Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.Click.234
- Android.RemoteCode.88.origin
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) c.s####.co:80
- TCP(HTTP/1.1) ads.dofun####.com:80
- TCP(HTTP/1.1) c11.la4.down####.####.com:7080
- TCP(HTTP/1.1) 2####.177.13.68:8288
- TCP(HTTP/1.1) a####.bat####.net:80
- TCP(HTTP/1.1) c7.la4.down####.####.com:7080
- TCP(HTTP/1.1) c1.la4.down####.####.com:80
- TCP(HTTP/1.1) clinkad####.com:80
- TCP(HTTP/1.1) c4.la4.down####.####.com:7080
- TCP(HTTP/1.1) clk.ar####.co:80
- TCP(HTTP/1.1) atracki####.appf####.com:80
- TCP(HTTP/1.1) wa####.go2c####.org:80
- TCP(HTTP/1.1) d####.9####.com:7080
- TCP(HTTP/1.1) trac####.le####.com:80
- TCP(HTTP/1.1) trac####.suma####.com:80
- TCP(HTTP/1.1) wild####.9appsin####.com.####.net:80
- TCP(HTTP/1.1) aws.smarter####.net:80
- TCP(HTTP/1.1) c2.la4.down####.####.com:7080
- TCP(HTTP/1.1) s####.mob####.b####.com:80
- TCP(HTTP/1.1) t####.iches####.net:80
- TCP(HTTP/1.1) c5.la4.down####.####.com:7080
- TCP(HTTP/1.1) api.mob####.b####.com:80
- TCP(HTTP/1.1) gl####.ymtrac####.com:80
- TCP(HTTP/1.1) www.zfr####.com:80
- TCP(HTTP/1.1) ap####.mobi:80
- TCP(HTTP/1.1) www.mmmmmm####.com:80
- TCP(HTTP/1.1) 1####.179.9.106:80
- TCP(HTTP/1.1) c1.la4.down####.####.com:7080
- TCP(HTTP/1.1) trac####.pubt####.com:80
- TCP(HTTP/1.1) 1####.254.223.129:80
- TCP(HTTP/1.1) mo.freeind####.com:80
- TCP(HTTP/1.1) c12.la4.down####.####.com:7080
- TCP(HTTP/1.1) c10.la4.down####.####.com:7080
- TCP(HTTP/1.1) www.jp####.com:80
- TCP(HTTP/1.1) c3.la4.down####.####.com:7080
- TCP(HTTP/1.1) www.cu####.com:80
- TCP(HTTP/1.1) ap####.mobisen####.com:80
- TCP(HTTP/1.1) c####.gowa####.com:80
- TCP(HTTP/1.1) www.admobim####.com:80
- TCP(HTTP/1.1) 2####.127.76.213:80
- TCP(HTTP/1.1) cl####.ads####.com:80
- TCP(TLS/1.0) 1####.217.17.46:443
- TCP(TLS/1.0) 1####.254.223.129:443
- TCP(TLS/1.0) 1####.168.64.254:37864
- TCP(TLS/1.0) perso####.click:443
- TCP(TLS/1.0) googl####.g.doublec####.net:443
- TCP(TLS/1.0) g####.gl:443
- TCP(TLS/1.0) 1####.179.9.96:44353
- TCP(TLS/1.0) cdn.9app####.com.####.net:443
- TCP(TLS/1.0) app.ad####.com:443
- TCP(TLS/1.0) img.u####.com:443
- TCP(TLS/1.0) y####.ali####.com:443
- TCP(TLS/1.0) www.9####.com:443
- TCP(TLS/1.0) www.google-####.com:443
- TCP(TLS/1.0) 1####.168.64.254:43015
- TCP(TLS/1.0) pag####.googles####.com:443
- TCP(TLS/1.0) clk.tap####.com:443
DNS requests:
- a####.bat####.net
- ads.dofun####.com
- adser####.go####.com
- adser####.go####.nl
- akw.e####.space
- ap####.mobi
- ap####.mobisen####.com
- api.migh####.com
- api.mob####.b####.com
- app.ad####.com
- atracki####.appf####.com
- aws.smarter####.net
- c####.gowa####.com
- c.s####.co
- c1.la4.down####.####.com
- c10.la4.down####.####.com
- c11.la4.down####.####.com
- c12.la4.down####.####.com
- c2.la4.down####.####.com
- c3.la4.down####.####.com
- c4.la4.down####.####.com
- c5.la4.down####.####.com
- c7.la4.down####.####.com
- cdn.9app####.com
- cl####.ads####.com
- clinkad####.com
- clk.ar####.co
- clk.tap####.com
- d####.9####.com
- g####.gl
- gl####.ymtrac####.com
- googl####.g.doublec####.net
- hl####.down####.9appsin####.com
- img.u####.com
- mo.freeind####.com
- o####.d####.9####.com
- pag####.googles####.com
- perso####.click
- s####.mob####.b####.com
- t####.iches####.net
- trac####.le####.com
- trac####.pubt####.com
- trac####.suma####.com
- us.y####.al####.com
- wa####.go2c####.org
- www.9####.com
- www.admobim####.com
- www.cu####.com
- www.google-####.com
- www.jp####.com
- www.mmmmmm####.com
- www.zfr####.com
HTTP GET requests:
- 1####.254.223.129/9apps/share?appSize=####&packageName=####&versionCode=...
- 1####.254.223.129/app.bizAlsoLike?sid=####&app=####&packageName=####&bet...
- 1####.254.223.129/app.editRecommend?app=####&packageName=####&versionCod...
- 1####.254.223.129/app.mustHaveColumns?app=####&versionCode=####&versionN...
- 1####.254.223.129/app.personalRecommend?app=####&packageName=####&versio...
- 1####.254.223.129/app/keywordWithTag?app=####&versionCode=####&versionNa...
- 1####.254.223.129/client/check/task?app=####&versionCode=####&versionNam...
- 1####.254.223.129/config.get?app=####&keys=####&versionCode=####&version...
- 1####.254.223.129/config?app=####&versionCode=####&versionName=####&um_c...
- 1####.254.223.129/config?app=####&versionCode=####&versionName=####&ver=...
- 1####.254.223.129/get/msg?app=####&updateTime=####&versionCode=####&vers...
- 1####.254.223.129/get/msg?app=####&versionCode=####&versionName=####&um_...
- 1####.254.223.129/installer/whitelist?app=####&versionCode=####&versionN...
- 1####.254.223.129/messageUser?app=####&versionCode=####&versioncode=####...
- 1####.254.223.129/price.comprasionSwitch?app=####&versionCode=####&versi...
- 1####.254.223.129/resourceBundle.getResource?app=####&versionCode=####&v...
- 1####.254.223.129/selfTrigger.getMsg?app=####&versionCode=####&versionNa...
- 1####.254.223.129/topic/5637.json?app=####&versionCode=####&versionName=...
- 1####.254.223.129/user/property?app=####&versionCode=####&versionName=##...
- 1####.254.223.129/v3/app/com.chen.yifa.seven.json?sid=####&app=####&vers...
- 1####.254.223.129/v3/app/com.housejoy.consumer.activity.json?sid=####&ap...
- 1####.254.223.129/v3/app/com.opera.mini.android.json?sid=####&app=####&v...
- 1####.254.223.129/v3/app/com.superopt.cleaner.json?sid=####&app=####&ver...
- 1####.254.223.129/v3/app/com.uc.browser.en.json?sid=####&app=####&versio...
- 1####.254.223.129/v3/check-for-update.json?app=####&packageName=####&ver...
- 1####.254.223.129/v3/page/template?sid=####&app=####&versionCode=####&ve...
- a####.bat####.net/call/v2/ad/click?recommend_id=####&ads_id=####&aff_id=...
- ads.dofun####.com/acs.php?sid=####&adid=####&pb=####&os=####&osv=####&ga...
- ap####.mobi/red/9e5cd11f-686f-11e6-8b9b-0cc47a44dbaa/?alg=####&clickid=#...
- ap####.mobisen####.com/index.php?m=####&p=####&app_id=####&offer_id=####...
- api.mob####.b####.com/index.php?r=####
- api.mob####.b####.com/index.php?r=####&al=####&l=####&p=####&hp=####&lc=...
- api.mob####.b####.com/strategy/api/v1/rule/get?p=####&hp=####&l=####&c=#...
- atracki####.appf####.com/transaction/post_click?offer_id=####&aff_id=###...
- aws.smarter####.net/index.php?m=####&p=####&app_id=####&offer_id=####&ga...
- c####.gowa####.com/click?transaction_id=wadogo_WAdvAppthisNewAPI_304213_...
- c####.gowa####.com/click?transaction_id=wadogo_WAdvPubNativeNewAPI_30359...
- c.s####.co/api/v4/click?campaign_id=####&publisher_id=####&rt=####&_po=#...
- c1.la4.down####.####.com/upload/9appsshare_musthave/2017/12/9/16/45724ed...
- c1.la4.down####.####.com/upload/9appsshare_musthave/2017/12/9/16/ebde481...
- c1.la4.down####.####.com:7080/group1/M00/08/F5/qYYBAFebrVqAIRKTAAAJH3Lpz...
- c1.la4.down####.####.com:7080/group1/M00/3C/D8/qIYBAFfWCtSAUgxhAAAPWUosZ...
- c1.la4.down####.####.com:7080/group1/M00/3C/F4/p4YBAFfWC0eAFrvGAAAKdmCuB...
- c1.la4.down####.####.com:7080/group1/M00/76/22/qYYBAFf_EsSANI-NAAANZCQoX...
- c1.la4.down####.####.com:7080/group1/M01/55/B4/pYYBAFdEpYGAZ3scAAAXn1sFr...
- c1.la4.down####.####.com:7080/group1/M02/2D/B0/qYYBAFiziLOALCNKAABMKlGRS...
- c1.la4.down####.####.com:7080/group1/M02/A9/96/pYYBAFiAiJOAeWczAAAiBoS_e...
- c1.la4.down####.####.com:7080/group2/M00/67/F6/RA0DAFoSpbqAewkCAAB4_g3Nm...
- c1.la4.down####.####.com:7080/group2/M00/7D/68/QQ0DAFoXhEqAApXaAAAb06Rxq...
- c1.la4.down####.####.com:7080/group2/M00/B1/CB/RA0DAFl27VaAKBTbAAAVoPHb1...
- c1.la4.down####.####.com:7080/group2/M00/C1/28/QQ0DAFnu_cGAFNWkAAAQzHQtL...
- c1.la4.down####.####.com:7080/group2/M00/C8/7E/RA0DAFmLzSKABf6_AAAJA-yL-...
- c1.la4.down####.####.com:7080/group2/M00/D0/EC/RA0DAFmUM8iACHlmAAAOm2XVd...
- c1.la4.down####.####.com:7080/group2/M00/EE/55/RA0DAFo8ZmeAFZGZAAAQ76pow...
- c1.la4.down####.####.com:7080/group2/M00/F4/C7/RQ0DAFo-XeuAAyusAAAOx18sC...
- c1.la4.down####.####.com:7080/group2/M00/F4/E3/RA0DAFo-aFiAJZXiAAAchxPBa...
- c1.la4.down####.####.com:7080/group2/M01/C1/29/RQ0DAFnu_cGAUTMoAAAZgz1gz...
- c1.la4.down####.####.com:7080/group2/M01/C5/A1/RA0DAFmJRWWAPcmnAAAVy24Km...
- c1.la4.down####.####.com:7080/group2/M01/E8/02/QQ0DAFo6DlmAaOsWAAAT1vzVS...
- c1.la4.down####.####.com:7080/group2/M01/F4/E5/RA0DAFo-aJCATr0BAAAK7K4Ay...
- c1.la4.down####.####.com:7080/group2/M02/7F/4C/QQ0DAFoYUCmAKD4UAAAekK9yh...
- c1.la4.down####.####.com:7080/group2/M02/91/63/RA0DAFld3HeAcGHAAAAKgO9T_...
- c1.la4.down####.####.com:7080/group2/M02/D0/EC/Qg0DAFmUM8qADUxOAAAYev1FL...
- c1.la4.down####.####.com:7080/group2/M02/F4/C8/Qg0DAFmvqL6AKZpsAAAWnGW-M...
- c10.la4.down####.####.com:7080/group1/M00/A2/4F/qYYBAFgt55GAXuQSAAAQpAaS...
- c10.la4.down####.####.com:7080/group1/M01/43/A2/qIYBAFcEQBaALxN5AAAdB10I...
- c10.la4.down####.####.com:7080/group1/M01/55/B4/poYBAFdEpYGAIgxYAAAYcc8c...
- c10.la4.down####.####.com:7080/group1/M02/A9/E3/poYBAFiAiJGAORxFAAAg0YIV...
- c10.la4.down####.####.com:7080/group1/M02/E3/75/qIYBAFiAiJCAB21DAAAR9irT...
- c10.la4.down####.####.com:7080/group1/M02/E3/75/qIYBAFiAiJKAC07xAAALqLk-...
- c10.la4.down####.####.com:7080/group2/M00/7C/65/RQ0DAFoXQquAAQiVAAAcBP1h...
- c10.la4.down####.####.com:7080/group2/M00/B6/FC/Qg0DAFl6_UKAZoKfAAAWuFj9...
- c10.la4.down####.####.com:7080/group2/M00/C1/28/Qg0DAFnu_cCAdRnpAAAUApYq...
- c10.la4.down####.####.com:7080/group2/M00/C4/A3/RA0DAFoqLpaAOxyZAAAdi6uo...
- c10.la4.down####.####.com:7080/group2/M00/E5/40/RQ0DAFo4gkqAPLQ-AAAfV778...
- c10.la4.down####.####.com:7080/group2/M00/EB/82/RA0DAFo7kHiAG6NIAAALF_mN...
- c10.la4.down####.####.com:7080/group2/M01/DF/50/RQ0DAFo0jpOAO20bAAAKYCty...
- c10.la4.down####.####.com:7080/group2/M01/E8/1D/RQ0DAFo6HmeAPiT4AAAHPLE0...
- c10.la4.down####.####.com:7080/group2/M01/EC/CF/QQ0DAFmsmfGAFhEyAAAdhBfC...
- c10.la4.down####.####.com:7080/group2/M01/F4/E3/RQ0DAFo-aHaAMKFgAAAMagR2...
- c10.la4.down####.####.com:7080/group2/M02/2C/01/RA0DAFoGAcyAWAACAAAYantj...
- c10.la4.down####.####.com:7080/group2/M02/C1/28/QQ0DAFnu_cGAKTksAAAcSDxa...
- c10.la4.down####.####.com:7080/group2/M02/D0/F2/QQ0DAFouiF6ALHT7AAAMbGTb...
- c10.la4.down####.####.com:7080/group2/M02/DF/66/QQ0DAFmmGeSAOlJkAAAQkKjy...
- c10.la4.down####.####.com:7080/group2/M02/E8/B9/RQ0DAFmrKeuACDCwAAAMGvIK...
- c11.la4.down####.####.com:7080/group1/M00/31/D7/qoYBAFjbB62AX--BAAAJ4-s6...
- c11.la4.down####.####.com:7080/group1/M00/8F/5D/p4YBAFdEpYGAeebmAAAUDi3q...
- c11.la4.down####.####.com:7080/group1/M01/8F/41/qIYBAFdEpYGAKh-xAAATgv5e...
- c11.la4.down####.####.com:7080/group1/M02/98/D0/qoYBAFhUnGOASV7nAAAaPeu8...
- c11.la4.down####.####.com:7080/group1/M02/A9/96/pYYBAFiAiJWAbX1DAAAUZqr1...
- c11.la4.down####.####.com:7080/group1/M02/CC/AF/qoYBAFiAiHmAPxswAAAK0fvf...
- c11.la4.down####.####.com:7080/group2/M00/A3/9E/RQ0DAFnmvPaAALi5AAAKDlID...
- c11.la4.down####.####.com:7080/group2/M00/C1/32/RA0DAFnvATOAN0F5AAAJC7Ge...
- c11.la4.down####.####.com:7080/group2/M00/D0/EC/QQ0DAFmUM8qACDyfAAAXgh4V...
- c11.la4.down####.####.com:7080/group2/M00/D4/19/QQ0DAFnzjg6AQwEQAAALZosR...
- c11.la4.down####.####.com:7080/group2/M00/DB/6C/Qg0DAFoycAWAD7UGAAAWC20r...
- c11.la4.down####.####.com:7080/group2/M00/E0/07/Qg0DAFo1NdqAYw4WAAAS0XRG...
- c11.la4.down####.####.com:7080/group2/M00/E1/27/QQ0DAFmn55aAGBmRAAAKqyx-...
- c11.la4.down####.####.com:7080/group2/M00/F4/E3/QQ0DAFo-Z92AW6m7AAAcoUm6...
- c11.la4.down####.####.com:7080/group2/M01/41/8A/QQ0DAFoK08aAfK60AAAUb-SJ...
- c11.la4.down####.####.com:7080/group2/M01/CE/57/RQ0DAFmRdLqAb8hEAAAKibsR...
- c11.la4.down####.####.com:7080/group2/M01/DE/70/RA0DAFo0CP2AYE2JAAARm9dJ...
- c11.la4.down####.####.com:7080/group2/M01/EA/B2/QQ0DAFo7VR6ABespAAAjYLv8...
- c11.la4.down####.####.com:7080/group2/M01/ED/68/RQ0DAFo8Js-AErIWAAAlmSa3...
- c11.la4.down####.####.com:7080/group2/M01/F4/E5/QQ0DAFo-aJaAOLmGAAAcQRbQ...
- c11.la4.down####.####.com:7080/group2/M02/25/F2/QQ0DAFkb7feATqrjAAAbiOUh...
- c11.la4.down####.####.com:7080/group2/M02/C0/B6/Qg0DAFoo-KSAHgY5AAAk90vI...
- c11.la4.down####.####.com:7080/group2/M02/D7/DF/QQ0DAFow3gSAP75VAAASP4Ou...
- c11.la4.down####.####.com:7080/group2/M02/F4/E3/QQ0DAFo-Z9CARPs6AAANRRUh...
- c12.la4.down####.####.com:7080/group1/M00/7C/6C/qIYBAFkH_DWATu_FAAASB8Cw...
- c12.la4.down####.####.com:7080/group1/M00/8F/5D/p4YBAFdEpYGAMkcsAAAZiLX7...
- c12.la4.down####.####.com:7080/group1/M01/53/90/pYYBAFgrYrOAOIo5AAALix_j...
- c12.la4.down####.####.com:7080/group1/M01/55/B4/poYBAFdEpYGAQxIyAAAS00IQ...
- c12.la4.down####.####.com:7080/group1/M02/1B/7F/poYBAFjkiMqAT9LyAAAP9NZW...
- c12.la4.down####.####.com:7080/group2/M00/40/AF/Qg0DAFkpz9iAaC5hAAAgg5lI...
- c12.la4.down####.####.com:7080/group2/M00/46/9F/RQ0DAFnJtTmAfk_zAABgSZqo...
- c12.la4.down####.####.com:7080/group2/M00/92/6D/QQ0DAFocUGaAEyIHAAAmAptw...
- c12.la4.down####.####.com:7080/group2/M00/9D/2A/Qg0DAFlnEB6AcNoGAAALbQJ5...
- c12.la4.down####.####.com:7080/group2/M00/C0/FB/RA0DAFopESiAEemyAAATLZPS...
- c12.la4.down####.####.com:7080/group2/M00/D8/2F/RA0DAFow9uKAXiQRAAAhJwlj...
- c12.la4.down####.####.com:7080/group2/M00/EC/1A/Qg0DAFn4BcaAYQR-AAAXEJ-_...
- c12.la4.down####.####.com:7080/group2/M00/F4/E3/RA0DAFo-aHuAZ79zAAAfgaOZ...
- c12.la4.down####.####.com:7080/group2/M01/0F/B9/RA0DAFm6UOWAXShAAAAi6tbt...
- c12.la4.down####.####.com:7080/group2/M01/51/CE/RQ0DAFkzXl-AcfanAAAatbCF...
- c12.la4.down####.####.com:7080/group2/M01/56/46/Qg0DAFoOsyqAE5eEAAAELvI-...
- c12.la4.down####.####.com:7080/group2/M01/5A/89/RQ0DAFk43smAYNPqAAAhjlJ_...
- c12.la4.down####.####.com:7080/group2/M01/9C/F7/RA0DAFlm7GqAE2A1AAAUfUlb...
- c12.la4.down####.####.com:7080/group2/M01/9F/14/RA0DAFloxR6ARjtuAAATps8Z...
- c12.la4.down####.####.com:7080/group2/M01/B0/86/RQ0DAFl1sBKAJVmJAAAW8gp3...
- c12.la4.down####.####.com:7080/group2/M01/D9/1A/Qg0DAFoxNM-AHXC-AAALkdyb...
- c12.la4.down####.####.com:7080/group2/M01/E8/01/RA0DAFo6DfmAN-ZjAAANi3rM...
- c12.la4.down####.####.com:7080/group2/M01/EA/3E/RQ0DAFo7MvqAdbiEAAAb9IvL...
- c12.la4.down####.####.com:7080/group2/M02/4F/55/Qg0DAFoNaNKABG_iAAAMGhhT...
- c12.la4.down####.####.com:7080/group2/M02/9D/2A/RA0DAFlnEACAPZ6EAAAQeUEK...
- c12.la4.down####.####.com:7080/group2/M02/C4/75/Qg0DAFmIBuOARO0nAAARaJ4E...
- c12.la4.down####.####.com:7080/group2/M02/DA/58/Qg0DAFox4jOAa7N5AAAIrLYT...
- c12.la4.down####.####.com:7080/group2/M02/DD/BE/Qg0DAFozmaKAbUhSAAAbBEeS...
- c2.la4.down####.####.com:7080/group1/M00/55/B4/pYYBAFdEpYGAZEykAAAVSQKVN...
- c3.la4.down####.####.com:7080/group1/M00/43/BA/pYYBAFgZWHSAaatcAAAQaj3Tp...
- c3.la4.down####.####.com:7080/group1/M00/96/C7/poYBAFeEHHyAHF8LAAAWwGvwb...
- c3.la4.down####.####.com:7080/group1/M00/A0/87/pYYBAFeIE5qAGtWvAAAUa4jwU...
- c3.la4.down####.####.com:7080/group1/M02/29/02/q4YBAFiAiJaAHo75AAAO9cU7E...
- c3.la4.down####.####.com:7080/group1/M02/DB/7D/poYBAFiuTiOAd2bkAAC0SzxG_...
- c3.la4.down####.####.com:7080/group2/M00/50/6D/QQ0DAFnMnf-AeKKoAAASlJjX1...
- c3.la4.down####.####.com:7080/group2/M00/9B/CD/RA0DAFoeri-AeqX3AAAQl2ED4...
- c3.la4.down####.####.com:7080/group2/M00/EB/82/RA0DAFo7kHiAG6NIAAALF_mNY...
- c3.la4.down####.####.com:7080/group2/M01/5E/68/Qg0DAFk65IuAFsqhAAAdpu9rw...
- c3.la4.down####.####.com:7080/group2/M01/B1/41/Qg0DAFnprzSAUViQAAAV678Dm...
- c3.la4.down####.####.com:7080/group2/M01/B1/81/RA0DAFl2qLKAHCPrAAAV_hZkc...
- c3.la4.down####.####.com:7080/group2/M01/E3/37/RA0DAFo3QOKAKcOmAAAMdyX3C...
- c3.la4.down####.####.com:7080/group2/M01/F4/E2/Qg0DAFo-aDSAcpY8AAALmMXJL...
- c3.la4.down####.####.com:7080/group2/M02/A0/98/RQ0DAFoftyeADE7-AAAWHxBuH...
- c3.la4.down####.####.com:7080/group2/M02/C5/02/QQ0DAFnwfQOAVF0CAAAMlz2Ot...
- c3.la4.down####.####.com:7080/group2/M02/E6/7E/QQ0DAFo5SBGATn1cAAAhDkokr...
- c4.la4.down####.####.com:7080/group1/M00/0C/69/qIYBAFawKwqAdxwsAAAjZ735K...
- c4.la4.down####.####.com:7080/group1/M01/8F/41/qIYBAFdEpYGAeXJBAAA0NvmSD...
- c4.la4.down####.####.com:7080/group1/M02/2B/F0/qIYBAFjCveeABNHeAAAgaxpRL...
- c4.la4.down####.####.com:7080/group1/M02/F6/64/qYYBAFiAiJSAHePDAAASxVezs...
- c4.la4.down####.####.com:7080/group2/M00/09/59/RA0DAFm3rRGARmnVAAAWU9csY...
- c4.la4.down####.####.com:7080/group2/M00/18/F7/Qg0DAFkVe-iAe6AjAAALXksbw...
- c4.la4.down####.####.com:7080/group2/M00/85/37/QQ0DAFndEvaASYefAAAimoMsJ...
- c4.la4.down####.####.com:7080/group2/M00/A0/98/RA0DAFoftyeANVmFAAAWB1Zbu...
- c4.la4.down####.####.com:7080/group2/M00/A0/98/RQ0DAFoftyeAThSgAAAbW3-e6...
- c4.la4.down####.####.com:7080/group2/M00/C0/FB/RA0DAFopESaAFRUsAAATLZPSk...
- c4.la4.down####.####.com:7080/group2/M00/C1/28/RA0DAFnu_cGAWYSzAAAQe2nO8...
- c4.la4.down####.####.com:7080/group2/M00/D4/D3/RA0DAFov2d6ACy-pAAAOYTOEu...
- c4.la4.down####.####.com:7080/group2/M00/D9/8D/Qg0DAFmemR2AT8I_AAAK53qjJ...
- c4.la4.down####.####.com:7080/group2/M00/E5/40/RQ0DAFo4gkqAPLQ-AAAfV778M...
- c4.la4.down####.####.com:7080/group2/M00/EE/48/Qg0DAFo8ZNyAfeu5AAAX14SEV...
- c4.la4.down####.####.com:7080/group2/M00/F4/E2/Qg0DAFo-aDuAV0AaAAAalRbw6...
- c4.la4.down####.####.com:7080/group2/M01/8B/68/QQ0DAFnftx2AH2LmAAAi1qff5...
- c4.la4.down####.####.com:7080/group2/M01/94/5D/RA0DAFlf9mmAJJBsAAAf30CeV...
- c4.la4.down####.####.com:7080/group2/M01/C0/F4/RQ0DAFopDbyAQ88VAAAQjWys7...
- c4.la4.down####.####.com:7080/group2/M01/D9/7D/RA0DAFmegN-ARpJFAAAJQBYv9...
- c4.la4.down####.####.com:7080/group2/M01/FA/98/RA0DAFn63pyANXgJAAAKcivto...
- c4.la4.down####.####.com:7080/group2/M02/46/F7/QQ0DAFoL_pSAKYSCAAAGUmb0q...
- c4.la4.down####.####.com:7080/group2/M02/49/AD/RA0DAFoMiPaANUi8AAAd2QXvx...
- c4.la4.down####.####.com:7080/group2/M02/B0/86/Qg0DAFl1sA-AIRtKAAAQsknS0...
- c4.la4.down####.####.com:7080/group2/M02/C1/28/Qg0DAFnu_cCAB6gpAAASFeclS...
- c4.la4.down####.####.com:7080/group2/M02/C1/28/RQ0DAFnu_cGAKcd3AAATkVIdU...
- c4.la4.down####.####.com:7080/group2/M02/D9/99/Qg0DAFoxex-AePMMAAAanaep1...
- c4.la4.down####.####.com:7080/group2/M02/E0/E5/RQ0DAFmnommAGO5DAAAWcNIcb...
- c5.la4.down####.####.com:7080/group1/M01/3C/15/qIYBAFb9FmGAKlElAAAeiq2rQ...
- c5.la4.down####.####.com:7080/group1/M01/D2/D8/poYBAFeqZxiACY5lAAAO2SSCg...
- c5.la4.down####.####.com:7080/group1/M02/0A/C7/q4YBAFhmW9uAPRECAAAQyfKX2...
- c5.la4.down####.####.com:7080/group2/M01/99/D0/Qg0DAFnksN-AS-8LAAAMR3Hft...
- c5.la4.down####.####.com:7080/group2/M01/A7/DB/Qg0DAFlu3MyAI2--AAATxKPB9...
- c5.la4.down####.####.com:7080/group2/M01/C0/F2/Qg0DAFopDbeAWhxQAAAJs-wvg...
- c5.la4.down####.####.com:7080/group2/M01/D0/EC/RA0DAFmUM8qABTsBAAARQObQw...
- c5.la4.down####.####.com:7080/group2/M01/F4/E3/RA0DAFo-aFGAUfV9AAAMyrXOO...
- c5.la4.down####.####.com:7080/group2/M02/06/AF/Qg0DAFm19--AAB_-AABBw2w0h...
- c5.la4.down####.####.com:7080/group2/M02/06/AF/RQ0DAFm19-aAKl9rAAAIuFNwT...
- c5.la4.down####.####.com:7080/group2/M02/24/BC/RQ0DAFkbUWuAIj0nAAAjDffk4...
- c5.la4.down####.####.com:7080/group2/M02/5B/62/Qg0DAFnP4HiAOYJVAAAhvVL1T...
- c7.la4.down####.####.com:7080/group1/M00/92/33/p4YBAFdHT9OAYoABAAAbrSlKk...
- c7.la4.down####.####.com:7080/group1/M02/F6/64/qYYBAFiAiJCAaQ3CAAAP5k-5v...
- c7.la4.down####.####.com:7080/group2/M00/0A/C8/RA0DAFm4fnyAVqhuAAAfDmMtP...
- c7.la4.down####.####.com:7080/group2/M00/0C/01/QQ0DAFm5AbCAFxlaAAANOXG7O...
- c7.la4.down####.####.com:7080/group2/M00/C1/28/RA0DAFnu_cGAc2cDAAAarfZTi...
- c7.la4.down####.####.com:7080/group2/M00/C1/38/Qg0DAFnvBKOAT5QyAAARQQI3H...
- c7.la4.down####.####.com:7080/group2/M00/D0/EC/RQ0DAFmUM8qAJqJ0AAAlaQFRK...
- c7.la4.down####.####.com:7080/group2/M00/D8/60/QQ0DAFmdMKmALs0rAABYLUUAM...
- c7.la4.down####.####.com:7080/group2/M01/A0/98/QQ0DAFoftyeAFUQsAAAJ8YTtV...
- c7.la4.down####.####.com:7080/group2/M01/B9/46/RQ0DAFl9j8OAPQjpAAAd7qNEe...
- c7.la4.down####.####.com:7080/group2/M01/C1/28/RQ0DAFnu_cGATc8EAAAOhlBcz...
- c7.la4.down####.####.com:7080/group2/M01/D0/F2/QQ0DAFouiGCAfDBXAAALS6WJ8...
- c7.la4.down####.####.com:7080/group2/M01/D7/DF/RA0DAFow3gaASwRpAAAdWz-td...
- c7.la4.down####.####.com:7080/group2/M02/73/C9/RA0DAFoVPJ-AbU9UAAAPcPxUi...
- c7.la4.down####.####.com:7080/group2/M02/9A/21/RA0DAFoeIaiAJfmzAAAhinQta...
- cl####.ads####.com/index.php?m=####&p=####&app_id=####&offer_id=####&cli...
- clinkad####.com/tracking?camp=####&pubid=####&sid=####&subpubid=####&sid...
- clk.ar####.co/aff_c?offer_id=####&aff_id=####&aff_sub=####&sub_channel=#...
- d####.9####.com:7080/group1/M02/A9/28/pYYBAFiAJoWAcgtPAABRUYwleNE270.gif
- d####.9####.com:7080/group2/M00/EF/E1/RA0DAFo835WAFF4pAAHgzqC627U456.jpg
- gl####.ymtrac####.com/trace?offer_id=####&app_id=####&type=####&aff_sub=...
- t####.iches####.net/click?id=####&aff=####&ost=####&click=####&aff_sub=#...
- t####.iches####.net/track?id=####&aff=####&ost=####&click=####&aff_sub=#...
- trac####.le####.com/click?mb_pl=####&mb_nt=####&mb_campid=####&click_id=...
- trac####.pubt####.com/click?offer_id=####&sub_id=####&click_id=####&gaid...
- trac####.suma####.com/aff_c?offer_id=####&aff_id=####&aff_click_id=####&...
- trac####.suma####.com/aff_c?offer_id=####&aff_id=####&aff_sub=####&aff_s...
- trac####.suma####.com/aff_r?offer_id=132084&aff_id=6595&url=http://clink...
- trac####.suma####.com/aff_r?offer_id=328149&aff_id=3599&url=http://click...
- trac####.suma####.com/aff_r?offer_id=328766&aff_id=5323&url=http://click...
- wa####.go2c####.org/aff_c?offer_id=####&aff_id=####&aff_sub=####&aff_sub...
- wild####.9appsin####.com.####.net/9apps/rs/2017/095d11eed622abce02f497ab...
- wild####.9appsin####.com.####.net/9apps/rs/2017/4b2f1db3a6b518500218048b...
- wild####.9appsin####.com.####.net/9apps/rs/2017/6305256264d7b2a316e7076e...
- wild####.9appsin####.com.####.net/9apps/rs/2017/8e4ac78852a9e9b5ec2aedf8...
- wild####.9appsin####.com.####.net/9apps/rs/2017/9bf863d46dbb8e4d1b40c8e4...
- wild####.9appsin####.com.####.net/9apps/rs/2017/9d6d992b2f3b681b5c3e810f...
- wild####.9appsin####.com.####.net/9apps/rs/2017/a1d444fcfdf4547c0302859b...
- wild####.9appsin####.com.####.net/9apps/rs/2017/a79a3ccb104082ef23759396...
- wild####.9appsin####.com.####.net/9apps/rs/2017/e66ef203f9a415e1d2e4c97a...
- wild####.9appsin####.com.####.net/9apps/rs/2017/e84aedcdd5e3bc039ea95752...
- www.cu####.com/20171221152034.ExpDex_5.2.1_20171221.zip
- www.jp####.com/click/ssp/click?channel=####&uuid=####&id=####&aoid=####&...
HTTP POST requests:
- 1####.254.223.129/checkPublishStatus?app=####&gzip=####&versionCode=####...
- 1####.254.223.129/user/check-increment-update.json?app=####&gzip=####&ve...
- mo.freeind####.com/detail/getOfferListNew?enc=####
- s####.mob####.b####.com/cgi-bin-py/ad_sdk.cgi?ty=####&enc=####&bt=####
- www.admobim####.com/surl/api2_reg.action
- www.jp####.com/tracking/ds?sdk_version=####&platform=####&app_version=##...
- www.jp####.com/tracking/uc?sdk_version=####&platform=####&app_version=##...
- www.mmmmmm####.com/osp/oaen_get.action?tasktype=####&imei=####&imsi=####...
- www.mmmmmm####.com/osp/oaen_reg.action
- www.zfr####.com/up.do
Modified file system:
Creates the following files:
- <Package Folder>/HasStarted
- <Package Folder>/app_SGLib/####/libsgmainso-5.3.7011.so.tmp
- <Package Folder>/app_SGLib/####/lock.lock
- <Package Folder>/app_expose_log/1512540052666
- <Package Folder>/app_expose_log/1512540063570
- <Package Folder>/app_jniLibs/libcrash_1.5.0.0.so
- <Package Folder>/app_message_cache/a39704e6de27c3188615dbeff42f744e
- <Package Folder>/app_refresh_cache/f40cd568057278248a47d87960e8605d
- <Package Folder>/app_stat_log3/1512540022371
- <Package Folder>/app_stat_log3/1512540032626
- <Package Folder>/app_stat_log3/1512540042746
- <Package Folder>/app_stat_log3/1512540053110
- <Package Folder>/app_stat_log3/1512540063635
- <Package Folder>/app_stat_log3/1512540074018
- <Package Folder>/app_wa/####/11gpsdfe_1512540013335002092.wa
- <Package Folder>/app_wa/####/11gpsdfe_1512540048295002092.wa
- <Package Folder>/app_wa/####/12hqtegf_1512540055706002092.wa
- <Package Folder>/app_wa/####/13irufhg_1512540015931002092.wa
- <Package Folder>/app_wa/####/13irufhg_1512540057867002092.wa
- <Package Folder>/app_wa/####/14jsvgih_1512540019080002092.wa
- <Package Folder>/app_wa/####/16luxikj_1512540041986002092.wa
- <Package Folder>/app_wa/####/17mvyjlk_1512540042286002092.wa
- <Package Folder>/app_wa/####/19ox0lnm_1512540044648002092.wa
- <Package Folder>/app_wa/####/42u0uvgo_1512540015930002092.wa
- <Package Folder>/app_wa/####/45x3xyjr_1512540041985002092.wa
- <Package Folder>/app_wa/####/480601mu_1512540042963002092.wa
- <Package Folder>/cache/####/089ab40fa9a938f092ccbe8e21d3b3df.0.tmp
- <Package Folder>/cache/####/089ab40fa9a938f092ccbe8e21d3b3df.1.tmp
- <Package Folder>/cache/####/0cfcd8b3f107b8fa4239ee7fc906eeb4.0.tmp
- <Package Folder>/cache/####/0cfcd8b3f107b8fa4239ee7fc906eeb4.1.tmp
- <Package Folder>/cache/####/0d29fa017ec29d94452123fdb3b664ba.0.tmp
- <Package Folder>/cache/####/0d29fa017ec29d94452123fdb3b664ba.1.tmp
- <Package Folder>/cache/####/12bdd4ba55265520e08ae79dc564cc26.0.tmp
- <Package Folder>/cache/####/12bdd4ba55265520e08ae79dc564cc26.1.tmp
- <Package Folder>/cache/####/1aef961a9e30af323f16849d982a79e6.0.tmp
- <Package Folder>/cache/####/1aef961a9e30af323f16849d982a79e6.1.tmp
- <Package Folder>/cache/####/1ddbdf38d7fc13471f6432bce6133ab9.0.tmp
- <Package Folder>/cache/####/1ddbdf38d7fc13471f6432bce6133ab9.1.tmp
- <Package Folder>/cache/####/241837ba026ca051f5d402e138d05d84.0.tmp
- <Package Folder>/cache/####/241837ba026ca051f5d402e138d05d84.1.tmp
- <Package Folder>/cache/####/28481249cf763712b39fe8566fb5d680.0.tmp
- <Package Folder>/cache/####/28481249cf763712b39fe8566fb5d680.1.tmp
- <Package Folder>/cache/####/311e267656da70a466f9dc926fd5d53f.0.tmp
- <Package Folder>/cache/####/311e267656da70a466f9dc926fd5d53f.1.tmp
- <Package Folder>/cache/####/328a07e34160169f0e245ea5492c3b16.0.tmp
- <Package Folder>/cache/####/328a07e34160169f0e245ea5492c3b16.1.tmp
- <Package Folder>/cache/####/365298614ee790aac312fe859df69402.0.tmp
- <Package Folder>/cache/####/365298614ee790aac312fe859df69402.1.tmp
- <Package Folder>/cache/####/52c6e492c6371f05ea24d5a21173b60a.0.tmp
- <Package Folder>/cache/####/52c6e492c6371f05ea24d5a21173b60a.1.tmp
- <Package Folder>/cache/####/52d444e25fc1138a191af19d74ee9236.0.tmp
- <Package Folder>/cache/####/52d444e25fc1138a191af19d74ee9236.1.tmp
- <Package Folder>/cache/####/5591ee97da6230b988ec9ab3c5b0b188.0.tmp
- <Package Folder>/cache/####/5591ee97da6230b988ec9ab3c5b0b188.1.tmp
- <Package Folder>/cache/####/5af00ff3ed0edfc5efd971b18be8f4b6.0.tmp
- <Package Folder>/cache/####/5af00ff3ed0edfc5efd971b18be8f4b6.1.tmp
- <Package Folder>/cache/####/5f73335bdfea62a3823d2f0a683ed2ad.0.tmp
- <Package Folder>/cache/####/5f73335bdfea62a3823d2f0a683ed2ad.1.tmp
- <Package Folder>/cache/####/61cedbacd55077321a953ba9ddca7e3d.0.tmp
- <Package Folder>/cache/####/61cedbacd55077321a953ba9ddca7e3d.1.tmp
- <Package Folder>/cache/####/631d8f340b81a3172a7431959864a006.0.tmp
- <Package Folder>/cache/####/631d8f340b81a3172a7431959864a006.1.tmp
- <Package Folder>/cache/####/7999bd907c4a893bd20a17a7321f5593.0.tmp
- <Package Folder>/cache/####/7999bd907c4a893bd20a17a7321f5593.1.tmp
- <Package Folder>/cache/####/7ab1313fa331c4ba5e8289b415679990.0.tmp
- <Package Folder>/cache/####/7ab1313fa331c4ba5e8289b415679990.1.tmp
- <Package Folder>/cache/####/840507b134a4ce7404c50f62fdb6155c.0.tmp
- <Package Folder>/cache/####/840507b134a4ce7404c50f62fdb6155c.1
- <Package Folder>/cache/####/847936a2cc32afbff384c7bf0a8f3395.0.tmp
- <Package Folder>/cache/####/847936a2cc32afbff384c7bf0a8f3395.1.tmp
- <Package Folder>/cache/####/90666b46c70a6c17cd588cce41ca21cb.0.tmp
- <Package Folder>/cache/####/90666b46c70a6c17cd588cce41ca21cb.1.tmp
- <Package Folder>/cache/####/9379731318cab9e9448ad7bdbcb7a4f5.0.tmp
- <Package Folder>/cache/####/9379731318cab9e9448ad7bdbcb7a4f5.1.tmp
- <Package Folder>/cache/####/93e6c73eeb465ac6cb0eadcd593a5cf0.0.tmp
- <Package Folder>/cache/####/93e6c73eeb465ac6cb0eadcd593a5cf0.1.tmp
- <Package Folder>/cache/####/9a61db52e55591639a49c6cf2dbe0c02.0.tmp
- <Package Folder>/cache/####/9a61db52e55591639a49c6cf2dbe0c02.1.tmp
- <Package Folder>/cache/####/9d90e776e59b5f8fc07322214a5cd7e2.0.tmp
- <Package Folder>/cache/####/9d90e776e59b5f8fc07322214a5cd7e2.1.tmp
- <Package Folder>/cache/####/a723347c7186ad97592fc36b0d22a0f6.0.tmp
- <Package Folder>/cache/####/a723347c7186ad97592fc36b0d22a0f6.1.tmp
- <Package Folder>/cache/####/a8fc77d15db6ac25e7ddd5741c47a333.0.tmp
- <Package Folder>/cache/####/a8fc77d15db6ac25e7ddd5741c47a333.1.tmp
- <Package Folder>/cache/####/a9887306cbb27529c32eaa874b0ffa0f.0.tmp
- <Package Folder>/cache/####/a9887306cbb27529c32eaa874b0ffa0f.1.tmp
- <Package Folder>/cache/####/b0ca14f3dfda6277dab379bd559af271.0.tmp
- <Package Folder>/cache/####/b0ca14f3dfda6277dab379bd559af271.1.tmp
- <Package Folder>/cache/####/bc2f2b0b62d96e467514f818da17e67c.0.tmp
- <Package Folder>/cache/####/bc2f2b0b62d96e467514f818da17e67c.1.tmp
- <Package Folder>/cache/####/c0cb5c1be992b2920a262ae33a1c93ef.0.tmp
- <Package Folder>/cache/####/c0cb5c1be992b2920a262ae33a1c93ef.1.tmp
- <Package Folder>/cache/####/d6f86ce6f9fc5905f6c6c4833fa6e187.0.tmp
- <Package Folder>/cache/####/d6f86ce6f9fc5905f6c6c4833fa6e187.1.tmp
- <Package Folder>/cache/####/d97e97bfa0da0cfa033a1073f2a2e654.0.tmp
- <Package Folder>/cache/####/d97e97bfa0da0cfa033a1073f2a2e654.1.tmp
- <Package Folder>/cache/####/da1bb944a6cbafad06eaed01b5ccc04e.0.tmp
- <Package Folder>/cache/####/da1bb944a6cbafad06eaed01b5ccc04e.1.tmp
- <Package Folder>/cache/####/data_0
- <Package Folder>/cache/####/data_1
- <Package Folder>/cache/####/data_2
- <Package Folder>/cache/####/data_3
- <Package Folder>/cache/####/e06520310c6e9b00345c3987389a7bb7.0.tmp
- <Package Folder>/cache/####/e06520310c6e9b00345c3987389a7bb7.1.tmp
- <Package Folder>/cache/####/e550106a1439da8591945f1379d0a1f7.0.tmp
- <Package Folder>/cache/####/e550106a1439da8591945f1379d0a1f7.1.tmp
- <Package Folder>/cache/####/ee77ba1396a59b7e5e83587c6a8c7d66.0.tmp
- <Package Folder>/cache/####/ee77ba1396a59b7e5e83587c6a8c7d66.1.tmp
- <Package Folder>/cache/####/ef0d9f64760746e6f97c74cfeba90053.0.tmp
- <Package Folder>/cache/####/ef0d9f64760746e6f97c74cfeba90053.1.tmp
- <Package Folder>/cache/####/f9f70e1df235f9f7c806dac21e806277.0.tmp
- <Package Folder>/cache/####/f9f70e1df235f9f7c806dac21e806277.1.tmp
- <Package Folder>/cache/####/f_000001
- <Package Folder>/cache/####/f_000002
- <Package Folder>/cache/####/f_000003
- <Package Folder>/cache/####/f_000004
- <Package Folder>/cache/####/fac483cefc1a19349a7bea4efe9aafbd.0.tmp
- <Package Folder>/cache/####/fac483cefc1a19349a7bea4efe9aafbd.1.tmp
- <Package Folder>/cache/####/fbfd8f3958ae9ff0cf1d196ebc2eacc2.0.tmp
- <Package Folder>/cache/####/fbfd8f3958ae9ff0cf1d196ebc2eacc2.1.tmp
- <Package Folder>/cache/####/index
- <Package Folder>/cache/####/journal.tmp
- <Package Folder>/crashsdk/####/PPAIDNI0ELIBOM0MOC.bb
- <Package Folder>/crashsdk/####/PPAIDNI0ELIBOM0MOC.ff
- <Package Folder>/crashsdk/####/PPAIDNI0ELIBOM0MOC.meminfo
- <Package Folder>/crashsdk/####/PPAIDNI0ELIBOM0MOC.pid
- <Package Folder>/crashsdk/####/PPAIDNI0ELIBOM0MOC.ps
- <Package Folder>/crashsdk/####/PPAIDNI0ELIBOM0MOC.start
- <Package Folder>/crashsdk/####/PPAIDNI0ELIBOM0MOC.time
- <Package Folder>/crashsdk/####/PPAIDNI0ELIBOM0MOC.uptime
- <Package Folder>/crashsdk/####/REKROW1PPAIDNI0ELIBOM0MOC.bb
- <Package Folder>/crashsdk/####/unique
- <Package Folder>/databases/9apps.db-journal
- <Package Folder>/databases/WaValue.db-journal
- <Package Folder>/databases/adblib.db-journal
- <Package Folder>/databases/downloader-journal
- <Package Folder>/databases/mc_cache.db-journal
- <Package Folder>/databases/message-journal
- <Package Folder>/databases/my.db
- <Package Folder>/databases/my.db-journal
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/databases/webviewCookiesChromium.db-journal
- <Package Folder>/files/####/home_app_data_us.json
- <Package Folder>/files/####/hot_word_data_us.json
- <Package Folder>/files/0a231bd8575dcf72.txt
- <Package Folder>/files/SGMANAGER_DATA2.tmp
- <Package Folder>/files/d.zip
- <Package Folder>/files/daemon
- <Package Folder>/files/dc27d27059335d35cf
- <Package Folder>/files/dtemp.apk
- <Package Folder>/files/google.db
- <Package Folder>/files/ob1.zip
- <Package Folder>/files/sp.lock
- <Package Folder>/files/w.zip
- <Package Folder>/no_backup/com.google.android.gms.appid-no-backup
- <Package Folder>/shared_prefs/3710d74b68e6af8cade5ec187cc0f996dabc7e3c.xml
- <Package Folder>/shared_prefs/9apps.xml
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/ActivatePreUtil.xml
- <Package Folder>/shared_prefs/AdsBusiness-data.xml
- <Package Folder>/shared_prefs/Alvin2.xml
- <Package Folder>/shared_prefs/BusinessPreUtil.xml
- <Package Folder>/shared_prefs/ContextData.xml
- <Package Folder>/shared_prefs/LoginPreUtil.xml
- <Package Folder>/shared_prefs/OfferPreUtil.xml
- <Package Folder>/shared_prefs/SYSTEM_CACHE.xml
- <Package Folder>/shared_prefs/SYSTEM_CACHE.xml.bak
- <Package Folder>/shared_prefs/aps.xml
- <Package Folder>/shared_prefs/apsad.xml
- <Package Folder>/shared_prefs/apscomm.xml
- <Package Folder>/shared_prefs/check_publish_status.xml
- <Package Folder>/shared_prefs/cn_rs.xml
- <Package Folder>/shared_prefs/com.google.android.gms.appid.xml
- <Package Folder>/shared_prefs/device_info.xml
- <Package Folder>/shared_prefs/dns_cache.xml
- <Package Folder>/shared_prefs/f4acd030da61bd739ac44e37218b4567f7dd880f.xml
- <Package Folder>/shared_prefs/ffc1d42b1ca5e3db2657d00b91997f6a.xml
- <Package Folder>/shared_prefs/hunter_config.xml
- <Package Folder>/shared_prefs/install_list_info.xml
- <Package Folder>/shared_prefs/m_cfg.xml
- <Package Folder>/shared_prefs/other_config.xml
- <Package Folder>/shared_prefs/service_config.xml
- <Package Folder>/shared_prefs/sp_config.xml
- <Package Folder>/shared_prefs/t_ini.xml
- <Package Folder>/shared_prefs/upgrade_config.xml
- <Package Folder>/shared_prefs/worker_preferences.xml
- <Package Folder>/tiny_wa/1512540029831.wa
- <SD-Card>/.DataStorage/ContextData.xml
- <SD-Card>/.UTSystemConfig/####/Alvin2.xml
- <SD-Card>/.androidsystem/####/gads.db
- <SD-Card>/.com.taobao.dp/dd7893586a493dc3
- <SD-Card>/.com.taobao.dp/hid.dat
- <SD-Card>/9appsPro/####/libcrash_1.5.0.0.so.tmp
- <SD-Card>/Android/####/.nomedia
- <SD-Card>/Android/####/0125af0c5f3c54b606c053c2f4eb74d85e917b46....0.tmp
- <SD-Card>/Android/####/051da74a38a1a5fdcb42457226037f5fc2b935be....0.tmp
- <SD-Card>/Android/####/06df4686ebaab1c774e09938a921d5d09a765670....0.tmp
- <SD-Card>/Android/####/071d84e5e556358acc41e63c625a828731b53954....0.tmp
- <SD-Card>/Android/####/0774fa6f7a516fc94ca0df7754502e0cd276da5a....0.tmp
- <SD-Card>/Android/####/08f88d72f6e426180fda44dd85b5af16b20ad003....0.tmp
- <SD-Card>/Android/####/09723ef7624c8287049d1e198df4eafb7f84adb4....0.tmp
- <SD-Card>/Android/####/09a9618d1cf04b2f2762c390b1e5185fdfefe9af....0.tmp
- <SD-Card>/Android/####/0a3e6110353181604aa651b29663e215f350c293....0.tmp
- <SD-Card>/Android/####/0a6780c656e2d5bc7edbcd3e7d2491c70dc7eb87....0.tmp
- <SD-Card>/Android/####/0aa83f6ef81e38f171c9f5d96ca5852b5fa67c91....0.tmp
- <SD-Card>/Android/####/0b50164c4f2d8c92fbe39875400b692b8b7a2721....0.tmp
- <SD-Card>/Android/####/0f9609adc1c40c7a9a08e12faf3e197f7a5695aa....0.tmp
- <SD-Card>/Android/####/102bc6928ef56105c9d572293be6a25f710cfbc0....0.tmp
- <SD-Card>/Android/####/11d957f978b1920aa3940bd509532bd028ae7694....0.tmp
- <SD-Card>/Android/####/12d76bcc9701e7143bfa08de8e29b3f80f9dffb1....0.tmp
- <SD-Card>/Android/####/13f9404317c6a4811df68becee831faf01094eff....0.tmp
- <SD-Card>/Android/####/145968325e596f0ee1aee224e6f655ec50d2e3c7....0.tmp
- <SD-Card>/Android/####/14d308048a7674df39ede12a9acd08463c7fcb99....0.tmp
- <SD-Card>/Android/####/152d7c86e46a2b3c53727a3087cf0421f0baf85d....0.tmp
- <SD-Card>/Android/####/17ab3230e58a83f2f3fdc6f50d1af34747097924....0.tmp
- <SD-Card>/Android/####/17b56a448cf01c110558e7b19c0729fd3e7a095c....0.tmp
- <SD-Card>/Android/####/17beb01eac81534f430339e7d5f68542fdf448ed....0.tmp
- <SD-Card>/Android/####/18868b78ad3ec93be0f7fa77c3553dbb6825f468....0.tmp
- <SD-Card>/Android/####/18f46ccc14c5f64b28efc6befecee445988adb9c....0.tmp
- <SD-Card>/Android/####/1912d912a19926478ba65be6fd90d4e68cedba9d....0.tmp
- <SD-Card>/Android/####/191a02b5cdc7680d7a5d16da119a88603032b478....0.tmp
- <SD-Card>/Android/####/1dade39fd2e20d3205655e7a1fefdd9fc7e38524....0.tmp
- <SD-Card>/Android/####/1f3d21b1ba1668c6b24109885c1bc862277a8aaf....0.tmp
- <SD-Card>/Android/####/203efcb36b9fae565bc42590bfdaa9ea0fb8fbf5....0.tmp
- <SD-Card>/Android/####/204a1d7a81cdeb90b5c614906bf7b0c79a832e1d....0.tmp
- <SD-Card>/Android/####/237af98a15dbd61e2551a55d9639ca12cd858219....0.tmp
- <SD-Card>/Android/####/2521aecb61b6f60b2714d0eed8d2a00de82ace11....0.tmp
- <SD-Card>/Android/####/25d7af3963e4f4a53864d21e5391ea322166ff4d....0.tmp
- <SD-Card>/Android/####/25f557d49022663af1326ba9c027e420c220c944....0.tmp
- <SD-Card>/Android/####/2703866d8112e2c7ff0376196627d0bde47fa4b7....0.tmp
- <SD-Card>/Android/####/280441e713ce629051b2a053eee290436f11f33e....0.tmp
- <SD-Card>/Android/####/2825dc778badbf565633e6396d0b4d28e8febbf5....0.tmp
- <SD-Card>/Android/####/28a8561808f4f357453380d7af714b519b38a456....0.tmp
- <SD-Card>/Android/####/29bfdb2dabb3372a40b12fb694ca9b68d7a3e988....0.tmp
- <SD-Card>/Android/####/3181eff870a0f50ff64aaaf096dbbef9b0733022....0.tmp
- <SD-Card>/Android/####/31ceac589d3e5d93e74942ce473cbffc2fa4fd1a....0.tmp
- <SD-Card>/Android/####/36dabedd5746889454edefbc64344e6c2a757b93....0.tmp
- <SD-Card>/Android/####/378e0fb201136c891937995f99099443a7dbffa9....0.tmp
- <SD-Card>/Android/####/39bbfedc32663862ca32e225c0e89bfc5a05170b....0.tmp
- <SD-Card>/Android/####/3c40454af6705706830640afc4b82bf2e8d88fe4....0.tmp
- <SD-Card>/Android/####/3e8c00a29edcb6d3a18cd8fdfddc59749f70adef....0.tmp
- <SD-Card>/Android/####/3e9cf002cce415921552f341e4346f6d519a42d5....0.tmp
- <SD-Card>/Android/####/3f38ce2251881320f87fced6de9dc89ad325ad84....0.tmp
- <SD-Card>/Android/####/401033db9ba50f02c3de87c647db40ee193a02b5....0.tmp
- <SD-Card>/Android/####/4042dd17b02ab859b0b0f196fb2b7c646f442328....0.tmp
- <SD-Card>/Android/####/4155e765c5d3f054418ab71a5e056e4f2259d00d....0.tmp
- <SD-Card>/Android/####/418a2e22bc8cceb44718b3bb75a2badfd7077281....0.tmp
- <SD-Card>/Android/####/4a56be5bb954aa17c22edcb202afcde80dca8adb....0.tmp
- <SD-Card>/Android/####/4a5963308ed3b30407236425169368cc2b61ce53....0.tmp
- <SD-Card>/Android/####/4b8cbeb386158a01e6495c6ac5283ed33d8ab892....0.tmp
- <SD-Card>/Android/####/4d73602e8117f64bdca1e94dc8bada7ac21590b1....0.tmp
- <SD-Card>/Android/####/4df6925bb339c2a1f687407bf88ef1d864587d65....0.tmp
- <SD-Card>/Android/####/4e8762af0f4bb4899b0b390803cebf0d0d500bbc....0.tmp
- <SD-Card>/Android/####/4f237336b72527507cf358af52efaa6596ed8514....0.tmp
- <SD-Card>/Android/####/4fbde5d95bfc2134072cb2d0f8f8c69f29bbcd13....0.tmp
- <SD-Card>/Android/####/5150ef978a7f1ca2819e2d1e05fe1535e439f9d3....0.tmp
- <SD-Card>/Android/####/517364510838872a574c243d3b7873907aafe2e5....0.tmp
- <SD-Card>/Android/####/55aed28976587702a6de2d1f93cdc0aba6b6a4bd....0.tmp
- <SD-Card>/Android/####/55eb38a0509ed3ace8b41cb76aa89ec1140bf0d0....0.tmp
- <SD-Card>/Android/####/56b93353aa3a6f93fe32d529cf24e99988225a50....0.tmp
- <SD-Card>/Android/####/57f055a30cc57670a75ee0088b6acaf3fd46964a....0.tmp
- <SD-Card>/Android/####/585a7cec69637cc88702d644128eedef96913a4b....0.tmp
- <SD-Card>/Android/####/586fe37e56cfc2be21e753eeabe7c8756145acbf....0.tmp
- <SD-Card>/Android/####/58e92f3ee95af0d31a273523c199c3366ab9c0ed....0.tmp
- <SD-Card>/Android/####/5eb6fc1b929637e18acaee2053ad69374bdb1f23....0.tmp
- <SD-Card>/Android/####/5f0801329591cd674ba1a209ac6c2e609b1d32c8....0.tmp
- <SD-Card>/Android/####/5fbda158c7ccbdbb49f8a8dd1e43cd422d27620f....0.tmp
- <SD-Card>/Android/####/6201421b524ee4f22dbc6c8c5e3c7915591b21a1....0.tmp
- <SD-Card>/Android/####/62482fabc7342bcee7d105fbfa6fd921bdcb4c87....0.tmp
- <SD-Card>/Android/####/652b81992b55fe44df10621f8ccf415ce2b9a80e....0.tmp
- <SD-Card>/Android/####/6554a107a513e51df16cf6ea243ce4a71a65afa5....0.tmp
- <SD-Card>/Android/####/6610b73c74547ca504ecca7bfe3882b11485131d....0.tmp
- <SD-Card>/Android/####/67567b0a40c5939c196be7546442e70a8b7fe98a....0.tmp
- <SD-Card>/Android/####/67f7c84eace106845b4dda5d236ce36dd072585d....0.tmp
- <SD-Card>/Android/####/6aa274fab8c91b331c816e8845eb50ddb1253cde....0.tmp
- <SD-Card>/Android/####/6abd20673598f3c7678e29e90d523f8b4ec6106e....0.tmp
- <SD-Card>/Android/####/6c6ec4642f4a7390f692b7995acf82d72bca2d96....0.tmp
- <SD-Card>/Android/####/6ce7d58308d8df094c6d81e7fe1fb6d36769d2fd....0.tmp
- <SD-Card>/Android/####/6e4502fbb463bca2261f4d7fba90f28673374fd4....0.tmp
- <SD-Card>/Android/####/6e51be3ad5ded5d3364f64ed77d03c4a6d531447....0.tmp
- <SD-Card>/Android/####/71347fcb3404292df7b77840bc243c5380854879....0.tmp
- <SD-Card>/Android/####/77bf64fde892b1872a359832fa9fc37927d4768a....0.tmp
- <SD-Card>/Android/####/7839665fe0fe3d9ebc4fdfb6fb77d343fe281a24....0.tmp
- <SD-Card>/Android/####/7b70c5f6826055fab8410ac687ce4068ecf4b0f7....0.tmp
- <SD-Card>/Android/####/7bcabf5ecd51f4a8992f525ffa29c02634f0b780....0.tmp
- <SD-Card>/Android/####/7c7b2080e45fda4963452dbc2de806676e6886a6....0.tmp
- <SD-Card>/Android/####/7e10fab99a35b2e4ea8dce9591a61d02790b3612....0.tmp
- <SD-Card>/Android/####/7e4a540bf00f0dd7e86a1066f4a4ef35c0bf406b....0.tmp
- <SD-Card>/Android/####/7fa761f684b2dd223a430c29091a7043e849b5f4....0.tmp
- <SD-Card>/Android/####/80f24ee303f0355c4b6e7294f6fa0023d128bd21....0.tmp
- <SD-Card>/Android/####/818d0ed37c63d86c616c12bcd6d49551216a680f....0.tmp
- <SD-Card>/Android/####/81d72055ca88f938b79468c583e4243e96d26567....0.tmp
- <SD-Card>/Android/####/83b2c4e404ecd04da4ff6ed9acb210b1809e3a3c....0.tmp
- <SD-Card>/Android/####/842767f9cb0a0af2e573140a4b568160175349cb....0.tmp
- <SD-Card>/Android/####/8540d32a4c4a1c44cf2c76dc51e55b4148a19dc6....0.tmp
- <SD-Card>/Android/####/85d9ea2ba7435001bb0267f12620cdc39d99852f....0.tmp
- <SD-Card>/Android/####/85e0429c3d98ff4c6d3914febad59f8bd2cb9638....0.tmp
- <SD-Card>/Android/####/898e697e982999f27ad5222c3361c3647043424b....0.tmp
- <SD-Card>/Android/####/8ad45ede18f6b310c9c0250c4e5efe75070b67c0....0.tmp
- <SD-Card>/Android/####/8bd66069842127f16d1ad410f62eadbbefcfc970....0.tmp
- <SD-Card>/Android/####/8f3914513702b64191f82e3127b1bcfd8a3d8cf1....0.tmp
- <SD-Card>/Android/####/904f15264e57885d753428113875f4fcc8159e6e....0.tmp
- <SD-Card>/Android/####/925094e6e3e0b8dce27a6e2329b2f0d3ac474e8f....0.tmp
- <SD-Card>/Android/####/96b186e1f39c8757cb28461ebb730bd0fbb4f650....0.tmp
- <SD-Card>/Android/####/973cbc142fb79bd09dca7ddc9026c3a1904c32c6....0.tmp
- <SD-Card>/Android/####/9755a6f77a545748012c4dcc8f374659b8d4bd15....0.tmp
- <SD-Card>/Android/####/97a890fd6bdcae964b26475a43055006c5a5ff5a....0.tmp
- <SD-Card>/Android/####/97ec2a48320e64a211bb053677b63598ae1bd6b1....0.tmp
- <SD-Card>/Android/####/98867d57e4df6ce3da01b81b3b51acee581086af....0.tmp
- <SD-Card>/Android/####/99cdb87ab451ab422549e01f96692760194a3a9a....0.tmp
- <SD-Card>/Android/####/9b90d84d5427bec495e75428233da325c30c7545....0.tmp
- <SD-Card>/Android/####/9cee7914eb38b4ad1892dd7c6e13525ec01572eb....0.tmp
- <SD-Card>/Android/####/9df20f33e56fbd2977dd060ac4c308dcd16c40b4....0.tmp
- <SD-Card>/Android/####/9df5098554cb947e04a742c9951dea6862dfaf6e....0.tmp
- <SD-Card>/Android/####/9e1970fb090c6a0a5fb5e2e3e008367da59722f0....0.tmp
- <SD-Card>/Android/####/9f0f40f464de09f054d358dcecfb0a6ddd4f12ed....0.tmp
- <SD-Card>/Android/####/9f65e1ae05991cd6875417faa487ac4ba06d24f3....0.tmp
- <SD-Card>/Android/####/a007ee90a993793fbf70926911e6012aef514512....0.tmp
- <SD-Card>/Android/####/a56c0e83dda8fb45a9692925e6ae06dbb49986b6....0.tmp
- <SD-Card>/Android/####/a89b73b4a0ccd388c2ffb9861176efe175c266c9....0.tmp
- <SD-Card>/Android/####/aa6138c43c337b1c2862c21378e05d929c5567eb....0.tmp
- <SD-Card>/Android/####/aaca00f64092cb9823d40704953d90da87b1e570....0.tmp
- <SD-Card>/Android/####/ac57fd4b54e5bcf7a088d9149ad11d2ce0970715....0.tmp
- <SD-Card>/Android/####/b07477a919a4e72ef436aa79e4f8ae104af57041....0.tmp
- <SD-Card>/Android/####/b10190c9e30896dc0bd30f4c60712af0ae992ad7....0.tmp
- <SD-Card>/Android/####/b11d378b34b11ed33cbf397378352fd91b8cb680....0.tmp
- <SD-Card>/Android/####/b21c3fb8437b5d3f0d6cd5b57cbfd11139fb104a....0.tmp
- <SD-Card>/Android/####/b3ed8eff0f0f8aefb66cd3921c17ff583a531d8a....0.tmp
- <SD-Card>/Android/####/b690592112c38c9778f972e010cb02930c963eb2....0.tmp
- <SD-Card>/Android/####/b7287549a90f247c9be1692dea27ee2774523327....0.tmp
- <SD-Card>/Android/####/b744348f48082555aa38dd114de8df259db1de4d....0.tmp
- <SD-Card>/Android/####/b93869244c231cc0d22bd8ecb3f795cdb7b2e047....0.tmp
- <SD-Card>/Android/####/b9ed0a8e46bf584f0dde075f721948775dc1ff97....0.tmp
- <SD-Card>/Android/####/be4c473acd5f9b367f79cf26dfb4d6cf9061b354....0.tmp
- <SD-Card>/Android/####/bf638309611842a2e0c01efb6d100ce3a3bc7772....0.tmp
- <SD-Card>/Android/####/c0d06a6d109fe5d11d554dff2e84a94cf6d00ecc....0.tmp
- <SD-Card>/Android/####/c4a40d93e588d54691f0af8886b5a6badd626c9e....0.tmp
- <SD-Card>/Android/####/cd75086210341932093b65863ed5a4ce53c86f25....0.tmp
- <SD-Card>/Android/####/d002c328b6327e13bab7d1c83105059c4094f526....0.tmp
- <SD-Card>/Android/####/d08aadc20735b3566553d582419f315e602a5710....0.tmp
- <SD-Card>/Android/####/d13475141b35e5e2123f76e948b41e2bea7f18b1....0.tmp
- <SD-Card>/Android/####/d450e064a4b6ecf74d3ca3ea5ebde4557eed712d....0.tmp
- <SD-Card>/Android/####/d7f459f30adeb4b1ff6fbd6feaec2b8f26cdb2e4....0.tmp
- <SD-Card>/Android/####/d8973db6e48009230a53b7904b43aed3145262a1....0.tmp
- <SD-Card>/Android/####/d90b4181f4d422ed1cd09ba0a66ab21bde4a702c....0.tmp
- <SD-Card>/Android/####/dcee5ea25896b2fe231aa3a8f36cbea9d3bd953d....0.png
- <SD-Card>/Android/####/dcee5ea25896b2fe231aa3a8f36cbea9d3bd953d....0.tmp
- <SD-Card>/Android/####/dd12d0bbcf1f91d466e24d367cf67a6442943b64....0.tmp
- <SD-Card>/Android/####/dd385cc4f70288d79ed0553bf8929c480023a085....0.tmp
- <SD-Card>/Android/####/dd909806e83e121158d97bf2710518eeb222a7d5....0.tmp
- <SD-Card>/Android/####/de62b2fa561edad6fa4076c88d3f5af699fef5bc....0.tmp
- <SD-Card>/Android/####/df0d23ce3025b4a2c6618b7859f2f8aec6d2daed....0.tmp
- <SD-Card>/Android/####/e12786c5b4b61b97f5ed8c2c7133179d814805df....0.tmp
- <SD-Card>/Android/####/e1cb6c5beb90fcbc7fd75224ced209a784b08bb7....0.tmp
- <SD-Card>/Android/####/e263f3b2121ab22c2ede517b4c1dab45c05ffc99....0.png
- <SD-Card>/Android/####/e263f3b2121ab22c2ede517b4c1dab45c05ffc99....0.tmp
- <SD-Card>/Android/####/e4b051f23a079652d69e668b4940c6038bc7fd78....0.tmp
- <SD-Card>/Android/####/e5204c394d89b2d187105b4e2ed2eb987524032f....0.tmp
- <SD-Card>/Android/####/e6a7305a8aa8d5d104ef2604ad6186e4bf8dea86....0.tmp
- <SD-Card>/Android/####/e8b07409e4511bc4b12eeedccc6bf4ab2061842f....0.tmp
- <SD-Card>/Android/####/e94a48851e4ef2984f87e93ea61780cfd22bb1a9....0.tmp
- <SD-Card>/Android/####/e9a68c8386bc60c64cf6dcfc846c718b1bfbcf7e....0.tmp
- <SD-Card>/Android/####/eaf62ac578889867577f72777773554634bfd2ad....0.tmp
- <SD-Card>/Android/####/eb262825d2d4dac3b14b36d2d55ef6cf09a1c24b....0.tmp
- <SD-Card>/Android/####/eca66e068dbba5b72095b933c5d0053136bcf214....0.tmp
- <SD-Card>/Android/####/ed9e16ec467168fcb9cb5d8d71617fbe7f491c46....0.tmp
- <SD-Card>/Android/####/f74130034ebf3ccc211930fdca35d46c810d0b18....0.tmp
- <SD-Card>/Android/####/f9b229ed77e6eba3a96b0feb7180a885e1274c47....0.tmp
- <SD-Card>/Android/####/fa68d0320ae730cd5afe8a2b5517639f7bc2ee10....0.tmp
- <SD-Card>/Android/####/fad2cc2b7801d2c27a4b2d9a0261f237aec9af5c....0.tmp
- <SD-Card>/Android/####/fb6b322e60de2f0f671f4125f913d0e390b7b2ba....0.tmp
- <SD-Card>/Android/####/fd326eed516f097476029a9915cda3d8028df065....0.tmp
- <SD-Card>/Android/####/fe0d16c8fbf2fba4bb20c77c7043f368ee6004a3....0.tmp
- <SD-Card>/Android/####/ff591b90fde777156f665e2e74db657cfc196175....0.tmp
- <SD-Card>/Android/####/journal.tmp
- <SD-Card>/LogG/####/sp
- <SD-Card>/baidu/####/journal.tmp
- <SD-Card>/baidu/.cuid
Miscellaneous:
Executes next shell scripts:
- <Package Folder>/files/dc27d27059335d35cf
- cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- chmod 777 <Package Folder>/files/daemon
- ps
- sh
Loads the following dynamic libraries:
- IncrementalUpdate
- libcrash_1.5.0.0
- ppapkpatchso
- sgmainso-5.3
- uninstall
Gains access to network information.
Gains access to telephone information (number, imei, etc.).
Gains access to information about installed applications.
Gains access to information about running applications.
Adds tasks to the system scheduler.
Displays its own windows over windows of other applications.