Android.Siggen.8150

Technical information

Malicious functions:

Gains access to the ITelephony private interface.

Network activity:

Connecting to:

UDP(DNS) <Google DNS>
TCP(HTTP/1.0) tcms-a####.wan####.ta####.com:80
TCP(HTTP/1.0) tcms-a####.wan####.ta####.com:443
TCP(HTTP/1.1) c.d####.mob.com:80
TCP(HTTP/1.1) haowa####.qin####.com:80
TCP(HTTP/1.1) huaba-o####.oss-cn-####.aliy####.com:80
TCP(HTTP/1.1) l####.tbs.qq.com:80
TCP(HTTP/1.1) a####.exc.mob.com:80
TCP(HTTP/1.1) s.haowa####.com:8900
TCP(HTTP/1.1) haowa####.oss.aliy####.com:80
TCP(HTTP/1.1) m.d####.mob.com:80
TCP(HTTP/1.1) tcms-op####.wan####.ta####.com:80
TCP(HTTP/1.1) a####.u####.com:80
TCP(HTTP/1.1) a####.m.ta####.com:80
TCP(HTTP/1.1) notecon####.oss-cn-####.aliy####.com:80
TCP(HTTP/1.1) w####.ta####.com:80
TCP(HTTP/1.1) a####.a####.m.####.com:80
TCP(TLS/1.0) msg.umengc####.com:443
TCP(TLS/1.0) s.haowa####.com:8008
TCP(TLS/1.0) a####.a####.m.####.com:443
TCP ope####.m.ta####.com:443
TCP 1####.11.61.106:443
TCP umengj####.m.ta####.com:80
TCP i####.wan####.ta####.com:443
TCP zhizhi####.com:5222

DNS requests:

_ja####._####.zhizhi####.com
_xmpp-c####._####.zhizhi####.com
a####.exc.mob.com
a####.m.ta####.com
a####.m.ta####.com
a####.u####.com
ag####.m.ta####.com
api.s####.mob.com
c.d####.mob.com
haowa####.oss.aliy####.com
haowa####.qin####.com
hotp####.wan####.ta####.com
huaba-o####.oss-cn-####.aliy####.com
i####.wan####.ta####.com
l####.tbs.qq.com
m.d####.mob.com
msg.umengc####.com
notecon####.oss-cn-####.aliy####.com
s.haowa####.com
tcms-a####.wan####.ta####.com
tcms-op####.wan####.ta####.com
umen####.m.ta####.com
umengj####.m.ta####.com
w####.ta####.com
zhizhi####.com

HTTP GET requests:

haowa####.oss.aliy####.com/006ea35a3833c5f0a370c93adbc9ca6f
haowa####.oss.aliy####.com/03d3f44fde3e2757e748bf5935e1ddd9
haowa####.oss.aliy####.com/047e32fd611c54c377c5935c02835698
haowa####.oss.aliy####.com/058df2d2ad9b58fb953a8e4e928d7c2c
haowa####.oss.aliy####.com/0d18d00953bfe1ce1f06797658357971
haowa####.oss.aliy####.com/0e9f2bbba77a020e05417955c0f5aa61
haowa####.oss.aliy####.com/0f2c9172d298c974cd006bf7ccb4380c
haowa####.oss.aliy####.com/1f5ecd0c36918253d1c3fd3eec03b2a4
haowa####.oss.aliy####.com/28cebb80e8f50f47e788383f82148735
haowa####.oss.aliy####.com/2af0d30e5d1b617c2c6fada4ee30170e
haowa####.oss.aliy####.com/3217e1b2aae8d6215ea65d4c5529e6ad
haowa####.oss.aliy####.com/33586f8d31b8eea9c24d0683da1bbd3c
haowa####.oss.aliy####.com/3616b9ce1d8a4fe4da8b52876dfde7ef
haowa####.oss.aliy####.com/39f00d77bc4ad450c230de60db781b71
haowa####.oss.aliy####.com/4641c9bd52e356308bd36e26ad6c8d16
haowa####.oss.aliy####.com/4cfb923bccf5ecf686ff53f9e277170a
haowa####.oss.aliy####.com/530e304d4d26f051f33e6baa43102648
haowa####.oss.aliy####.com/56c4e7d8163edc0ca3bfd656e567ed34
haowa####.oss.aliy####.com/599092f9bd22dec7ce6ac45ccbb04f5e
haowa####.oss.aliy####.com/5b1fe5a75b14bdc43f338a5b3285f044
haowa####.oss.aliy####.com/5b3c201a8e852afe911275a8143c673e
haowa####.oss.aliy####.com/65e63d1082fb947a04b6b1054ed02beb
haowa####.oss.aliy####.com/677a359c142e7d51e07074da2a808c0f
haowa####.oss.aliy####.com/68c17bf13eb8d652370816cba48fe691
haowa####.oss.aliy####.com/6a54b4ca8613984c9b0ed06a93cd6e12
haowa####.oss.aliy####.com/6d23ac251417f722cc010e175fa96783
haowa####.oss.aliy####.com/71de67e190a2d1243dbe3608dcbeaf7c
haowa####.oss.aliy####.com/79facbc7263d66881267c0fa5f16560c
haowa####.oss.aliy####.com/7da22ba1c386986939142eccf291c885
haowa####.oss.aliy####.com/7f485a8b470f68876da8b6748a561dbc
haowa####.oss.aliy####.com/84abfe2f0fe23e5316187a0826428d10
haowa####.oss.aliy####.com/863beeb8ecdaf71c7ba76c95abda9941
haowa####.oss.aliy####.com/898ccb48c7306ab3162b0b3d3a842b75
haowa####.oss.aliy####.com/92529f0ffa1103696f090f823ac814a4
haowa####.oss.aliy####.com/95c65f71f7b788689108f6bbae6c7e62
haowa####.oss.aliy####.com/98cf6ff45ea6c2fb0ec95e92d063ae7e
haowa####.oss.aliy####.com/a646ed030e9b1d1d5273b12cffd9fcb0
haowa####.oss.aliy####.com/a9ec48ce1670fb8cc2a71fbf5cea2325
haowa####.oss.aliy####.com/aa2be248e9ae8f6c0e0fe8984e3787fb
haowa####.oss.aliy####.com/ae6f15740172ad1b08dbca10d9e17e79
haowa####.oss.aliy####.com/b1b3fdb445c65e8d6fd50adb2f832013
haowa####.oss.aliy####.com/b1e168cdb72d0c3d427e95fac93e566e
haowa####.oss.aliy####.com/b4011d2e602d00460fd3ba361733ae6d
haowa####.oss.aliy####.com/b61c5da4edcfd73d5b1f75ade2aa77b2
haowa####.oss.aliy####.com/b68ea37cdf506ba128f9ca842f4d0a71
haowa####.oss.aliy####.com/b8511b813a7b420a57270446ff67bc25
haowa####.oss.aliy####.com/be07dfaa920f375440ec53f699a103be
haowa####.oss.aliy####.com/c44a29109d2f61b81792f820a5f5175b
haowa####.oss.aliy####.com/ca869f26713ba5da036046b79a3d9c23
haowa####.oss.aliy####.com/cbd30834681716e85b513fdb0e3ff969
haowa####.oss.aliy####.com/cc1dbb46295f4e79e5f9e13b83e1a85f
haowa####.oss.aliy####.com/cdcb418938bd53c6772f7628213dd9ff
haowa####.oss.aliy####.com/cef8d723ff1e8ec4e1d369043b2c21ea
haowa####.oss.aliy####.com/d2ac6b869c9a18612a6eb1686a25d581
haowa####.oss.aliy####.com/d3222b456bf79e52511238e2909c2ce3
haowa####.oss.aliy####.com/d8eb9fc8e8d64850728d7e7442c5f80a
haowa####.oss.aliy####.com/d9143ee995874c95fca8be09ebd7226b
haowa####.oss.aliy####.com/d9efc3e5c0a12e9bab2f22dfc16a5781
haowa####.oss.aliy####.com/e13855121d9a66f1c81c91913b03046e
haowa####.oss.aliy####.com/e1f695a12a27955a47633cd0cc0bee14
haowa####.oss.aliy####.com/e6e667b701a88cfe70fcc7d005fa579d
haowa####.oss.aliy####.com/ea7c0bed36e046b69bdf5c5ca73d96c8
haowa####.oss.aliy####.com/ed67d903f2b528d06a3ba0ce5807f826
haowa####.oss.aliy####.com/edc114a28823ad57d6d109d591d882ea
haowa####.oss.aliy####.com/f4ad3e9948e1fcd43f4eb454de0f0a76
haowa####.oss.aliy####.com/fb94364d7aef49e8c764e58d03bf183b
haowa####.oss.aliy####.com/ffdb93768f987244782effd11dbabcfc
haowa####.qin####.com/08bbec9f014c547490d0a66500b3838b
haowa####.qin####.com/0bdac794e26c55d09096b7d3398c0275
haowa####.qin####.com/11e33e1b3505dc295f9ad085b0243074
haowa####.qin####.com/12dea2f553c37bdda78cbb7f307c7233
haowa####.qin####.com/1dca091b57a1647481c9269c38d3c305
haowa####.qin####.com/2018-05-12-20-05-17gl5chhop-0.png
haowa####.qin####.com/2018-07-08-10-44-52pf5r542k-0.png
haowa####.qin####.com/2018-07-08-20-53-38skbl841l-0.png
haowa####.qin####.com/20e3cdce8283408b0a3b384842b33ad3
haowa####.qin####.com/223e5e1c46661b53f05e0fff1fcfe8c6
haowa####.qin####.com/2326c476e0366fbbe67b1ffdf5cca746
haowa####.qin####.com/2594ce7dc74437437bc3c326ab88056a
haowa####.qin####.com/271051b95d3094f2277ff8618edf5b78
haowa####.qin####.com/27fd9a42cc6584383b69ccc1f579690a
haowa####.qin####.com/2a5ac1f4bb4ba85da2642df98a2be3ff
haowa####.qin####.com/2ddf02d576262ce434e877eab87cbd4b
haowa####.qin####.com/2f35f1f4434dcc03eaaba403820c82e2
haowa####.qin####.com/30c2a3fc1763d3e1a0e5e97f115489a8
haowa####.qin####.com/30d89b03a717061e7c8da2c2e53e976b
haowa####.qin####.com/38103fc07e25666be0b8a3e5bb274d5b
haowa####.qin####.com/3a1f9b701b4e1ca7755278e6c79b55c0
haowa####.qin####.com/3e0db3c38eb8b32e23cd29b855294609
haowa####.qin####.com/41dbb4ea3300bd4b6af8506a1695eb89
haowa####.qin####.com/4a4aed66f2b04d18ab5bb072f784ffa8
haowa####.qin####.com/5277ce511894d93727f9bd65eecb4be1
haowa####.qin####.com/54ede935342d365d8cdf58722c73f0b6
haowa####.qin####.com/58089e31c090a413928eeab1e8efd6b0
haowa####.qin####.com/6539ee4a38f73849c470a6f585bd1edc
haowa####.qin####.com/6c84ebd01ef8727b47a2ae7d14ea44e5
haowa####.qin####.com/734078d4b5a069d74da1bf2f904619b2
haowa####.qin####.com/75e44638bf1ee179c9c1b9feb9b73174
haowa####.qin####.com/7833132cc2f48405d181e1262505e24b
haowa####.qin####.com/803824aa04b032b07bbdaaa3f440fe52
haowa####.qin####.com/80cd15493cd6a3ed3056bb98967b1cbc
haowa####.qin####.com/86115b212989e5786716ca019d6da7c2
haowa####.qin####.com/8f0cc35403c613d76c7e216aa0a9e732
haowa####.qin####.com/8feef884a9cead52f8fb0e5c721f1342
haowa####.qin####.com/9e290712b85088b29df91c585321cf04
haowa####.qin####.com/a0dd17e3304644d0ecfbad99e4a6cd56
haowa####.qin####.com/a341b3247a908aa7d187833eec2efdee
haowa####.qin####.com/ad0eb33678e9b8d6527467546723369b
haowa####.qin####.com/b7f7c461a3762f33af0ae8d382b7edab
haowa####.qin####.com/c0fd9e8c70feadc7c3e8a0f106af3c8a
haowa####.qin####.com/c1e8160069675b714a78b7f6f218ee91
haowa####.qin####.com/d2cb6b1f1c9f1b4b735527da566d0655
haowa####.qin####.com/d5c29c5af772aea4ed58038bbb894631
haowa####.qin####.com/da0fb54f4dcf9542c0e14b021096858a
haowa####.qin####.com/de2bcf8eab2bb34ea27186c3037485b7
haowa####.qin####.com/e0fc208d7735498c3690ddd10ce0bac2
haowa####.qin####.com/e3e6ca165b063560c881b22dac1ee299
haowa####.qin####.com/e40d9c16f56e769f65be26c188b16683
haowa####.qin####.com/e87f175cc49e873df637b70396071397
haowa####.qin####.com/e8ff1490adb943f6d0f049c4e90a4a6d
haowa####.qin####.com/ec23cee40f7062d3f6de595b5ed151d3
haowa####.qin####.com/f0e4f5911dd5f41fde146bfee8ef441e
haowa####.qin####.com/f0f3ecadbf6a414cad45a52917ec38ca
huaba-o####.oss-cn-####.aliy####.com/banner_fzy.jpg
huaba-o####.oss-cn-####.aliy####.com/banner_nca_2.jpg
m.d####.mob.com/v4/cconf?appkey=####&plat=####&apppkg=####&appver=####&n...
notecon####.oss-cn-####.aliy####.com/8914896
s.haowa####.com:8900/RegisterDemo1/servlet/GetAppreClassInfo?jid=####
s.haowa####.com:8900/RegisterDemo1/servlet/GetAppreciation?jid=####&acti...
s.haowa####.com:8900/RegisterDemo1/servlet/GetComList?noteid=####&visid=...
s.haowa####.com:8900/RegisterDemo1/servlet/GetInvcode?jid=####
s.haowa####.com:8900/RegisterDemo1/servlet/GetNewsList?jid=####&newsid=#...
s.haowa####.com:8900/RegisterDemo1/servlet/GetNoteContent?noteid=####&ji...
s.haowa####.com:8900/RegisterDemo1/servlet/GetNoteInfo?noteid=####&jid=#...
s.haowa####.com:8900/RegisterDemo1/servlet/GetRecomUser?page=####&subtyp...
s.haowa####.com:8900/RegisterDemo1/servlet/GetUserInfo?jid=####&vsjid=####
s.haowa####.com:8900/RegisterDemo1/servlet/SyncSp?jid=####
s.haowa####.com:8900/RegisterDemo1/servlet/UpLoadUmToken?jid=####&passwd...
tcms-a####.wan####.ta####.com:443/imlogingw/tcp60login?devid=####&ver=####
tcms-op####.wan####.ta####.com/getapprule?appkey=####&appId=####

HTTP POST requests:

a####.a####.m.####.com/amdc/mobileDispatch?appkey=####&platform=####&v=#...
a####.exc.mob.com/errconf
a####.m.ta####.com/rest/gc?dd=####&nsgs=####&ak=####&av=####&c=####&v=##...
a####.m.ta####.com/rest/gc?dd=ArQb####&nsgs=####&ak=####&av=####&c=####&...
a####.m.ta####.com/rest/sur?ak=####&av=####&c=####&v=####&s=####&d=####&...
a####.u####.com/app_logs
c.d####.mob.com/v3/cdata
l####.tbs.qq.com/ajax?c=####&k=####
w####.ta####.com/api/user/getUser.json

Modified file system:

Creates the following files:

/data/data/####/-AiY3bDyFW6fxr_fb0t-J7G-C0g.-1011608785.tmp
/data/data/####/.duid
/data/data/####/.imprint
/data/data/####/.jg.ic
/data/data/####/.lock
/data/data/####/.mrecord
/data/data/####/.mrlock
/data/data/####/.statistics
/data/data/####/.vpl_lock
/data/data/####/00n8_qYDsvGeDOO1vPgpzINC5iI.1066866175.tmp
/data/data/####/013b017c7abb4c123e885f1c7f57c585.0.tmp
/data/data/####/013b017c7abb4c123e885f1c7f57c585.1.tmp
/data/data/####/01b45ae186b9cd0688a9a0c854c8b7b8.0.tmp
/data/data/####/01b45ae186b9cd0688a9a0c854c8b7b8.1.tmp
/data/data/####/02b41b915a9d2550c4033ff440f2a25a-journal
/data/data/####/03e906fb9d9b05e3b3bf58752bcaa9d0.0.tmp
/data/data/####/03e906fb9d9b05e3b3bf58752bcaa9d0.1.tmp
/data/data/####/0546f07266f215a93536949c1b25c9ef.0.tmp
/data/data/####/0546f07266f215a93536949c1b25c9ef.1.tmp
/data/data/####/097c1b0f332649020c21d5d5452c9e3a.0.tmp
/data/data/####/097c1b0f332649020c21d5d5452c9e3a.1.tmp
/data/data/####/0ca1577fc25ea6eec9e13afc09fdd699.0.tmp
/data/data/####/0ca1577fc25ea6eec9e13afc09fdd699.1.tmp
/data/data/####/104698f989860fa8719b92490ce489ec.0.tmp
/data/data/####/104698f989860fa8719b92490ce489ec.1.tmp
/data/data/####/126718505b2639099eff5a890446d68b.0.tmp
/data/data/####/1483b34f82b550493efd236414c0750c.0.tmp
/data/data/####/1483b34f82b550493efd236414c0750c.1.tmp
/data/data/####/1502e3ada4f0ceae8d77886332da0672.0.tmp
/data/data/####/1502e3ada4f0ceae8d77886332da0672.1.tmp
/data/data/####/161d75a26c108b7be05088ebe8480f79.0.tmp
/data/data/####/161d75a26c108b7be05088ebe8480f79.1.tmp
/data/data/####/1973526b7ee9bd337380bdbe79a8da8d.0.tmp
/data/data/####/1973526b7ee9bd337380bdbe79a8da8d.1.tmp
/data/data/####/1Wu3sQjw7uPptq0N2UoUpvN2VZU.1173937481.tmp
/data/data/####/1ZjE3tsv_ynKHng20r2avpi15Sc.-2141115072.tmp
/data/data/####/1ac3fec1b4e300d75f133906f0f2e146.0.tmp
/data/data/####/1ac3fec1b4e300d75f133906f0f2e146.1.tmp
/data/data/####/1b16dd68025ad3d882a91c5c87b52ee8.0.tmp
/data/data/####/1b16dd68025ad3d882a91c5c87b52ee8.1.tmp
/data/data/####/1b99f5eb8131c870363bd5c1945e2709.0.tmp
/data/data/####/1b99f5eb8131c870363bd5c1945e2709.1.tmp
/data/data/####/1d2b904cbeadfb72ed9546111a231c85.0
/data/data/####/24c110e1f76093b35c3c2df1927aab79.0
/data/data/####/254b6ac697d0a5be4faa9f768e7428b8.0.tmp
/data/data/####/254b6ac697d0a5be4faa9f768e7428b8.1.tmp
/data/data/####/28509a5d735e43cdbe67388cbe4f22ea.0.tmp
/data/data/####/28509a5d735e43cdbe67388cbe4f22ea.1.tmp
/data/data/####/2AzfohK9v78J1lIXC0t0O0uybbI.-2024414816.tmp
/data/data/####/2UU9W-BTe5_-mAdU3BaJjH4H09A.503427698.tmp
/data/data/####/2X7CfL6dJ-vPgBBwq3aQjo-9qLU.-1712319365.tmp
/data/data/####/2e0288a98b593e56a5d4769dc0a9327d.0.tmp
/data/data/####/2e0288a98b593e56a5d4769dc0a9327d.1.tmp
/data/data/####/2f5ed6c86252de9d7e1cd3fd83e081d9.0.tmp
/data/data/####/2f5ed6c86252de9d7e1cd3fd83e081d9.1.tmp
/data/data/####/3542441eb106d48b8570cb07362861b7.0.tmp
/data/data/####/3542441eb106d48b8570cb07362861b7.1.tmp
/data/data/####/38fa752d4f332d899b772e775920750c.0.tmp
/data/data/####/38fa752d4f332d899b772e775920750c.1.tmp
/data/data/####/3995cee7022568a098e695ca36f7b6eb.0.tmp
/data/data/####/3995cee7022568a098e695ca36f7b6eb.1.tmp
/data/data/####/3a11051c1d7e72e7d8606a4542ceac48.0.tmp
/data/data/####/3a11051c1d7e72e7d8606a4542ceac48.1.tmp
/data/data/####/3cb1190366f39fcb4944d70930373719.0.tmp
/data/data/####/3cb1190366f39fcb4944d70930373719.1.tmp
/data/data/####/3f4845b1a6fb1fb3153dbc92a90a1472.0.tmp
/data/data/####/3f4845b1a6fb1fb3153dbc92a90a1472.1.tmp
/data/data/####/3ip67Bge6ieq0auUyYZuy-PIRi0.-1683476052.tmp
/data/data/####/401ea1766af0a69af3ee16758939dcbf.0.tmp
/data/data/####/401ea1766af0a69af3ee16758939dcbf.1.tmp
/data/data/####/40323d42f0768511a63ab1990f223b19.0.tmp
/data/data/####/40323d42f0768511a63ab1990f223b19.1.tmp
/data/data/####/40c4fe4da7ca4bc1cd1db37528b0a585.0.tmp
/data/data/####/40c4fe4da7ca4bc1cd1db37528b0a585.1.tmp
/data/data/####/43c58b3f1f616e38333a66a28b27827a.0.tmp
/data/data/####/43c58b3f1f616e38333a66a28b27827a.1.tmp
/data/data/####/44c81c8bbebd96767e978db95028d7e2.0.tmp
/data/data/####/44c81c8bbebd96767e978db95028d7e2.1.tmp
/data/data/####/45d25734d75911a6b14aff446bcf9808.0.tmp
/data/data/####/45d25734d75911a6b14aff446bcf9808.1.tmp
/data/data/####/4810258c0e8e7a6374a25e7029c09b19.0.tmp
/data/data/####/4810258c0e8e7a6374a25e7029c09b19.1.tmp
/data/data/####/4bbfe3c135282c86bff411e3c142cc5b.0.tmp
/data/data/####/4bbfe3c135282c86bff411e3c142cc5b.1.tmp
/data/data/####/506793b20b31367efd70c7fa23a97fa2.0.tmp
/data/data/####/506793b20b31367efd70c7fa23a97fa2.1.tmp
/data/data/####/537a81e2bd9fb2bb96378d96af56b486.0.tmp
/data/data/####/537a81e2bd9fb2bb96378d96af56b486.1.tmp
/data/data/####/54ffbda9fe6185070458794c59d38bec.0.tmp
/data/data/####/54ffbda9fe6185070458794c59d38bec.1.tmp
/data/data/####/5d6cbd0953a3bca198d1b298e32d94b2.0.tmp
/data/data/####/5d6cbd0953a3bca198d1b298e32d94b2.1.tmp
/data/data/####/5fdfb4fcece73c5b1a0f54ba4c53fffd.0.tmp
/data/data/####/5fdfb4fcece73c5b1a0f54ba4c53fffd.1.tmp
/data/data/####/60c08f56c87d722ea741606868d4ada5.0.tmp
/data/data/####/60c08f56c87d722ea741606868d4ada5.1.tmp
/data/data/####/60ecd2be19c5b2d292a655d50ac6d42a.0.tmp
/data/data/####/60ecd2be19c5b2d292a655d50ac6d42a.1.tmp
/data/data/####/6750694347dc7721e20cc9b3aca1f016.0.tmp
/data/data/####/6750694347dc7721e20cc9b3aca1f016.1.tmp
/data/data/####/687bc270119f5e36a894da87c3b4fd95.0.tmp
/data/data/####/687bc270119f5e36a894da87c3b4fd95.1.tmp
/data/data/####/6a71464e800feab126a7242df2f81dbd.0.tmp
/data/data/####/6a71464e800feab126a7242df2f81dbd.1.tmp
/data/data/####/6b81847125ad7fdf45d59194ee112d3b.0.tmp
/data/data/####/6b81847125ad7fdf45d59194ee112d3b.1.tmp
/data/data/####/6ceU7SysuveuCDXnMeFGc_fqNvA.-1683476052.tmp
/data/data/####/774307a8df6d1c1bd9538bc109279534.0.tmp
/data/data/####/774307a8df6d1c1bd9538bc109279534.1.tmp
/data/data/####/7a-S8Eq42LpzYAt4yNwgiMyGzNc.-1989747349.tmp
/data/data/####/7a4702339db833a01a82db36ab83877a.0.tmp
/data/data/####/7a4702339db833a01a82db36ab83877a.1.tmp
/data/data/####/7ca15470f2158ba0d669385be931f69e.0.tmp
/data/data/####/7ca15470f2158ba0d669385be931f69e.1.tmp
/data/data/####/8-vTUArlJfquMHG-iXQQpzH5k54.-802381156.tmp
/data/data/####/81aa2ad5c785b6d7ddbe8ba9f47b5340.0.tmp
/data/data/####/81aa2ad5c785b6d7ddbe8ba9f47b5340.1.tmp
/data/data/####/886a4d4a37fa943fd15dbc5ff80b22fb.0.tmp
/data/data/####/886a4d4a37fa943fd15dbc5ff80b22fb.1.tmp
/data/data/####/8b2fcc2b2ec0429b0f5ce6744ca15238.0.tmp
/data/data/####/8b2fcc2b2ec0429b0f5ce6744ca15238.1.tmp
/data/data/####/8b5ceaac12b1b8434bdbe538eb94eb53.0.tmp
/data/data/####/8b5ceaac12b1b8434bdbe538eb94eb53.1.tmp
/data/data/####/8c7a8b2026d4848739064f3950efa003.0.tmp
/data/data/####/8c7a8b2026d4848739064f3950efa003.1.tmp
/data/data/####/8f59846eac2ef2f3127ce204ab9c26d0.0.tmp
/data/data/####/8f59846eac2ef2f3127ce204ab9c26d0.1.tmp
/data/data/####/8f9b6ce7adebe5a146922609c2c104b1.0.tmp
/data/data/####/8f9b6ce7adebe5a146922609c2c104b1.1.tmp
/data/data/####/8fbd8d29d6cbc683cc563afbc1ab495a.0.tmp
/data/data/####/8fbd8d29d6cbc683cc563afbc1ab495a.1.tmp
/data/data/####/90405b521c7b68e2d5fb5db3a9c77b06.0.tmp
/data/data/####/90405b521c7b68e2d5fb5db3a9c77b06.1.tmp
/data/data/####/9243015e7fae90c8e4ba5323e5cc6ec7.0.tmp
/data/data/####/9243015e7fae90c8e4ba5323e5cc6ec7.1.tmp
/data/data/####/97674a5ff51574e374c9253db7465150.0.tmp
/data/data/####/97674a5ff51574e374c9253db7465150.1.tmp
/data/data/####/9948db7b1f47d3e925afd1a02bae40bf.0.tmp
/data/data/####/9948db7b1f47d3e925afd1a02bae40bf.1.tmp
/data/data/####/99d621e26d766d0fd728afedf4ef2475.0.tmp
/data/data/####/99d621e26d766d0fd728afedf4ef2475.1.tmp
/data/data/####/9a2db0e4ed3d5930fd8e1b8b84024cd0.0.tmp
/data/data/####/9a2db0e4ed3d5930fd8e1b8b84024cd0.1.tmp
/data/data/####/9bb6ed458541ecf7b73b7d2544f0f283.0.tmp
/data/data/####/9bb6ed458541ecf7b73b7d2544f0f283.1.tmp
/data/data/####/9eOesjYeg_m30_T1IyPTty_Hxgg.60972651.tmp
/data/data/####/ACCS_BINDumeng;52a0242156240b5b4a0104f9.xml
/data/data/####/ACCS_SDK.xml
/data/data/####/ACCS_SDK_CHANNEL.xml
/data/data/####/ACCS_SDK_CHANNEL.xml.bak (deleted)
/data/data/####/AGOO_BIND.xml
/data/data/####/AIgG2p6o66QsAkqI3hYVYZw4wUc.-1083575312.tmp
/data/data/####/AWVpv7pxlX4eFAujv--yx779pb0.-1378587043.tmp
/data/data/####/AX03-bzl0gWTExc-U1mdlstAXcY.-1742371591.tmp
/data/data/####/Agoo_AppStore.xml
/data/data/####/Alvin2.xml
/data/data/####/Ap9qdvVx9mVxbPT6idQqmrH9UY0.-926583393.tmp
/data/data/####/B5skkRUpQowe2hqjHq8vxVOAdSE.1086041817.tmp
/data/data/####/BBrrs5wlZMmY_3WWcqSKpiV-t3k.-53428349.tmp
/data/data/####/Be25AxZjJ78qeIdFyuUIIoweG90.503427698.tmp
/data/data/####/BjTIN54NWeGvJCsYmYxlNRQPHM0.870812124.tmp
/data/data/####/Bpv0_7oQ-Gj7QaLDLNvTgNyd0Sk.-929608074.tmp
/data/data/####/COO1LaQFHEW6bTdebisJGW2bWEk.-1073713349.tmp
/data/data/####/CXLbGWfsqpXx0o3EC0Y5n4Sv8ck.-781640165.tmp
/data/data/####/ContextData.xml
/data/data/####/DaemonServer
/data/data/####/DnSdbJzoMGXWYu0QQrXw-fWnsHw.-201157018.tmp
/data/data/####/DvnrWLyUQJas-ZmKjHgr1SM5vQI.1496072811.tmp
/data/data/####/ENUDBP1e4tnzty7f_5EdzNN2E_Q.-781640165.tmp
/data/data/####/EgWLqZhC8QhVkpteoahr2iCFKn4.711543395.tmp
/data/data/####/Fe-8xNEw3ktFhZ37X9f6oH2rqPk.-929608074.tmp
/data/data/####/GeetI-zH7y15AgMP5Ok6djyQFwY.-334369378.tmp
/data/data/####/HpY350TO6KUJDhhFvVXwnNdTSzQ.-1673173836.tmp
/data/data/####/IDMkbI0iHTaKrz0zo66QRMN6_cs.1173937481.tmp
/data/data/####/JGF98-PW3E5VMyzMdmCqPDVj_-U.-121437514.tmp
/data/data/####/JHpTwCQrW-jhZpe27YX7tOLX-zs.1376532389.tmp
/data/data/####/JScCs5q_TTdxcqWOsps9ch-9hfk.675892006.tmp
/data/data/####/JYG9eeif-4_gos8b3Ro4P2Ixlgk.-274524902.tmp
/data/data/####/JYYs5_s-eqG91cbb5NOO5vyUvaM.-1427951609.tmp
/data/data/####/JwBMYza0Hj9zLI8fcI3kG_heo3A.-121437514.tmp
/data/data/####/KSsJtVZ0B7iJI21pY6r5BzEQFEw.-1599589666.tmp
/data/data/####/KeyStore.bks
/data/data/####/KxmJWMWqmdmPJITd2I4wKGPESLA.-1989747349.tmp
/data/data/####/MessageStore.db-journal
/data/data/####/MqXzAuOHkI6wYtg9-5Id33JBxn4.1376532389.tmp
/data/data/####/MsgLogStore.db-journal
/data/data/####/NfDc0U3Mgt0UuGSSNyx0KJqx49o.-1073713349.tmp
/data/data/####/O1waExW7_FnMUnaIo7DbUzh-Rrg.-53428349.tmp
/data/data/####/OiC7XsRauB8RtkSsOgx6zkQTPA8.-1742371591.tmp
/data/data/####/PGMDAGkHA4074j6BkEcHcMcKhhk.-554196888.tmp
/data/data/####/PboH4NerZrulKrAhf6qx_rM-t9U.-1395509516.tmp
/data/data/####/Qn7kHViA_eQRkNWZBdPH2Lh9K8A.1652319223.tmp
/data/data/####/SEekxwV1Yys8-lt8J9K5MqO8Mkw.-121437514.tmp
/data/data/####/SLhwNvMGQllZ8r2pnIphAHRIDyk.1268202517.tmp
/data/data/####/T6AjmCONY7XQnJtpAmmBpAzwedo.-1805409987.tmp
/data/data/####/TGLeBAFMBuK2Ee_RPiOXnn-XRSM.1280598247.tmp
/data/data/####/TTB3Ddz0vnwpry9kkApSEn9lYhQ.-1742371591.tmp
/data/data/####/ThrowalbeLog.db-journal
/data/data/####/UHef_QcG6uKRNCjgHMGUU-iyHi0.-1395509516.tmp
/data/data/####/UTCommon.xml
/data/data/####/UTMCConf-818791854.xml
/data/data/####/UTMCLog-818791854.xml
/data/data/####/UhPumEcudT7-xK5vHPolbjtCqxY.-1073713349.tmp
/data/data/####/UilmTGaDFLmjyqdKhloH_rIHQNA.279223793.tmp
/data/data/####/Unzqw3dzKHYs7OMo2ojxRtesaE0.493264002.tmp
/data/data/####/VU8tK2C5EG5tneTrDbETmcH1IIk.-1603534241.tmp
/data/data/####/VsTdCXY_aVMkFcN-TxbVWfT9I_E.-356314174.tmp
/data/data/####/W4Z0atW31yyEzHs4ohmW8T-s9JA.-1777289493.tmp
/data/data/####/Wr9TfzBiKXQAIlJOx8Lj93f873s.991114771.tmp
/data/data/####/X5IxRKJRUgoNyNpoqmDZDav7tag.-1608679179.tmp
/data/data/####/XkWIk4FBTewnU9PZBukaYSb7-to.-1378587043.tmp
/data/data/####/XzG6trp32gg4RcwHGJSwlCuxU-U.1652319223.tmp
/data/data/####/Y9vAo7CRqcPhzin6CV0ZY5yOlWI.-1683476052.tmp
/data/data/####/YPSK7wtqE2eotjuBhKL7PjlLNNM.1173937481.tmp
/data/data/####/ZPZbdNWo_N3tdS5VEHC0_vj7QBM.479745870.tmp
/data/data/####/_052rWYf_RLQa5uYJloDnG1eTHQ.765729675.tmp
/data/data/####/_ncudfzu7U8qqQki8jZGRvr7C7k.1573650267.tmp
/data/data/####/a4590a5f1fded1a240ed338a28b5f056.0.tmp
/data/data/####/a4e96be51974d134a20e862624467d4c.0.tmp
/data/data/####/a4e96be51974d134a20e862624467d4c.1.tmp
/data/data/####/a504a98940a8a2ff17f4c062bd570431.0.tmp
/data/data/####/a504a98940a8a2ff17f4c062bd570431.1.tmp
/data/data/####/a5a895d228dc85d5617086b34566c8e4.0.tmp
/data/data/####/a5a895d228dc85d5617086b34566c8e4.1.tmp
/data/data/####/a5c777428ebd2aeaf184837e39a5530f.0.tmp
/data/data/####/a5c777428ebd2aeaf184837e39a5530f.1.tmp
/data/data/####/aGazykwYkDd3F3IO5bznnsZkhLg.991114771.tmp
/data/data/####/aQHHfp0bYrIlRlZ-B5mF3TR19fs.1110626991.tmp
/data/data/####/accs.db-journal
/data/data/####/acfd113651999a3790965a36e9ee3e26.0.tmp
/data/data/####/acfd113651999a3790965a36e9ee3e26.1.tmp
/data/data/####/ad225811eebc044cb7856151972cd505.0.tmp
/data/data/####/ad225811eebc044cb7856151972cd505.1.tmp
/data/data/####/ad3c58c2fbb582d00fa4963007d9989e.0.tmp
/data/data/####/ad3c58c2fbb582d00fa4963007d9989e.1.tmp
/data/data/####/ada6808a3d7cae26a6b583728dcce12d.0.tmp
/data/data/####/ada6808a3d7cae26a6b583728dcce12d.1.tmp
/data/data/####/ae1a39581e79fe56357d353cfa96b011.0.tmp
/data/data/####/ae1a39581e79fe56357d353cfa96b011.1.tmp
/data/data/####/ae41f0287f873fd8a8249c7d8545c157.0.tmp
/data/data/####/ae41f0287f873fd8a8249c7d8545c157.1.tmp
/data/data/####/ae522e365869e83369b4e46bda1b8afd.0.tmp
/data/data/####/ae522e365869e83369b4e46bda1b8afd.1.tmp
/data/data/####/af52750d85cbc5715fc5b3934b749ae6.0.tmp
/data/data/####/af52750d85cbc5715fc5b3934b749ae6.1.tmp
/data/data/####/agoo.pid
/data/data/####/b147e1d5c1b820ad73c2061b8fe5caf7.0.tmp
/data/data/####/b147e1d5c1b820ad73c2061b8fe5caf7.1.tmp
/data/data/####/b381e392a586c9c18f30057a5c839eac.0.tmp
/data/data/####/b381e392a586c9c18f30057a5c839eac.1.tmp
/data/data/####/b3897da8d7b6332d58c188e4f3fc59df.0.tmp
/data/data/####/b3897da8d7b6332d58c188e4f3fc59df.1.tmp
/data/data/####/b64d39556d8660f3e5fdcb2f800a22fa.0.tmp
/data/data/####/b64d39556d8660f3e5fdcb2f800a22fa.1.tmp
/data/data/####/b73f0bb2e851664f2b361a6534b6fefd.0.tmp
/data/data/####/b73f0bb2e851664f2b361a6534b6fefd.1.tmp
/data/data/####/bdDnpxXVq7awbRwwON7HGds3JTI.-1603534241.tmp
/data/data/####/bde3e93476505c7abfe5a9bfd1bddf1b.0.tmp
/data/data/####/bde3e93476505c7abfe5a9bfd1bddf1b.1.tmp
/data/data/####/bde9a10c0efd7ce1c26c709c77ce238b.0.tmp
/data/data/####/bde9a10c0efd7ce1c26c709c77ce238b.1.tmp
/data/data/####/be985587a1a9f47ea3ed567dddf8c220.0.tmp
/data/data/####/be985587a1a9f47ea3ed567dddf8c220.1.tmp
/data/data/####/c1519086132c0e482664325985c7b7a4.0.tmp
/data/data/####/c1519086132c0e482664325985c7b7a4.1.tmp
/data/data/####/c1d29706a8258eb8770448db158d23d4.0.tmp
/data/data/####/c4bc6f75b9d07d0c5b039fc30253786a.0.tmp
/data/data/####/c4bc6f75b9d07d0c5b039fc30253786a.1.tmp
/data/data/####/c837eb084a0f59d494b939b92b608756.0.tmp
/data/data/####/c837eb084a0f59d494b939b92b608756.1.tmp
/data/data/####/c8loAIK7mFgfpR-52y9cMYYUkS0.-334369378.tmp
/data/data/####/c990d0b0bc6f22921cac427c732d3c1e.0.tmp
/data/data/####/c990d0b0bc6f22921cac427c732d3c1e.1.tmp
/data/data/####/c9c96e20b81a77bff2dc5170662100f1.0.tmp
/data/data/####/c9c96e20b81a77bff2dc5170662100f1.1.tmp
/data/data/####/c_Yg3MKlhHvJWob1c_Lf16GX2oQ.1086041817.tmp
/data/data/####/cb003fb53a65ea453dc926008ef73a51.0.tmp
/data/data/####/cb003fb53a65ea453dc926008ef73a51.1.tmp
/data/data/####/cc.db
/data/data/####/cc.db-journal
/data/data/####/cd85aeea9052bac8a97ad9ab7e5174e2.0.tmp
/data/data/####/cd85aeea9052bac8a97ad9ab7e5174e2.1.tmp
/data/data/####/cf91308a6aa5206108653f1a3cf9a1dc.0.tmp
/data/data/####/cf91308a6aa5206108653f1a3cf9a1dc.1.tmp
/data/data/####/channel_pre.xml
/data/data/####/cn_feng_skin_pref.xml
/data/data/####/com.haowan.huabar_2075
/data/data/####/com.haowan.huabar_2505
/data/data/####/com.haowan.huabar_2831
/data/data/####/com.haowan.huabar_TcmsService_2135
/data/data/####/com.haowan.huabar_preferences.xml
/data/data/####/core_info
/data/data/####/crash-1531137442122.cr
/data/data/####/crash-1531137460717.cr
/data/data/####/d05b713a882825bec424e86e5a40d71b.0.tmp
/data/data/####/d05b713a882825bec424e86e5a40d71b.1.tmp
/data/data/####/d298434b67bc4d5c56a90ee34da7b219.0.tmp
/data/data/####/d298434b67bc4d5c56a90ee34da7b219.1.tmp
/data/data/####/d7539bad2b4c3e977f1b767b13634ab8.0.tmp
/data/data/####/d7539bad2b4c3e977f1b767b13634ab8.1.tmp
/data/data/####/d9c2763ad7c82732f2cfdbfd2daa7464.0.tmp
/data/data/####/d9c2763ad7c82732f2cfdbfd2daa7464.1.tmp
/data/data/####/db6aa38e03c62496f59b959264d4934c.0.tmp
/data/data/####/db6aa38e03c62496f59b959264d4934c.1.tmp
/data/data/####/dbb6ad0096c0b6ac22d35756c32ef501.0.tmp
/data/data/####/dbb6ad0096c0b6ac22d35756c32ef501.1.tmp
/data/data/####/dc7e09881fedca1f7ada688f66a1d4ae.0.tmp
/data/data/####/dc7e09881fedca1f7ada688f66a1d4ae.1.tmp
/data/data/####/ddf0eeb1f6b64ddfef94618d490ca50b.0.tmp
/data/data/####/ddf0eeb1f6b64ddfef94618d490ca50b.1.tmp
/data/data/####/e154fcde0494e5b70eeed7424366bc89.0.tmp
/data/data/####/e154fcde0494e5b70eeed7424366bc89.1.tmp
/data/data/####/e4f1673ff57584e72db2c8b55342c43a.0.tmp
/data/data/####/e4f1673ff57584e72db2c8b55342c43a.1.tmp
/data/data/####/e50626e02a8bea524a9d73dadf63d1e4.0.tmp
/data/data/####/e50626e02a8bea524a9d73dadf63d1e4.1.tmp
/data/data/####/e508699eda0134bfdebc944aa8467707.0.tmp
/data/data/####/e508699eda0134bfdebc944aa8467707.1.tmp
/data/data/####/eaf0f69bce11e8b3255c4543c01f39e7.0.tmp
/data/data/####/eaf0f69bce11e8b3255c4543c01f39e7.1.tmp
/data/data/####/ee7d623b77cc1fe6b5362e02e8c1a624.0.tmp
/data/data/####/ee7d623b77cc1fe6b5362e02e8c1a624.1.tmp
/data/data/####/ef5d243e2a1dbd5b57644fb6e2178216.0.tmp
/data/data/####/ef5d243e2a1dbd5b57644fb6e2178216.1.tmp
/data/data/####/eudemon
/data/data/####/exchangeIdentity.json
/data/data/####/exid.dat
/data/data/####/f314e70b2073990925227151a1751e5b.0.tmp
/data/data/####/f314e70b2073990925227151a1751e5b.1.tmp
/data/data/####/f4312d82dbf19e78cad156b9485cfece.0.tmp
/data/data/####/f4312d82dbf19e78cad156b9485cfece.1.tmp
/data/data/####/f4534ee9ccb79d5c32456d253505edfc.0.tmp
/data/data/####/f4534ee9ccb79d5c32456d253505edfc.1.tmp
/data/data/####/f7b2d40f6863dbfbd742302628759b37.0.tmp
/data/data/####/f7b2d40f6863dbfbd742302628759b37.1.tmp
/data/data/####/f7eb1510771865ea0884ecde89cc561f.0.tmp
/data/data/####/f7eb1510771865ea0884ecde89cc561f.1.tmp
/data/data/####/f8e015d773137a57b87a2f16a54a38c5.0.tmp
/data/data/####/f8e015d773137a57b87a2f16a54a38c5.1.tmp
/data/data/####/f98c61f8a4d8462b11a0ca7982c67c03.0.tmp
/data/data/####/f98c61f8a4d8462b11a0ca7982c67c03.1.tmp
/data/data/####/f9It-wWtQYs5-yCVLGI68UQs9uY.-950935567.tmp
/data/data/####/fDJ2VR9y4W78DUBjWfgIyI6xyvE.-802381156.tmp
/data/data/####/fXEQ1Fpyn9VhbVfRflqKtNhrQjU.-1805409987.tmp
/data/data/####/fa5b117893a7de9b51f6b06c24801a6d.0.tmp
/data/data/####/fa5b117893a7de9b51f6b06c24801a6d.1.tmp
/data/data/####/fad5d9bbde654871aa17575568390b8d.0.tmp
/data/data/####/fad5d9bbde654871aa17575568390b8d.1.tmp
/data/data/####/fc2a58e5d16a898972966cedd0a030d7.0.tmp
/data/data/####/fc2a58e5d16a898972966cedd0a030d7.1.tmp
/data/data/####/fe16a780237e84bc9b03a39cbe4eb108.0.tmp
/data/data/####/fe16a780237e84bc9b03a39cbe4eb108.1.tmp
/data/data/####/fe2b2523ec7504a602158661ab292218.0.tmp
/data/data/####/fe2b2523ec7504a602158661ab292218.1.tmp
/data/data/####/fe7c1c0572c398ab4d473ea2fc7de7aa.0.tmp
/data/data/####/fe7c1c0572c398ab4d473ea2fc7de7aa.1.tmp
/data/data/####/fead85df19ecd528e99a9f58ff7b1c2c.0.tmp
/data/data/####/fead85df19ecd528e99a9f58ff7b1c2c.1.tmp
/data/data/####/feda2632abdb6b0d94656851a674d50f.0.tmp
/data/data/####/feda2632abdb6b0d94656851a674d50f.1.tmp
/data/data/####/fq3nzeoE9KQYaxXc-EM35ySd3-M.-334369378.tmp
/data/data/####/gy_YwfNl8TLNpCtD0ug9LyaJVUk.-2141115072.tmp
/data/data/####/hmdb
/data/data/####/hmdb-journal
/data/data/####/hoVpZgyLwWb_1CXA-dCIc0lkP_g.-274524902.tmp
/data/data/####/hsyiQGviKDVkfa8GtdgZfMgP-Cg.-201157018.tmp
/data/data/####/i0U2EtsG4ujHLVF55D3HgT3rLN0.60972651.tmp
/data/data/####/idR3Gkt5wUQHL1zbYBdMEsMGHvo.78978315.tmp
/data/data/####/j2CNVQ7TNdA59i3QuzEO59Y_jsU.-909410488.tmp
/data/data/####/jBhLlskq517U2_KK8e6ZkA8DWKA.479745870.tmp
/data/data/####/jLymaL-4OHY5RIWEYkQG5i6PmyM.-781640165.tmp
/data/data/####/journal
/data/data/####/journal.tmp
/data/data/####/lemPYM12vc2RzKdT6vKgv9tYla4.-608782596.tmp
/data/data/####/lhf5w3T6JATJFYEv5PGNslIwNRg.1171948037.tmp
/data/data/####/libjiagu-273331730.so
/data/data/####/logdb.db
/data/data/####/logdb.db-journal
/data/data/####/m0Dlae0l1gwbLlZplCRmUEPXZKs.-909410488.tmp
/data/data/####/meRjMCGs6hHOZTtMVOoHEWff2Lw.-608782596.tmp
/data/data/####/message_accs_db
/data/data/####/message_accs_db-journal
/data/data/####/mob_commons_1
/data/data/####/mob_sdk_exception_1
/data/data/####/multidex.version.xml
/data/data/####/nFkWBm58PQd6w3BrkI5yZsvXRaM.-516410365.tmp
/data/data/####/oEYaSIFEjYRIQSNeKjPdX7toud0.-1427951609.tmp
/data/data/####/pXyYp80qbiDg4Jh_fXFFh8BnNSo.1573650267.tmp
/data/data/####/pXzxLNNJ6uRggCXCfvBLvu0OJY0.-1805409987.tmp
/data/data/####/paintgame.db
/data/data/####/paintgame.db-journal
/data/data/####/pf99btn6N3ubybf2l2L9eBA9DbQ.-1989747349.tmp
/data/data/####/plBbL41FywxtnIMP8HcgFofxlYU.-1777289493.tmp
/data/data/####/qDvd5bCQBNNfHK13vtdgiImj4ls.1573650267.tmp
/data/data/####/qihoo_jiagu_crash_report.xml
/data/data/####/qjlup4JbqZwXE3e1SSZfBYjZ-sA.-891592841.tmp
/data/data/####/qmDrGMIwU12LfLrCpWaSzlIMrwE.-554196888.tmp
/data/data/####/qn6MSqrXoi9VzjUINaEVXrn0dNs.-608782596.tmp
/data/data/####/qnBs81PQBgAojynGztF6HjK8vcU.958527766.tmp
/data/data/####/r-e5yyT51cePIke8Tf00V0F3MSc.-1603534241.tmp
/data/data/####/rFcAQz_D0cpk6M3obhhy5ZuQEP0.-687433497.tmp
/data/data/####/rJ1P0cFY969IhPXJUvj8hYPytY0.-862032434.tmp
/data/data/####/rkSGBaRnueZPLgXuUVWSWqlkiZ0.-1777289493.tmp
/data/data/####/share_sdk_1
/data/data/####/sp.lock
/data/data/####/t-umlCjufrlonHvBC-IRJqoPysY.-926583393.tmp
/data/data/####/tbs_download_config.xml
/data/data/####/tbs_download_stat.xml
/data/data/####/tbscoreinstall.txt
/data/data/####/tbslock.txt
/data/data/####/tcms_setting_sp.xml
/data/data/####/tp3OCUV0SmmqTylQ7N2Kt5ME9ug.-879308997.tmp
/data/data/####/ua.db
/data/data/####/ua.db-journal
/data/data/####/umeng_general_config.xml
/data/data/####/umeng_it.cache
/data/data/####/uz_G5Q9YITRT0LqsCLWLKdeR9f0.-53428349.tmp
/data/data/####/w09w9aof_pFfPzYDfvZ7kAW-zz4.-2141115072.tmp
/data/data/####/wOhXgdn6qZ3nLlKxmydznI-2v9Y.-554196888.tmp
/data/data/####/webview.db-journal
/data/data/####/webviewCookiesChromium.db-journal
/data/data/####/webviewCookiesChromiumPrivate.db-journal
/data/data/####/whoamP0DT-Hd7Gt20UC-rBnI_VA.1496072811.tmp
/data/data/####/xe6dgjUtqKMKvwDdr-nFjfHofaw.-909410488.tmp
/data/data/####/y8k6ZG1aDScTuiirECxF8OrUxF8.1101581534.tmp
/data/data/####/yX7WG6egAvvVxLZBMThaTJuZxsI.496150587.tmp
/data/data/####/yZBygRezdAyrAKo1fXKCde-r7Vc.-1464849930.tmp
/data/data/####/y_j0nQaaMa8Fg18VJfpTC_7wWCM.479745870.tmp
/data/data/####/yiiCQT5Qb1eFe9sxgUoRMcaUO8Y.-879308997.tmp
/data/data/####/ypgsWmoPFyt9mEetp3xOUbzuj6c.-1378587043.tmp
/data/data/####/ywAccount.xml
/data/data/####/ywPrefsTools.xml
/data/data/####/yws-xiXSJXPPoPy2bMagdHk098w.-1395509516.tmp
/data/data/####/z2w9vPHz1u7N0wQW0_tyM3yGc-k.675892006.tmp
/data/data/####/zTOs2uECbE3iexjxSXY2TODV_Ps.1376532389.tmp
/data/data/####/zcUiAwrPomiJGzYAFV9EDfxiLfc.-929608074.tmp
/data/data/####/zqBrDAzIYNhLezPZmHi0nlk3LDE.503427698.tmp
/data/data/####/zxXeZDLp4sIPPqt3vFnt3aDsAnU.958527766.tmp
/data/media/####/.artc_lock
/data/media/####/.bar
/data/media/####/.dh
/data/media/####/.dh-journal
/data/media/####/.dhlock
/data/media/####/.di
/data/media/####/.dic_lock
/data/media/####/.duid
/data/media/####/.globalLock
/data/media/####/.lesd_lock
/data/media/####/.nomedia
/data/media/####/.pkg_lock
/data/media/####/.rc_lock
/data/media/####/.serveruuid
/data/media/####/.slw
/data/media/####/1531137424836.db
/data/media/####/1531137436885.db
/data/media/####/1531137448181.db
/data/media/####/1531137466484.db
/data/media/####/20180709115722.txt
/data/media/####/20180709115740.txt
/data/media/####/2_20180709_r
/data/media/####/51fdb3429d6c40839ff1888e2535156c
/data/media/####/64ef68f48db14497947af44d8140dad5
/data/media/####/6c709c11d2d46a7b
/data/media/####/8926130.du
/data/media/####/9e290712b85088b29df91c585321cf04
/data/media/####/Alvin2.xml
/data/media/####/ContextData.xml
/data/media/####/ae63727e64d34e1cb0c303bf2b97f51e
/data/media/####/alsn20170807.db
/data/media/####/alsn20170807.db-journal
/data/media/####/b698ab73db0842e686b7dbabc10ea3e9
/data/media/####/dd7893586a493dc3
/data/media/####/deviceToken
/data/media/####/e0fc208d7735498c3690ddd10ce0bac2
/data/media/####/inapp_20180709.log
/data/media/####/tbslog.txt

Miscellaneous:

Executes next shell scripts:

<Package Folder>/files/DaemonServer -s <Package Folder>/lib/ -n runServer -p startservice -n <Package>/com.taobao.accs.ChannelService --user 0 -f <Package Folder> -t 600 -c agoo.pid -P <Package Folder> -K 1009527 -U tb_accs_eudemon_1.1.3 -L http://agoodm.m.taobao.com/agoo/report -D {"package":"<Package>","appKey":"umeng:52a0242156240b5b4a0104f9","utdid":"W0NNj0fBFoEDAGdzx1E1LoXT","sdkVersion":"220"} -I agoodm.m.taobao.com -O 80 -T -Z
cat /proc/cpuinfo | grep Serial
chmod 500 <Package Folder>/files/DaemonServer
chmod 755 <Package Folder>/.jiagu/libjiagu-273331730.so
getprop
getprop ro.product.cpu.abi
ls -l /system/xbin/su
sh

Loads the following dynamic libraries:

fb_jpegturbo
imagepipeline
inet.2.0
libjiagu-273331730
securitysdk-3.1
tnet-3.1

Uses the following algorithms to encrypt data:

AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-PKCS5Padding
AES-ECB-PKCS7Padding
RSA-ECB-NoPadding
RSA-ECB-PKCS1Padding
RSA-NONE-PKCS1Padding

Uses the following algorithms to decrypt data:

AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-NoPadding
AES-ECB-PKCS5Padding

Uses special library to hide executable bytecode.

Gains access to geolocation.

Gains access to network information.

Gains access to telephone information (number, imei, etc.).

Gains access to information about running applications.

Adds tasks to the system scheduler.

Displays its own windows over windows of other applications.

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical information

Curing recommendations

Free trial