マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Android.Triada.4871

Added to the Dr.Web virus database: 2021-01-25

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Click.345.origin
  • Android.DownLoader.1007.origin
  • Android.RemoteCode.314.origin
  • Android.Triada.4567
  • Android.Triada.482.origin
  • Android.Triada.510.origin
  • Android.Triada.534.origin
  • Android.Triada.559.origin
  • Android.Triada.563.origin
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(HTTP/1.1) 47.95.1####.130:80
  • TCP(HTTP/1.1) 10####.admast####.com:808
  • TCP(HTTP/1.1) www.ddz####.cn:80
  • TCP(HTTP/1.1) now####.pes####.com:18001
  • TCP(HTTP/1.1) ad.toads####.com:80
  • TCP(HTTP/1.1) www.78####.cc:80
  • TCP(HTTP/1.1) e.halo####.com:80
  • TCP(HTTP/1.1) 58.2####.92.50:808
  • TCP(HTTP/1.1) 1####.27.70.235:80
  • TCP(HTTP/1.1) 47.1####.185.46:80
  • TCP(HTTP/1.1) c.c####.com:80
  • TCP(HTTP/1.1) b####.t####.sogo####.####.com:80
  • TCP(HTTP/1.1) gif.lu.sogo####.####.com:80
  • TCP(HTTP/1.1) xiaox####.adse####.adan####.com:80
  • TCP(HTTP/1.1) 6z####.njt####.com:10091
  • TCP(HTTP/1.1) 1p24-le####.b0.a####.com:80
  • TCP(HTTP/1.1) filt####.a####.top:80
  • TCP(HTTP/1.1) lla####.slj####.com:17001
  • TCP(HTTP/1.1) p####.hfc####.com:80
  • TCP(HTTP/1.1) d####.cn:80
  • TCP(HTTP/1.1) www-new####.b0.a####.com:80
  • TCP(HTTP/1.1) 10####.admast####.com:99
  • TCP(HTTP/1.1) api.z####.com:80
  • TCP(HTTP/1.1) www.pc####.com.####.cn:80
  • TCP(HTTP/1.1) de.gtp.xy####.com:8844
  • TCP(HTTP/1.1) www.f####.com:80
  • TCP(HTTP/1.1) u####.com:80
  • TCP(HTTP/1.1) ad.smudge####.com:8986
  • TCP(HTTP/1.1) hd.a####.com:80
  • TCP(HTTP/1.1) newap####.math####.cn:80
  • TCP(HTTP/1.1) cl-5307####.g####.co:80
  • TCP(HTTP/1.1) 1####.114.206.198:28018
  • TCP(HTTP/1.1) 1####.117.7.188:80
  • TCP(HTTP/1.1) now####.pes####.com:17002
  • TCP(HTTP/1.1) ip####.com:80
  • TCP(HTTP/1.1) a####.d####.com:80
  • TCP(HTTP/1.1) 2####.186.173.17:8888
  • TCP(HTTP/1.1) ssp.k####.com:80
  • TCP(HTTP/1.1) 47.1####.211.73:80
  • TCP(HTTP/1.1) 58.2####.67.136:99
  • TCP(HTTP/1.1) u####.b0.upa####.com:80
  • TCP(HTTP/1.1) pro.wildpet####.com:201
  • TCP(HTTP/1.1) 58.2####.198.157:999
  • TCP(HTTP/1.1) c####.zhit####.com:99
  • TCP(HTTP/1.1) cn.f####.top:8080
  • TCP(HTTP/1.1) 4####.98.31.107:901
  • TCP(HTTP/1.1) api.78####.cc:80
  • TCP(HTTP/1.1) 2####.73.129.195:28018
  • TCP(HTTP/1.1) 1####.201.175.19:80
  • TCP(HTTP/1.1) sd.bu####.vip:80
  • TCP(HTTP/1.1) c####.jumen####.com:80
  • TCP(HTTP/1.1) ght####.aog####.com:19001
  • TCP(HTTP/1.1) mg.meit####.com:8071
  • TCP(HTTP/1.1) and####.b####.qq.com:80
  • TCP(HTTP/1.1) b####.bugse####.com:3002
  • TCP(HTTP/1.1) ap####.math####.cn:80
  • TCP(HTTP/1.1) b####.bugse####.com:80
  • TCP(HTTP/1.1) down####.baiyuns####.com:80
  • TCP(HTTP/1.1) mh####.b0.a####.com:80
  • TCP(HTTP/1.1) j####.g####.vip:80
  • TCP(HTTP/1.1) log.gtp.xy####.com:80
  • TCP(HTTP/1.1) api.a####.ads####.cn:80
  • TCP(HTTP/1.1) t####.sogo####.com.####.com:80
  • TCP(HTTP/1.1) to.d####.cn:80
  • TCP(HTTP/1.1) api####.quta####.com:80
  • TCP(HTTP/1.1) ad.l####.com:80
  • TCP(HTTP/1.1) lo.bu####.vip:80
  • TCP(HTTP/1.1) b####.bugse####.com:3000
  • TCP(HTTP/1.1) z.c####.com:80
  • TCP(HTTP/1.1) ad.l####.com:3000
  • TCP(HTTP/1.1) 1####.76.103.4:28018
  • TCP(HTTP/1.1) orn####.wwe####.com:17001
  • TCP(HTTP/1.1) 1####.77.67.185:28018
  • TCP(HTTP/1.1) r####.bu####.vip:80
  • TCP(HTTP/1.1) co####.ssp.adoc####.com:80
  • TCP(HTTP/1.1) 2####.16.188.238:31828
  • TCP(HTTP/1.1) yun.b####.com:80
  • TCP(HTTP/1.1) 52.2####.173.174:80
  • TCP(HTTP/1.1) r1.baiyuns####.com:80
  • TCP(HTTP/1.1) p####.api.adoc####.com:80
  • TCP(HTTP/1.1) i####.sogo####.com.####.com:80
  • TCP(HTTP/1.1) r####.t####.s####.com:80
  • TCP(HTTP/1.1) gd.a.s####.com:80
  • TCP(HTTP/1.1) auto-ne####.b0.a####.com:80
  • TCP(HTTP/1.1) 14.17.1####.182:80
  • TCP(HTTP/1.1) f####.st####.z####.com:80
  • TCP(HTTP/1.1) api.yunco####.com:80
  • TCP(HTTP/1.1) 1n25-js####.b0.a####.com:80
  • TCP(HTTP/1.1) lla####.slj####.com:17002
  • TCP(HTTP/1.1) b####.bugse####.com:3001
  • TCP(HTTP/1.1) res####.a####.com:80
  • TCP(HTTP/1.1) app.a####.top:80
  • TCP(HTTP/1.1) l####.tbs.qq.com:80
  • TCP(HTTP/1.1) api.40088####.com:8181
  • TCP(HTTP/1.1) 1####.56.165.2:19001
  • TCP(HTTP/1.1) 78####.cc:80
  • TCP(HTTP/1.1) cpd.liyan####.com:808
  • TCP(HTTP/1.1) ad.l####.com:3001
  • TCP(HTTP/1.1) i####.360bu####.com.####.com:80
  • TCP(HTTP/1.1) a.78####.cc:80
  • TCP(HTTP/1.1) dy.cn.wildpet####.xyz:80
  • TCP(TLS/1.0) i####.d####.com:443
  • TCP(TLS/1.0) w####.jd.com:443
  • TCP(TLS/1.0) u####.n####.com.####.net:443
  • TCP(TLS/1.0) f####.st####.z####.com:443
  • TCP(TLS/1.0) lhyysdk####.oss-cn-####.aliy####.com:443
  • TCP(TLS/1.0) jump####.58.com:443
  • TCP(TLS/1.0) gsacti####.didi####.com.cn:443
  • TCP(TLS/1.0) wildca####.go-mp####.net.####.net:443
  • TCP(TLS/1.0) mipst####.s####.cn:443
  • TCP(TLS/1.0) i####.j####.com:443
  • TCP(TLS/1.0) c####.sm.cn:443
  • TCP(TLS/1.0) c.c####.com:443
  • TCP(TLS/1.0) ur####.jd.com:443
  • TCP(TLS/1.0) 1713464####.cn-hang####.fc.####.com:443
  • TCP(TLS/1.0) u####.com:443
  • TCP(TLS/1.0) 1####.194.220.95:443
  • TCP(TLS/1.0) www.r####.com:443
  • TCP(TLS/1.0) api.g####.vip:443
  • TCP(TLS/1.0) trac####.58.com:443
  • TCP(TLS/1.0) g.al####.com:443
  • TCP(TLS/1.0) cdn.boo####.net.####.com:443
  • TCP(TLS/1.0) wq.360bu####.com.####.com:443
  • TCP(TLS/1.0) i####.sogo####.com.####.com:443
  • TCP(TLS/1.0) eu9####.ten####.alibaba####.com:443
  • TCP(TLS/1.0) e####.n####.com.####.net:443
  • TCP(TLS/1.0) 2####.107.1.97:443
  • TCP(TLS/1.0) st####.ud####.com.####.com:443
  • TCP(TLS/1.0) pang####.sn####.com:443
  • TCP(TLS/1.0) tra####.didist####.com.####.com:443
  • TCP(TLS/1.0) dualsta####.wagbr####.ali####.####.com:443
  • TCP(TLS/1.0) a####.m.jd.com:443
  • TCP(TLS/1.0) sa####.cloudi####.com.####.net:443
  • TCP(TLS/1.0) cn-jdtr####.com.edg####.####.net:443
  • TCP(TLS/1.0) it####.a####.com.####.net:443
  • TCP(TLS/1.0) res####.a####.com:443
  • TCP(TLS/1.0) v.d####.cn:443
  • TCP(TLS/1.0) we####.m.qq.####.com:443
  • TCP(TLS/1.0) z.c####.com:443
  • TCP(TLS/1.0) s3.nik####.com.####.net:443
  • TCP(TLS/1.0) m.j####.com:443
  • TCP(TLS/1.0) l####.optimi####.com:443
  • TCP(TLS/1.0) to####.ctobsn####.com:443
  • TCP(TLS/1.0) qy-swa####.qi####.com:443
  • TCP(TLS/1.0) bam-####.nr-####.net:443
  • TCP(TLS/1.0) api.n####.com.####.net:443
  • TCP(TLS/1.0) auto-ne####.b0.a####.com:443
  • TCP(TLS/1.0) ma####.sp####.mig.####.net:443
  • TCP(TLS/1.0) g####.jd.com:443
  • TCP(TLS/1.0) s####.x####.com.cn:443
  • TCP(TLS/1.0) lbs.net####.im:443
  • TCP(TLS/1.0) u.j####.com:443
  • TCP(TLS/1.0) na61-####.wagbr####.ali####.####.com:443
  • TCP(TLS/1.0) sy.cl####.com:443
  • TCP(TLS/1.0) h####.b####.com:443
  • TCP(TLS/1.0) i####.360bu####.com.####.com:443
  • TCP(TLS/1.0) insight####.newr####.com:443
  • TCP(TLS/1.0) jingtai####.oss-cn-####.aliy####.com:443
  • TCP(TLS/1.0) blackho####.m.jd.com:443
  • TCP(TLS/1.0) sm####.n####.com:443
  • TCP(TLS/1.0) st####.ku####.cn.####.com:443
  • TCP(TLS/1.0) ap1.qi####.com:443
  • TCP(TLS/1.0) gm.mm####.com:443
  • TCP(TLS/1.0) js-a####.newr####.com:443
  • TCP(TLS/1.0) log.mm####.com:443
  • TCP(TLS/1.0) i####.go-mp####.net.####.net:443
  • TCP(TLS/1.0) di####.b####.net:443
  • TCP(TLS/1.0) 1####.74.90.25:31828
  • TCP(TLS/1.0) ne####.x####.com.cn:443
  • TCP(TLS/1.0) h5s####.m.jd.com:443
  • TCP(TLS/1.0) yun.b####.com:443
  • TCP(TLS/1.0) epass####.didi####.com.cn:443
  • TCP(TLS/1.0) api16-a####.pa####.io.####.net:443
  • TCP(TLS/1.0) alldo####.linx####.com.####.com:443
  • TCP(TLS/1.0) wtc.d####.com:443
  • TCP(TLS/1.0) b####.t####.sogo####.####.com:443
  • TCP(TLS/1.0) o####.xiaoju####.com:443
  • TCP(TLS/1.0) fir####.h####.org:5665
  • TCP(TLS/1.0) dm.ps####.com:443
  • TCP(TLS/1.0) sw4.d####.com:443
  • TCP(TLS/1.0) dpubst####.ud####.com.####.com:443
  • TCP(TLS/1.0) px.eff####.com:443
  • TCP(TLS/1.0) a####.d####.com:443
  • TCP(TLS/1.0) www.y####.com:443
  • TCP(TLS/1.0) al####.u####.com:443
  • TCP(TLS/1.0) hm.b####.com:443
  • TCP(TLS/1.0) lb####.m.jd.com:443
  • TCP(TLS/1.0) tm-####.oss-cn-####.aliy####.com:443
  • TCP(TLS/1.2) 2####.85.233.95:443
  • TCP(TLS/1.2) 64.2####.162.94:443
  • TCP(TLS/1.2) 64.2####.164.139:443
  • TCP 1####.31.211.237:33900
  • TCP zb-cent####.m.ta####.com:80
  • TCP l####.net####.im:8080
  • TCP zb-cent####.m.ta####.com:443
  • TCP 1####.31.211.239:33899
  • UDP s####.serv####.moz####.com:3478
DNS requests:
  • 1####.js####.net
  • 1####.leb####.net
  • 1####.liuxing####.com
  • 1####.zhit####.com
  • 10####.admast####.com
  • 602.a####.top
  • 602.a####.top.####.8
  • 653.a####.top
  • 653.a####.top.####.8
  • 684d####.ak####.io
  • 6z####.njt####.com
  • 78####.cc
  • a####.a####.com
  • a####.d####.com
  • a####.m.jd.com
  • a####.m.sm.cn
  • a####.man.aliy####.com
  • a####.map.qq.com
  • a####.new####.com
  • a####.new####.com
  • a####.sn####.com
  • a.78####.cc
  • ad.l####.com
  • ad.smudge####.com
  • ad.toads####.com
  • adcha####.bz.m####.com
  • al####.new####.com
  • al####.new####.com
  • al####.new####.com
  • al####.new####.com
  • amdc####.m.ta####.com
  • and####.b####.qq.com
  • ap####.math####.cn
  • ap1.qi####.com
  • api####.quta####.com
  • api.40088####.com
  • api.78####.cc
  • api.a####.ads####.cn
  • api.g####.vip
  • api.n####.com
  • api.yunco####.com
  • api.z####.com
  • api16-a####.pa####.io
  • app.a####.top
  • ass####.xca####.com
  • at.umt####.com
  • b####.bugse####.com
  • b####.bugse####.com
  • b####.t####.s####.com
  • b####.t####.sogo####.com
  • bam-####.nr-####.net
  • bbt####.wwe####.com
  • blackho####.m.jd.com
  • c####.58.com
  • c####.f####.top
  • c####.jumen####.com
  • c####.mm####.com
  • c####.sm.cn
  • c####.zhit####.com
  • c.5####.com.cn
  • c.c####.com
  • c.cdn.wa####.xyz
  • c.go-mp####.net
  • cdn.boo####.com
  • cdn.boo####.net
  • cdn.qcv####.cn
  • cn.f####.top
  • co####.ssp.adoc####.com
  • cpd.liyan####.com
  • cw####.mintl####.cn
  • d####.58.com
  • d####.cn
  • de.gtp.xy####.com
  • dig.b####.net
  • dl.bu####.vip
  • dm.byted####.com
  • dm.ps####.com
  • dm.tou####.com
  • down####.baiyuns####.com
  • dpubst####.ud####.com
  • dup.baidust####.com
  • dwf.linx####.com
  • dxp.b####.com
  • dy.cn.wildpet####.xyz
  • e.halo####.com
  • epass####.didi####.com.cn
  • f####.st####.z####.com
  • f####.ur####.s####.com
  • fc.b####.com
  • filt####.a####.top
  • fir####.h####.org
  • fou####.ta####.com
  • g####.jd.com
  • g####.jd.com
  • g.al####.com
  • geb####.slj####.com
  • ght####.aog####.com
  • gif.lu.sogo####.com
  • gm.mm####.com
  • gn####.f####.top
  • gsacti####.didi####.com.cn
  • h####.b####.com
  • h####.c####.com
  • h5.360bu####.com
  • h5s####.m.jd.com
  • hm.b####.com
  • i####.360bu####.com
  • i####.d####.com
  • i####.sogo####.com
  • i####.t####.sogo####.com
  • i####.uc.cn
  • i####.x####.com.cn
  • img.5####.com.cn
  • img.new####.com
  • insight####.newr####.com
  • ip####.com
  • it####.a####.com
  • j####.g####.vip
  • j1.5####.com.cn
  • jingtai####.oss-cn-####.aliy####.com
  • js-a####.newr####.com
  • jump####.58.com
  • jxs####.slj####.com
  • l####.58.com
  • l####.m.sm.cn
  • l####.net####.im
  • l####.optimi####.com
  • l####.tbs.qq.com
  • lb####.m.jd.com
  • lbs.net####.im
  • lg.ca####.com
  • lhyysdk####.oss-cn-####.aliy####.com
  • lla####.slj####.com
  • lo.bu####.vip
  • log.gtp.xy####.com
  • log.mm####.com
  • m####.m.jd.com
  • m####.t####.sogo####.com
  • m.360bu####.com
  • mg.meit####.com
  • mipst####.s####.cn
  • n####.mer####.s####.com
  • ne####.x####.com.cn
  • newap####.math####.cn
  • now####.pes####.com
  • o####.xiaoju####.com
  • om####.xiaoju####.com
  • om####.xiaoju####.com
  • orn####.wwe####.com
  • p####.5####.com.cn
  • p####.5####.com.cn
  • p####.api.adoc####.com
  • p####.bugse####.com
  • p####.gol####.s####.com
  • p####.hfc####.com
  • p####.m.jd.com
  • p####.p####.s####.com
  • pang####.sn####.com
  • plb####.u####.com
  • pro.wildpet####.com
  • pv.s####.com
  • px.eff####.com
  • qlz####.pes####.com
  • qy-swa####.qi####.com
  • r####.bu####.vip
  • r####.bu####.vip
  • r####.t####.s####.com
  • r1.baiyuns####.com
  • res####.a####.com
  • res####.a####.top
  • rwbin####.t####.u####.net
  • s####.al####.com
  • s####.e.qq.com
  • s####.m.sm.cn
  • s####.serv####.moz####.com
  • s####.x####.com.cn
  • s.go-mp####.net
  • s2.z####.cn
  • s22.c####.com
  • s3.nik####.com
  • s4.c####.com
  • s5.c####.com
  • s9.c####.com
  • s95.c####.com
  • s96.c####.com
  • sd.bu####.vip
  • sf3-fe####.pglstat####.com
  • sf3-ttc####.ps####.com
  • sm####.n####.com
  • souti####.sm.cn
  • ssp.k####.com
  • st####.ku####.cn
  • st####.n####.com
  • st####.ud####.com
  • sto####.360bu####.com
  • sw4.d####.com
  • sy.cl####.com
  • t####.a####.top
  • t####.sogo####.com
  • tm-####.oss-cn-####.aliy####.com
  • to####.ctobsn####.com
  • to.d####.cn
  • tra####.didist####.com
  • trac####.58.com
  • u####.a####.top
  • u####.b0.upa####.com
  • u####.com
  • u####.n####.com
  • u####.u####.com
  • u.j####.com
  • umen####.m.ta####.com
  • umengj####.m.ta####.com
  • ur####.jd.com
  • v.d####.cn
  • v1.c####.com
  • w####.jd.com
  • w####.jd.com
  • w####.jd.com
  • w.i####.com
  • wds.i####.sogo####.com
  • we####.m.qq.com
  • web####.a####.com
  • wq.360bu####.com
  • wtc.d####.com
  • www.78####.cc
  • www.78####.cc
  • www.78####.cc
  • www.ddz####.cn
  • www.f####.com
  • www.n####.com
  • www.new####.com
  • www.pc####.com.cn
  • www.r####.com
  • www.y####.com
  • xh.ma####.com
  • xiaox####.adse####.adan####.com
  • y####.m.sm.cn
  • ycb####.slj####.com
  • yun.b####.com
  • z11.c####.com
  • z12.c####.com
  • z2.c####.com
  • z3.c####.com
  • z4.c####.com
  • z6.c####.com
  • z9.c####.com
HTTP GET requests:
  • 10####.admast####.com:808/1020p/index.html
  • 10####.admast####.com:808/1020p/yrc_001pc.js
  • 10####.admast####.com:99/1020yy/index.html
  • 10####.admast####.com:99/1020yy/yrc_001mobile.js
  • 10####.admast####.com:99/favicon.ico
  • 10####.admast####.com:99/wap/index.html?10####
  • 1n25-js####.b0.a####.com/
  • 1n25-js####.b0.a####.com/css/base_v6.css
  • 1n25-js####.b0.a####.com/css/reset.css
  • 1n25-js####.b0.a####.com/vo.js?key=####
  • 1p24-le####.b0.a####.com/
  • 1p24-le####.b0.a####.com/css/base_v6.css
  • 1p24-le####.b0.a####.com/css/reset.css
  • 1p24-le####.b0.a####.com/vo.js?key=####
  • 58.2####.67.136:99/newcar/index.html
  • 58.2####.67.136:99/wts/index.html?1####
  • 58.2####.92.50:808/gh.html
  • 58.2####.92.50:808/ghyd.html
  • 58.2####.92.50:808/ywm.html
  • 78####.cc/index/backend/pro_count?event_id=####&imei=####&channel_id=###...
  • 78####.cc/index/count/count_shell?shellname=####
  • 78####.cc/index/limit/limit_count?channel=####&project=####
  • 78####.cc/index/limit/limit_get?channel=####&project=####
  • 78####.cc/index/limit/limit_minute?channel=####&project=####
  • 78####.cc/index/param/get_param?pro_name=####
  • a####.d####.com/rewrite?fromid=####
  • a.78####.cc/index/upapp/app_datas?upapp_id=####&imei=####&channel_id=####
  • ad.l####.com/sdk_ad
  • ad.l####.com:3000/api?rdtime=####&secure=####&channel=####&osv=####&adid...
  • ad.l####.com:3001/api?rdtime=####&secure=####&channel=####&osv=####&adid...
  • ad.smudge####.com:8986/api/5/detail/report?businessId=####&token=####&ti...
  • api.78####.cc/app/mock/17/web/tcapi
  • api.78####.cc/app/mock/17/web/tcweb
  • api.78####.cc/app/mock/17/web/tcweb2
  • api.a####.ads####.cn/thirdparty/sapi/callback?cid=####&adspaceid=####&mc...
  • api.z####.com/v1/advert/config?platform=####&versionCode=####&timestamp=...
  • app.a####.top/
  • app.a####.top/Template/default/img/bg.jpg
  • app.a####.top/Template/default/img/new_mark.png
  • app.a####.top/anshua.json
  • app.a####.top/anshuaControl.json
  • app.a####.top/api.json
  • app.a####.top/channl_haoqi1.png
  • app.a####.top/channl_haoqi11.png
  • app.a####.top/css/common.css
  • app.a####.top/css/default.css
  • app.a####.top/img/fenlei.gif
  • app.a####.top/img/logo.gif
  • app.a####.top/js/common.js
  • app.a####.top/js/jquery.min.js
  • app.a####.top/pingpaiAD.json
  • app.a####.top/req.json
  • app.a####.top/sdk13_2.png
  • app.a####.top/sdk14.png
  • app.a####.top/sdk16.png
  • app.a####.top/sdk18_6.png
  • app.a####.top/sdk19.png
  • app.a####.top/sdk2.png
  • app.a####.top/sdk21.png
  • auto-ne####.b0.a####.com/
  • auto-ne####.b0.a####.com/admin_seller/js/laydate.js
  • auto-ne####.b0.a####.com/admin_seller/js/theme/default/laydate.css?v=####
  • auto-ne####.b0.a####.com/auto/201711/image/loading.png
  • auto-ne####.b0.a####.com/auto/201711/image/loading_614_307.png
  • auto-ne####.b0.a####.com/auto/201711/image/loading_70_70.png
  • auto-ne####.b0.a####.com/auto/201812/js/brand.js
  • auto-ne####.b0.a####.com/auto/202002/css20200810/index_red_noflow.css
  • auto-ne####.b0.a####.com/auto/202002/css20201223/index_red.css?v=####
  • auto-ne####.b0.a####.com/auto/202002/image/jxcp.png
  • auto-ne####.b0.a####.com/auto/202002/image/new.png
  • auto-ne####.b0.a####.com/auto/202002/image/title_live.png
  • auto-ne####.b0.a####.com/auto/202002/image/toutiao.png
  • auto-ne####.b0.a####.com/auto/202002/js/public_20200506.js
  • auto-ne####.b0.a####.com/image/ad_ina/adm_ina_16114550380909777368.jpg!2...
  • auto-ne####.b0.a####.com/image/auto/160630/lazyload50.jpg
  • auto-ne####.b0.a####.com/js/CommonUtil.mini.js?v=####
  • auto-ne####.b0.a####.com/js/city_substation_data.js
  • auto-ne####.b0.a####.com/js/ina_ad_init.js
  • auto-ne####.b0.a####.com/js/index_bseries_data_cache.js
  • auto-ne####.b0.a####.com/js/index_sign_data_cache.js
  • auto-ne####.b0.a####.com/js/iwt/iwt1.0.1.js
  • auto-ne####.b0.a####.com/js/jquery-1.7.2.min.js
  • auto-ne####.b0.a####.com/js/widgets/adapter-mini.js?20####
  • auto-ne####.b0.a####.com/top/201812/image/logo.png
  • auto-ne####.b0.a####.com/top/202002/css/index_red.css
  • auto-ne####.b0.a####.com/top/202002/css/index_red_noflow.css
  • auto-ne####.b0.a####.com/top/image/ewm_top.png
  • b####.bugse####.com/sdk_ad
  • b####.bugse####.com:3000/api?rdtime=####&secure=####&channel=####&osv=##...
  • b####.bugse####.com:3001/api?rdtime=####&secure=####&channel=####&osv=##...
  • b####.bugse####.com:3002/api?rdtime=####&secure=####&channel=####&osv=##...
  • b####.t####.sogo####.####.com/wap/js/aw.js
  • c####.jumen####.com/go_pc_index.php
  • c####.jumen####.com/init.php
  • c####.zhit####.com:99/pctja.html
  • c.c####.com/stat.php?id=####
  • c.c####.com/z_stat.php?id=####
  • cl-5307####.g####.co/p14_01.ttf
  • cl-5307####.g####.co/p28_09.ttf
  • cl-5307####.g####.co/p3_02.ttf
  • co####.ssp.adoc####.com/api/v2/SDKActiveConfig?version=####&channelCode=...
  • co####.ssp.adoc####.com/api/v2/SDKCommonConfig?channelCode=####&version=...
  • co####.ssp.adoc####.com/api/v2/mgmConfig?channelCode=####&version=####
  • co####.ssp.adoc####.com/api/v2/mgmWebviewRatioConfig?channelCode=####&ve...
  • cpd.liyan####.com:808/android-market/show?pkg=####&pid=####&channel=####...
  • cpd.liyan####.com:808/market/t-show?pkg=####&pid=####&channel=####&sourc...
  • d####.cn/fenpei.html?3####
  • down####.baiyuns####.com/static/default.css
  • down####.baiyuns####.com/static/index.js
  • down####.baiyuns####.com/static/logo_40.png
  • e.halo####.com//api/search/list?code=####&apiToken=####&timeStamp=####
  • f####.st####.z####.com/php12123/20190319/1d0ad428ee3db572f8d7dc9caf5318a...
  • filt####.a####.top/filter_control_602.json
  • gd.a.s####.com/cityjson?ie=####
  • gif.lu.sogo####.####.com/wap/js/aw.js
  • gif.lu.sogo####.####.com/wap/js/wp.js
  • hd.a####.com/txnews/css/swiper.min.css
  • hd.a####.com/txnews/images/xfk.png
  • hd.a####.com/txnews/js/rem.js
  • hd.a####.com/txnews/js/swiper.min.js
  • hd.a####.com/txnews/js/zepto.cookie.js
  • hd.a####.com/txnews/js/zepto.min.js
  • i####.360bu####.com.####.com/
  • i####.sogo####.com.####.com/app/a/200630/ab3c3ccf6cc659e1797b7dface81345a
  • ip####.com/json/?lang=####
  • j####.g####.vip/fd.js
  • j####.g####.vip/ggx3.js
  • lo.bu####.vip/v1/log/track?key=####&mtype=####&device_####&pkg=####&subi...
  • mh####.b0.a####.com/favicon.ico
  • mh####.b0.a####.com/sdk/cj006_cj006.html
  • newap####.math####.cn/ssp/mgm/task?taskId=####&ip=####
  • p####.api.adoc####.com/ip
  • p####.hfc####.com/c/12Y7TDHJSTY.zip
  • p####.hfc####.com/c/TervaiDur.zip
  • p####.hfc####.com/c/jz/elqsydt.zip
  • p####.hfc####.com/c/l/11Y24jsbuliang.zip
  • p####.hfc####.com/c/l/11Y30JUHEKOULING.zip
  • p####.hfc####.com/c/oiasdnequw.zip
  • p####.hfc####.com/two/SOI349RED8EO35RE98FE359E844T9R.zip
  • p####.hfc####.com/u/qwertyuask.zip
  • r####.bu####.vip/assets/bdtj/clipboard102.html?hmsr=####&hmpl=####
  • r####.bu####.vip/assets/bdtj/it8.html?hmsr=####&hmpl=####
  • r####.bu####.vip/assets/cnzz/clipboard102.html
  • r####.t####.s####.com/ask?id=####&cb=####&ssi0=####&wsg=####&_v=####
  • r####.t####.s####.com/wap_ask_service?callback=####&url=####
  • r####.t####.s####.com/wapxml?id=####&h=####&w=####&fv=####&if=####&mi=##...
  • ssp.k####.com/api/display?reqId=####&p=####
  • t####.sogo####.com.####.com/wap/css/common.css
  • t####.sogo####.com.####.com/wap/images/sg_logo.png
  • t####.sogo####.com.####.com/wap/images/wap_logo_2.png
  • t####.sogo####.com.####.com/wap/images/wap_txt_1.png
  • t####.sogo####.com.####.com/wap/js/anticheat.min.js
  • to.d####.cn/03YjLSCb67
  • u####.b0.upa####.com/libs/jquery/jquery-2.0.3.min.js
  • u####.com/tkio/2aM7Jna
  • www-new####.b0.a####.com/
  • www-new####.b0.a####.com/auto/text/css/index.css
  • www-new####.b0.a####.com/ina_product/logo/25/
  • www-new####.b0.a####.com/index1.html
  • www-new####.b0.a####.com/index2.html
  • www.78####.cc/api/text1.html
  • www.78####.cc/cnzz/index4.html
  • www.78####.cc/favicon.ico
  • www.78####.cc/index/backend/pro_count?event_id=####&imei=####&channel_id...
  • www.78####.cc/index/limit/getLimit?channel=####&project=####
  • www.78####.cc/index/limit/limit_get?channel=####&project=####
  • www.78####.cc/index/limit/limit_minute?channel=####&project=####
  • www.78####.cc/index/param/get_param?pro_name=####
  • www.78####.cc/index/project/project_status?action=####
  • www.78####.cc/index/publics/get_hot_data
  • www.78####.cc/index/publics/get_ip
  • www.78####.cc/index/worker/index?imei_id=####&channel=####&version=####
  • www.78####.cc/static/x-admin/js/jquery.min.js
  • www.ddz####.cn/?qudao=####
  • www.ddz####.cn/css/style.css
  • www.ddz####.cn/js/common.js
  • www.ddz####.cn/js/index.js
  • www.f####.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.mi...
  • www.f####.com/search/4741522d313839_1.html
  • www.f####.com/search/69707A353539_1.html
  • www.f####.com/static/js/dist/clipboard.min.js
  • www.pc####.com.####.cn/autox/6a976e56b61b2febd215f6cbe5186f5f.htm
  • yun.b####.com/LHYY.png
  • z.c####.com/stat.htm?id=####&r=####&lg=####&ntime=####&cnzz_eid=####&sho...
  • z.c####.com/stat.htm?id=1260193419&r=http://58.218.67.136:99/wts/index.h...
HTTP POST requests:
  • 6z####.njt####.com:10091/wisdom/marking
  • 78####.cc/index/backend/pro_data
  • 78####.cc/index/package/pack_add
  • 78####.cc/index/publics/put_text3
  • ad.smudge####.com:8986/api/5/detail?businessId=####&token=####&timestamp...
  • ad.toads####.com/api/angent
  • and####.b####.qq.com/rqd/async?aid=####
  • ap####.math####.cn/titan/monitor/device_info
  • api####.quta####.com/ads
  • api.40088####.com:8181/v3/entry/list
  • api.a####.ads####.cn/thirdparty/sapi/chn
  • api.yunco####.com/service/rest
  • api.z####.com/app/version/android-upgrade
  • api.z####.com/tab-conf/app-column-conf
  • api.z####.com/tab-conf/app-sys-conf
  • api.z####.com/tips/index
  • api.z####.com/v1/advert/list
  • api.z####.com/v1/news/type
  • cn.f####.top:8080/qsad/api/c/c
  • de.gtp.xy####.com:8844/Device/info/
  • de.gtp.xy####.com:8844/favicon.ico
  • de.gtp.xy####.com:8844/i?ts=####
  • dy.cn.wildpet####.xyz/dycn/update
  • ght####.aog####.com:19001/tchvohfkyf/
  • ght####.aog####.com:19001/tkvvxnvrvy/
  • l####.tbs.qq.com/ajax?c=####&k=####
  • lla####.slj####.com:17001/an2y3z/
  • lla####.slj####.com:17001/karawc/
  • lla####.slj####.com:17002/5rhxg/
  • log.gtp.xy####.com/sdk
  • mg.meit####.com:8071/api/v101
  • now####.pes####.com:17002/6a4it/
  • now####.pes####.com:17002/jw1pw/
  • now####.pes####.com:18001/begzf1/
  • now####.pes####.com:18001/w0619s/
  • orn####.wwe####.com:17001/an2y3z/
  • orn####.wwe####.com:17001/cbcvu9/
  • orn####.wwe####.com:17001/karawc/
  • pro.wildpet####.com:201/proxy/get?e=####&r=####
  • r1.baiyuns####.com/service/rest
  • res####.a####.com/v3/weather/weatherInfo
  • sd.bu####.vip/v1/project/sdk
  • ssp.k####.com/api/useful
  • www.78####.cc/index/backend/pro_data
  • xiaox####.adse####.adan####.com/server/ad/v1
File system changes:
Creates the following files:
  • /data/data/####/.2969407120.apk
  • /data/data/####/.2969407120.dex
  • /data/data/####/.2969407120.dex.flock (deleted)
  • /data/data/####/.3050965755.apk
  • /data/data/####/.3050965755.dex
  • /data/data/####/.3050965755.dex.flock (deleted)
  • /data/data/####/.3492835548.apk
  • /data/data/####/.3492835548.dex
  • /data/data/####/.3492835548.dex.flock (deleted)
  • /data/data/####/.ef0b4ddacc046d054f437ba0af966623
  • /data/data/####/.imprint
  • /data/data/####/000003.log
  • /data/data/####/0015b53bdbcad612_0
  • /data/data/####/001b33fa893d119a_0
  • /data/data/####/00cd899872c0948e_0
  • /data/data/####/00e6e2a3bdf146ea_0
  • /data/data/####/013e4bd9b857e9ba_0
  • /data/data/####/0174a09c5f9b538f_0 (deleted)
  • /data/data/####/0204d896e30d2885fa461a8565b47ab2.db
  • /data/data/####/021d72e684887135_0
  • /data/data/####/023e9a1438bf5102_0
  • /data/data/####/0240904f43d799a2_0
  • /data/data/####/02851ebc88300d8d_0
  • /data/data/####/02d21e0d1dc3a31e_0
  • /data/data/####/02f5da383222b65d_0
  • /data/data/####/035cf0526388ea2f_0
  • /data/data/####/035cf0526388ea2f_s
  • /data/data/####/036a1a872c8f4f8a_0
  • /data/data/####/036a1a872c8f4f8a_1
  • /data/data/####/036ee3d401fe75b6_0
  • /data/data/####/03969c101a7b98b6_0
  • /data/data/####/042b705c03135639_0
  • /data/data/####/04544454936c69c1_0
  • /data/data/####/047162264df25244_0
  • /data/data/####/04a57ba806676129_0
  • /data/data/####/05386d0addb350f1_0
  • /data/data/####/05386d0addb350f1_0 (deleted)
  • /data/data/####/05386d0addb350f1_1
  • /data/data/####/0576c9e37d603ccd_0
  • /data/data/####/0576c9e37d603ccd_1
  • /data/data/####/0600426541ab5a65_0
  • /data/data/####/0634ddfd759f6044_0
  • /data/data/####/0634ddfd759f6044_1
  • /data/data/####/067a0a0b7ed7d7c8_0
  • /data/data/####/067a0a0b7ed7d7c8_1
  • /data/data/####/07b3cfe5a630c198_0
  • /data/data/####/07b3cfe5a630c198_1
  • /data/data/####/07b7cab58d17e18a_0
  • /data/data/####/07cda5ef5bbb64e9_0
  • /data/data/####/07cda5ef5bbb64e9_1
  • /data/data/####/0885c9bea678d4d9_0
  • /data/data/####/0885c9bea678d4d9_1
  • /data/data/####/088cc276ae0ba86d_0
  • /data/data/####/09230ebd5f3fc307_0
  • /data/data/####/09543537f854a48f_0
  • /data/data/####/09543537f854a48f_1
  • /data/data/####/0972ef30d99bce9c_0
  • /data/data/####/0972ef30d99bce9c_1
  • /data/data/####/09eed6525ac80d1b_0
  • /data/data/####/0b3aeea2a6593b67_0
  • /data/data/####/0b49047cb5e22ad4_0
  • /data/data/####/0b69741b39dd30eb_0
  • /data/data/####/0bb6625b7bbd7059_0
  • /data/data/####/0bb8920827c1385e_0
  • /data/data/####/0bb8920827c1385e_1
  • /data/data/####/0c1b37a54c3dbce0_0
  • /data/data/####/0ca2df06bdd0ac7d_0
  • /data/data/####/0ca2df06bdd0ac7d_1
  • /data/data/####/0ce78a4cd25df061_0
  • /data/data/####/0d5e56b92aa7879d_0
  • /data/data/####/0da42c3166426948_0
  • /data/data/####/0da42c3166426948_1
  • /data/data/####/0e2d68834c677902_0
  • /data/data/####/0e350b766d596aff_0
  • /data/data/####/0e9eb8daa2c52f6a_0
  • /data/data/####/0edbfc388908294b_0
  • /data/data/####/0ef90c06eb00a5ba_0
  • /data/data/####/0fb1f7bbffc2824d_0
  • /data/data/####/0fecbbf983aff228_0
  • /data/data/####/1002
  • /data/data/####/1004
  • /data/data/####/10a1d1deb4cdf7f0_0
  • /data/data/####/10a1d1deb4cdf7f0_1
  • /data/data/####/10d9214c5ec2523c_0
  • /data/data/####/10f4b33999485863_0
  • /data/data/####/118dead3e139c249_0
  • /data/data/####/118dead3e139c249_1
  • /data/data/####/118dead3e139c249_1 (deleted)
  • /data/data/####/1193735283
  • /data/data/####/12cf1d6e9eaad25b_0
  • /data/data/####/12cf1d6e9eaad25b_1
  • /data/data/####/12df55fdc78d6b13_0
  • /data/data/####/1334f68eb9c48f6f_0
  • /data/data/####/1334f68eb9c48f6f_1
  • /data/data/####/13_2.dex
  • /data/data/####/13_2.dex.flock (deleted)
  • /data/data/####/13_2.jar
  • /data/data/####/13efed99115a856e_0
  • /data/data/####/13efed99115a856e_1
  • /data/data/####/14.dex
  • /data/data/####/14.dex.flock (deleted)
  • /data/data/####/14.jar
  • /data/data/####/1411046e5ae4f52d_0
  • /data/data/####/143da90c55c9e730_0
  • /data/data/####/143da90c55c9e730_1
  • /data/data/####/1502509754
  • /data/data/####/1534297d07aa4150_0
  • /data/data/####/1534297d07aa4150_0 (deleted)
  • /data/data/####/15b1e7c89795b634_0
  • /data/data/####/16.dex
  • /data/data/####/16.dex.flock (deleted)
  • /data/data/####/16.jar
  • /data/data/####/1676db636830d673_0
  • /data/data/####/16c119df11a77fd5_0
  • /data/data/####/16c62b240fd2cee2_0
  • /data/data/####/16e4423e23d1bbaf_0
  • /data/data/####/16e4423e23d1bbaf_1
  • /data/data/####/16fe05b494fc3a28_0
  • /data/data/####/16fe05b494fc3a28_1
  • /data/data/####/1714af51f380b9f7_0
  • /data/data/####/17325e7750089ec6_0
  • /data/data/####/17ce067a3d6a4191_0
  • /data/data/####/1850111942ee9bd3_0
  • /data/data/####/18_6.dex
  • /data/data/####/18_6.dex.flock (deleted)
  • /data/data/####/18_6.jar
  • /data/data/####/18ef9d0f4f68efc8_0
  • /data/data/####/18ef9d0f4f68efc8_1
  • /data/data/####/18f31d9312447076_0
  • /data/data/####/18f657f118d835d4_0
  • /data/data/####/19.dex
  • /data/data/####/19.dex.flock (deleted)
  • /data/data/####/19.jar
  • /data/data/####/192fb935d8da5b98_0
  • /data/data/####/19bf657246a0ef6b_0
  • /data/data/####/19df352927b2f166_0
  • /data/data/####/19df352927b2f166_1
  • /data/data/####/1ab8d13a95455f5d_0
  • /data/data/####/1b1cdaf450ca016d_0
  • /data/data/####/1bd99b456f1e4f6c_0
  • /data/data/####/1c12f0f394f55fe7_0
  • /data/data/####/1d0069bf17ba204f_0
  • /data/data/####/1d1f147cec78fb28_0
  • /data/data/####/1d3a0328ca5686ab_0
  • /data/data/####/1db25b61acb2154b_0
  • /data/data/####/1db4ae6d501ee38c_0
  • /data/data/####/1db4ae6d501ee38c_1
  • /data/data/####/1deed7936f7b7aa8_0
  • /data/data/####/1e370908050f47d0_0
  • /data/data/####/1e517a2d08ba5145_0
  • /data/data/####/1e517a2d08ba5145_1
  • /data/data/####/1ebc280ebda9fd96_0
  • /data/data/####/1f21f1b25fec8f66_0
  • /data/data/####/1fba7ba66c9d489a_0
  • /data/data/####/2.dex (deleted)
  • /data/data/####/2.dex.flock (deleted)
  • /data/data/####/2.jar
  • /data/data/####/20eb53fd3269f357_0
  • /data/data/####/20eb53fd3269f357_1
  • /data/data/####/21.dex (deleted)
  • /data/data/####/21.dex.flock (deleted)
  • /data/data/####/21.jar
  • /data/data/####/21b60fb6adc59d02_0
  • /data/data/####/21de2dc8b5d10ef0_0
  • /data/data/####/21e11190740b144b_0
  • /data/data/####/22b89af1a4fd47f5_0
  • /data/data/####/23c974c095a5ac01_0
  • /data/data/####/23d969b740c57643_0
  • /data/data/####/23db58c400f28fac_0
  • /data/data/####/2437898672c2a2ef_0
  • /data/data/####/24733fadba49d4d5_0
  • /data/data/####/24733fadba49d4d5_1
  • /data/data/####/257fddfe63e73dd1_0
  • /data/data/####/25da9c2b6f712c3e_0
  • /data/data/####/2704aaeef4eeb65c_0
  • /data/data/####/2751c3114481a153_0
  • /data/data/####/27d61738661e6c52_0
  • /data/data/####/27dac8705e581c47_0 (deleted)
  • /data/data/####/280edd942332dde2_0
  • /data/data/####/280edd942332dde2_1
  • /data/data/####/2824eaad51fbdde0_0
  • /data/data/####/282def4d4cdfd4c5_0
  • /data/data/####/285f2b36601eb710_0
  • /data/data/####/28935b447e79bae3_0
  • /data/data/####/2928b6ac6f142ee2_0
  • /data/data/####/29857e5b185b6c8f_0 (deleted)
  • /data/data/####/2988891195aa370f_0
  • /data/data/####/29d464eb875cbd17_0
  • /data/data/####/2EC68123E317AA1FD3F2E11EBECF4D88.xml
  • /data/data/####/2a02b077baa09b3b178b64e03536627e.xml
  • /data/data/####/2a72cc7962716414_0
  • /data/data/####/2b4ff8d5552fa07d_0
  • /data/data/####/2c009e98f573c81e_0
  • /data/data/####/2c009e98f573c81e_1
  • /data/data/####/2c3f64c8fde3fd71_0
  • /data/data/####/2c649830da04d7ad_0
  • /data/data/####/2cfee1779b23bb91_0
  • /data/data/####/2cfee1779b23bb91_1
  • /data/data/####/2d7388375782acad_0
  • /data/data/####/2df26fd8296078c4_0
  • /data/data/####/2e0dd1b88e948719_0
  • /data/data/####/2e3e565ef143560c_0
  • /data/data/####/2ef4771ec4851f9f_0
  • /data/data/####/2fbef6c0fcc287f1_0
  • /data/data/####/2fc33fe21cdd6ca5_0
  • /data/data/####/30938eb0388586c6_0
  • /data/data/####/30bb3e508c9509a7_0
  • /data/data/####/30dd493e3f8f9e0e_0
  • /data/data/####/312579ccc1e8601b_0
  • /data/data/####/3156fd8dd221df3d_0 (deleted)
  • /data/data/####/316f48847decca5f_0
  • /data/data/####/317486bc50f21334_0
  • /data/data/####/317486bc50f21334_1
  • /data/data/####/317aef673305817b_0 (deleted)
  • /data/data/####/3236707ab33bbec7_0
  • /data/data/####/3327275
  • /data/data/####/33325d142b59745e_0
  • /data/data/####/336b8a40c156a00e_0 (deleted)
  • /data/data/####/3377d1aeb6b4d094_0
  • /data/data/####/33c44b1783ea9023_0
  • /data/data/####/33f304b717f29b9d_0 (deleted)
  • /data/data/####/35fc9e276e4c17c9_0
  • /data/data/####/364bf05697feffec_0
  • /data/data/####/366eab925b208472_0
  • /data/data/####/368329eed6ed9768_0
  • /data/data/####/37197767396639.0
  • /data/data/####/37493adcb2455784_0
  • /data/data/####/37493adcb2455784_1
  • /data/data/####/376a484cf27b8c0d_0
  • /data/data/####/37ae450d0ebb94ad_0
  • /data/data/####/37ae450d0ebb94ad_1
  • /data/data/####/37cfe2d7a4a67d21_0
  • /data/data/####/380195194a8d88fc_0
  • /data/data/####/385E7FA9A763AF89E661BD99B4A389AC.dex
  • /data/data/####/385E7FA9A763AF89E661BD99B4A389AC.dex.flock (deleted)
  • /data/data/####/38da42fde6fbc28a_0
  • /data/data/####/38fed20ab9753f43_0
  • /data/data/####/38fed20ab9753f43_1
  • /data/data/####/3908b833dbe3d0d6_0
  • /data/data/####/39a3cd9bc1a3f581_0
  • /data/data/####/39a3cd9bc1a3f581_1
  • /data/data/####/39eeca2aae6a4abc_0
  • /data/data/####/3A0BC3C0D4BC531841993226451CFE45.xml
  • /data/data/####/3a2d91f9dc3e7a11_0
  • /data/data/####/3a9ea46607bb85e8_0
  • /data/data/####/3a9ea46607bb85e8_1
  • /data/data/####/3aeae291269997d5_0
  • /data/data/####/3b0004813ad58590_0
  • /data/data/####/3b0004813ad58590_1
  • /data/data/####/3b56c25bb30b326f_0
  • /data/data/####/3b56c25bb30b326f_1
  • /data/data/####/3b8765c07558feac_0
  • /data/data/####/3b8ede68595919af_0
  • /data/data/####/3bb3241b1701c875_0 (deleted)
  • /data/data/####/3c7eb63299da5201_0
  • /data/data/####/3d1a5d95821ce17a_0
  • /data/data/####/3d2b0a8852e2edeb_0
  • /data/data/####/3d7db65ac30d0a6b_0
  • /data/data/####/3d9855dae9a272fb_0
  • /data/data/####/3e1ec50d1289a13e_0
  • /data/data/####/3e2b047d96b672a8_0
  • /data/data/####/3e81f42a7c98f247_0
  • /data/data/####/3e81f42a7c98f247_0 (deleted)
  • /data/data/####/3ea2ab0298d8b16f_0
  • /data/data/####/3ea2ab0298d8b16f_1
  • /data/data/####/3ea59a5329011dee_0
  • /data/data/####/3ef119408a746c94_0
  • /data/data/####/3f65e938511350b0_0
  • /data/data/####/3f6657397564b10c_0
  • /data/data/####/3f6d17d124810bdd_0
  • /data/data/####/3fa19aa8009a161c_0
  • /data/data/####/405b160ea3f219ee_0
  • /data/data/####/40c24a1740da6c64_0
  • /data/data/####/40f34fd2fd0a918f_0
  • /data/data/####/40f34fd2fd0a918f_1
  • /data/data/####/414beb188db83ef0_0
  • /data/data/####/414beb188db83ef0_1
  • /data/data/####/414f8393fa3a9c7b_0
  • /data/data/####/415ac94eb6c7c2fe_0
  • /data/data/####/4188e4791d0caa63_0
  • /data/data/####/4198a350d9301c1c_0
  • /data/data/####/4199683351041.0
  • /data/data/####/4213fc3f64a188a6_0
  • /data/data/####/4213fc3f64a188a6_1
  • /data/data/####/424961eba0ff4faf_0
  • /data/data/####/432ccae20b335a99_0
  • /data/data/####/441681f9d08bfcf0_0
  • /data/data/####/441681f9d08bfcf0_1
  • /data/data/####/4423f9aee2e79186_0
  • /data/data/####/44522a87d9956ad61c7e68df923366c6.db
  • /data/data/####/44cae07d211a68f3_0
  • /data/data/####/44d108125251cd40_0
  • /data/data/####/44d108125251cd40_1
  • /data/data/####/44f58abc9e73a10b_0
  • /data/data/####/44f58abc9e73a10b_1
  • /data/data/####/45058fe5a413fa72_0
  • /data/data/####/454d9fcb41e58cd1_0
  • /data/data/####/457a8e7114ae7a16_0
  • /data/data/####/457a8e7114ae7a16_1
  • /data/data/####/457b18dbcd9acec1_0
  • /data/data/####/45f3d31c4ffef967_0
  • /data/data/####/45f3d31c4ffef967_1
  • /data/data/####/476ea01e8b2752b1_0
  • /data/data/####/47a27df8bfdfb523_0
  • /data/data/####/47ce5fcab5c25705_0
  • /data/data/####/48e7a63dbb66adaf_0
  • /data/data/####/492a470d1121bb86_0
  • /data/data/####/492a470d1121bb86_1
  • /data/data/####/497e384b0bdb00ec_0
  • /data/data/####/497e384b0bdb00ec_1
  • /data/data/####/49ac1994361ff32d_0
  • /data/data/####/49ac1994361ff32d_1
  • /data/data/####/49e07fd91277756d_0
  • /data/data/####/4a1955ef2b672c6f_0
  • /data/data/####/4a724080e9a66dd7_0
  • /data/data/####/4af7b77718d8f9d0_0 (deleted)
  • /data/data/####/4b611b1f2506eda8_0
  • /data/data/####/4b611b1f2506eda8_0 (deleted)
  • /data/data/####/4b7915efff814483_0
  • /data/data/####/4ba0a4eb5b1710e6_0
  • /data/data/####/4ba72853324f2406_0
  • /data/data/####/4c14db453d2a87cc_0
  • /data/data/####/4c68b61db32c14f1_0
  • /data/data/####/4d1471d813cee705_0
  • /data/data/####/4d1471d813cee705_1
  • /data/data/####/4d9e31893cd14211_0
  • /data/data/####/4d9e31893cd14211_1
  • /data/data/####/4db45fc639f2c975_0
  • /data/data/####/4e22d64d3317cd6b_0
  • /data/data/####/4e22d64d3317cd6b_1
  • /data/data/####/4ec52135bee15690_0
  • /data/data/####/4ec52135bee15690_1
  • /data/data/####/4ee1f48e7bfcf15c_0
  • /data/data/####/4ee672b589994103_0
  • /data/data/####/4f2429f7d9b2febb_0
  • /data/data/####/4ffd2371da733ac1_0
  • /data/data/####/512d55323f591990_0
  • /data/data/####/525a21ca0311e554_0
  • /data/data/####/527cb500e4bf10ba_0
  • /data/data/####/527cb500e4bf10ba_1
  • /data/data/####/53459ad61f9c1cce_0
  • /data/data/####/53eaeadc40c6586b_0
  • /data/data/####/53eaeadc40c6586b_1
  • /data/data/####/547a793b81fbc6be_0
  • /data/data/####/54b1f4705e43274c_0
  • /data/data/####/55739953689165a9_0
  • /data/data/####/5578c344371d9154_0
  • /data/data/####/557b6cd323f09e43_0
  • /data/data/####/558d4c645fbd446f_0
  • /data/data/####/558d4c645fbd446f_1
  • /data/data/####/55D7BCC60A702BAE5286696DA6D7F6E4.dex
  • /data/data/####/55D7BCC60A702BAE5286696DA6D7F6E4.dex.flock (deleted)
  • /data/data/####/55e1f80b8446f2d2_0
  • /data/data/####/5619aa9060b41a6d_0
  • /data/data/####/56a3b430c199467e_0
  • /data/data/####/56df9fd510eb6b73_0
  • /data/data/####/5868cc607e6c00f7_0
  • /data/data/####/5868cc607e6c00f7_1
  • /data/data/####/58837f87a0bc315b_0
  • /data/data/####/58837f87a0bc315b_1
  • /data/data/####/58a07e3e4678ec42_0
  • /data/data/####/58e1ffad1eaf8445_0
  • /data/data/####/58e1ffad1eaf8445_1
  • /data/data/####/59381924e3b6b820_0
  • /data/data/####/59729b8dcffc5282_0
  • /data/data/####/59729b8dcffc5282_1
  • /data/data/####/599c3a4652373198_0
  • /data/data/####/5ad505a24dbaeace_0
  • /data/data/####/5ad505a24dbaeace_1
  • /data/data/####/5bc01cc922c13e0c_0
  • /data/data/####/5bdc79785c518683_0
  • /data/data/####/5c352e406a6b1c7c_0
  • /data/data/####/5c352e406a6b1c7c_1
  • /data/data/####/5ce6569c258c6876cf6ff381cd3f024e.db
  • /data/data/####/5ce6569c258c6876cf6ff381cd3f024e.dex
  • /data/data/####/5ce6569c258c6876cf6ff381cd3f024e.dex.flock (deleted)
  • /data/data/####/5ce6569c258c6876cf6ff381cd3f024e.jar
  • /data/data/####/5d58bcda667657f3_0
  • /data/data/####/5dbd84ed8b078308_0
  • /data/data/####/5e43e309e6af847c_0
  • /data/data/####/5e43e309e6af847c_1
  • /data/data/####/5ea166eb18dfe712_0
  • /data/data/####/5ea60538cfd1e50d_0 (deleted)
  • /data/data/####/5f6b8ab81b21b475_0
  • /data/data/####/5f87b4a958aa394e_0
  • /data/data/####/5feb4dbe5c05c776_0
  • /data/data/####/6173f49a6071b8fb_0
  • /data/data/####/6173f49a6071b8fb_1
  • /data/data/####/61c490d6d27b31f6_0
  • /data/data/####/61c490d6d27b31f6_1
  • /data/data/####/62d9974ffd4d30c5e9d1f1dff6bcc984.db
  • /data/data/####/62e685695f86378a_0
  • /data/data/####/62e685695f86378a_1
  • /data/data/####/630f3657f5d830e6_0
  • /data/data/####/63412e45257a8e6d_0
  • /data/data/####/634859c41af0057f_0
  • /data/data/####/642e1f7f5e6a6677_0
  • /data/data/####/6432e28f5109ea9e_0
  • /data/data/####/648c963781b08b3a_0
  • /data/data/####/648c963781b08b3a_1
  • /data/data/####/65103f4d8c329ac4_0
  • /data/data/####/654f5bc3d586dd82_0
  • /data/data/####/65a1a1cfe9307b84_0
  • /data/data/####/65ddeb272ae08109_0
  • /data/data/####/65ddeb272ae08109_1
  • /data/data/####/65fdab015aef7933_0
  • /data/data/####/66dc6052f4ceeb81_0
  • /data/data/####/66f70f66a66a6223_0
  • /data/data/####/673e7e97fa245982_0
  • /data/data/####/677ecf3a9e8a4e1e_0 (deleted)
  • /data/data/####/690c7d60c7439687_0
  • /data/data/####/696959c71f4138ea_0
  • /data/data/####/696959c71f4138ea_1
  • /data/data/####/69962fcb3354ad48_0
  • /data/data/####/69962fcb3354ad48_1
  • /data/data/####/69b52d7f348cda33_0
  • /data/data/####/6b1b7859e20c2ee1_0
  • /data/data/####/6b8178f227cf61d7_0
  • /data/data/####/6be62180ea3d700f_0
  • /data/data/####/6c3f8473ad9fc9e9_0
  • /data/data/####/6cf9d4625c15632d_0
  • /data/data/####/6d3f609e25b99075_0
  • /data/data/####/6d74118860cc532c_0
  • /data/data/####/6dc5a3cc8541396d_0
  • /data/data/####/6e1a9d6d958983f8_0
  • /data/data/####/6e90cfff650272ec_0
  • /data/data/####/6ec18c7f8f3f55d9_0
  • /data/data/####/6f4579bceb23fe45_0
  • /data/data/####/6f4579bceb23fe45_1
  • /data/data/####/6fb292cf1e7f5cd6_0
  • /data/data/####/6fd3d758faa0f07bee808d8384419953.db
  • /data/data/####/6ff190fc4cb873ea_0
  • /data/data/####/6ff190fc4cb873ea_1
  • /data/data/####/7012ebaed32f2158_0
  • /data/data/####/70a4bf2c589e0c0d_0
  • /data/data/####/71c2c9f542aa5bee_0
  • /data/data/####/71c2c9f542aa5bee_1
  • /data/data/####/71ebee9727912abd_0
  • /data/data/####/71f027fef2ba45a9_0
  • /data/data/####/7224f0536dfddf5c_0
  • /data/data/####/724103452ee0114d_0
  • /data/data/####/73167a3a58046c15_0
  • /data/data/####/732a1f61427f6b30_0
  • /data/data/####/732e46470ecb21c0_0
  • /data/data/####/736ab718885f3924_0
  • /data/data/####/737e51e5ed396111_0
  • /data/data/####/737e51e5ed396111_1
  • /data/data/####/73c899e60bb0956c_0
  • /data/data/####/74a2e7bbcf90778c_0
  • /data/data/####/74b662a23dfbf987_0
  • /data/data/####/74cc40abe940518b_0
  • /data/data/####/74d334e92f1698cc_0
  • /data/data/####/74d334e92f1698cc_0 (deleted)
  • /data/data/####/755c5ef130807ae5_0
  • /data/data/####/75c73da2d64a980c_0
  • /data/data/####/75fd45da61c4d209_0
  • /data/data/####/760562357
  • /data/data/####/7673eda33b8d718e_0
  • /data/data/####/7678a206cb5666c1_0
  • /data/data/####/76a72721ffb759fe_0
  • /data/data/####/77d2cef917da2d05_0
  • /data/data/####/781caf48e5352b6f_0
  • /data/data/####/798b47096e1f832d_0
  • /data/data/####/7a11202f882ce896_0
  • /data/data/####/7a11202f882ce896_1
  • /data/data/####/7a74e6a940caa3e3_0
  • /data/data/####/7b7e360c320e2c9d_0
  • /data/data/####/7b9929365b6ce905_0
  • /data/data/####/7ba9a9db263108523469055fe693c18c
  • /data/data/####/7bb1e9c388f8b5d3_0 (deleted)
  • /data/data/####/7c435067e3133af9_0
  • /data/data/####/7c435067e3133af9_0 (deleted)
  • /data/data/####/7c99b6955eb2950a_0
  • /data/data/####/7c9fcffbdc4d9694_0
  • /data/data/####/7d28c95f74706057_0
  • /data/data/####/7e750e6a278b97ab_0 (deleted)
  • /data/data/####/7f1661e45631ed76_0
  • /data/data/####/800feae830954594_0
  • /data/data/####/80503487acbc8f45_0 (deleted)
  • /data/data/####/80d2785640842134_0
  • /data/data/####/81dfcf53fe6c3135_0
  • /data/data/####/81e939944cdb84f7_0
  • /data/data/####/82e66d210ed01403_0
  • /data/data/####/8312ddfbacc46e6e_0
  • /data/data/####/8312ddfbacc46e6e_1
  • /data/data/####/834f0724eac01559_0
  • /data/data/####/834f0724eac01559_1
  • /data/data/####/83615113595f1c65_0
  • /data/data/####/83b568525ac7db3b_0
  • /data/data/####/85d67f99e81b7178_0
  • /data/data/####/85e112fd2b7bebd9_0
  • /data/data/####/85e112fd2b7bebd9_1
  • /data/data/####/8778024471a0a8d9_0
  • /data/data/####/87a5e09e52f477fc_0
  • /data/data/####/87fa00889fa2200d85126ce71b2b9722.db
  • /data/data/####/88005a8babf44e1f_0
  • /data/data/####/88184680902805e4_0
  • /data/data/####/88200268480995.0
  • /data/data/####/88301ec87f8de5df_0
  • /data/data/####/88301ec87f8de5df_1
  • /data/data/####/88961b1ed57d5138_0
  • /data/data/####/88961b1ed57d5138_1
  • /data/data/####/889c142c8991ef27_0
  • /data/data/####/88c574582736709a_0
  • /data/data/####/88c574582736709a_0 (deleted)
  • /data/data/####/88c6f30fe7237a0b_0 (deleted)
  • /data/data/####/896ce120209afd56_0
  • /data/data/####/8E9A20EC5272B8CE23E7EA5D5F8ABBFE.dex
  • /data/data/####/8E9A20EC5272B8CE23E7EA5D5F8ABBFE.dex.flock (deleted)
  • /data/data/####/8EAD111D030291821E19A80E344C340A.xml
  • /data/data/####/8a3f72655b78aae7_0
  • /data/data/####/8a3f72655b78aae7_1
  • /data/data/####/8b3f0abed751bd4a_0
  • /data/data/####/8b60a217e15e648f_0
  • /data/data/####/8ba13bca5901c795_0
  • /data/data/####/8be546bf03ddce82_0
  • /data/data/####/8be546bf03ddce82_0 (deleted)
  • /data/data/####/8c7b6eae98f8b00f_0
  • /data/data/####/8cb1cbeda55babc6_0
  • /data/data/####/8cb70a748f981a87_0
  • /data/data/####/8d46c1cd7169e7f8_0
  • /data/data/####/8d46c1cd7169e7f8_0 (deleted)
  • /data/data/####/8d62658cf23cd4f4_0
  • /data/data/####/8d62658cf23cd4f4_1
  • /data/data/####/8e011e63d4cf54fc_0 (deleted)
  • /data/data/####/8e24387cec515e14_0 (deleted)
  • /data/data/####/8e726d58afc1cedf_0
  • /data/data/####/8e988d96c6a77848d6e8765280690a75
  • /data/data/####/8f009420a8f6b0e4_0
  • /data/data/####/8f33defed736e0b2_0
  • /data/data/####/8f581eb383816a80_0
  • /data/data/####/8f581eb383816a80_1
  • /data/data/####/8f68b92eb8d59c6c_0
  • /data/data/####/8fa7099c5db5b430_0
  • /data/data/####/8fd579f26eb78d90_0
  • /data/data/####/8fde8cc08a1c6afd_0
  • /data/data/####/904102677ea8f586_0
  • /data/data/####/90b3d220487d9934_0
  • /data/data/####/91c0612f7cba5c37_0
  • /data/data/####/9208aa135e31db3d_0
  • /data/data/####/923e1779c0159c52_0
  • /data/data/####/9252c20c42f95909_0
  • /data/data/####/92f0a7b4c847430a1beda845b3cec429.db
  • /data/data/####/934f4166375816fb_0
  • /data/data/####/93c3fca555a974f5_0
  • /data/data/####/93dcc28adb6ae2ae_0
  • /data/data/####/943ef74baf3d5038_0
  • /data/data/####/943ef74baf3d5038_1
  • /data/data/####/943f191b95e81853_0
  • /data/data/####/943f191b95e81853_1
  • /data/data/####/9521a36f2c5456d9_0
  • /data/data/####/953ba9a130da5f9b_0
  • /data/data/####/96cfef336d13e34a_0
  • /data/data/####/96cfef336d13e34a_0 (deleted)
  • /data/data/####/96f65ed5af8b99cb_0
  • /data/data/####/97eb54e44e23b409_0
  • /data/data/####/982c9e6dd519dd50_0
  • /data/data/####/983192334df152ac_0 (deleted)
  • /data/data/####/9838696cd8872bbc_0
  • /data/data/####/98481891885cac42_0
  • /data/data/####/985958d976619751_0
  • /data/data/####/985958d976619751_1
  • /data/data/####/987dc93cb4b37f60_0 (deleted)
  • /data/data/####/98a370be30342a07_0
  • /data/data/####/98cdc00f0dd98bea_0
  • /data/data/####/98d23ba4ca85506e_0
  • /data/data/####/99843564aa2c4b83_0
  • /data/data/####/99843564aa2c4b83_1
  • /data/data/####/999c383aac98c63a_0
  • /data/data/####/9B060EC94F8A7CCEA899EA8436E636EA.dex
  • /data/data/####/9B060EC94F8A7CCEA899EA8436E636EA.dex.flock (deleted)
  • /data/data/####/9b689ba43f5d834e8d793c8831c48d8a.db
  • /data/data/####/9b689ba43f5d834e8d793c8831c48d8a.dex
  • /data/data/####/9b689ba43f5d834e8d793c8831c48d8a.dex.flock (deleted)
  • /data/data/####/9b689ba43f5d834e8d793c8831c48d8a.jar
  • /data/data/####/9b6ac9ef1df054f0_0
  • /data/data/####/9b6ac9ef1df054f0_1
  • /data/data/####/9baf69cee27f5096_0
  • /data/data/####/9bb49a64ce87b318_0
  • /data/data/####/9bb49a64ce87b318_1
  • /data/data/####/9c2a8ebda1e35ebc_0
  • /data/data/####/9cdf8e397c1dc061_0
  • /data/data/####/9cdf8e397c1dc061_1
  • /data/data/####/9d1a076b1ad9c5a8_0
  • /data/data/####/9d8aade9feb82994_0
  • /data/data/####/9da3a30397e59a02_0
  • /data/data/####/9da3a30397e59a02_1
  • /data/data/####/9e968c296a959bfc_0
  • /data/data/####/9e968c296a959bfc_1
  • /data/data/####/9ec9443ae33817d1_0
  • /data/data/####/9ef98f07e8de0ef4_0
  • /data/data/####/9ef98f07e8de0ef4_1
  • /data/data/####/9efcd0a716f0d491_0
  • /data/data/####/9f3b533a60beba7c_0
  • /data/data/####/9fb939e6b74c963c_0
  • /data/data/####/9fe50d6b6967a9e2_0 (deleted)
  • /data/data/####/A2718DA4862E9DAE5851B4034FDE2192.dex
  • /data/data/####/A2718DA4862E9DAE5851B4034FDE2192.dex.flock (deleted)
  • /data/data/####/ACCS_BINDumeng;58107fdec8957663fb003c19.xml
  • /data/data/####/ACCS_SDK.xml
  • /data/data/####/ACCS_SDK_CHANNEL.xml
  • /data/data/####/ACCS_SDK_CHANNEL.xml.bak
  • /data/data/####/AGOO_BIND.xml
  • /data/data/####/Agoo_AppStore.xml
  • /data/data/####/Alvin2.xml
  • /data/data/####/BUGLY_COMMON_VALUES.xml
  • /data/data/####/BUGLY_COMMON_VALUES.xml.bak
  • /data/data/####/CCCC5B8911BBCB224E5317F7FB929A12.dex
  • /data/data/####/CCCC5B8911BBCB224E5317F7FB929A12.dex.flock (deleted)
  • /data/data/####/CURRENT
  • /data/data/####/ContextData.xml
  • /data/data/####/Cookies-journal
  • /data/data/####/CprPt.dex
  • /data/data/####/CprPt.dex.flock (deleted)
  • /data/data/####/CprPt.jar
  • /data/data/####/D75E99C9A338D24A1F840F280B0877ED.dex
  • /data/data/####/D75E99C9A338D24A1F840F280B0877ED.dex.flock (deleted)
  • /data/data/####/D967A959D8E39AF63D48D9EACAEC1F70.dex
  • /data/data/####/D967A959D8E39AF63D48D9EACAEC1F70.dex.flock (deleted)
  • /data/data/####/Databases.db-journal
  • /data/data/####/Emp.xml
  • /data/data/####/Emp.xml.bak
  • /data/data/####/Ix132mMskey1.xml
  • /data/data/####/Ix132mMtasks.xml
  • /data/data/####/LOCK
  • /data/data/####/LOG
  • /data/data/####/MANIFEST-000001
  • /data/data/####/MessageStore.db-journal
  • /data/data/####/MsgLogStore.db-journal
  • /data/data/####/NIMSDK_Config_f7274dbc6d1b56317a1437bb9d42f596.xml
  • /data/data/####/NIMSDK_Config_f7274dbc6d1b56317a1437bb9d42f596_...cc.xml
  • /data/data/####/PROXYDATA.xml
  • /data/data/####/PROXYDATA.xml.bak
  • /data/data/####/QuotaManager-journal
  • /data/data/####/UM_PROBE_DATA.xml
  • /data/data/####/Unicorn.f7274dbc6d1b56317a1437bb9d42f596.xml
  • /data/data/####/WebViewBasePrefs.xml
  • /data/data/####/WebViewBasePrefs.xml.bak
  • /data/data/####/WebViewBasePrefs.xml.bak (deleted)
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/XkdjsIx132mMcomm.xml
  • /data/data/####/XkdjsIx132mMskey1.xml
  • /data/data/####/XkdjsIx132mMtasks.xml
  • /data/data/####/ZH503.dex
  • /data/data/####/ZH503.dex.flock (deleted)
  • /data/data/####/ZH503.jar
  • /data/data/####/__Baidu_Stat_SDK_SendRem.xml
  • /data/data/####/___rb.p12___
  • /data/data/####/__cid__v1__.dat
  • /data/data/####/__local_ap_info_cache.json
  • /data/data/####/__local_last_session.json
  • /data/data/####/__local_stat_cache.json
  • /data/data/####/__rbpr_up18__
  • /data/data/####/__send_data_1611526211316
  • /data/data/####/_p.xml
  • /data/data/####/_sh.xml
  • /data/data/####/a006f4e5dfd62109_0
  • /data/data/####/a006f4e5dfd62109_1
  • /data/data/####/a030bcfe935b28a1_0
  • /data/data/####/a030bcfe935b28a1_1
  • /data/data/####/a038f60b9150cae9_0
  • /data/data/####/a0746bc6de86359b_0
  • /data/data/####/a07d2326ff64f17d_0
  • /data/data/####/a14f93fe3cf0774d_0
  • /data/data/####/a14f93fe3cf0774d_1
  • /data/data/####/a19677a629e00ac3_0 (deleted)
  • /data/data/####/a19d05c57f065568_0
  • /data/data/####/a19d05c57f065568_1
  • /data/data/####/a20d56bd882dae77_0
  • /data/data/####/a214a4326ec0ae1c_0
  • /data/data/####/a214a4326ec0ae1c_1
  • /data/data/####/a22cda5cbb4d2b9c_0
  • /data/data/####/a2332502fffd2e28_0
  • /data/data/####/a31c6404786e8cd7_0
  • /data/data/####/a31c6404786e8cd7_0 (deleted)
  • /data/data/####/a408a1faaedc8a1a_0
  • /data/data/####/a408a1faaedc8a1a_1
  • /data/data/####/a42611e4332f6514_0
  • /data/data/####/a58a904354781d04_0
  • /data/data/####/a58a904354781d04_1
  • /data/data/####/a5c5882e1abb4458_0
  • /data/data/####/a607bc0033142622_0
  • /data/data/####/a607bc0033142622_1
  • /data/data/####/a74a33bd3c44b0ce_0
  • /data/data/####/a75dd6a3dc562f1d_0
  • /data/data/####/a77f3a923af93153_0
  • /data/data/####/a7b98e10c2278e2d_0
  • /data/data/####/a7c96dad1595ce6e_0
  • /data/data/####/a7c96dad1595ce6e_1
  • /data/data/####/a854dd5d13265bda_0
  • /data/data/####/a854dd5d13265bda_1
  • /data/data/####/a888b2ce5d18a925_0
  • /data/data/####/a888b2ce5d18a925_1
  • /data/data/####/a9123da3135035d0_0
  • /data/data/####/a97b06e355fde736_0
  • /data/data/####/a97b06e355fde736_1
  • /data/data/####/a9be4c3d6a736459_0
  • /data/data/####/a9d8c031a140d79c_0
  • /data/data/####/a9d8c031a140d79c_1
  • /data/data/####/aa29fe49e4badfb9_0
  • /data/data/####/aa42fae6e714f296_0
  • /data/data/####/aa49059b0d66e49c_0
  • /data/data/####/aa5cfe7bdfd70c34_0
  • /data/data/####/ab413a0348d40dcb_0
  • /data/data/####/ab413a0348d40dcb_1
  • /data/data/####/ab74a4a4ce153da2_0
  • /data/data/####/ab94eaee2f02a1d1_0
  • /data/data/####/ab94eaee2f02a1d1_1
  • /data/data/####/ab9f03d66e586bf5_0
  • /data/data/####/ab9f03d66e586bf5_1
  • /data/data/####/ac909fef5baddbc3_0
  • /data/data/####/ac909fef5baddbc3_1
  • /data/data/####/acb0110537840db1_0
  • /data/data/####/acb8b07d76444260_0
  • /data/data/####/acb8b07d76444260_1
  • /data/data/####/accs.db-journal
  • /data/data/####/ad1bf63766bd6111_0
  • /data/data/####/ad9c4b36fe61c96d_0
  • /data/data/####/ad9c4b36fe61c96d_0 (deleted)
  • /data/data/####/adinitdex.xml
  • /data/data/####/ae1ae5c24c1d5a7a_0
  • /data/data/####/ae1d677f4980dcd4_0
  • /data/data/####/ae1d677f4980dcd4_1
  • /data/data/####/ae60d848c917ef10_0
  • /data/data/####/aeca533b76bfd99c_0
  • /data/data/####/aef91780c1b85d0d_0
  • /data/data/####/af718ea2158bb085_0
  • /data/data/####/agoo.pid
  • /data/data/####/ahq_spu_ti.xml
  • /data/data/####/ahq_spu_ti.xml.bak
  • /data/data/####/appuserid.xml
  • /data/data/####/b0f4b7b4892a8281_0
  • /data/data/####/b0f4b7b4892a8281_1
  • /data/data/####/b11389eef74dccc4_0
  • /data/data/####/b11389eef74dccc4_1
  • /data/data/####/b1468cb231e1a946_0
  • /data/data/####/b1689f95cc3715c9_0
  • /data/data/####/b1dee636f3931e4f_0
  • /data/data/####/b2a602cfb6959e7f_0
  • /data/data/####/b34d58afb5868c3c_0
  • /data/data/####/b35827c925872532_0
  • /data/data/####/b35947bb9af61ecf_0
  • /data/data/####/b35947bb9af61ecf_1
  • /data/data/####/b37bbc16e4d9b8a8_0
  • /data/data/####/b3a3a13fe6e0d0d9_0
  • /data/data/####/b447299c52954140_0 (deleted)
  • /data/data/####/b465c25eddc8c571_0
  • /data/data/####/b465c25eddc8c571_1
  • /data/data/####/b56f5111a73c57a1_0
  • /data/data/####/b5ccf0b1e4cc8ce3_0
  • /data/data/####/b6e94fa291ed92ab_0
  • /data/data/####/b6e94fa291ed92ab_1
  • /data/data/####/b718fa26d9cec074_0
  • /data/data/####/b75058728ee5d442_0
  • /data/data/####/b75058728ee5d442_1
  • /data/data/####/b758a5e1f4023787_0
  • /data/data/####/b758a5e1f4023787_1
  • /data/data/####/b7ab079b69c5c585_0
  • /data/data/####/b7dc86298a0d3d24_0
  • /data/data/####/b7dc86298a0d3d24_1
  • /data/data/####/b8218f4ef2ac55b3_0
  • /data/data/####/b8218f4ef2ac55b3_1
  • /data/data/####/b883168aa05df8ea_0
  • /data/data/####/b8d625619678b20f_0
  • /data/data/####/b8f4b46de017693d_0
  • /data/data/####/b8f4b46de017693d_1
  • /data/data/####/b8ffc2c5e43de9b8_0
  • /data/data/####/b92630ad40159b45_0
  • /data/data/####/b992ac22df4717aa_0
  • /data/data/####/b9f7b4ac1ef508ce_0
  • /data/data/####/ba2f8b8795953811_0
  • /data/data/####/ba2f8b8795953811_1
  • /data/data/####/ba4d10cf6ae1d514_0
  • /data/data/####/ba87f8e54c521b52_0
  • /data/data/####/baidu_mtj_sdk_record.xml
  • /data/data/####/bb3707605a23e2cd_0
  • /data/data/####/bb57bd594bf5b0b8_0
  • /data/data/####/bc1e60581d0f0a2c_0
  • /data/data/####/bce3070284f2c280_0
  • /data/data/####/bce3070284f2c280_1
  • /data/data/####/bce53bbc561a8b8b_0
  • /data/data/####/bce53bbc561a8b8b_0 (deleted)
  • /data/data/####/bce53bbc561a8b8b_1
  • /data/data/####/bd_embed_tea_agent.db-journal
  • /data/data/####/bdf6e9b2d79d3034_0
  • /data/data/####/bdf8ab2f6070789f_0
  • /data/data/####/be34ff59610e630b_0
  • /data/data/####/be6bc5fcbc5042e1_0
  • /data/data/####/be6bc5fcbc5042e1_1
  • /data/data/####/bee2f1fdbc851d18_0
  • /data/data/####/bf24b2cf2b8acfa0_0
  • /data/data/####/bfb0e63a6c4e352158be3df98d18dae5.xml
  • /data/data/####/bfc654dc740b2656_0
  • /data/data/####/bpfidbmf.dex
  • /data/data/####/bpfidbmf.dex.flock (deleted)
  • /data/data/####/bpfidbmf.jar
  • /data/data/####/bugly_db_-journal
  • /data/data/####/c03452acd90a0671_0
  • /data/data/####/c03452acd90a0671_1
  • /data/data/####/c07a5d4e2140dc57_0
  • /data/data/####/c07a5d4e2140dc57_0 (deleted)
  • /data/data/####/c0eb08752ca9b4d1_0
  • /data/data/####/c0eb08752ca9b4d1_1
  • /data/data/####/c10f1f1bf2a387ea_0
  • /data/data/####/c1203db668dbbae7_0
  • /data/data/####/c125b8176cd44031_0
  • /data/data/####/c1882e467fc419d8_0
  • /data/data/####/c1882e467fc419d8_1
  • /data/data/####/c22bd10d089d6342_0
  • /data/data/####/c24c4dcca6ce4089_0
  • /data/data/####/c2ff0a15499f31a6_0
  • /data/data/####/c330674b16005a08_0
  • /data/data/####/c330674b16005a08_1
  • /data/data/####/c3a486782557661b_0
  • /data/data/####/c3a486782557661b_0 (deleted)
  • /data/data/####/c3ce53a85d06ed10_0
  • /data/data/####/c3d1fe436131c84e_0
  • /data/data/####/c4c7046355a18024_0
  • /data/data/####/c4c7046355a18024_1
  • /data/data/####/c4c9843f9cfcaec5_0
  • /data/data/####/c4f24d50aa2a169a_0
  • /data/data/####/c508dac938ccd490_0 (deleted)
  • /data/data/####/c5847f5aa6a7084b_0
  • /data/data/####/c6cfa237297d01c1_0
  • /data/data/####/c71e9a4d8a583b43_0
  • /data/data/####/c799d8c83db30bca_0
  • /data/data/####/c7bdf57ecf361f6e_0
  • /data/data/####/c7ce1868366f1643_0
  • /data/data/####/c7e617e81709b325_0
  • /data/data/####/c7e617e81709b325_0 (deleted)
  • /data/data/####/c816bba1aaf7346f_0
  • /data/data/####/c8b90a7f46dff7e1_0
  • /data/data/####/c8ea7320441c2d84_0
  • /data/data/####/c8ea7320441c2d84_1
  • /data/data/####/c8efd7d3a58c9cc7_0
  • /data/data/####/c9096c118e9d5d9f_0
  • /data/data/####/c909aacb3ca133d9_0
  • /data/data/####/c97fac098ca2f998_0
  • /data/data/####/c9c270e44f8dbcd9_0
  • /data/data/####/c9c270e44f8dbcd9_1
  • /data/data/####/c9c2dc3659a8d10c_0 (deleted)
  • /data/data/####/ca0c5c7706a4541e_0
  • /data/data/####/ca0c5c7706a4541e_1
  • /data/data/####/cb81ba882685a923_0
  • /data/data/####/cbb5284591d87bbd_0
  • /data/data/####/cc34bd00e13b9c34_0 (deleted)
  • /data/data/####/cc47913f9f97bdec_0
  • /data/data/####/ccfb60cf03aebfc8_0
  • /data/data/####/cdu_st_-1897404729
  • /data/data/####/cdu_st_-1963733048
  • /data/data/####/cdu_st_-724289219
  • /data/data/####/cdu_st_-752754616
  • /data/data/####/cdu_st_1495260626
  • /data/data/####/cdu_st_1606883332
  • /data/data/####/cdu_st_465275389
  • /data/data/####/cdu_st_759790841
  • /data/data/####/ce4affdb3330f273_0
  • /data/data/####/ce6b85216491be9c6960dbbe14aeec9e
  • /data/data/####/ce818a1f2604843e_0
  • /data/data/####/ce90eff518a564b2_0
  • /data/data/####/cef629b5227589c4_0 (deleted)
  • /data/data/####/cf5937fb09829f3d_0
  • /data/data/####/cf60ecf539516ab7_0
  • /data/data/####/cf60ecf539516ab7_1
  • /data/data/####/cf9357ea489ca87f_0
  • /data/data/####/cf9357ea489ca87f_1
  • /data/data/####/cfdee81f252f958d_0
  • /data/data/####/channel_umeng_common_config.xml
  • /data/data/####/chuanglan_report_2.2.1.db
  • /data/data/####/chuanglan_report_2.2.1.db-journal
  • /data/data/####/com.qiyukf.analytics.xml
  • /data/data/####/com.qiyukf.analytics.xml.bak
  • /data/data/####/com.wswy.wzcx.BETA_VALUES.xml
  • /data/data/####/com.wswy.wzcx_preferences.xml
  • /data/data/####/commsdoisfkf.xml
  • /data/data/####/commsdoisfkf.xml.bak
  • /data/data/####/comwroteogigeoig.xml
  • /data/data/####/comxcxid.xml
  • /data/data/####/core_info
  • /data/data/####/core_umeng_common_config.xml
  • /data/data/####/countApi.xml
  • /data/data/####/countIp.xml
  • /data/data/####/crashrecord.xml
  • /data/data/####/d07be58d00ea3d2d_0
  • /data/data/####/d0cfc4ae94f60df9_0
  • /data/data/####/d119490a6becf284_0
  • /data/data/####/d119490a6becf284_1
  • /data/data/####/d1371783d6a81b6c_0
  • /data/data/####/d1468155bea15aed_0
  • /data/data/####/d1468155bea15aed_1
  • /data/data/####/d1a8e1674c0bc9e0_0
  • /data/data/####/d1be5b55bbd51fe7_0
  • /data/data/####/d20ffe85b33367fa_0
  • /data/data/####/d25f585501de36b9_0
  • /data/data/####/d287f3b3d29faea9_0
  • /data/data/####/d2b6debfaa74fbfb_0
  • /data/data/####/d2e47e2b694f0a00_0
  • /data/data/####/d3589b5e4f714428_0
  • /data/data/####/d3589b5e4f714428_1
  • /data/data/####/d564e3e582ab84ec_0
  • /data/data/####/d564e3e582ab84ec_1
  • /data/data/####/d610f1c85c12d6d3_0
  • /data/data/####/d65866449f0aa015_0
  • /data/data/####/d67f0c1bd77059cc_0
  • /data/data/####/d67f0c1bd77059cc_1
  • /data/data/####/d69b41d522d7e341_0
  • /data/data/####/d69b41d522d7e341_1
  • /data/data/####/d79fd023886e174c_0
  • /data/data/####/d7a14e30636d52e10b35d10c02578019
  • /data/data/####/d7eee50feb45b11c_0
  • /data/data/####/d864be584178f1a2_0
  • /data/data/####/d880b8a1d4a6b579_0
  • /data/data/####/d97b8f45374de8bf_0
  • /data/data/####/d97b8f45374de8bf_1
  • /data/data/####/dW1weF9pbnRlcm5hbF8xNjExNTI2MjA5MDA3;
  • /data/data/####/dW1weF9wdXNoX2xhdW5jaF8xNjExNTI2MjIwMjUx;
  • /data/data/####/dW1weF9wdXNoX3JlZ2lzdGVyXzE2MTE1MjYyMTAxMTE=;
  • /data/data/####/da16f7c07344520b_0
  • /data/data/####/da16f7c07344520b_1
  • /data/data/####/da63ee935671e4fd_0
  • /data/data/####/da63ee935671e4fd_1
  • /data/data/####/da656d22fad93130_0
  • /data/data/####/da656d22fad93130_1
  • /data/data/####/dadefd3ef42787ce_0
  • /data/data/####/data.m
  • /data/data/####/db1079d0268380b1_0
  • /data/data/####/db67c53e81bf0ebf_0
  • /data/data/####/dbf59e42573b233e_0
  • /data/data/####/dbf59e42573b233e_1
  • /data/data/####/dbf7d5d0b7ad732b_0
  • /data/data/####/dc49d5731eaf1190_0
  • /data/data/####/dd7bf86aebf7bd35_0
  • /data/data/####/dd7bf86aebf7bd35_1
  • /data/data/####/dd8f05ee3ae27f20_0
  • /data/data/####/de85ae65b46cc792_0
  • /data/data/####/de9f3d782bde75d6_0
  • /data/data/####/dece08399d231242_0
  • /data/data/####/df7cc5ec6e856346_0
  • /data/data/####/dfd3d3bcf5eef3a0_0
  • /data/data/####/dkm30
  • /data/data/####/download_upload
  • /data/data/####/downloader.db-journal
  • /data/data/####/dso_deps
  • /data/data/####/dso_lock
  • /data/data/####/dso_manifest
  • /data/data/####/dso_state
  • /data/data/####/e143989be3bf963d_0
  • /data/data/####/e187f74eb409b225_0
  • /data/data/####/e1b62f237d0dd4ee_0
  • /data/data/####/e2be2cad701429a5_0
  • /data/data/####/e39cb8a606ebdcfd_0
  • /data/data/####/e3c9a901318c852f_0
  • /data/data/####/e3c9a901318c852f_1
  • /data/data/####/e43601f20e0032e0_0
  • /data/data/####/e54cf217dea137f5_0
  • /data/data/####/e5863f2edaa7b33a_0
  • /data/data/####/e5873100130d781b_0 (deleted)
  • /data/data/####/e5c6f1e2d275b966_0 (deleted)
  • /data/data/####/e5eae7927a3c2e75_0
  • /data/data/####/e5eae7927a3c2e75_0 (deleted)
  • /data/data/####/e60b058c9080fc35_0
  • /data/data/####/e60b058c9080fc35_1
  • /data/data/####/e612584.apk
  • /data/data/####/e612584.dex
  • /data/data/####/e612584.dex.flock (deleted)
  • /data/data/####/e612584_tmp
  • /data/data/####/e650fc4277686fb4_0
  • /data/data/####/e66ee1139a2a6c57_0
  • /data/data/####/e6d73557ced12518_0
  • /data/data/####/e708ddf8e71c6950_0
  • /data/data/####/e7188dcc1f8716df_0
  • /data/data/####/e7188dcc1f8716df_1
  • /data/data/####/e7d333233a761e4c_0
  • /data/data/####/e85353d64db1469a_0
  • /data/data/####/e96d25ef89f0b4b7_0
  • /data/data/####/eHhkX3Nw.xml
  • /data/data/####/ea60edfbb350825a_0
  • /data/data/####/eb237d9a3cef74cd_0
  • /data/data/####/eb58fa7875ee8d95_0
  • /data/data/####/ebe09cfd93953349_0
  • /data/data/####/ecdab5a2873dc6c8_0
  • /data/data/####/ecec4fe46f862a4a_0
  • /data/data/####/ecec4fe46f862a4a_1
  • /data/data/####/ed2991f848a2a82b_0
  • /data/data/####/ed61480a3efe13a7_0
  • /data/data/####/ed61480a3efe13a7_1
  • /data/data/####/ed7ce2e20b52532e_0
  • /data/data/####/edef7f2c2459794a_0
  • /data/data/####/ee497c9f4f3d9af8_0
  • /data/data/####/ee497c9f4f3d9af8_1
  • /data/data/####/ee94fc2f146d5f64_0
  • /data/data/####/ee94fc2f146d5f64_1
  • /data/data/####/ef3053a5614a8eb4_0
  • /data/data/####/ef3506c8463877c6_0
  • /data/data/####/ef3c178b16b5d90c_0
  • /data/data/####/ef3c178b16b5d90c_1
  • /data/data/####/efaa788f37e0576e_0
  • /data/data/####/efaec0ac56be49de_0
  • /data/data/####/efe0232fcaa5e56d_0
  • /data/data/####/efe0232fcaa5e56d_1
  • /data/data/####/eff08fff20724fe8_0
  • /data/data/####/efff4a2e5cf1ffa4_0
  • /data/data/####/efff4a2e5cf1ffa4_1
  • /data/data/####/embed_applog_stats.xml
  • /data/data/####/embed_header_custom.xml
  • /data/data/####/embed_last_sp_session.xml
  • /data/data/####/exchangeIdentity.json
  • /data/data/####/exid.dat
  • /data/data/####/f015828929c3aa3a_0
  • /data/data/####/f04c9a56021c0085_0
  • /data/data/####/f055a623f8dfd329_0
  • /data/data/####/f09566aab3fc2d08_0
  • /data/data/####/f09566aab3fc2d08_1
  • /data/data/####/f0ba4f334f44342b_0
  • /data/data/####/f0ba4f334f44342b_1
  • /data/data/####/f0df405bf38e9828_0
  • /data/data/####/f112bb96e5fdc16f_0
  • /data/data/####/f26005bf558319ec_0
  • /data/data/####/f2b2cbfbf4fa1d4e_0
  • /data/data/####/f314096c3c196e25_0
  • /data/data/####/f314096c3c196e25_1
  • /data/data/####/f3b10db176b0debe_0 (deleted)
  • /data/data/####/f4f36769e86a40db_0
  • /data/data/####/f4fa937f1c0ae2d2_0
  • /data/data/####/f50fd18752b98d15_0
  • /data/data/####/f553ecf69d785357_0
  • /data/data/####/f5c85b1dd0ec6ce4_0
  • /data/data/####/f6692d85624a86a0_0
  • /data/data/####/f70f823c021b4355_0
  • /data/data/####/f71229f082fdd91c_0
  • /data/data/####/f7711dd68de6905d_0
  • /data/data/####/f801ca1f01974b6c_0
  • /data/data/####/f801ca1f01974b6c_1
  • /data/data/####/f8319519cbfdb376_0
  • /data/data/####/f8a6bbfa66a99ba9_0
  • /data/data/####/f8a6bbfa66a99ba9_1
  • /data/data/####/f8b53a8acdcecac4_0
  • /data/data/####/f8c3add21d112f42_0
  • /data/data/####/f8e4a1c5828675b5_0
  • /data/data/####/f8e4a1c5828675b5_1
  • /data/data/####/f9ab31ee1fff5308_0
  • /data/data/####/fa626fc211786e1a_0
  • /data/data/####/fa7736b673dc89fa_0
  • /data/data/####/fa96b51e28d3f1e0_0 (deleted)
  • /data/data/####/fad2f3effa6675e1_0
  • /data/data/####/fad2f3effa6675e1_1
  • /data/data/####/fas.xml
  • /data/data/####/fb2291e7f4adae17_0
  • /data/data/####/fbed764e275a6d94_0
  • /data/data/####/fc33210168c75b76_0
  • /data/data/####/fc33210168c75b76_1
  • /data/data/####/fc7ddfb0ffdee0fc_0
  • /data/data/####/fc7ddfb0ffdee0fc_1
  • /data/data/####/fc947d1fb619b264_0
  • /data/data/####/fd1ca5b4b03d18dc_0
  • /data/data/####/fd1ca5b4b03d18dc_1
  • /data/data/####/fd675b61fd2722e0_0
  • /data/data/####/fd7cbc30fbef8282_0
  • /data/data/####/fdcb6ce267bc032a_0
  • /data/data/####/fdf0d769deb9c1ed_0
  • /data/data/####/ff0a9eee33ec57a1_0
  • /data/data/####/ff7e93c1e9d58e52_0
  • /data/data/####/ffad1af948c72c9d_0
  • /data/data/####/ffad1af948c72c9d_1
  • /data/data/####/ffdcbd329e1528e634db218feffecfc5.db
  • /data/data/####/ffdff192735719ef_0
  • /data/data/####/gameid
  • /data/data/####/gameid.zip
  • /data/data/####/gank_device_id.xml.xml
  • /data/data/####/http_1020p.zhitouip.com_808.localstorage (deleted)
  • /data/data/####/http_1020p.zhitouip.com_808.localstorage-journal
  • /data/data/####/http_1020yy.admasterto.com_99.localstorage (deleted)
  • /data/data/####/http_1020yy.admasterto.com_99.localstorage-journal
  • /data/data/####/http_58.218.92.50_808.localstorage (deleted)
  • /data/data/####/http_58.218.92.50_808.localstorage-journal
  • /data/data/####/http_auto.news18a.com_0.localstorage (deleted)
  • /data/data/####/http_auto.news18a.com_0.localstorage-journal
  • /data/data/####/http_www.fnnbt.com_0.localstorage-journal
  • /data/data/####/http_www.news18a.com_0.localstorage-journal
  • /data/data/####/httpdns_config_cache.xml
  • /data/data/####/httpdns_config_cache.xml.bak (deleted)
  • /data/data/####/https_cdata.58.com_0.localstorage-journal
  • /data/data/####/https_gsactivity.diditaxi.com.cn_0.localstorage (deleted)
  • /data/data/####/https_gsactivity.diditaxi.com.cn_0.localstorage-journal
  • /data/data/####/https_luna.58.com_0.localstorage-journal
  • /data/data/####/https_newcar.xcar.com.cn_0.localstorage-journal
  • /data/data/####/https_pro.m.jd.com_0.localstorage-journal
  • /data/data/####/https_sw4.duoyi.com_0.localstorage (deleted)
  • /data/data/####/https_sw4.duoyi.com_0.localstorage-journal
  • /data/data/####/https_www.nike.com_0.localstorage-journal
  • /data/data/####/https_yz.m.sm.cn_0.localstorage-journal
  • /data/data/####/hxdata.xml
  • /data/data/####/i==1.2.0&&3.8.3_1611526208971_envelope.log
  • /data/data/####/index
  • /data/data/####/info.xml
  • /data/data/####/javasdklog.xml
  • /data/data/####/journal
  • /data/data/####/journal.tmp
  • /data/data/####/kk_datas_info.xml
  • /data/data/####/km01
  • /data/data/####/km13
  • /data/data/####/km18
  • /data/data/####/km19
  • /data/data/####/km6ow034
  • /data/data/####/kms_02ext
  • /data/data/####/libCtaApiLib.so
  • /data/data/####/libMMANDKSignature.so
  • /data/data/####/libShanYCore.so
  • /data/data/####/libcocklogic-1.1.3.so
  • /data/data/####/libcuid.so
  • /data/data/####/libgifimage.so
  • /data/data/####/libimagepipeline.so
  • /data/data/####/libkm05.so
  • /data/data/####/libkm05_64.so
  • /data/data/####/libkm17.so
  • /data/data/####/libkm20.so
  • /data/data/####/libnative-filters.so
  • /data/data/####/libnative-imagetranscoder.so
  • /data/data/####/libnms.so
  • /data/data/####/libnnc.so
  • /data/data/####/libnthjvo.so
  • /data/data/####/libnthjvo.so-32
  • /data/data/####/libnthjvo.so-64
  • /data/data/####/libpl_droidsonroids_gif.so
  • /data/data/####/libtnet-3.1.14.so
  • /data/data/####/libtobEmbedEncrypt.so
  • /data/data/####/libtools.so
  • /data/data/####/libtools64.so
  • /data/data/####/libturingau.so
  • /data/data/####/libvyji (deleted)
  • /data/data/####/libyaqcore_gdtadv.so
  • /data/data/####/libyaqstub_gdtadv.so
  • /data/data/####/ll239686.apk
  • /data/data/####/ll239686_o
  • /data/data/####/ll239686_o.flock (deleted)
  • /data/data/####/local_crash_lock
  • /data/data/####/local_crash_lock (deleted)
  • /data/data/####/logdb.db
  • /data/data/####/logdb.db-journal
  • /data/data/####/message_accs_db
  • /data/data/####/message_accs_db-journal
  • /data/data/####/metrics_guid
  • /data/data/####/mok.xml
  • /data/data/####/mp2.tmp
  • /data/data/####/mp28.tmp
  • /data/data/####/mp3.tmp
  • /data/data/####/msg.db-journal
  • /data/data/####/mtaois.png
  • /data/data/####/myconfig.xml
  • /data/data/####/native_record_lock
  • /data/data/####/native_record_lock (deleted)
  • /data/data/####/npth.xml
  • /data/data/####/npth_log.db-journal
  • /data/data/####/pp-Pl0vwwRC9G47uAHMHH2DheUg.1655824826.tmp
  • /data/data/####/pref_bl
  • /data/data/####/proc_auxv
  • /data/data/####/qiyu_save_f7274dbc6d1b56317a1437bb9d42f596.xml
  • /data/data/####/sdkinit.xml
  • /data/data/####/sdkinit.xml.bak
  • /data/data/####/security_info
  • /data/data/####/shanyan_share_data.xml
  • /data/data/####/shanyan_share_data.xml.bak
  • /data/data/####/shanyan_share_data.xml.bak (deleted)
  • /data/data/####/simple-main-req.dat
  • /data/data/####/snssdk_openudid.xml
  • /data/data/####/sp2.dex
  • /data/data/####/sp2.dex.flock (deleted)
  • /data/data/####/sp2.jar
  • /data/data/####/sp28.dex
  • /data/data/####/sp28.dex.flock (deleted)
  • /data/data/####/sp28.jar
  • /data/data/####/sp3.dex
  • /data/data/####/sp3.dex.flock (deleted)
  • /data/data/####/sp3.jar
  • /data/data/####/spUtils.xml
  • /data/data/####/sp_name.xml
  • /data/data/####/sp_push_time.xml
  • /data/data/####/spu_ti.xml
  • /data/data/####/spu_yj.xml
  • /data/data/####/ssoconfigs.xml
  • /data/data/####/szsh.xml
  • /data/data/####/t==8.1.2&&3.8.3_1611526209828_envelope.log
  • /data/data/####/tbs_download_config.xml
  • /data/data/####/tbs_download_config.xml.bak
  • /data/data/####/tbs_download_stat.xml
  • /data/data/####/tbs_pv_config
  • /data/data/####/tbscoreinstall.txt
  • /data/data/####/tbslock.txt
  • /data/data/####/the-real-index
  • /data/data/####/trace_circle.data
  • /data/data/####/tt_dns_settings.xml
  • /data/data/####/tt_sdk_settings.xml
  • /data/data/####/tt_sdk_settings.xml.bak
  • /data/data/####/tt_sp_app_list.xml
  • /data/data/####/tt_sp_app_list.xml.bak
  • /data/data/####/ttopenadsdk.xml
  • /data/data/####/ttopensdk.db-journal
  • /data/data/####/ua.db
  • /data/data/####/ua.db-journal
  • /data/data/####/um_pri.xml
  • /data/data/####/umdat.xml
  • /data/data/####/umengDB.db
  • /data/data/####/umengDB.dex (deleted)
  • /data/data/####/umengDB.dex.flock (deleted)
  • /data/data/####/umengDB.jar
  • /data/data/####/umeng_common_config.xml
  • /data/data/####/umeng_common_location.xml
  • /data/data/####/umeng_general_config.xml
  • /data/data/####/umeng_it.cache
  • /data/data/####/umeng_message_state.xml
  • /data/data/####/umengc.db
  • /data/data/####/unicorn#cheese#
  • /data/data/####/update_lc
  • /data/data/####/upz_5
  • /data/data/####/w44953911.apk
  • /data/data/####/w44953911_o
  • /data/data/####/w44953911_o.flock (deleted)
  • /data/data/####/wBrand.xml
  • /data/data/####/weizhangapp.xml
  • /data/data/####/weizhangapp.xml.bak (deleted)
  • /data/data/####/xdtversion.xml
  • /data/data/####/yd_config_c.xml
  • /data/media/####/.confd
  • /data/media/####/.confd-journal
  • /data/media/####/.did
  • /data/media/####/.ef0b4ddacc046d054f437ba0af966623
  • /data/media/####/.kkid
  • /data/media/####/.nid
  • /data/media/####/.timestamp
  • /data/media/####/.usdis
  • /data/media/####/385E7FA9A763AF89E661BD99B4A389AC (deleted)
  • /data/media/####/385E7FA9A763AF89E661BD99B4A389AC.jar
  • /data/media/####/385E7FA9A763AF89E661BD99B4A389AC.temp
  • /data/media/####/47FEE291DE9632708B158D0CB085EE66
  • /data/media/####/55D7BCC60A702BAE5286696DA6D7F6E4
  • /data/media/####/55D7BCC60A702BAE5286696DA6D7F6E4.temp
  • /data/media/####/55D7BCC60A702BAE5286696DA6D7F6E4.zip
  • /data/media/####/7256A17995AA65F989B6622B9B448418
  • /data/media/####/8E9A20EC5272B8CE23E7EA5D5F8ABBFE
  • /data/media/####/8E9A20EC5272B8CE23E7EA5D5F8ABBFE.temp
  • /data/media/####/8E9A20EC5272B8CE23E7EA5D5F8ABBFE.zip
  • /data/media/####/9B060EC94F8A7CCEA899EA8436E636EA.temp
  • /data/media/####/9B060EC94F8A7CCEA899EA8436E636EA.zip
  • /data/media/####/A2718DA4862E9DAE5851B4034FDE2192
  • /data/media/####/A2718DA4862E9DAE5851B4034FDE2192.temp
  • /data/media/####/A2718DA4862E9DAE5851B4034FDE2192.zip
  • /data/media/####/AA3AC224E846BAE7653E4BF402AF8019
  • /data/media/####/Alvin2.xml
  • /data/media/####/C2BCE207F8DC95728EE62069E6A30887
  • /data/media/####/C428E4BC6FBA4CC143BD8F028EF43452
  • /data/media/####/CCCC5B8911BBCB224E5317F7FB929A12
  • /data/media/####/CCCC5B8911BBCB224E5317F7FB929A12.jar
  • /data/media/####/CCCC5B8911BBCB224E5317F7FB929A12.temp
  • /data/media/####/ContextData.xml
  • /data/media/####/D0AECBFDEEC2125A8DD4A844CBE9938B
  • /data/media/####/D75E99C9A338D24A1F840F280B0877ED
  • /data/media/####/D75E99C9A338D24A1F840F280B0877ED.temp
  • /data/media/####/D75E99C9A338D24A1F840F280B0877ED.zip
  • /data/media/####/D967A959D8E39AF63D48D9EACAEC1F70
  • /data/media/####/D967A959D8E39AF63D48D9EACAEC1F70.temp
  • /data/media/####/D967A959D8E39AF63D48D9EACAEC1F70.zip
  • /data/media/####/_pn
  • /data/media/####/_shn
  • /data/media/####/deviceToken
  • /data/media/####/tbslog.txt
  • /data/misc/####/primary.prof
Miscellaneous:
Executes the following shell scripts:
  • /system/bin/cat /proc/cpuinfo
  • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
  • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/.mqglg/bpfidbmf.jar --oat-fd=377 --oat-location=/data/user/0/<Package>/.mqglg/bpfidbmf.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_xddd/p2/sp2.jar --oat-fd=205 --oat-location=/data/user/0/<Package>/app_xddd/p2/sp2.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_xddd/p28/sp28.jar --oat-fd=237 --oat-location=/data/user/0/<Package>/app_xddd/p28/sp28.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_xddd/p3/sp3.jar --oat-fd=145 --oat-location=/data/user/0/<Package>/app_xddd/p3/sp3.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/.2969407120.apk --oat-fd=145 --oat-location=/data/user/0/<Package>/code_cache/.2969407120.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/.3050965755.apk --oat-fd=211 --oat-location=/data/user/0/<Package>/code_cache/.3050965755.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/.3492835548.apk --oat-fd=213 --oat-location=/data/user/0/<Package>/code_cache/.3492835548.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/13_2.jar --oat-fd=287 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/13_2.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/14.jar --oat-fd=249 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/14.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/16.jar --oat-fd=287 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/16.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/18_6.jar --oat-fd=279 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/18_6.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/19.jar --oat-fd=279 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/19.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/2.jar --oat-fd=135 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/2.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/21.jar --oat-fd=213 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/21.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/5ce6569c258c6876cf6ff381cd3f024e.jar --oat-fd=190 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/5ce6569c258c6876cf6ff381cd3f024e.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/9b689ba43f5d834e8d793c8831c48d8a.jar --oat-fd=416 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/9b689ba43f5d834e8d793c8831c48d8a.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/oatCache/downUmeng/umengDB.jar --oat-fd=145 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/oatCache/downUmeng/umengDB.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/e612584.apk --oat-fd=279 --oat-location=/data/user/0/<Package>/files/e612584.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/ll239686.apk --oat-fd=548 --oat-location=/data/user/0/<Package>/files/ll239686_o --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tda/ZH503.jar --oat-fd=190 --oat-location=/data/user/0/<Package>/files/tda/ZH503.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/w44953911.apk --oat-fd=249 --oat-location=/data/user/0/<Package>/files/w44953911_o --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/385E7FA9A763AF89E661BD99B4A389AC.jar --oat-fd=279 --oat-location=/data/user/0/<Package>/files/385E7FA9A763AF89E661BD99B4A389AC.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/55D7BCC60A702BAE5286696DA6D7F6E4.zip --oat-fd=479 --oat-location=/data/user/0/<Package>/files/55D7BCC60A702BAE5286696DA6D7F6E4.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/8E9A20EC5272B8CE23E7EA5D5F8ABBFE.zip --oat-fd=352 --oat-location=/data/user/0/<Package>/files/8E9A20EC5272B8CE23E7EA5D5F8ABBFE.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/9B060EC94F8A7CCEA899EA8436E636EA.zip --oat-fd=256 --oat-location=/data/user/0/<Package>/files/9B060EC94F8A7CCEA899EA8436E636EA.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/A2718DA4862E9DAE5851B4034FDE2192.zip --oat-fd=352 --oat-location=/data/user/0/<Package>/files/A2718DA4862E9DAE5851B4034FDE2192.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/CCCC5B8911BBCB224E5317F7FB929A12.jar --oat-fd=275 --oat-location=/data/user/0/<Package>/files/CCCC5B8911BBCB224E5317F7FB929A12.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/D75E99C9A338D24A1F840F280B0877ED.zip --oat-fd=410 --oat-location=/data/user/0/<Package>/files/D75E99C9A338D24A1F840F280B0877ED.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/D967A959D8E39AF63D48D9EACAEC1F70.zip --oat-fd=441 --oat-location=/data/user/0/<Package>/files/D967A959D8E39AF63D48D9EACAEC1F70.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=<Package Folder>/extfiles/CprPt.jar --oat-fd=298 --oat-location=<Package Folder>/extfiles/CprPt.dex --compiler-filter=speed
  • /system/lib/arm/houdini /data/user/0/<Package>/files//dkm30 /data/user/0/<Package>/files//dkm30 --tdyserver /data/user/0/<Package>/files/ <Package>:tools
  • cat /proc/version
  • cat /sys/class/net/wlan0/address
  • chmod 777 /data/user/0/<Package>/cache/Download
  • getprop
  • getprop ro.board.platform
  • getprop ro.build.display.id
  • getprop ro.build.version.emui
  • getprop ro.build.version.opporom
  • getprop ro.letv.release.version
  • getprop ro.miui.ui.version.name
  • getprop ro.product.cpu.abi
  • getprop ro.smartisan.version
  • getprop ro.vivo.os.build.display.id
  • getprop ro.vivo.os.version
  • getprop ro.yunos.build.version
  • logcat -d -v threadtime
  • ls -l /system/bin/su
  • ls /
  • ls /sys/class/thermal
  • mount
  • sh -c /data/user/0/<Package>/files/kms_02ext --ru89 0 /data/user/0/<Package>/files/debuggerd_real
Uses the following algorithms to encrypt data:
  • AES-CBC-PKCS5Padding
  • AES-CBC-PKCS7Padding
  • AES-ECB-NoPadding
  • AES-ECB-PKCS5Padding
  • AES-ECB-PKCS7Padding
  • AES-GCM-NoPadding
  • DES
  • DES-CBC-PKCS5Padding
  • DES-ECB-PKCS5Padding
  • RSA-ECB-NoPadding
  • RSA-ECB-PKCS1Padding
  • RSA-None-PKCS1Padding
Uses the following algorithms to decrypt data:
  • AES
  • AES-CBC-NoPadding
  • AES-CBC-PKCS5Padding
  • AES-CBC-PKCS7Padding
  • AES-ECB-NoPadding
  • AES-ECB-PKCS5Padding
  • AES-GCM-NoPadding
  • DES
  • DES-CBC-PKCS5Padding
  • DES-ECB-PKCS5Padding
  • RSA-None-PKCS1Padding
Accesses the ITelephony private interface.
Gets information about location.
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Gets information about APN settings.
Gets information about installed apps.
Adds tasks to the system scheduler.
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android