8, Text = 许可证协议, ClassName = Static.
行为描述:打开图片文件
详情信息:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\modern-wizard.bmp
行为描述:创建互斥体
详情信息:DEFINED_LoadSDKDLL
CRemoteProcApiCalls::m_bShowLoadingScreen
CRemoteProcApiCalls::m_nMaxLoadingScreenOffers
Global\426F00E8-A1B3-4EB2-8FF8-D6E
SHIMLIB_LOG_MUTEX
CSDKApi::m_bSkipAllOffersTriggered
CSDKApi::m_bDeclineOfferTriggered
CSDKApi::m_bShowSkipAllButton
CSDKApi::m_bShowDeclineButton
Global\223CEB62-A2BC-4E33-BA9B-FCAC6DAAB1BE
m_wndDummyAPIMsgWindow
CTrackingCalls::m_bIsRunningFromReboot
CSDKApi::GetTimeMSFromStartup
CSDKApi::DevModeMessage
CSDKApi::m_strClientSessionID
行为描述:隐藏指定窗口
详情信息:[Window,Class] = [,ComboLBox]
[Window,Class] = [,ED4F2DB9A3D1BCCFBAD2A0]
[Window,Class] = [,995D92B2-4ED9-43A7-D1746F96]
[Window,Class] = [,Button]
[Window,Class] = [3DP Chip,Static]
[Window,Class] = [3DP Chip ,Static]
[Window,Class] = [,Static]
[Window,Class] = [,Auto-Suggest Dropdown]
[Window,Class] = [,#32770]
[Window,Class] = [显示细节(&D),Button]
行为描述:查找指定窗口
详情信息:NtUserFindWindowEx: [Class,Window] = [ED4F2DB9A3D1BCCFBAD2A0,]
NtUserFindWindowEx: [Class,Window] = [995D92B2-4ED9-43A7-D1746F96,]
NtUserFindWindowEx: [Class,Window] = [#32770,]
行为描述:获取系统权限
详情信息:SE_LOAD_DRIVER_PRIVILEGE
行为描述:窗口信息
详情信息:Pid = 408, Hwnd=0xb016a, Text = 简体中文, ClassName = ComboBox.
Pid = 408, Hwnd=0xc01d6, Text = OK, ClassName = Button.
Pid = 408, Hwnd=0xd01c8, Text = Cancel, ClassName = Button.
Pid = 408, Hwnd=0xc01c2, Text = Please select a language., ClassName = Static.
Pid = 408, Hwnd=0xd0180, Text = Installer Language, ClassName = #32770.
Pid = 408, Hwnd=0xb0386, Text = 下一步(&N) &, ClassName = Button.
Pid = 408, Hwnd=0x70362, Text = 取消(&C), ClassName = Button.
Pid = 408, Hwnd=0x7035a, Text = 3DP Chip , ClassName = Static.
Pid = 408, Hwnd=0x6033e, Text = 3DP Chip, ClassName = Static.
Pid = 408, Hwnd=0xa038c, Text = 欢迎使用&3DP Chip v14.11&安装向导, ClassName = Static.
Pid = 408, Hwnd=0x903a8, Text = 这个向导将指引你完成&3DP Chip v14.11&的安装进程。
在开始安装之前，建议先关闭其他所有应用程序。这将允许&安装程序&更新指定的, ClassName = Static.
Pid = 408, Hwnd=0x7035e, Text = 3DP Chip v14.11 安装, ClassName = #32770.
Pid = 408, Hwnd=0x703f2, Text = & 上一步(&P), ClassName = Button.
Pid = 408, Hwnd=0xb0386, Text = 我接受(&I), ClassName = Button.
Pid = 408, Hwnd=0x603d8, Text = 许可证协议, ClassName = Static.
行为描述:打开图片文件
详情信息:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\modern-wizard.bmp
动态列表行为
行为描述:数据泄露
详情信息:sink:File operation:write data:data:Rr[
sink:File operation:write data:data:RwZ
sink:File operation:write data:data:&?xml version='1.0' encoding='utf-8' standalone='yes' ?&
&string name=&cuidsec&&HIiQKiG//P3V9/
行为描述:启动服务
详情信息:com.patibility$Service
com.android.mms.transaction.SmsReceiverService
行为描述:读取文件
详情信息:path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:9
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:21
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:96
path:/proc/783/cmdline length:105
path:/proc/799/cmdline length:105
path:/proc/811/cmdline length:105
path:/proc/842/cmdline length:105
path:/proc/852/cmdline length:105
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:9
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:22
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:96
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:7
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.jar length:9
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.jar length:22
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.jar length:96
path:/proc/meminfo length:105
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.jar length:7
path:/proc/875/cmdline length:105
path:/dev/urandom length:14
path:/proc/946/cmdline length:105
path:/proc/948/cmdline length:105
path:/proc/971/cmdline length:105
行为描述:对指定数据计算哈希
详情信息:ZdWpvx74on_restart
ZdWpvx74main_off
ZdWpvx74main_list_msg
FTZNgRJZOBk5
aea559de115cb5a574b8
72ab75b3da9faea559de
yKl76nGU1e7a
17a34502bbf6d472713e
2b69c85e80b817a34502
17bfa94ca3bdcc41on_restarta4d8d0daa3826edc
9ca8fcd150a417ecce58
17bfa94ca3bdcc41main_offa4d8d0daa3826edc
17bfa94ca3bdcc41main_list_msga4d8d0daa3826edc
000000yuJtmxbnRzbmWJnK
ef45N92f053P36cda4d8d0daa3826edc68NK
105ff24a06fa2&da14ec&&QUgUvcaYj0Ztr&&Full Android on Emulator&unknown&511&android 4.1.1&000&&US&en&768&&0&&unknown&Android&generic&
8kij7E105ff24a06fa
com.baidu511da14ec
511da14ece479f53b-f102-48cf-9327-f98ecf3e008d
a2U9dn73sdLs
0cc0dfc8fa8
f973e7d92f650cc0d446
a2U9dn73sdLc
a2U9dn73sdLa
cdf773f4fbe31c6b400b
行为描述:访问URL
详情信息:libcore.net.url.JarURLConnectionImpl:jar:file:/data/app/com..qzone.miaozan-1.apk!/extra/__pasys_remote_banner.jar
libcore.net.http.HttpURLConnectionImpl:/ads/pa/__pasys_remote_banner.php?v=3.68&tp=Full+Android+on+Emulator&os=android&bdr=16
libcore.net.http.HttpURLConnectionImpl:/app.gif
行为描述:数据加密
详情信息:{u'operation': u'encryption', u'data': u'17bfa94ca3bdcc41', u'algorithm': u'PBEWITHMD5andDES'}
{u'operation': u'encryption', u'data': u'a4d8d0daa3826edc', u'algorithm': u'PBEWITHMD5andDES'}
{u'operation': u'keyalgo', u'algorithm': u'AES', u'key': u'51, 48, 50, 49, 50, 49, 48, 50, 100, 105, 99, 117, 100, 105, 97, 98'}
{u'operation': u'encryption', u'data': u'511', u'algorithm': u'AES/ECB/PKCS5Padding'}
{u'operation': u'decryption', u'data': u'511', u'algorithm': u'AES'}
{u'operation': u'encryption', u'data': u'9B78CCB077ABB|753', u'algorithm': u'AES/ECB/PKCS5Padding'}
行为描述:类加载
详情信息:path:/system/app/PicoTts.apk
path:/system/app/MusicFX.apk
path:/system/framework/am.jar
path:/data/app/com..qzone.miaozan-1.apk
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.jar
行为描述:执行SQL查询
详情信息:select QQ,Sid,Cent from Users where ID = 1
select ForMsgs from ForMsgList
select NoForQQ from NoFriendList
select UsId,Name,Sex,Age,MyLog,QQ,Count from Users where ID =1
行为描述:获取用户ID
详情信息:000
行为描述:调用哈希算法
详情信息:MD5
行为描述:缓冲区读取一行数据
详情信息:P3SiI3R9IVx+Upa8H8jFEZBBr46JZCkPd79zDGVnC8fbGuqBuMa91mBuxgCfvtnbSeZnOlYFoJLT
T4gFK5gByZISwVl1+DY9QIhq54GnRkYD5fG/Q9fAAWNVDKZD1HFeSsH+u+Yx39BM+yWkLJCrDwF6
geK052a+d+YLVspBLro=
行为描述:写入文件
详情信息:path:/data/data/com.android.gallery3d/shared_prefs/com.android.gallery3d_preferences.xml length:105
path:/data/data/com.android.musicfx/shared_prefs/musicfx.xml length:105
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:95
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:70
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:52
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:55
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:47
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:50
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:40
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:49
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:58
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:44
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:53
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:49
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:60
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:48
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:49
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:54
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:61
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:48
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:59
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:55
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:55
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:63
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:60
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:61
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:54
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:66
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.key length:105
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:80
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:63
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:48
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:50
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:49
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:61
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:54
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:57
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:48
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:52
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:54
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:50
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:50
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:60
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:64
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:50
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:50
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:56
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:52
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:45
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:54
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:56
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:48
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:63
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:49
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:55
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:47
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:49
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:67
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:57
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:60
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:54
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:61
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:51
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:59
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:57
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:59
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:54
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:53
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:61
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:54
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:67
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:68
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:53
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:63
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:64
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:55
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:51
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:44
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:49
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:56
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:58
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:48
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:64
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:48
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:48
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:53
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:60
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:61
path:/data/data/com.android.gallery3d/shared_prefs/com.android.gallery3d_preferences.xml length:105
path:/data/data/com..qzone.miaozan/shared_prefs/CE149D690D0E8CBB1CBD.xml length:105
path:/data/data/com..qzone.miaozan/shared_prefs/__Baidu_Stat_SDK_SendRem.xml length:105
path:/data/data/com..qzone.miaozan/files/__local_stat_cache.json length:95
path:/data/data/com..qzone.miaozan/shared_prefs/com..qzone.miaozan.push_sync.xml length:105
path:/data/data/com..qzone.miaozan/shared_prefs/pst.xml length:105
行为描述:文件写入初始化
详情信息:Ljava/io/F=/data/data/com..qzone.miaozan/files/i42d45df023jnkdd93la483f9xGFKXI
Ljava/io/F=/data/data/com..qzone.miaozan/files/s92TjjdfoP2n3o9dfji2l9s1olkjf0p
Ljava/io/F=/mnt/sdcard/baidu/.cuid | Z=false
行为描述:初始化Intent
详情信息:Landroid/content/C=com..qzone.miaozan.MainActivity@ | Ljava/lang/C=class com..qzone.miaozan.MainActivity
Ljava/lang/S=com..qzone.miaozan.UaCnMiaoZanService
行为描述:定位移动终端
详情信息:null
行为描述:获取设备ID
详情信息:511
Activities
活动名类型
.MainActivityandroid.intent.action.MAIN
.MainActivityandroid.intent.category.LAUNCHER
.UaCnWebView.webview.service
函数名称信息
java/net/URL;->openConnection连接URL
java/net/HttpURLC->connect连接URL
java/net/URLC->connect连接URL
LocationM->getLastKnownLocation获取地址位置
TelephonyM->getDeviceId搜集用户手机IMEI码、电话号码、系统版本号等信息
HttpC->execute请求远程服务器
DefaultHttpC->execute发送HTTP请求
android/app/NotificationM->notify信息通知栏
getRuntime获取命令行环境
java/lang/R->exec执行字符串命令
PackageM->installPackage安装apk包
ContentR->query读取联系人、短信等数据库
net.youmi.android.AdReceiver应用安装时启动服务
com.baidu.android.pushservice.PushServiceReceiver开机启动服务
com.baidu.android.pushservice.PushServiceReceiver网络连接改变时启动服务
com.baidu.android.pushservice.RegistrationReceiver应用卸载时启动服务
com.baidu百度
net.youmi有米广告
许可名称信息
android.permission.WAKE_LOCK手机屏幕关闭后后台进程仍运行
android.permission.INTERNET连接网络（2G或3G）
android.permission.READ_PHONE_STATE读取电话状态
android.permission.ACCESS_NETWORK_STATE读取网络状态（2G或3G）
android.permission.ACCESS_COARSE_LOCATION获取粗略的位置（通过wifi、基站）
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.WRITE_EXTERNAL_STORAGE写外部存储器（如：SD卡）
android.permission.ACCESS_WIFI_STATE读取wifi网络状态
android.permission.CHANGE_WIFI_STATE改变WIFI连接状态
android.permission.RECORD_AUDIO录音（使用AudioRecord）
android.permission.VIBRATE允许设备震动
android.permission.CAMERA访问照相机设备
com.android.browser.permission.READ_HISTORY_BOOKMARKS读取浏览器书签
com.android.launcher.permission.INSTALL_SHORTCUT创建快捷方式
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS写浏览器书签
android.permission.RECEIVE_BOOT_COMPLETED接收开机启动广播
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.DISABLE_KEYGUARD禁用键盘锁
android.permission.SYSTEM_ALERT_WINDOW显示系统窗口
android.permission.GET_TASKS获取有关当前或最近运行的任务信息
android.permission.RESTART_PACKAGES重启其他程序
android.permission.READ_LOGS读取系统日志
android.permission.WRITE_SETTINGS读写系统设置项
com..qzone.miaozan.UaCnMiaoZanService
net.youmi.android.AdService
net.youmi.android.ExpService
com.baidu.android.pushservice.PushService
res/drawable/baiyan.png
res/drawable/baobao.png
res/drawable/baoquan.png
res/drawable/bianbian.png
0xb115a212
res/drawable/bishi.png
res/drawable/chahan.png
0x9f80dad6
res/drawable/ciya.png
res/drawable/com_titlebar_backbtn.png
0x23abf76a
res/drawable/deyi.png
0xc9542587
res/drawable/fadai.png
0xd94f8c7a
res/drawable/fanu.png
0x4ec9f17a
res/drawable/gouyin.png
0x71b2679c
res/drawable/haixiu.png
0x3c20a8cd
res/drawable/han.png
res/drawable/hanxiao.png
0x12d7602f
res/drawable/honglian.png
0x304e8a4c
res/drawable/huaixiao.png
0xefe1c515
res/drawable/jingkong.png
0xac9f9746
res/drawable/keai.png
0xca7671db
res/drawable/kelian.png
0x7dc5c42b
res/drawable/koubi.png
res/drawable/ku.png
0x7937ff49
res/drawable/kuaikule.png
0x1c5f7e78
res/drawable/kuqi.png
0xd1068ceb
res/drawable/liuhan.png
0x83055a6d
res/drawable/liulei.png
0x20e20358
res/drawable/my_button.xml
res/drawable/my_button_01.xml
0xf86468fe
res/drawable/my_button_1.xml
res/drawable/my_checkbox.xml
0x803fa6d7
res/drawable/outu.png
0xcc47bd0f
res/drawable/piezui.png
0x1a65c529
res/drawable/qiang.png
0x1aba6add
res/drawable/qiaoda.png
0x73f0ae8c
res/drawable/qinqin.png
0x167d02e6
res/drawable/ruo.png
0xf3fa2930
res/drawable/se.png
0x3efa65a6
res/drawable/shengli.png
0x4b300c16
res/drawable/shuijiao.png
0xfb781378
res/drawable/tiaowu.png
res/drawable/touxiao.png
0xd2013dde
res/drawable/tushe.png
0x5994fd5f
res/drawable/weiqu.png
0xcab45725
res/drawable/weixiao.png
0xd212a652
res/drawable/wen.png
0xf6904b24
res/drawable/woshou.png
res/drawable/xia.png
res/drawable/xu.png
0x1e958590
res/drawable/yihuo.png
0xdd5c3865
res/drawable/yiwen.png
res/drawable/youhengheng.png
0xf308b5a9
res/drawable/yuehui.png
0xa11a4ae7
res/drawable/yun.png
0xff853c93
res/drawable/zaijian.png
res/drawable/zhemo.png
0xf57c8c3d
res/drawable/zhouma.png
0xca68e638
res/drawable/zhuakuang.png
0x923d2ce8
res/drawable/zhutou.png
0xff780427
res/layout/activity_chat.xml
0x54b2c0ef
res/layout/activity_chatlist.xml
0xac779883
res/layout/activity_main.xml
0x3d30eeae
res/layout/activity_uacnwebview.xml
0x8bfe8198
res/layout/buju_chat_list_layout.xml
0x760c07e9
res/layout/buju_chat_msg_0_right_layout.xml
0x7b0f57af
res/layout/buju_chat_msg_1_left_layout.xml
0x5ce95b7c
res/layout/buju_face_gridview_layout.xml
0x1cd197bd
res/layout/buju_no_zanfriend_layout.xml
res/layout/buju_zan_list_layout.xml
res/layout/buju_zan_msg_list_layout.xml
0x71513cbd
res/layout/dialog_add_friend.xml
0xf9fdb5cb
res/layout/dialog_add_sms.xml
0x13ccc746
res/layout/dialog_exit.xml
0x5701681a
res/layout/dialog_image_show.xml
0xa34412a2
res/layout/dialog_loading.xml
0x9ef5d190
res/layout/dialog_myedit_layout.xml
0xc4247f3f
res/layout/dialog_qqlogin.xml
0xbb12dec3
res/layout/dialog_web_login.xml
0x77407f69
res/layout/dialog_zp_setinggs.xml
0x8a4e9f36
res/layout/sus_customdef_notification_dialog.xml
0x24ff1e6a
res/layout/sus_download_notification.xml
0xb5e9a8da
res/layout/sus_installapk_notification.xml
0x5a294d4c
res/layout/sus_notification_dialog.xml
res/layout/sus_updateinfo_dialog.xml
res/menu/activity_main.xml
0x847bbcac
res/raw/login.wav
0x63b86cbb
res/raw/new_message.ogg
0xed4672c8
res/raw/newmsg.wav
0x1a0322ea
res/raw/z.wav
0xbfb9d283
AndroidManifest.xml
0xa09b9df3
resources.arsc
0x800dd130
res/drawable-hdpi/acm_inputbox.9.png
0xc079e1b0
res/drawable-hdpi/bg_of_alldialog.9.png
res/drawable-hdpi/bg_of_bossactivity_bottom_tab.png
res/drawable-hdpi/bg_of_circle_newsubject_function.png
0xb78daf87
res/drawable-hdpi/bg_of_circleselete_press.png
0x60fcd636
res/drawable-hdpi/bg_of_shake.png
0x9b2ef464
res/drawable-hdpi/chat_img_my.9.png
0xa5308704
res/drawable-hdpi/chat_img_ta.9.png
0xb69e8c9a
res/drawable-hdpi/checkbox_checked.png
0xa3fe3b71
res/drawable-hdpi/checkbox_unchecked.png
res/drawable-hdpi/close.png
0x578a945a
res/drawable-hdpi/common_titlebar_backbtn_press.9.png
0xb27966c0
res/drawable-hdpi/dialog_login_bj.jpg
0x3d79d75e
res/drawable-hdpi/dmm.png
0xa6640c48
res/drawable-hdpi/dmn.png
0xa4da0dfd
res/drawable-hdpi/dot_selected.png
0xdc73daf1
res/drawable-hdpi/face.png
0x740a3f76
res/drawable-hdpi/ic_action_search.png
0x64275be8
res/drawable-hdpi/ic_back.png
res/drawable-hdpi/ic_customer_dialog_btn_press.9.png
0x6a26093a
res/drawable-hdpi/ic_launcher.png
0xe26c21b1
res/drawable-hdpi/ic_message_details_left.9.png
0xdf32b2b6
res/drawable-hdpi/ic_quan_1.png
0xe4145b86
res/drawable-hdpi/line_of_bossactivity_menu.png
0xf9b7711c
res/drawable-hdpi/qapp_center_qz_bg_webveiw.png
0xe54b5314
res/drawable-hdpi/qapp_center_qz_bg_webveiw_line.png
0xf68a9fb8
res/drawable-hdpi/qq_doodle_bg_body.png
0x24974a7e
res/drawable-hdpi/qzone_login_bj_1.png
0x4ceb7395
res/drawable-hdpi/sus_notification_install_icon.png
0xf5e1c1d2
res/drawable-hdpi/sus_notify_bg.png
0x8c8a0b62
res/drawable-hdpi/sus_progressicon.png
0xf5e1c1d2
res/drawable-hdpi/transport_anim_2.png
0x7f7633a4
res/drawable-hdpi/wb_square_icon_weibo.png
0x7c9f3fd6
res/drawable-ldpi/ic_launcher.png
0xe26c21b1
res/drawable-ldpi/sus_notification_install_icon.png
0xf5e1c1d2
res/drawable-ldpi/sus_notify_bg.png
0x8c8a0b62
res/drawable-ldpi/sus_progressicon.png
0xf5e1c1d2
res/drawable-mdpi/ic_action_search.png
0xb4091fdc
res/drawable-mdpi/ic_launcher.png
0xe26c21b1
res/drawable-mdpi/sus_notification_install_icon.png
0xf5e1c1d2
res/drawable-mdpi/sus_notify_bg.png
0x8c8a0b62
res/drawable-mdpi/sus_progressicon.png
0xf5e1c1d2
res/drawable-xhdpi/ic_action_search.png
0x3294aee3
res/drawable-xhdpi/ic_launcher.png
0xe26c21b1
classes.dex
0xe7d377c4
assets/frontia_plugin/plugin-deploy.jar
0xd73592e4
assets/frontia_plugin/plugin-deploy.key
0xea2f3f42
extra/__pasys_remote_banner.jar
0xf5cebf75
lib/armeabi/libbdpush_V2_1.so
0x18a71c63
lib/mips/libbdpush_V2_1.so
0xa1a1f877
META-INF/MANIFEST.MF
0x8b5454d6
META-INF/CERT.SF
0xeb6ecf03
META-INF/CERT.RSA
0x423cc199
File upload
Please not close this windows,
If you do not have to upload response time, make sure you upload files less than 20M
You can view the results of the last scan or rescan}
Portuguese Brazil
Русский
укра?нська
Nederlands
Espa?ol (Latin America)
伺服器負載程度
檔案名稱 :
（本站不提供任何文件的下載服務）
檔案大小 :1534468 byte
檔案類型 :application/jar
文件行为分析
掃描結果:<font color="#%的防毒軟體(9/39)報告發現病毒
時間: <font color="#14-12-01 13:11:17 (CST)
特徵庫版本
特徵庫日期
沒有發現病毒
7.11.189.158
沒有發現病毒
沒有發現病毒
沒有發現病毒
9.0.0.4157
9.0.0.4157
沒有發現病毒
沒有發現病毒
4.1.3.52192
沒有發現病毒
沒有發現病毒
bitdefender
沒有發現病毒
沒有發現病毒
沒有發現病毒
5.0.2.3300
沒有發現病毒
23.285, 23.285
6.5.1.5418
沒有發現病毒
沒有發現病毒
V1.32.31.0
沒有發現病毒
沒有發現病毒
沒有發現病毒
沒有發現病毒
沒有發現病毒
9.500-1005
沒有發現病毒
沒有發現病毒
沒有發現病毒
25.17.00.04
25.17.00.04
沒有發現病毒
沒有發現病毒
3.9.2589.2
3.9.2589.2
沒有發現病毒
沒有發現病毒
沒有發現病毒
17.47.17308
1.0.2.2108
沒有發現病毒
沒有發現病毒
virusbuster
15.0.981.0
沒有發現病毒
■Heuristic/Suspicious ■Exact
注意: 就算報告發現病毒，也可能是防毒軟體誤報，請根據檢查結果自行判斷
複製到剪切板
许可名称信息
android.permission.WAKE_LOCK手机屏幕关闭后后台进程仍运行
android.permission.INTERNET连接网络（2G或3G）
android.permission.READ_PHONE_STATE读取电话状态
android.permission.ACCESS_NETWORK_STATE读取网络状态（2G或3G）
android.permission.ACCESS_COARSE_LOCATION获取粗略的位置（通过wifi、基站）
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.WRITE_EXTERNAL_STORAGE写外部存储器（如：SD卡）
android.permission.ACCESS_WIFI_STATE读取wifi网络状态
android.permission.CHANGE_WIFI_STATE改变WIFI连接状态
android.permission.RECORD_AUDIO录音（使用AudioRecord）
android.permission.VIBRATE允许设备震动
android.permission.CAMERA访问照相机设备
com.android.browser.permission.READ_HISTORY_BOOKMARKS读取浏览器书签
com.android.launcher.permission.INSTALL_SHORTCUT创建快捷方式
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS写浏览器书签
android.permission.RECEIVE_BOOT_COMPLETED接收开机启动广播
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.DISABLE_KEYGUARD禁用键盘锁
android.permission.SYSTEM_ALERT_WINDOW显示系统窗口
android.permission.GET_TASKS获取有关当前或最近运行的任务信息
android.permission.RESTART_PACKAGES重启其他程序
android.permission.READ_LOGS读取系统日志
android.permission.WRITE_SETTINGS读写系统设置项
安全评分 :70
包名:com..qzone.miaozan
最低运行环境:Android 2.2.x
行为描述:设置特殊文件夹属性
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
行为描述:隐藏指定窗口
详情信息:[Window,Class] = [,ComboLBox]
[Window,Class] = [,ED4F2DB9A3D1BCCFBAD2A0]
[Window,Class] = [,995D92B2-4ED9-43A7-D1746F96]
[Window,Class] = [,Button]
[Window,Class] = [3DP Chip,Static]
[Window,Class] = [3DP Chip ,Static]
[Window,Class] = [,Static]
[Window,Class] = [,Auto-Suggest Dropdown]
[Window,Class] = [,#32770]
[Window,Class] = [显示细节(&D),Button]
行为描述:按名称获取主机地址
行为描述:隐藏窗口创建进程
详情信息:ImagePath = , CmdLine = rundll32.exe &c:\docume~1\admini~1\locals~1\temp\nsf9.tmp\ocsetuphlp.dll&,_rhpid305rheng2@16 408,ed4f2db9a3d1bccfbad2a0,4c677dd5bb9fc,e565a96f9c4b04db8e22
行为描述:创建进程
详情信息:ImagePath = C:\WINDOWS\system32\RunDll32.exe, CmdLine = RunDll32.exe &C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\OCSetupHlp.dll&,_RHPID305RHEng2@16 408,ED4F2DB9A3D1BCCFBAD2A0,4C677DD5BB9FC,E565A96F9C4B04DB8E22
行为描述:写权限映射文件
详情信息:4C677DD5BB9FC
F81-491C-848D-C7BA755E6DFA
DfSharedHeapD8679
\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF867C.tmp
行为描述:创建可执行文件
详情信息:C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\LangDLL.dll
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\System.dll
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\OCSetupHlp.dll
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\InstallOptions.dll
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\nsDialogs.dll
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\StartMenu.dll
C:\Program Files\3DP Chip\3DP_Chip.exe
行为描述:修改文件内容
详情信息:C:\WINDOWS\system32\wbem\Logs\wbemprox.log---& Offset = 0
C:\WINDOWS\system32\wbem\Logs\wbemprox.log---& Offset = 225
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 0
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 74
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\modern-wizard.bmp---& Offset = 49152
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 250
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 224
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 68
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 88
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 122
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 534
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 598
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 708
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 724
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\ioSpecial.ini---& Offset = 748
行为描述:设置特殊文件夹属性
详情信息:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
行为描述:建立到一个指定的套接字连接
详情信息:127.0.0.1:1040
127.0.0.1:1041
127.0.0.1:1042
127.0.0.1:1043
127.0.0.1:1044
127.0.0.1:1045
127.0.0.1:1046
127.0.0.1:1047
127.0.0.1:1048
127.0.0.1:1049
127.0.0.1:1050
127.0.0.1:1051
127.0.0.1:1052
127.0.0.1:1053
127.0.0.1:1054
行为描述:按名称获取主机地址
注册表行为
行为描述:修改注册表
详情信息:\REGISTRY\USER\S-1-5-21----500\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\X\BaseClass
行为描述:删除注册表键
详情信息:\REGISTRY\MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW
行为描述:删除注册表键值
详情信息:\REGISTRY\MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\DW\DWFileTreeRoot
行为描述:创建互斥体
详情信息:DEFINED_LoadSDKDLL
CRemoteProcApiCalls::m_bShowLoadingScreen
CRemoteProcApiCalls::m_nMaxLoadingScreenOffers
Global\426F00E8-A1B3-4EB2-8FF8-D6E
SHIMLIB_LOG_MUTEX
CSDKApi::m_bSkipAllOffersTriggered
CSDKApi::m_bDeclineOfferTriggered
CSDKApi::m_bShowSkipAllButton
CSDKApi::m_bShowDeclineButton
Global\223CEB62-A2BC-4E33-BA9B-FCAC6DAAB1BE
m_wndDummyAPIMsgWindow
CTrackingCalls::m_bIsRunningFromReboot
CSDKApi::GetTimeMSFromStartup
CSDKApi::DevModeMessage
CSDKApi::m_strClientSessionID
行为描述:隐藏指定窗口
详情信息:[Window,Class] = [,ComboLBox]
[Window,Class] = [,ED4F2DB9A3D1BCCFBAD2A0]
[Window,Class] = [,995D92B2-4ED9-43A7-D1746F96]
[Window,Class] = [,Button]
[Window,Class] = [3DP Chip,Static]
[Window,Class] = [3DP Chip ,Static]
[Window,Class] = [,Static]
[Window,Class] = [,Auto-Suggest Dropdown]
[Window,Class] = [,#32770]
[Window,Class] = [显示细节(&D),Button]
行为描述:查找指定窗口
详情信息:NtUserFindWindowEx: [Class,Window] = [ED4F2DB9A3D1BCCFBAD2A0,]
NtUserFindWindowEx: [Class,Window] = [995D92B2-4ED9-43A7-D1746F96,]
NtUserFindWindowEx: [Class,Window] = [#32770,]
行为描述:获取系统权限
详情信息:SE_LOAD_DRIVER_PRIVILEGE
行为描述:窗口信息
详情信息:Pid = 408, Hwnd=0xb016a, Text = 简体中文, ClassName = ComboBox.
Pid = 408, Hwnd=0xc01d6, Text = OK, ClassName = Button.
Pid = 408, Hwnd=0xd01c8, Text = Cancel, ClassName = Button.
Pid = 408, Hwnd=0xc01c2, Text = Please select a language., ClassName = Static.
Pid = 408, Hwnd=0xd0180, Text = Installer Language, ClassName = #32770.
Pid = 408, Hwnd=0xb0386, Text = 下一步(&N) &, ClassName = Button.
Pid = 408, Hwnd=0x70362, Text = 取消(&C), ClassName = Button.
Pid = 408, Hwnd=0x7035a, Text = 3DP Chip , ClassName = Static.
Pid = 408, Hwnd=0x6033e, Text = 3DP Chip, ClassName = Static.
Pid = 408, Hwnd=0xa038c, Text = 欢迎使用&3DP Chip v14.11&安装向导, ClassName = Static.
Pid = 408, Hwnd=0x903a8, Text = 这个向导将指引你完成&3DP Chip v14.11&的安装进程。
在开始安装之前，建议先关闭其他所有应用程序。这将允许&安装程序&更新指定的, ClassName = Static.
Pid = 408, Hwnd=0x7035e, Text = 3DP Chip v14.11 安装, ClassName = #32770.
Pid = 408, Hwnd=0x703f2, Text = & 上一步(&P), ClassName = Button.
Pid = 408, Hwnd=0xb0386, Text = 我接受(&I), ClassName = Button.
Pid = 408, Hwnd=0x603d8, Text = 许可证协议, ClassName = Static.
行为描述:打开图片文件
详情信息:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\modern-wizard.bmp
行为描述:创建互斥体
详情信息:DEFINED_LoadSDKDLL
CRemoteProcApiCalls::m_bShowLoadingScreen
CRemoteProcApiCalls::m_nMaxLoadingScreenOffers
Global\426F00E8-A1B3-4EB2-8FF8-D6E
SHIMLIB_LOG_MUTEX
CSDKApi::m_bSkipAllOffersTriggered
CSDKApi::m_bDeclineOfferTriggered
CSDKApi::m_bShowSkipAllButton
CSDKApi::m_bShowDeclineButton
Global\223CEB62-A2BC-4E33-BA9B-FCAC6DAAB1BE
m_wndDummyAPIMsgWindow
CTrackingCalls::m_bIsRunningFromReboot
CSDKApi::GetTimeMSFromStartup
CSDKApi::DevModeMessage
CSDKApi::m_strClientSessionID
行为描述:隐藏指定窗口
详情信息:[Window,Class] = [,ComboLBox]
[Window,Class] = [,ED4F2DB9A3D1BCCFBAD2A0]
[Window,Class] = [,995D92B2-4ED9-43A7-D1746F96]
[Window,Class] = [,Button]
[Window,Class] = [3DP Chip,Static]
[Window,Class] = [3DP Chip ,Static]
[Window,Class] = [,Static]
[Window,Class] = [,Auto-Suggest Dropdown]
[Window,Class] = [,#32770]
[Window,Class] = [显示细节(&D),Button]
行为描述:查找指定窗口
详情信息:NtUserFindWindowEx: [Class,Window] = [ED4F2DB9A3D1BCCFBAD2A0,]
NtUserFindWindowEx: [Class,Window] = [995D92B2-4ED9-43A7-D1746F96,]
NtUserFindWindowEx: [Class,Window] = [#32770,]
行为描述:获取系统权限
详情信息:SE_LOAD_DRIVER_PRIVILEGE
行为描述:窗口信息
详情信息:Pid = 408, Hwnd=0xb016a, Text = 简体中文, ClassName = ComboBox.
Pid = 408, Hwnd=0xc01d6, Text = OK, ClassName = Button.
Pid = 408, Hwnd=0xd01c8, Text = Cancel, ClassName = Button.
Pid = 408, Hwnd=0xc01c2, Text = Please select a language., ClassName = Static.
Pid = 408, Hwnd=0xd0180, Text = Installer Language, ClassName = #32770.
Pid = 408, Hwnd=0xb0386, Text = 下一步(&N) &, ClassName = Button.
Pid = 408, Hwnd=0x70362, Text = 取消(&C), ClassName = Button.
Pid = 408, Hwnd=0x7035a, Text = 3DP Chip , ClassName = Static.
Pid = 408, Hwnd=0x6033e, Text = 3DP Chip, ClassName = Static.
Pid = 408, Hwnd=0xa038c, Text = 欢迎使用&3DP Chip v14.11&安装向导, ClassName = Static.
Pid = 408, Hwnd=0x903a8, Text = 这个向导将指引你完成&3DP Chip v14.11&的安装进程。
在开始安装之前，建议先关闭其他所有应用程序。这将允许&安装程序&更新指定的, ClassName = Static.
Pid = 408, Hwnd=0x7035e, Text = 3DP Chip v14.11 安装, ClassName = #32770.
Pid = 408, Hwnd=0x703f2, Text = & 上一步(&P), ClassName = Button.
Pid = 408, Hwnd=0xb0386, Text = 我接受(&I), ClassName = Button.
Pid = 408, Hwnd=0x603d8, Text = 许可证协议, ClassName = Static.
行为描述:打开图片文件
详情信息:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsf9.tmp\modern-wizard.bmp
动态列表行为
行为描述:数据泄露
详情信息:sink:File operation:write data:data:Rr[
sink:File operation:write data:data:RwZ
sink:File operation:write data:data:&?xml version='1.0' encoding='utf-8' standalone='yes' ?&
&string name=&cuidsec&&HIiQKiG//P3V9/
行为描述:启动服务
详情信息:com.patibility$Service
com.android.mms.transaction.SmsReceiverService
行为描述:读取文件
详情信息:path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:9
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:21
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:96
path:/proc/783/cmdline length:105
path:/proc/799/cmdline length:105
path:/proc/811/cmdline length:105
path:/proc/842/cmdline length:105
path:/proc/852/cmdline length:105
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:9
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:22
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:96
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:7
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.jar length:9
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.jar length:22
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.jar length:96
path:/proc/meminfo length:105
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.jar length:7
path:/proc/875/cmdline length:105
path:/dev/urandom length:14
path:/proc/946/cmdline length:105
path:/proc/948/cmdline length:105
path:/proc/971/cmdline length:105
行为描述:对指定数据计算哈希
详情信息:ZdWpvx74on_restart
ZdWpvx74main_off
ZdWpvx74main_list_msg
FTZNgRJZOBk5
aea559de115cb5a574b8
72ab75b3da9faea559de
yKl76nGU1e7a
17a34502bbf6d472713e
2b69c85e80b817a34502
17bfa94ca3bdcc41on_restarta4d8d0daa3826edc
9ca8fcd150a417ecce58
17bfa94ca3bdcc41main_offa4d8d0daa3826edc
17bfa94ca3bdcc41main_list_msga4d8d0daa3826edc
000000yuJtmxbnRzbmWJnK
ef45N92f053P36cda4d8d0daa3826edc68NK
105ff24a06fa2&da14ec&&QUgUvcaYj0Ztr&&Full Android on Emulator&unknown&511&android 4.1.1&000&&US&en&768&&0&&unknown&Android&generic&
8kij7E105ff24a06fa
com.baidu511da14ec
511da14ece479f53b-f102-48cf-9327-f98ecf3e008d
a2U9dn73sdLs
0cc0dfc8fa8
f973e7d92f650cc0d446
a2U9dn73sdLc
a2U9dn73sdLa
cdf773f4fbe31c6b400b
行为描述:访问URL
详情信息:libcore.net.url.JarURLConnectionImpl:jar:file:/data/app/com..qzone.miaozan-1.apk!/extra/__pasys_remote_banner.jar
libcore.net.http.HttpURLConnectionImpl:/ads/pa/__pasys_remote_banner.php?v=3.68&tp=Full+Android+on+Emulator&os=android&bdr=16
libcore.net.http.HttpURLConnectionImpl:/app.gif
行为描述:数据加密
详情信息:{u'operation': u'encryption', u'data': u'17bfa94ca3bdcc41', u'algorithm': u'PBEWITHMD5andDES'}
{u'operation': u'encryption', u'data': u'a4d8d0daa3826edc', u'algorithm': u'PBEWITHMD5andDES'}
{u'operation': u'keyalgo', u'algorithm': u'AES', u'key': u'51, 48, 50, 49, 50, 49, 48, 50, 100, 105, 99, 117, 100, 105, 97, 98'}
{u'operation': u'encryption', u'data': u'511', u'algorithm': u'AES/ECB/PKCS5Padding'}
{u'operation': u'decryption', u'data': u'511', u'algorithm': u'AES'}
{u'operation': u'encryption', u'data': u'9B78CCB077ABB|753', u'algorithm': u'AES/ECB/PKCS5Padding'}
行为描述:类加载
详情信息:path:/system/app/PicoTts.apk
path:/system/app/MusicFX.apk
path:/system/framework/am.jar
path:/data/app/com..qzone.miaozan-1.apk
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.jar
行为描述:执行SQL查询
详情信息:select QQ,Sid,Cent from Users where ID = 1
select ForMsgs from ForMsgList
select NoForQQ from NoFriendList
select UsId,Name,Sex,Age,MyLog,QQ,Count from Users where ID =1
行为描述:获取用户ID
详情信息:000
行为描述:调用哈希算法
详情信息:MD5
行为描述:缓冲区读取一行数据
详情信息:P3SiI3R9IVx+Upa8H8jFEZBBr46JZCkPd79zDGVnC8fbGuqBuMa91mBuxgCfvtnbSeZnOlYFoJLT
T4gFK5gByZISwVl1+DY9QIhq54GnRkYD5fG/Q9fAAWNVDKZD1HFeSsH+u+Yx39BM+yWkLJCrDwF6
geK052a+d+YLVspBLro=
行为描述:写入文件
详情信息:path:/data/data/com.android.gallery3d/shared_prefs/com.android.gallery3d_preferences.xml length:105
path:/data/data/com.android.musicfx/shared_prefs/musicfx.xml length:105
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:95
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:70
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:52
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:55
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:47
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:50
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:40
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:49
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:58
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:44
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:53
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:49
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:60
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:48
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:49
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:54
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:61
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:48
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:59
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:55
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:55
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:63
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:60
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:61
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:54
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.jar length:66
path:/data/data/com..qzone.miaozan/app_push_lib/plugin-deploy.key length:105
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:80
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:63
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:48
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:50
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:49
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:61
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:54
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:57
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:48
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:52
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:54
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:50
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:50
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:60
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:64
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:50
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:50
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:56
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:52
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:45
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:54
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:56
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:48
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:63
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:49
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:55
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:47
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:49
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:67
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:57
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:60
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:54
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:61
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:51
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:59
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:57
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:59
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:54
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:53
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:61
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:54
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:67
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:68
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:53
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:63
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:64
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:55
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:51
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:44
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:49
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:56
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:58
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:48
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:64
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:48
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:48
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:53
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:60
path:/data/data/com..qzone.miaozan/files/__pasys_remote_banner.tmp.jar length:61
path:/data/data/com.android.gallery3d/shared_prefs/com.android.gallery3d_preferences.xml length:105
path:/data/data/com..qzone.miaozan/shared_prefs/CE149D690D0E8CBB1CBD.xml length:105
path:/data/data/com..qzone.miaozan/shared_prefs/__Baidu_Stat_SDK_SendRem.xml length:105
path:/data/data/com..qzone.miaozan/files/__local_stat_cache.json length:95
path:/data/data/com..qzone.miaozan/shared_prefs/com..qzone.miaozan.push_sync.xml length:105
path:/data/data/com..qzone.miaozan/shared_prefs/pst.xml length:105
行为描述:文件写入初始化
详情信息:Ljava/io/F=/data/data/com..qzone.miaozan/files/i42d45df023jnkdd93la483f9xGFKXI
Ljava/io/F=/data/data/com..qzone.miaozan/files/s92TjjdfoP2n3o9dfji2l9s1olkjf0p
Ljava/io/F=/mnt/sdcard/baidu/.cuid | Z=false
行为描述:初始化Intent
详情信息:Landroid/content/C=com..qzone.miaozan.MainActivity@ | Ljava/lang/C=class com..qzone.miaozan.MainActivity
Ljava/lang/S=com..qzone.miaozan.UaCnMiaoZanService
行为描述:定位移动终端
详情信息:null
行为描述:获取设备ID
详情信息:511
Activities
活动名类型
.MainActivityandroid.intent.action.MAIN
.MainActivityandroid.intent.category.LAUNCHER
.UaCnWebView.webview.service
函数名称信息
java/net/URL;->openConnection连接URL
java/net/HttpURLC->connect连接URL
java/net/URLC->connect连接URL
LocationM->getLastKnownLocation获取地址位置
TelephonyM->getDeviceId搜集用户手机IMEI码、电话号码、系统版本号等信息
HttpC->execute请求远程服务器
DefaultHttpC->execute发送HTTP请求
android/app/NotificationM->notify信息通知栏
getRuntime获取命令行环境
java/lang/R->exec执行字符串命令
PackageM->installPackage安装apk包
ContentR->query读取联系人、短信等数据库
net.youmi.android.AdReceiver应用安装时启动服务
com.baidu.android.pushservice.PushServiceReceiver开机启动服务
com.baidu.android.pushservice.PushServiceReceiver网络连接改变时启动服务
com.baidu.android.pushservice.RegistrationReceiver应用卸载时启动服务
com.baidu百度
net.youmi有米广告
许可名称信息
android.permission.WAKE_LOCK手机屏幕关闭后后台进程仍运行
android.permission.INTERNET连接网络（2G或3G）
android.permission.READ_PHONE_STATE读取电话状态
android.permission.ACCESS_NETWORK_STATE读取网络状态（2G或3G）
android.permission.ACCESS_COARSE_LOCATION获取粗略的位置（通过wifi、基站）
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.WRITE_EXTERNAL_STORAGE写外部存储器（如：SD卡）
android.permission.ACCESS_WIFI_STATE读取wifi网络状态
android.permission.CHANGE_WIFI_STATE改变WIFI连接状态
android.permission.RECORD_AUDIO录音（使用AudioRecord）
android.permission.VIBRATE允许设备震动
android.permission.CAMERA访问照相机设备
com.android.browser.permission.READ_HISTORY_BOOKMARKS读取浏览器书签
com.android.launcher.permission.INSTALL_SHORTCUT创建快捷方式
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS写浏览器书签
android.permission.RECEIVE_BOOT_COMPLETED接收开机启动广播
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.DISABLE_KEYGUARD禁用键盘锁
android.permission.SYSTEM_ALERT_WINDOW显示系统窗口
android.permission.GET_TASKS获取有关当前或最近运行的任务信息
android.permission.RESTART_PACKAGES重启其他程序
android.permission.READ_LOGS读取系统日志
android.permission.WRITE_SETTINGS读写系统设置项
com..qzone.miaozan.UaCnMiaoZanService
net.youmi.android.AdService
net.youmi.android.ExpService
com.baidu.android.pushservice.PushService
res/drawable/baiyan.png
res/drawable/baobao.png
res/drawable/baoquan.png
res/drawable/bianbian.png
0xb115a212
res/drawable/bishi.png
res/drawable/chahan.png
0x9f80dad6
res/drawable/ciya.png
res/drawable/com_titlebar_backbtn.png
0x23abf76a
res/drawable/deyi.png
0xc9542587
res/drawable/fadai.png
0xd94f8c7a
res/drawable/fanu.png
0x4ec9f17a
res/drawable/gouyin.png
0x71b2679c
res/drawable/haixiu.png
0x3c20a8cd
res/drawable/han.png
res/drawable/hanxiao.png
0x12d7602f
res/drawable/honglian.png
0x304e8a4c
res/drawable/huaixiao.png
0xefe1c515
res/drawable/jingkong.png
0xac9f9746
res/drawable/keai.png
0xca7671db
res/drawable/kelian.png
0x7dc5c42b
res/drawable/koubi.png
res/drawable/ku.png
0x7937ff49
res/drawable/kuaikule.png
0x1c5f7e78
res/drawable/kuqi.png
0xd1068ceb
res/drawable/liuhan.png
0x83055a6d
res/drawable/liulei.png
0x20e20358
res/drawable/my_button.xml
res/drawable/my_button_01.xml
0xf86468fe
res/drawable/my_button_1.xml
res/drawable/my_checkbox.xml
0x803fa6d7
res/drawable/outu.png
0xcc47bd0f
res/drawable/piezui.png
0x1a65c529
res/drawable/qiang.png
0x1aba6add
res/drawable/qiaoda.png
0x73f0ae8c
res/drawable/qinqin.png
0x167d02e6
res/drawable/ruo.png
0xf3fa2930
res/drawable/se.png
0x3efa65a6
res/drawable/shengli.png
0x4b300c16
res/drawable/shuijiao.png
0xfb781378
res/drawable/tiaowu.png
res/drawable/touxiao.png
0xd2013dde
res/drawable/tushe.png
0x5994fd5f
res/drawable/weiqu.png
0xcab45725
res/drawable/weixiao.png
0xd212a652
res/drawable/wen.png
0xf6904b24
res/drawable/woshou.png
res/drawable/xia.png
res/drawable/xu.png
0x1e958590
res/drawable/yihuo.png
0xdd5c3865
res/drawable/yiwen.png
res/drawable/youhengheng.png
0xf308b5a9
res/drawable/yuehui.png
0xa11a4ae7
res/drawable/yun.png
0xff853c93
res/drawable/zaijian.png
res/drawable/zhemo.png
0xf57c8c3d
res/drawable/zhouma.png
0xca68e638
res/drawable/zhuakuang.png
0x923d2ce8
res/drawable/zhutou.png
0xff780427
res/layout/activity_chat.xml
0x54b2c0ef
res/layout/activity_chatlist.xml
0xac779883
res/layout/activity_main.xml
0x3d30eeae
res/layout/activity_uacnwebview.xml
0x8bfe8198
res/layout/buju_chat_list_layout.xml
0x760c07e9
res/layout/buju_chat_msg_0_right_layout.xml
0x7b0f57af
res/layout/buju_chat_msg_1_left_layout.xml
0x5ce95b7c
res/layout/buju_face_gridview_layout.xml
0x1cd197bd
res/layout/buju_no_zanfriend_layout.xml
res/layout/buju_zan_list_layout.xml
res/layout/buju_zan_msg_list_layout.xml
0x71513cbd
res/layout/dialog_add_friend.xml
0xf9fdb5cb
res/layout/dialog_add_sms.xml
0x13ccc746
res/layout/dialog_exit.xml
0x5701681a
res/layout/dialog_image_show.xml
0xa34412a2
res/layout/dialog_loading.xml
0x9ef5d190
res/layout/dialog_myedit_layout.xml
0xc4247f3f
res/layout/dialog_qqlogin.xml
0xbb12dec3
res/layout/dialog_web_login.xml
0x77407f69
res/layout/dialog_zp_setinggs.xml
0x8a4e9f36
res/layout/sus_customdef_notification_dialog.xml
0x24ff1e6a
res/layout/sus_download_notification.xml
0xb5e9a8da
res/layout/sus_installapk_notification.xml
0x5a294d4c
res/layout/sus_notification_dialog.xml
res/layout/sus_updateinfo_dialog.xml
res/menu/activity_main.xml
0x847bbcac
res/raw/login.wav
0x63b86cbb
res/raw/new_message.ogg
0xed4672c8
res/raw/newmsg.wav
0x1a0322ea
res/raw/z.wav
0xbfb9d283
AndroidManifest.xml
0xa09b9df3
resources.arsc
0x800dd130
res/drawable-hdpi/acm_inputbox.9.png
0xc079e1b0
res/drawable-hdpi/bg_of_alldialog.9.png
res/drawable-hdpi/bg_of_bossactivity_bottom_tab.png
res/drawable-hdpi/bg_of_circle_newsubject_function.png
0xb78daf87
res/drawable-hdpi/bg_of_circleselete_press.png
0x60fcd636
res/drawable-hdpi/bg_of_shake.png
0x9b2ef464
res/drawable-hdpi/chat_img_my.9.png
0xa5308704
res/drawable-hdpi/chat_img_ta.9.png
0xb69e8c9a
res/drawable-hdpi/checkbox_checked.png
0xa3fe3b71
res/drawable-hdpi/checkbox_unchecked.png
res/drawable-hdpi/close.png
0x578a945a
res/drawable-hdpi/common_titlebar_backbtn_press.9.png
0xb27966c0
res/drawable-hdpi/dialog_login_bj.jpg
0x3d79d75e
res/drawable-hdpi/dmm.png
0xa6640c48
res/drawable-hdpi/dmn.png
0xa4da0dfd
res/drawable-hdpi/dot_selected.png
0xdc73daf1
res/drawable-hdpi/face.png
0x740a3f76
res/drawable-hdpi/ic_action_search.png
0x64275be8
res/drawable-hdpi/ic_back.png
res/drawable-hdpi/ic_customer_dialog_btn_press.9.png
0x6a26093a
res/drawable-hdpi/ic_launcher.png
0xe26c21b1
res/drawable-hdpi/ic_message_details_left.9.png
0xdf32b2b6
res/drawable-hdpi/ic_quan_1.png
0xe4145b86
res/drawable-hdpi/line_of_bossactivity_menu.png
0xf9b7711c
res/drawable-hdpi/qapp_center_qz_bg_webveiw.png
0xe54b5314
res/drawable-hdpi/qapp_center_qz_bg_webveiw_line.png
0xf68a9fb8
res/drawable-hdpi/qq_doodle_bg_body.png
0x24974a7e
res/drawable-hdpi/qzone_login_bj_1.png
0x4ceb7395
res/drawable-hdpi/sus_notification_install_icon.png
0xf5e1c1d2
res/drawable-hdpi/sus_notify_bg.png
0x8c8a0b62
res/drawable-hdpi/sus_progressicon.png
0xf5e1c1d2
res/drawable-hdpi/transport_anim_2.png
0x7f7633a4
res/drawable-hdpi/wb_square_icon_weibo.png
0x7c9f3fd6
res/drawable-ldpi/ic_launcher.png
0xe26c21b1
res/drawable-ldpi/sus_notification_install_icon.png
0xf5e1c1d2
res/drawable-ldpi/sus_notify_bg.png
0x8c8a0b62
res/drawable-ldpi/sus_progressicon.png
0xf5e1c1d2
res/drawable-mdpi/ic_action_search.png
0xb4091fdc
res/drawable-mdpi/ic_launcher.png
0xe26c21b1
res/drawable-mdpi/sus_notification_install_icon.png
0xf5e1c1d2
res/drawable-mdpi/sus_notify_bg.png
0x8c8a0b62
res/drawable-mdpi/sus_progressicon.png
0xf5e1c1d2
res/drawable-xhdpi/ic_action_search.png
0x3294aee3
res/drawable-xhdpi/ic_launcher.png
0xe26c21b1
classes.dex
0xe7d377c4
assets/frontia_plugin/plugin-deploy.jar
0xd73592e4
assets/frontia_plugin/plugin-deploy.key
0xea2f3f42
extra/__pasys_remote_banner.jar
0xf5cebf75
lib/armeabi/libbdpush_V2_1.so
0x18a71c63
lib/mips/libbdpush_V2_1.so
0xa1a1f877
META-INF/MANIFEST.MF
0x8b5454d6
META-INF/CERT.SF
0xeb6ecf03
META-INF/CERT.RSA
0x423cc199
File upload
Please not close this windows,
If you do not have to upload response time, make sure you upload files less than 20M
You can view the results of the last scan or rescan}
我要回帖
更多关于 装系统之前怎么备份 的文章
更多推荐
- ·挑水扁担扁担答数字打一个数字是几？
- ·什么是相对过剩和绝对过剩经济内涵的界定
- ·黄金买卖黄金交易手续费怎么算是多少啊？
- ·银监会可以查询个人全部银行信息吗调查账户利息多少合适
- ·天安合众人寿保险股份有限公司司领导致辞
- ·北京倪氏善缘餐饮管理有限公司在北京什么地方
- ·淘气堡室内游乐场价格要多少
- ·商业银行对公存折销户消户需要代什么东西
- ·空心进口铝合金长条框架（长条）填入了木头，请问哪种进口铝合金长条材料叫什么？
- ·金税盘开票软件移动开票张数多如何快捷
- ·安圭县天荒坪绿泰小型家庭农场设计项目
- ·你好，请问在学校办的建设银建行龙卡注销通没有激活，不用了，需要注销吗？
- ·用yii和laravell和yii不用comsper可以吗，不用这个工具可以做项目吗！
- ·为什么微信通讯录里有的联系人不显示
- ·这个是什么情况？怎么修复？
- ·国内外有什么支持 nodejs不支持2003系统 的云服务吗
- ·小米路由器无线桥接优缺点Pro和荣耀路由Pro对比，都有哪些优缺点
- ·被钓鱼网站的诈骗手法骗了能退回钱吗
- ·自学了1年php想找工作，想问一下去合肥诺博源工作怎么样？
- ·Documents and seting在装系统备份wnd7时要备份?
- ·洛阳电子保险柜柜上的R键和B键是什么意思？
- ·这个温度，湿度测量软件怎么读数的？？？？？？！！
- ·奥特兄弟偶然的机会机会获得过免费流量，上瘾了。哪里才能找到类似的流量活动？
- ·大学生开发校园App需要多长时间
- ·最近最火的减肥产品什么方面的产品比较火？
- ·如何快乐十+分北京快乐8稳赚技巧+巧word文档怎么加密？
- ·目前国内比较好的新闻网站，或者app？不得不说，现在百度新闻UC新闻腾讯事业群哪个比较好新闻简直就是狗屎！
- ·用电脑传过来的书面佣金合同书书在法律上能用吗?
- ·2009cad 激活码。cad申请号是什么 PTT2 P6FR Z96W L153 QQ3X 0K5S 。求激活码
- ·微信人工拉票哪个便宜团队哪家速度快
- ·求一份扣丁学堂 安卓视频学习下载，由于在老家不能上网想一份下载学习。
- ·AG官网下载接口提交ajax data参数传不全不全什么意思__
- ·注册三级建筑公司注册公司的流程及费用用定州
- ·2000-2010年间我玩的一个电脑2000年单机游戏戏。
- ·高通骁龙435跑分怎么样
