マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Adware.Gexin.4812

Added to the Dr.Web virus database: 2018-11-12

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Adware.Gexin.2.origin
Network activity:
Connects to:
  • UDP(DNS) <Google DNS>
  • TCP(HTTP/1.1) a####.exc.mob.com:80
  • TCP(TLS/1.0) sett####.crashly####.com:443
  • TCP(TLS/1.0) rep####.crashly####.com:443
  • TCP(TLS/1.0) e.crashly####.com:443
DNS requests:
  • a####.exc.mob.com
  • e.crashly####.com
  • rep####.crashly####.com
  • sett####.crashly####.com
HTTP POST requests:
  • a####.exc.mob.com/errconf
File system changes:
Creates the following files:
  • /data/anr/traces.txt
  • /data/data/####/.duid
  • /data/data/####/.lock
  • /data/data/####/.vpl_lock
  • /data/data/####/5BE98776003C-0001-08EB-A4ADCD17F2B9.cls_temp
  • /data/data/####/5BE98776003C-0001-08EB-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE98776003C-0001-08EB-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE98776003C-0001-08EB-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE98776003C-0001-08EB-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE98776003C-0001-08EB-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE98776003C-0001-08EB-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE98776003C-0001-08EB-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE98776003C-0001-08EB-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE98776003C-0001-08EB-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987770186-0001-091D-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987770186-0001-091D-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987770186-0001-091D-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987770186-0001-091D-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987770186-0001-091D-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE987770186-0001-091D-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987770186-0001-091D-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987770186-0001-091D-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987770186-0001-091D-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987770186-0001-091D-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE9877702A8-0002-08EB-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9877702A8-0002-08EB-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9877702A8-0002-08EB-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9877702A8-0002-08EB-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9877702A8-0002-08EB-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9877702A8-0002-08EB-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9877702A8-0002-08EB-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9877702A8-0002-08EB-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9877702A8-0002-08EB-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE9877802D0-0001-0960-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9877802D0-0001-0960-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9877802D0-0001-0960-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9877802D0-0001-0960-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9877802D0-0001-0960-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9877802D0-0001-0960-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9877802D0-0001-0960-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9877802D0-0001-0960-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9877802D0-0001-0960-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE9877802D0-0002-091D-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9877802D0-0002-091D-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9877802D0-0002-091D-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9877802D0-0002-091D-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9877802D0-0002-091D-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE9877802D0-0002-091D-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9877802D0-0002-091D-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9877802D0-0002-091D-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9877802D0-0002-091D-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9877903C0-0001-0993-A4ADCD17F2B9.cls_temp
  • /data/data/####/5BE9877903C0-0001-0993-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9877903C0-0001-0993-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9877903C0-0001-0993-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9877903C0-0001-0993-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9877903C0-0001-0993-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE9877903C0-0001-0993-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9877903C0-0001-0993-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9877903C0-0001-0993-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9877903C0-0001-0993-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9877903C0-0001-0993-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE9877A00D2-0002-0993-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9877A00D2-0002-0993-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9877A00D2-0002-0993-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9877A00D2-0002-0993-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9877A00D2-0002-0993-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9877A00D2-0002-0993-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9877A00D2-0002-0993-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9877A00D2-0002-0993-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9877A00D2-0002-0993-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE9877A01EA-0002-0960-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9877A01EA-0002-0960-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9877A01EA-0002-0960-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9877A01EA-0002-0960-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9877A01EA-0002-0960-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9877A01EA-0002-0960-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9877A01EA-0002-0960-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9877A01EA-0002-0960-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9877A01EA-0002-0960-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE9877B01E0-0001-09D2-A4ADCD17F2B9.cls_temp
  • /data/data/####/5BE9877B01E0-0001-09D2-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9877B01E0-0001-09D2-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9877B01E0-0001-09D2-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9877B01E0-0001-09D2-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9877B01E0-0001-09D2-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE9877B01E0-0001-09D2-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9877B01E0-0001-09D2-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9877B01E0-0001-09D2-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9877B01E0-0001-09D2-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9877B01E0-0001-09D2-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE9877C01FE-0002-09D2-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9877C01FE-0002-09D2-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9877C01FE-0002-09D2-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9877C01FE-0002-09D2-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9877C01FE-0002-09D2-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9877C01FE-0002-09D2-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9877C01FE-0002-09D2-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9877C01FE-0002-09D2-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9877C02C6-0001-0A02-A4ADCD17F2B9.cls_temp
  • /data/data/####/5BE9877C02C6-0001-0A02-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9877C02C6-0001-0A02-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9877C02C6-0001-0A02-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9877C02C6-0001-0A02-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9877C02C6-0001-0A02-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE9877C02C6-0001-0A02-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9877C02C6-0001-0A02-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9877C02C6-0001-0A02-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9877C02C6-0001-0A02-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9877C02C6-0001-0A02-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE9877D005A-0002-0A02-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9877D005A-0002-0A02-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9877D005A-0002-0A02-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9877D005A-0002-0A02-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9877D005A-0002-0A02-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9877D005A-0002-0A02-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9877D005A-0002-0A02-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9877D005A-0002-0A02-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9877D005A-0002-0A02-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE9877E0398-0001-0A4B-A4ADCD17F2B9.cls_temp
  • /data/data/####/5BE9877E0398-0001-0A4B-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9877E0398-0001-0A4B-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9877E0398-0001-0A4B-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9877E0398-0001-0A4B-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9877E0398-0001-0A4B-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE9877E0398-0001-0A4B-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9877E0398-0001-0A4B-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9877E0398-0001-0A4B-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9877E0398-0001-0A4B-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9877E0398-0001-0A4B-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE9878000BE-0001-0A7C-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9878000BE-0001-0A7C-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9878000BE-0001-0A7C-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9878000BE-0001-0A7C-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9878000BE-0001-0A7C-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9878000BE-0001-0A7C-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9878000BE-0001-0A7C-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9878000BE-0001-0A7C-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987800186-0002-0A4B-A4ADCD17F2B9.cls_temp
  • /data/data/####/5BE987800186-0002-0A4B-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987800186-0002-0A4B-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987800186-0002-0A4B-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987800186-0002-0A4B-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987800186-0002-0A4B-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE987800186-0002-0A4B-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987800186-0002-0A4B-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987800186-0002-0A4B-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987800186-0002-0A4B-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9878101B8-0001-0AB8-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9878101B8-0001-0AB8-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9878101B8-0001-0AB8-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9878101B8-0001-0AB8-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9878101B8-0001-0AB8-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE9878101B8-0001-0AB8-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9878101B8-0001-0AB8-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9878101B8-0001-0AB8-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9878101B8-0001-0AB8-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9878101B8-0001-0AB8-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE9878102D0-0002-0A7C-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9878102D0-0002-0A7C-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9878102D0-0002-0A7C-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9878102D0-0002-0A7C-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9878102D0-0002-0A7C-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9878102D0-0002-0A7C-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9878102D0-0002-0A7C-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9878102D0-0002-0A7C-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9878102D0-0002-0A7C-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE98781033E-0002-0AB8-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE98781033E-0002-0AB8-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE98781033E-0002-0AB8-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE98781033E-0002-0AB8-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE98781033E-0002-0AB8-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE98781033E-0002-0AB8-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE98781033E-0002-0AB8-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE98781033E-0002-0AB8-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE98781033E-0002-0AB8-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE987820370-0001-0AF2-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987820370-0001-0AF2-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987820370-0001-0AF2-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987820370-0001-0AF2-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987820370-0001-0AF2-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987820370-0001-0AF2-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987820370-0001-0AF2-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987820370-0001-0AF2-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9878503AC-0001-0B23-A4ADCD17F2B9.cls_temp
  • /data/data/####/5BE9878503AC-0001-0B23-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9878503AC-0001-0B23-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9878503AC-0001-0B23-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9878503AC-0001-0B23-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9878503AC-0001-0B23-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE9878503AC-0001-0B23-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9878503AC-0001-0B23-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9878503AC-0001-0B23-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9878503AC-0001-0B23-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9878503AC-0001-0B23-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE987860352-0002-0B23-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987860352-0002-0B23-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987860352-0002-0B23-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987860352-0002-0B23-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987860352-0002-0B23-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987860352-0002-0B23-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987860352-0002-0B23-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987860352-0002-0B23-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9878F012C-0001-0B70-A4ADCD17F2B9.cls_temp
  • /data/data/####/5BE9878F012C-0001-0B70-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9878F012C-0001-0B70-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9878F012C-0001-0B70-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9878F012C-0001-0B70-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9878F012C-0001-0B70-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE9878F012C-0001-0B70-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9878F012C-0001-0B70-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9878F012C-0001-0B70-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9878F012C-0001-0B70-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9878F01E0-0001-0B82-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9878F01E0-0001-0B82-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9878F01E0-0001-0B82-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9878F01E0-0001-0B82-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9878F01E0-0001-0B82-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE9878F01E0-0001-0B82-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9878F01E0-0001-0B82-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9878F01E0-0001-0B82-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9878F01E0-0001-0B82-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9878F01E0-0001-0B82-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE9879001E0-0002-0B70-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9879001E0-0002-0B70-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9879001E0-0002-0B70-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9879001E0-0002-0B70-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9879001E0-0002-0B70-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9879001E0-0002-0B70-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9879001E0-0002-0B70-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9879001E0-0002-0B70-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9879001E0-0002-0B70-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE9879001EA-0002-0B82-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9879001EA-0002-0B82-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9879001EA-0002-0B82-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9879001EA-0002-0B82-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9879001EA-0002-0B82-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9879001EA-0002-0B82-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9879001EA-0002-0B82-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9879001EA-0002-0B82-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9879001EA-0002-0B82-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE987910190-0001-0BDE-A4ADCD17F2B9.cls
  • /data/data/####/5BE987910190-0001-0BDE-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987910190-0001-0BDE-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987910190-0001-0BDE-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987910190-0001-0BDE-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987910190-0001-0BDE-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE987910190-0001-0BDE-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987910190-0001-0BDE-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987910190-0001-0BDE-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987910190-0001-0BDE-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987910190-0001-0BDE-A4ADCD17F2B9SessionUser....leted)
  • /data/data/####/5BE98792038E-0002-0BDE-A4ADCD17F2B9BeginSession.cls
  • /data/data/####/5BE98792038E-0002-0BDE-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE98792038E-0002-0BDE-A4ADCD17F2B9SessionApp.cls
  • /data/data/####/5BE98792038E-0002-0BDE-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE98792038E-0002-0BDE-A4ADCD17F2B9SessionDevice.cls
  • /data/data/####/5BE98792038E-0002-0BDE-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE98792038E-0002-0BDE-A4ADCD17F2B9SessionOS.cls
  • /data/data/####/5BE98792038E-0002-0BDE-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9879300F0-0001-0C0E-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9879300F0-0001-0C0E-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9879300F0-0001-0C0E-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9879300F0-0001-0C0E-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9879300F0-0001-0C0E-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE9879300F0-0001-0C0E-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9879300F0-0001-0C0E-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9879300F0-0001-0C0E-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9879300F0-0001-0C0E-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9879300F0-0001-0C0E-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE9879600C8-0001-0C44-A4ADCD17F2B9.cls_temp
  • /data/data/####/5BE9879600C8-0001-0C44-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9879600C8-0001-0C44-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9879600C8-0001-0C44-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9879600C8-0001-0C44-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9879600C8-0001-0C44-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE9879600C8-0001-0C44-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9879600C8-0001-0C44-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9879600C8-0001-0C44-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9879600C8-0001-0C44-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9879600C8-0001-0C44-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE987970014-0002-0C44-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987970014-0002-0C44-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987970014-0002-0C44-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987970014-0002-0C44-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987970014-0002-0C44-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987970014-0002-0C44-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987970014-0002-0C44-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987970014-0002-0C44-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987970014-0002-0C44-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE98798024E-0002-0C0E-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE98798024E-0002-0C0E-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE98798024E-0002-0C0E-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE98798024E-0002-0C0E-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE98798024E-0002-0C0E-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE98798024E-0002-0C0E-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE98798024E-0002-0C0E-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE98798024E-0002-0C0E-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9879F019A-0001-0C96-A4ADCD17F2B9.cls_temp
  • /data/data/####/5BE9879F019A-0001-0C96-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE9879F019A-0001-0C96-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE9879F019A-0001-0C96-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE9879F019A-0001-0C96-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE9879F019A-0001-0C96-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE9879F019A-0001-0C96-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE9879F019A-0001-0C96-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE9879F019A-0001-0C96-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE9879F019A-0001-0C96-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE9879F019A-0001-0C96-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE987A00226-0001-0CC4-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987A00226-0001-0CC4-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987A00226-0001-0CC4-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987A00226-0001-0CC4-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987A00226-0001-0CC4-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987A00226-0001-0CC4-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987A00226-0001-0CC4-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987A00226-0001-0CC4-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987A00226-0001-0CC4-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE987A00230-0002-0C96-A4ADCD17F2B9.cls_temp
  • /data/data/####/5BE987A00230-0002-0C96-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987A00230-0002-0C96-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987A00230-0002-0C96-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987A00230-0002-0C96-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987A00230-0002-0C96-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE987A00230-0002-0C96-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987A00230-0002-0C96-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987A00230-0002-0C96-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987A00230-0002-0C96-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987A102A8-0001-0CFC-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987A102A8-0001-0CFC-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987A102A8-0001-0CFC-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987A102A8-0001-0CFC-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987A102A8-0001-0CFC-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE987A102A8-0001-0CFC-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987A102A8-0001-0CFC-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987A102A8-0001-0CFC-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987A102A8-0001-0CFC-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987A102A8-0001-0CFC-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE987A103D4-0002-0CC4-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987A103D4-0002-0CC4-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987A103D4-0002-0CC4-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987A103D4-0002-0CC4-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987A103D4-0002-0CC4-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987A103D4-0002-0CC4-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987A103D4-0002-0CC4-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987A103D4-0002-0CC4-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987A103D4-0002-0CC4-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE987A20014-0002-0CFC-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987A20014-0002-0CFC-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987A20014-0002-0CFC-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987A20014-0002-0CFC-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987A20014-0002-0CFC-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987A20014-0002-0CFC-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987A20014-0002-0CFC-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987A20014-0002-0CFC-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987A20014-0002-0CFC-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE987A3003C-0001-0D3D-A4ADCD17F2B9.cls_temp
  • /data/data/####/5BE987A3003C-0001-0D3D-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987A3003C-0001-0D3D-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987A3003C-0001-0D3D-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987A3003C-0001-0D3D-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987A3003C-0001-0D3D-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE987A3003C-0001-0D3D-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987A3003C-0001-0D3D-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987A3003C-0001-0D3D-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987A3003C-0001-0D3D-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987A3003C-0001-0D3D-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE987A402DA-0001-0D6E-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987A402DA-0001-0D6E-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987A402DA-0001-0D6E-A4ADCD17F2B9SessionApp.cls
  • /data/data/####/5BE987A402DA-0001-0D6E-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987A402DA-0001-0D6E-A4ADCD17F2B9SessionDevice.cls
  • /data/data/####/5BE987A402DA-0001-0D6E-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987A402DA-0001-0D6E-A4ADCD17F2B9SessionOS.cls
  • /data/data/####/5BE987A402DA-0001-0D6E-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987A402E4-0002-0D3D-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987A402E4-0002-0D3D-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987A402E4-0002-0D3D-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987A402E4-0002-0D3D-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987A402E4-0002-0D3D-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987A402E4-0002-0D3D-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987A402E4-0002-0D3D-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987A402E4-0002-0D3D-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987AE00D2-0001-0DBA-A4ADCD17F2B9.cls_temp
  • /data/data/####/5BE987AE00D2-0001-0DBA-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987AE00D2-0001-0DBA-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987AE00D2-0001-0DBA-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987AE00D2-0001-0DBA-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987AE00D2-0001-0DBA-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE987AE00D2-0001-0DBA-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987AE00D2-0001-0DBA-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987AE00D2-0001-0DBA-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987AE00D2-0001-0DBA-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987AF015E-0001-0DE9-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987AF015E-0001-0DE9-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987AF015E-0001-0DE9-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987AF015E-0001-0DE9-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987AF015E-0001-0DE9-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE987AF015E-0001-0DE9-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987AF015E-0001-0DE9-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987AF015E-0001-0DE9-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987AF015E-0001-0DE9-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987AF015E-0001-0DE9-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE987B00000-0002-0DBA-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987B00000-0002-0DBA-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987B00000-0002-0DBA-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987B00000-0002-0DBA-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987B00000-0002-0DBA-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987B00000-0002-0DBA-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987B00000-0002-0DBA-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987B00000-0002-0DBA-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987B00000-0002-0DBA-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE987B0033E-0002-0DE9-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987B0033E-0002-0DE9-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987B0033E-0002-0DE9-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987B0033E-0002-0DE9-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987B0033E-0002-0DE9-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987B0033E-0002-0DE9-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987B0033E-0002-0DE9-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987B0033E-0002-0DE9-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987B0033E-0002-0DE9-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE987B003CA-0001-0E28-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987B003CA-0001-0E28-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987B003CA-0001-0E28-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987B003CA-0001-0E28-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987B003CA-0001-0E28-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987B003CA-0001-0E28-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987B003CA-0001-0E28-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987B003CA-0001-0E28-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987B60122-0001-0E5A-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987B60122-0001-0E5A-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987B60122-0001-0E5A-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987B60122-0001-0E5A-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987B60122-0001-0E5A-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987B60122-0001-0E5A-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987B60122-0001-0E5A-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987B60122-0001-0E5A-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987B60316-0001-0E79-A4ADCD17F2B9.cls_temp
  • /data/data/####/5BE987B60316-0001-0E79-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987B60316-0001-0E79-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987B60316-0001-0E79-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987B60316-0001-0E79-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987B60316-0001-0E79-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE987B60316-0001-0E79-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987B60316-0001-0E79-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987B60316-0001-0E79-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987B60316-0001-0E79-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987B60316-0001-0E79-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE987B801EA-0002-0E5A-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987B801EA-0002-0E5A-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987B801EA-0002-0E5A-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987B801EA-0002-0E5A-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987B801EA-0002-0E5A-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987B801EA-0002-0E5A-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987B801EA-0002-0E5A-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987B801EA-0002-0E5A-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987B801EA-0002-0E5A-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE987C90082-0001-0EDF-A4ADCD17F2B9.cls_temp
  • /data/data/####/5BE987C90082-0001-0EDF-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987C90082-0001-0EDF-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987C90082-0001-0EDF-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987C90082-0001-0EDF-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987C90082-0001-0EDF-A4ADCD17F2B9SessionCrash.cls_temp
  • /data/data/####/5BE987C90082-0001-0EDF-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987C90082-0001-0EDF-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987C90082-0001-0EDF-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987C90082-0001-0EDF-A4ADCD17F2B9SessionOS.json
  • /data/data/####/5BE987C90082-0001-0EDF-A4ADCD17F2B9SessionUser.cls_temp
  • /data/data/####/5BE987CA0014-0002-0EDF-A4ADCD17F2B9BeginSession.cls_temp
  • /data/data/####/5BE987CA0014-0002-0EDF-A4ADCD17F2B9BeginSession.json
  • /data/data/####/5BE987CA0014-0002-0EDF-A4ADCD17F2B9SessionApp.cls_temp
  • /data/data/####/5BE987CA0014-0002-0EDF-A4ADCD17F2B9SessionApp.json
  • /data/data/####/5BE987CA0014-0002-0EDF-A4ADCD17F2B9SessionDevice.cls_temp
  • /data/data/####/5BE987CA0014-0002-0EDF-A4ADCD17F2B9SessionDevice.json
  • /data/data/####/5BE987CA0014-0002-0EDF-A4ADCD17F2B9SessionOS.cls_temp
  • /data/data/####/5BE987CA0014-0002-0EDF-A4ADCD17F2B9SessionOS.json
  • /data/data/####/MultiDex.lock
  • /data/data/####/PlayerUIApk.apk
  • /data/data/####/ThrowalbeLog.db-journal
  • /data/data/####/TwitterAdvertisingInfoPreferences.xml
  • /data/data/####/com.crashlytics.prefs.xml
  • /data/data/####/com.crashlytics.sdk.android;answers;settings.xml
  • /data/data/####/com.crashlytics.settings.json
  • /data/data/####/com.vpgame.eric;pushservice.growing.db-journal
  • /data/data/####/crash_marker
  • /data/data/####/growing.db-journal
  • /data/data/####/growing_persist_data.xml
  • /data/data/####/growing_profile.xml
  • /data/data/####/initialization_marker
  • /data/data/####/io.fabric.sdk.android;fabric;io.fabric.sdk.andr...ng.xml
  • /data/data/####/libjiagu1996635172.so
  • /data/data/####/mob_commons_1
  • /data/data/####/mob_sdk_exception_1
  • /data/data/####/multidex.version.xml
  • /data/data/####/nbaplus-journal
  • /data/data/####/sa_057050bb-32fb-49c3-95bc-74edac2a0b5d_1542031249450.tap
  • /data/data/####/sa_2a332648-68f4-4fae-8f2d-9589df88f9ec_1542031224710.tap
  • /data/data/####/sa_38e4acb6-6975-4876-800a-742f8cdf2bbb_1542031288890.tap
  • /data/data/####/sa_55c95a8f-6a47-40c3-a44c-e22a15e4190f_1542031265920.tap
  • /data/data/####/sa_61a77516-7208-4ce7-8cc8-f6a80098523c_1542031226130.tap
  • /data/data/####/sa_71dc4fb9-33b9-47a1-9f03-d94d72577f70_1542031234930.tap
  • /data/data/####/sa_7ae8914d-5b5b-4f8f-b4d1-e827fa7cf4c1_1542031232450.tap
  • /data/data/####/sa_7d4b865c-4442-4803-b8e0-e75f887ae0db_1542031264340.tap
  • /data/data/####/sa_8dab4b15-54b6-443e-8930-2ad27d0fe332_1542031253320.tap
  • /data/data/####/sa_9a2a1acd-5e1b-47ce-9009-3e6ea42482f1_1542031247670.tap
  • /data/data/####/sa_9c0ae058-e427-4539-b5eb-4e030049bcec_1542031229020.tap
  • /data/data/####/sa_b7a9cb38-8fef-4b7e-beed-b4132e6dd1de_1542031223650.tap
  • /data/data/####/sa_b9ff5a58-6655-4c03-bbc3-989fc4b4cc3b_1542031222290.tap
  • /data/data/####/sa_c8249764-c052-415e-800b-649b2f7d167a_1542031281020.tap
  • /data/data/####/sa_d0206b12-5360-4bf4-9167-6d075654991b_1542031269100.tap
  • /data/data/####/sa_e154e228-4694-42b5-96c3-ad9546da449b_1542031233700.tap
  • /data/data/####/session_analytics.tap
  • /data/data/####/session_analytics.tap (deleted)
  • /data/data/####/session_analytics.tap.tmp
  • /data/media/####/.artc_lock
  • /data/media/####/.di
  • /data/media/####/.dic_lock
  • /data/media/####/.duid
  • /data/media/####/.globalLock
  • /data/media/####/.im_lock
  • /data/media/####/.lesd_lock
  • /data/media/####/.mn_-1464060969
  • /data/media/####/.nomedia
  • /data/media/####/.pkg_lock
  • /data/media/####/.pkgs_lock
  • /data/media/####/.rc_lock
  • /data/media/####/.slw
  • /data/media/####/.ss_lock
Miscellaneous:
Executes the following shell scripts:
  • cat /sys/class/net/wlan0/address
Loads the following dynamic libraries:
  • libjiagu1996635172
  • netcache
Uses the following algorithms to encrypt data:
  • AES-ECB-PKCS7Padding
Uses the following algorithms to decrypt data:
  • AES-ECB-NoPadding
Uses special library to hide executable bytecode.
Gets information about phone status (number, IMEI, etc.).

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android