Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Triada.4859

Added to the Dr.Web virus database: 2021-01-05

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Click.345.origin
  • Android.DownLoader.1007.origin
  • Android.RemoteCode.314.origin
  • Android.Triada.4567
  • Android.Triada.482.origin
  • Android.Triada.510.origin
  • Android.Triada.534.origin
  • Android.Triada.559.origin
  • Android.Triada.563.origin
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(HTTP/1.1) amdc####.m.ta####.com:80
  • TCP(HTTP/1.1) ad.toads####.com:80
  • TCP(HTTP/1.1) www.78####.cc:80
  • TCP(HTTP/1.1) 58.2####.92.50:808
  • TCP(HTTP/1.1) qlz####.pes####.com:17002
  • TCP(HTTP/1.1) 1####.27.70.235:80
  • TCP(HTTP/1.1) 47.1####.185.46:80
  • TCP(HTTP/1.1) c.c####.com:80
  • TCP(HTTP/1.1) xiaox####.adse####.adan####.com:80
  • TCP(HTTP/1.1) 6z####.njt####.com:10091
  • TCP(HTTP/1.1) filt####.a####.top:80
  • TCP(HTTP/1.1) lla####.slj####.com:17001
  • TCP(HTTP/1.1) pco####.ta####.com:80
  • TCP(HTTP/1.1) p####.hfc####.com:80
  • TCP(HTTP/1.1) kyy####.wwe####.com:17001
  • TCP(HTTP/1.1) www-new####.b0.a####.com:80
  • TCP(HTTP/1.1) m.7####.net:80
  • TCP(HTTP/1.1) 10####.admast####.com:99
  • TCP(HTTP/1.1) api.z####.com:80
  • TCP(HTTP/1.1) www.pc####.com.####.cn:80
  • TCP(HTTP/1.1) de.gtp.xy####.com:8844
  • TCP(HTTP/1.1) www.f####.com:80
  • TCP(HTTP/1.1) s####.e.qq.com:80
  • TCP(HTTP/1.1) newap####.math####.cn:80
  • TCP(HTTP/1.1) xh.ma####.com:80
  • TCP(HTTP/1.1) cl-5307####.g####.co:80
  • TCP(HTTP/1.1) up-ali-####.b0.a####.com:80
  • TCP(HTTP/1.1) wap.xb####.com:80
  • TCP(HTTP/1.1) ip####.com:80
  • TCP(HTTP/1.1) 1713464####.cn-qin####.fc.####.com:80
  • TCP(HTTP/1.1) a####.d####.com:80
  • TCP(HTTP/1.1) s-48####.got####.com:80
  • TCP(HTTP/1.1) 47.1####.211.73:80
  • TCP(HTTP/1.1) js.7####.net:80
  • TCP(HTTP/1.1) 58.2####.67.136:99
  • TCP(HTTP/1.1) u####.b0.upa####.com:80
  • TCP(HTTP/1.1) wa.bu####.vip:80
  • TCP(HTTP/1.1) 1f4-woc####.b0.a####.com:80
  • TCP(HTTP/1.1) r####.mer####.s####.com:80
  • TCP(HTTP/1.1) c####.zhit####.com:99
  • TCP(HTTP/1.1) w.i####.com:80
  • TCP(HTTP/1.1) cn.f####.top:8080
  • TCP(HTTP/1.1) ad.l####.com:3002
  • TCP(HTTP/1.1) 4####.98.31.107:901
  • TCP(HTTP/1.1) 2####.73.129.195:28018
  • TCP(HTTP/1.1) sd.bu####.vip:80
  • TCP(HTTP/1.1) o####.t####.s####.com:80
  • TCP(HTTP/1.1) c####.jumen####.com:80
  • TCP(HTTP/1.1) omg.i####.sogo####.####.com:80
  • TCP(HTTP/1.1) and####.b####.qq.com:80
  • TCP(HTTP/1.1) b####.bugse####.com:3002
  • TCP(HTTP/1.1) ap####.math####.cn:80
  • TCP(HTTP/1.1) b####.bugse####.com:80
  • TCP(HTTP/1.1) mh####.b0.a####.com:80
  • TCP(HTTP/1.1) j####.g####.vip:80
  • TCP(HTTP/1.1) log.gtp.xy####.com:80
  • TCP(HTTP/1.1) gn####.f####.top:8080
  • TCP(HTTP/1.1) api.a####.ads####.cn:80
  • TCP(HTTP/1.1) to.d####.cn:80
  • TCP(HTTP/1.1) t####.sogo####.com.####.com:80
  • TCP(HTTP/1.1) ad.l####.com:80
  • TCP(HTTP/1.1) lo.bu####.vip:80
  • TCP(HTTP/1.1) b####.bugse####.com:3000
  • TCP(HTTP/1.1) z.c####.com:80
  • TCP(HTTP/1.1) ad.l####.com:3000
  • TCP(HTTP/1.1) cdn.boo####.com.####.com:80
  • TCP(HTTP/1.1) gm.mm####.com:80
  • TCP(HTTP/1.1) 1####.76.103.4:28018
  • TCP(HTTP/1.1) 1####.77.67.185:28018
  • TCP(HTTP/1.1) www.jd.com.####.com:80
  • TCP(HTTP/1.1) r####.bu####.vip:80
  • TCP(HTTP/1.1) 1####.zhit####.com:808
  • TCP(HTTP/1.1) co####.ssp.adoc####.com:80
  • TCP(HTTP/1.1) akd####.aog####.com:19001
  • TCP(HTTP/1.1) u####.a####.top:80
  • TCP(HTTP/1.1) bbt####.wwe####.com:17001
  • TCP(HTTP/1.1) 52.2####.173.174:80
  • TCP(HTTP/1.1) i####.sogo####.com.####.com:80
  • TCP(HTTP/1.1) r1.baiyuns####.com:80
  • TCP(HTTP/1.1) ius.mer####.s####.com:80
  • TCP(HTTP/1.1) p####.api.adoc####.com:80
  • TCP(HTTP/1.1) qlz####.pes####.com:18001
  • TCP(HTTP/1.1) gd.a.s####.com:80
  • TCP(HTTP/1.1) api.g####.vip:80
  • TCP(HTTP/1.1) 14.17.1####.182:80
  • TCP(HTTP/1.1) api.yunco####.com:80
  • TCP(HTTP/1.1) res####.a####.top:80
  • TCP(HTTP/1.1) n####.bsp####.cn:80
  • TCP(HTTP/1.1) lla####.slj####.com:17002
  • TCP(HTTP/1.1) b####.bugse####.com:3001
  • TCP(HTTP/1.1) res####.a####.com:80
  • TCP(HTTP/1.1) m####.new####.com:80
  • TCP(HTTP/1.1) app.a####.top:80
  • TCP(HTTP/1.1) 1g5-jin####.b0.a####.com:80
  • TCP(HTTP/1.1) t####.a####.top:80
  • TCP(HTTP/1.1) ad.api.clou####.xyz:80
  • TCP(HTTP/1.1) 1####.zhit####.com:99
  • TCP(TLS/1.0) i####.d####.com:443
  • TCP(TLS/1.0) w####.jd.com:443
  • TCP(TLS/1.0) ius.mer####.s####.com:443
  • TCP(TLS/1.0) cdn.boo####.com.####.com:443
  • TCP(TLS/1.0) c####.pc####.com.cn:443
  • TCP(TLS/1.0) wap.s####.com:443
  • TCP(TLS/1.0) lhyysdk####.oss-cn-####.aliy####.com:443
  • TCP(TLS/1.0) wildca####.go-mp####.net.####.net:443
  • TCP(TLS/1.0) otherbd####.x2s####.t####.####.com:443
  • TCP(TLS/1.0) i####.j####.com:443
  • TCP(TLS/1.0) c.c####.com:443
  • TCP(TLS/1.0) ur####.jd.com:443
  • TCP(TLS/1.0) 1713464####.cn-hang####.fc.####.com:443
  • TCP(TLS/1.0) l####.b####.com:443
  • TCP(TLS/1.0) api.g####.vip:443
  • TCP(TLS/1.0) img.pcon####.com.####.cn:443
  • TCP(TLS/1.0) js.3con####.com.####.cn:443
  • TCP(TLS/1.0) d####.sogo####.com.####.com:443
  • TCP(TLS/1.0) www.jd.com.####.com:443
  • TCP(TLS/1.0) w.i####.com:443
  • TCP(TLS/1.0) on####.pcv####.com.####.cn:443
  • TCP(TLS/1.0) dxp.b####.com:443
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.0) mg####.pcon####.com.cn:443
  • TCP(TLS/1.0) 2####.107.1.97:443
  • TCP(TLS/1.0) n####.qq.com.####.net:443
  • TCP(TLS/1.0) dualsta####.wagbr####.ali####.####.com:443
  • TCP(TLS/1.0) www.pcon####.com.cn:443
  • TCP(TLS/1.0) ivy.pcon####.com.cn:443
  • TCP(TLS/1.0) s####.e.qq.com:443
  • TCP(TLS/1.0) cn-jdtr####.com.edg####.####.net:443
  • TCP(TLS/1.0) res####.a####.com:443
  • TCP(TLS/1.0) commu####.xw.qq.com:443
  • TCP(TLS/1.0) www.pc####.com.####.cn:443
  • TCP(TLS/1.0) ser####.e####.s####.com:443
  • TCP(TLS/1.0) gl####.jd.com.####.com:443
  • TCP(TLS/1.0) z.c####.com:443
  • TCP(TLS/1.0) u####.b0.upa####.com:443
  • TCP(TLS/1.0) po####.pc####.com.cn:443
  • TCP(TLS/1.0) omg.i####.sogo####.####.com:443
  • TCP(TLS/1.0) p####.s####.com:443
  • TCP(TLS/1.0) qy-swa####.qi####.com:443
  • TCP(TLS/1.0) cr.3con####.com:443
  • TCP(TLS/1.0) ma####.sp####.mig.####.net:443
  • TCP(TLS/1.0) g####.jd.com:443
  • TCP(TLS/1.0) lbs.net####.im:443
  • TCP(TLS/1.0) u.j####.com:443
  • TCP(TLS/1.0) sy.cl####.com:443
  • TCP(TLS/1.0) h####.b####.com:443
  • TCP(TLS/1.0) jingtai####.oss-cn-####.aliy####.com:443
  • TCP(TLS/1.0) blackho####.m.jd.com:443
  • TCP(TLS/1.0) gd.a.s####.com:443
  • TCP(TLS/1.0) img.pc####.com.cn:443
  • TCP(TLS/1.0) ap1.qi####.com:443
  • TCP(TLS/1.0) gm.mm####.com:443
  • TCP(TLS/1.0) i####.go-mp####.net.####.net:443
  • TCP(TLS/1.0) 1####.74.90.25:31828
  • TCP(TLS/1.0) ne####.x####.com.cn:443
  • TCP(TLS/1.0) mr####.pc####.com.cn:443
  • TCP(TLS/1.0) h5s####.m.jd.com:443
  • TCP(TLS/1.0) yun.b####.com:443
  • TCP(TLS/1.0) alldo####.linx####.com.####.com:443
  • TCP(TLS/1.0) wtc.d####.com:443
  • TCP(TLS/1.0) fir####.h####.org:5665
  • TCP(TLS/1.0) pb.s####.com:443
  • TCP(TLS/1.0) sw4.d####.com:443
  • TCP(TLS/1.0) p####.pc####.com.cn:443
  • TCP(TLS/1.0) m####.m.jd.com:443
  • TCP(TLS/1.0) m####.g####.com.####.com:443
  • TCP(TLS/1.0) www.y####.com:443
  • TCP(TLS/1.0) al####.u####.com:443
  • TCP(TLS/1.0) hm.b####.com:443
  • TCP(TLS/1.0) 2####.58.211.106:443
  • TCP(TLS/1.0) m.pc####.com.cn:443
  • TCP(TLS/1.0) securit####.sp####.mig.####.net:443
  • TCP(TLS/1.0) t####.sogo####.com.####.com:443
  • TCP(TLS/1.0) lb####.m.jd.com:443
  • TCP(TLS/1.0) tm-####.oss-cn-####.aliy####.com:443
  • TCP(TLS/1.2) 1####.217.19.195:443
  • TCP(TLS/1.2) and####.google####.com:443
  • TCP(TLS/1.2) 2####.58.211.106:443
  • TCP(TLS/1.2) 2####.58.211.110:443
  • TCP gw.adv####.com:8080
  • TCP zb-cent####.m.ta####.com:80
  • TCP l####.net####.im:8080
  • TCP zb-cent####.m.ta####.com:443
  • UDP s####.serv####.moz####.com:3478
  • TCP 8.1####.240.201:9080
DNS requests:
  • 1####.zhit####.com
  • 10####.admast####.com
  • 1f4.w####.net
  • 1g5.jinp####.cn
  • 602.a####.top
  • 602.a####.top.####.8
  • 653.a####.top
  • 653.a####.top.####.8
  • 6z####.njt####.com
  • a####.d####.com
  • a####.gou.s####.com
  • a####.m.jd.com
  • a####.man.aliy####.com
  • a####.map.qq.com
  • a####.new####.com
  • a####.new####.com
  • a####.pcv####.com.cn
  • ad.api.clou####.xyz
  • ad.l####.com
  • ad.toads####.com
  • adx####.hvf####.com
  • akd####.aog####.com
  • al####.new####.com
  • al####.new####.com
  • al####.new####.com
  • al####.new####.com
  • amdc####.m.ta####.com
  • and####.b####.qq.com
  • and####.google####.com
  • ap####.math####.cn
  • ap1.qi####.com
  • api.a####.ads####.cn
  • api.g####.vip
  • api.new####.com
  • api.yunco####.com
  • api.z####.com
  • api.zp####.com
  • api.zp####.com.####.8
  • app.a####.top
  • art.t####.sogo####.com
  • ass####.xca####.com
  • at.umt####.com
  • b####.bugse####.com
  • b####.bugse####.com
  • b####.h####.s####.com
  • bbs.pc####.com.cn
  • bbt####.wwe####.com
  • blackho####.m.jd.com
  • c####.be####.s####.com
  • c####.f####.top
  • c####.jumen####.com
  • c####.mm####.com
  • c####.pc####.com.cn
  • c####.zhit####.com
  • c.c####.com
  • c.cdn.wa####.xyz
  • c.go-mp####.net
  • cdn.boo####.com
  • cdn.qcv####.cn
  • cn.f####.top
  • co####.ssp.adoc####.com
  • commu####.xw.qq.com
  • cr.3con####.com
  • cw####.mintl####.cn
  • d####.sogo####.com
  • de.gtp.xy####.com
  • down####.baiyuns####.com
  • dup.baidust####.com
  • dwf.linx####.com
  • dxp.b####.com
  • e####.gol####.s####.com
  • ei.c####.com
  • fc.b####.com
  • filt####.a####.top
  • fir####.h####.org
  • g####.jd.com
  • g####.jd.com
  • geb####.slj####.com
  • gif.lu.sogo####.com
  • gl####.jd.com
  • gn####.f####.top
  • gw.adv####.com
  • gxe.h####.s####.com
  • h####.b####.com
  • h####.c####.com
  • h5.360bu####.com
  • h5s####.m.jd.com
  • hm.b####.com
  • i####.360bu####.com
  • i####.360bu####.com
  • i####.360bu####.com
  • i####.d####.com
  • i####.new####.com
  • i####.sogo####.com
  • i####.sogo####.com
  • i####.sogo####.com
  • i####.sogo####.com
  • i####.x####.com.cn
  • i####.xca####.com
  • iji####.pes####.com
  • img.new####.com
  • img.pc####.com.cn
  • img.pcon####.com.cn
  • ip####.com
  • ius.mer####.s####.com
  • ivy.pcon####.com.cn
  • j####.g####.vip
  • jingtai####.oss-cn-####.aliy####.com
  • jpg.i####.sogo####.com
  • js.3con####.com
  • js.7####.net
  • jti.h####.s####.com
  • jwz.3con####.com
  • jxs####.slj####.com
  • k####.ur####.s####.com
  • kyy####.wwe####.com
  • l####.b####.com
  • l####.net####.im
  • lb####.m.jd.com
  • lbs.net####.im
  • lg.ca####.com
  • lhyysdk####.oss-cn-####.aliy####.com
  • lla####.slj####.com
  • lo.bu####.vip
  • log.gtp.xy####.com
  • m####.g####.com
  • m####.m.jd.com
  • m####.new####.com
  • m####.pc####.com.cn
  • m.360bu####.com
  • m.7####.net
  • m.pc####.com.cn
  • merc####.s####.com
  • mg####.pcon####.com.cn
  • mr####.pc####.com.cn
  • n####.bsp####.cn
  • ne####.x####.com.cn
  • newap####.math####.cn
  • o####.t####.s####.com
  • omg.i####.sogo####.com
  • orn####.wwe####.com
  • osc.ur####.s####.com
  • p####.api.adoc####.com
  • p####.bugse####.com
  • p####.gol####.s####.com
  • p####.hfc####.com
  • p####.m.jd.com
  • p####.p####.s####.com
  • p####.pc####.com.cn
  • p####.s####.com
  • pb.s####.com
  • pco####.c####.com
  • plb####.u####.com
  • png.lu.sogo####.com
  • po####.pc####.com.cn
  • pv.s####.com
  • q####.qq.com
  • qhl.be####.s####.com
  • qlz####.pes####.com
  • qy-swa####.qi####.com
  • r####.bu####.vip
  • r####.mer####.s####.com
  • r1.baiyuns####.com
  • res####.a####.com
  • res####.a####.top
  • s####.e.qq.com
  • s####.serv####.moz####.com
  • s####.x####.com.cn
  • s.go-mp####.net
  • s4.c####.com
  • s5.c####.com
  • s9.c####.com
  • s95.c####.com
  • s96.c####.com
  • sd.bu####.vip
  • ser####.e####.s####.com
  • sm.ca####.com
  • sto####.360bu####.com
  • sw4.d####.com
  • sy.cl####.com
  • t####.a####.top
  • t####.m.qq.com
  • t####.sogo####.com
  • tm-####.oss-cn-####.aliy####.com
  • to.d####.cn
  • tys####.wwe####.com
  • u####.a####.top
  • u####.b0.upa####.com
  • u####.gol####.s####.com
  • u####.u####.com
  • u.j####.com
  • ue.3con####.com
  • umen####.m.ta####.com
  • umengj####.m.ta####.com
  • ur####.jd.com
  • v####.gou.s####.com
  • v1.c####.com
  • w####.jd.com
  • w####.jd.com
  • w####.jd.com
  • w####.pc####.com.cn
  • w####.pcon####.com.cn
  • w####.qq.com
  • w.i####.com
  • wa.bu####.vip
  • wap.s####.com
  • wap.xb####.com
  • wq.360bu####.com
  • wtc.d####.com
  • www.78####.cc
  • www.78####.cc
  • www.dx####.com
  • www.f####.com
  • www.new####.com
  • www.pc####.com.cn
  • www.pcon####.com.cn
  • www.y####.com
  • x####.h####.s####.com
  • xh.ma####.com
  • xiaox####.adse####.adan####.com
  • y####.mer####.s####.com
  • y####.p####.s####.com
  • y####.sogo####.com
  • ycb####.slj####.com
  • yun.b####.com
  • z2.c####.com
  • z3.c####.com
  • z6.c####.com
  • z9.c####.com
HTTP GET requests:
  • 1####.zhit####.com:808/1020p/index.html
  • 1####.zhit####.com:808/1020p/yrc_001pc.js
  • 1####.zhit####.com:99/wap/index.html?10####
  • 10####.admast####.com:99/1020yy/index.html
  • 1f4-woc####.b0.a####.com/
  • 1f4-woc####.b0.a####.com/4589516.html
  • 1f4-woc####.b0.a####.com/4589533.html
  • 1f4-woc####.b0.a####.com/4589577.html
  • 1f4-woc####.b0.a####.com/9498632.html
  • 1f4-woc####.b0.a####.com/css/base_v6.css
  • 1f4-woc####.b0.a####.com/css/newsdetail_v6.css
  • 1f4-woc####.b0.a####.com/css/reset.css
  • 1f4-woc####.b0.a####.com/favicon.ico
  • 1f4-woc####.b0.a####.com/vo.js?key=####
  • 1g5-jin####.b0.a####.com/vo.js?key=####
  • 1g5-jin####.b0.a####.com/yvo.js?key=####
  • 58.2####.67.136:99/newcar/index.html
  • 58.2####.67.136:99/wts/index.html?1####
  • a####.d####.com/rewrite?fromid=####
  • ad.l####.com/sdk_ad
  • ad.l####.com:3000/api?rdtime=####&secure=####&channel=####&osv=####&adid...
  • ad.l####.com:3002/api?rdtime=####&secure=####&channel=####&osv=####&adid...
  • api.g####.vip/landing_with_phy.js
  • api.z####.com/v1/advert/config?platform=####&versionCode=####&timestamp=...
  • app.a####.top/anshuaControl.json
  • app.a####.top/api.json
  • app.a####.top/pingpaiAD.json
  • b####.bugse####.com/sdk_ad
  • b####.bugse####.com:3000/api?rdtime=####&secure=####&channel=####&osv=##...
  • b####.bugse####.com:3001/api?rdtime=####&secure=####&channel=####&osv=##...
  • b####.bugse####.com:3002/api?rdtime=####&secure=####&channel=####&osv=##...
  • c####.jumen####.com/init.php
  • c####.zhit####.com:99/pctja.html
  • c.c####.com/core.php?web_id=####&t=####
  • c.c####.com/stat.php?id=####
  • cdn.boo####.com.####.com/wap/js/aw.js
  • cdn.boo####.com.####.com/wap/js/wp.js
  • cl-5307####.g####.co/p14_01.ttf
  • cl-5307####.g####.co/p28_09.ttf
  • cl-5307####.g####.co/p3_02.ttf
  • co####.ssp.adoc####.com/api/v2/SDKActiveConfig?version=####&channelCode=...
  • co####.ssp.adoc####.com/api/v2/SDKCommonConfig?channelCode=####&version=...
  • co####.ssp.adoc####.com/api/v2/mgmConfig?channelCode=####&version=####
  • co####.ssp.adoc####.com/api/v2/mgmWebviewRatioConfig?channelCode=####&ve...
  • filt####.a####.top/filter_control_602.json
  • gd.a.s####.com/cityjson?ie=####
  • gm.mm####.com/9.gif?abc=####&rnd=####
  • gn####.f####.top:8080/qsad/api/getAd/jSgmbuon650qyNjGUVuLZg==
  • i####.sogo####.com.####.com/app/a/200630/30e37b10a396ff2e3a624690beac1d54
  • i####.sogo####.com.####.com/app/a/200630/ebb121d60550891c4b77432ecd86868e
  • ip####.com/json/?lang=####
  • ius.mer####.s####.com/wapxml?id=####&h=####&w=####&fv=####&if=####&mi=##...
  • j####.g####.vip/fd.js
  • j####.g####.vip/xb.js
  • j####.g####.vip/xb_solid.js
  • js.7####.net/jwdd.js
  • js.7####.net/solid_7xxs.js
  • lo.bu####.vip/v1/log/track?key=####&mtype=####&device_####&pkg=####&subi...
  • m####.new####.com/api/ipapi/getcityinfo/?callback=####&_=####
  • m####.new####.com/init.php?m=####&c=####&a=####&callback=####&fromid=###...
  • m####.new####.com/js/ina_ad_init.js
  • m.7####.net/mbook_images/header-back.gif
  • m.7####.net/mbook_images/header-backhome.gif
  • m.7####.net/mbook_js/common.js
  • m.7####.net/mbook_js/index.js
  • m.7####.net/mbook_js/read.js
  • m.7####.net/mbook_js/yuedu.js
  • m.7####.net/mbook_js/zepto.min.js
  • m.7####.net/mbyq/20888/395.html
  • mh####.b0.a####.com/sdk/cj006_cj006.html
  • n####.bsp####.cn/b1563
  • n####.bsp####.cn/b1563/index/article.html?id=####
  • n####.bsp####.cn/favicon.ico
  • n####.bsp####.cn/styles/common.css
  • newap####.math####.cn/ssp/mgm/task?taskId=####&ip=####
  • o####.t####.s####.com/ask?id=####&cb=####&ssi0=####&wsg=####&_v=####
  • o####.t####.s####.com/wap_ask_service?callback=####&url=####
  • o####.t####.s####.com/wap_ask_service?callback=SOGOU_STAR_URL_CALLBACK&u...
  • o####.t####.s####.com/wapxml?id=####&h=####&w=####&fv=####&if=####&mi=##...
  • o####.t####.s####.com/wapxml?id=1142604&h=5&w=20&fv=0&if=16&mi=0&sohuurl...
  • omg.i####.sogo####.####.com/wap/js/wp.js
  • p####.api.adoc####.com/ip
  • p####.hfc####.com/c/12Y7TDHJSTY.zip
  • p####.hfc####.com/c/TervaiDur.zip
  • p####.hfc####.com/c/jz/elqsydt.zip
  • p####.hfc####.com/c/l/11Y24jsbuliang.zip
  • p####.hfc####.com/c/l/11Y30JUHEKOULING.zip
  • p####.hfc####.com/two/SOI349RED8EO35RE98FE359E844T9R.zip
  • p####.hfc####.com/u/qwertyuask.zip
  • pco####.ta####.com/app.gif?&cna=####
  • r####.bu####.vip/assets/bdtj/it8.html?hmsr=####&hmpl=####
  • r####.mer####.s####.com/ask?id=####&cb=####&ssi0=####&wsg=####&_v=####
  • r####.mer####.s####.com/wap_ask_service?callback=####&url=####
  • res####.a####.top/LHYY.png
  • res####.a####.top/sdk13_2.png
  • res####.a####.top/sdk14_1.png
  • res####.a####.top/sdk16.png
  • res####.a####.top/sdk18_6.png
  • res####.a####.top/sdk19.png
  • res####.a####.top/sdk2.png
  • res####.a####.top/sdk21.png
  • s-48####.got####.com/liuyan.asp
  • t####.a####.top/anshua.json
  • t####.a####.top/channl_haoqi1.png
  • t####.a####.top/req.json
  • t####.sogo####.com.####.com/wap/css/common.css
  • t####.sogo####.com.####.com/wap/images/sg_logo.png
  • t####.sogo####.com.####.com/wap/images/wap_logo_2.png
  • t####.sogo####.com.####.com/wap/images/wap_txt_1.png
  • t####.sogo####.com.####.com/wap/js/anticheat.min.js
  • to.d####.cn/03YjLSCb67
  • u####.a####.top/653.html
  • u####.a####.top/favicon.ico
  • u####.a####.top/js1002.html
  • u####.a####.top/js1005.html
  • u####.b0.upa####.com/api/ajax/ajax_data_brand_series.html?cheshicallback...
  • u####.b0.upa####.com/api/ajax/ajax_data_series_model.html?cheshicallback...
  • u####.b0.upa####.com/libs/jquery/jquery-2.0.3.min.js
  • up-ali-####.b0.a####.com/3g/js/bit_province_city_data.js
  • up-ali-####.b0.a####.com/auto/202002/css20200810/index_red_noflow.css
  • up-ali-####.b0.a####.com/bseries/5208/5bfe0126944bf_12.jpg!300
  • up-ali-####.b0.a####.com/image/auto/160630/lazyload50.jpg
  • up-ali-####.b0.a####.com/js/CommonUtil.mini.js?v=####
  • up-ali-####.b0.a####.com/js/city_substation_data.js
  • up-ali-####.b0.a####.com/js/geetest3.js
  • up-ali-####.b0.a####.com/js/index_bseries_data_cache.js
  • up-ali-####.b0.a####.com/js/index_sign_data_cache.js
  • up-ali-####.b0.a####.com/js/iwt/iwt1.0.1.js
  • up-ali-####.b0.a####.com/js/jquery-1.7.2.min.js
  • up-ali-####.b0.a####.com/js/jquery.qrcode.min.js
  • up-ali-####.b0.a####.com/js/lazyload.js
  • up-ali-####.b0.a####.com/js/widgets/adapter-mini.js?20####
  • up-ali-####.b0.a####.com/news/css/news_red.css?v=####
  • up-ali-####.b0.a####.com/news/image/icon.png
  • up-ali-####.b0.a####.com/news/image/tools1.png
  • up-ali-####.b0.a####.com/news/image/tools2.png
  • up-ali-####.b0.a####.com/news/image/tools3.png
  • up-ali-####.b0.a####.com/news/image/video.png
  • up-ali-####.b0.a####.com/news/js/public.js
  • up-ali-####.b0.a####.com/top/201812/css/index_red.css?v=####
  • up-ali-####.b0.a####.com/top/201812/image/icon.png
  • up-ali-####.b0.a####.com/top/201812/image/time.png
  • up-ali-####.b0.a####.com/top/201812/js/public.js
  • up-ali-####.b0.a####.com/top/202002/css/index_red_noflow.css
  • w.i####.com/iwt/a.gif?url=####&ua=####&uuid=####&sign=####&ts=####
  • wa.bu####.vip/v1/log/track?key=####&mtype=####&device_####&pkg=####&subi...
  • wap.xb####.com/mbook_images/header-back.gif
  • wap.xb####.com/mbook_images/header-backhome.gif
  • wap.xb####.com/mbook_js/common.js
  • wap.xb####.com/mbook_js/index.js
  • wap.xb####.com/mbook_js/read.js
  • wap.xb####.com/mbook_js/yuedu.js
  • wap.xb####.com/mbook_js/zepto.min.js
  • wap.xb####.com/mbquanben_916/524_1.html
  • www-new####.b0.a####.com/auto/text/css/index.css
  • www-new####.b0.a####.com/ina_product/2723/
  • www-new####.b0.a####.com/ina_product/3720/
  • www-new####.b0.a####.com/index1.html
  • www-new####.b0.a####.com/js/iwt/iwt1.0.1.js
  • www-new####.b0.a####.com/news/detail/storys_150726.html
  • www.78####.cc/index/limit/limit_get?channel=####&project=####
  • www.78####.cc/index/publics/get_ip
  • www.f####.com/search/e69d80e7a0b4e78bbc_1.html
  • www.f####.com/static/js/dist/clipboard.min.js
  • www.jd.com.####.com/
  • www.pc####.com.####.cn/autox/6a976e56b61b2febd215f6cbe5186f5f.htm
  • xh.ma####.com/
  • xh.ma####.com/Template/default/img/bg.jpg
  • xh.ma####.com/Template/default/img/new_mark.png
  • xh.ma####.com/css/common.css
  • xh.ma####.com/css/default.css
  • xh.ma####.com/favicon.ico
  • xh.ma####.com/img/fenlei.gif
  • xh.ma####.com/img/logo.gif
  • xh.ma####.com/js/common.js
  • xh.ma####.com/js/jquery.min.js
  • z.c####.com/stat.htm?id=####&cnzz_eid=####
  • z.c####.com/stat.htm?id=####&r=####&lg=####&ntime=####&cnzz_eid=####&sho...
HTTP POST requests:
  • 1713464####.cn-qin####.fc.####.com/gwd/up
  • 6z####.njt####.com:10091/wisdom/marking
  • ad.api.clou####.xyz/ads
  • ad.toads####.com/api/angent
  • akd####.aog####.com:19001/tchvohfkyf/
  • amdc####.m.ta####.com/amdc/mobileDispatch?appkey=####&deviceId=####&plat...
  • and####.b####.qq.com/rqd/async?aid=####
  • ap####.math####.cn/titan/monitor/device_info
  • api.a####.ads####.cn/thirdparty/sapi/chn
  • api.yunco####.com/service/rest
  • api.z####.com/app/version/android-upgrade
  • api.z####.com/pc/news/get-article-category
  • api.z####.com/tab-conf/app-column-conf
  • api.z####.com/tab-conf/app-sys-conf
  • api.z####.com/tips/index
  • api.z####.com/v1/advert/list
  • bbt####.wwe####.com:17001/cbcvu9/
  • cn.f####.top:8080/qsad/api/c/c
  • de.gtp.xy####.com:8844/Device/info/
  • de.gtp.xy####.com:8844/favicon.ico
  • de.gtp.xy####.com:8844/i?ts=####
  • kyy####.wwe####.com:17001/an2y3z/
  • kyy####.wwe####.com:17001/karawc/
  • lla####.slj####.com:17001/karawc/
  • lla####.slj####.com:17002/5rhxg/
  • log.gtp.xy####.com/sdk
  • qlz####.pes####.com:17002/6a4it/
  • qlz####.pes####.com:17002/jw1pw/
  • qlz####.pes####.com:18001/begzf1/
  • qlz####.pes####.com:18001/w0619s/
  • r1.baiyuns####.com/service/rest
  • res####.a####.com/v3/weather/weatherInfo
  • s####.e.qq.com/activate
  • s####.e.qq.com/launch
  • sd.bu####.vip/v1/project/sdk
  • wa.bu####.vip/v1/wake/list
  • www.78####.cc/index/backend/pro_data
  • xiaox####.adse####.adan####.com/server/ad/v1
File system changes:
Creates the following files:
  • /data/data/####/.2403297477.apk
  • /data/data/####/.2403297477.dex
  • /data/data/####/.2403297477.dex.flock (deleted)
  • /data/data/####/.2969407120.apk
  • /data/data/####/.2969407120.dex
  • /data/data/####/.2969407120.dex.flock (deleted)
  • /data/data/####/.3050965755.apk
  • /data/data/####/.3050965755.dex
  • /data/data/####/.3050965755.dex.flock (deleted)
  • /data/data/####/.3492835548.apk
  • /data/data/####/.3492835548.dex
  • /data/data/####/.3492835548.dex.flock (deleted)
  • /data/data/####/.4013622486.apk
  • /data/data/####/.4013622486.dex
  • /data/data/####/.4013622486.dex.flock (deleted)
  • /data/data/####/.ef0b4ddacc046d054f437ba0af966623
  • /data/data/####/.imprint
  • /data/data/####/.kkid
  • /data/data/####/.turing.dat
  • /data/data/####/.usdis
  • /data/data/####/000003.log
  • /data/data/####/004063ba941718da_0
  • /data/data/####/005bb92749461c36_0
  • /data/data/####/00b33e477496a7cb_0
  • /data/data/####/01671e7fa36c3002_0
  • /data/data/####/0171f9d8813a891d_0
  • /data/data/####/0204d896e30d2885fa461a8565b47ab2.db
  • /data/data/####/0220e42d05215b9e_0
  • /data/data/####/0271045b3c4c0415_0 (deleted)
  • /data/data/####/02a9b1989e5bbc5fa015b382a103cba4.temp
  • /data/data/####/02d21e0d1dc3a31e_0
  • /data/data/####/02eeb739472e38cc_0 (deleted)
  • /data/data/####/02fa44d6a7e18718_0
  • /data/data/####/031abcdbd55a0c57_0
  • /data/data/####/035c42fa2770b40a_0
  • /data/data/####/0435121b0bd9a1db_0
  • /data/data/####/04f337210215b73d_0
  • /data/data/####/04f337210215b73d_1
  • /data/data/####/051d41cf0bf8cb94_0
  • /data/data/####/053a91cdfc1ff916_0
  • /data/data/####/053a91cdfc1ff916_1
  • /data/data/####/059de2f7c61757ce_0
  • /data/data/####/05a4bda85950fc3c_0
  • /data/data/####/05acd9c8f8d09125_0
  • /data/data/####/05acd9c8f8d09125_1
  • /data/data/####/05dc6c542b6dac8f_0
  • /data/data/####/0634ddfd759f6044_0
  • /data/data/####/0634ddfd759f6044_1
  • /data/data/####/06806d1ab42c64e9_0
  • /data/data/####/06eabed738903258_0
  • /data/data/####/0743e4598d75f4ce_0
  • /data/data/####/078d152b6f2c31e4_0
  • /data/data/####/07fdbc411bb9dca4_0
  • /data/data/####/083ae28e6bfd48be_0
  • /data/data/####/083ae28e6bfd48be_1
  • /data/data/####/08e21376d9486ca0_0
  • /data/data/####/094c588fa0e69a87_0
  • /data/data/####/09b1ee953a40a248_0
  • /data/data/####/09bcfedb0ddfe868_0
  • /data/data/####/0aed1f9806b0c589_0 (deleted)
  • /data/data/####/0af051180655ad77_0
  • /data/data/####/0b216ff092d76f60_0 (deleted)
  • /data/data/####/0b40c6f60f122949_0 (deleted)
  • /data/data/####/0c1918241dba1c37_0
  • /data/data/####/0c877d447004a31a_0
  • /data/data/####/0ce78a4cd25df061_0
  • /data/data/####/0d4ac1beb44b5668_0
  • /data/data/####/0ddc53481af429cd_0
  • /data/data/####/0e2d68834c677902_0
  • /data/data/####/0e7db0f1c0130321_0
  • /data/data/####/0ed9f90faa1d6809_0
  • /data/data/####/0f15c52b888eb783_0
  • /data/data/####/0f2779b12b857e2c_0
  • /data/data/####/0f2779b12b857e2c_1
  • /data/data/####/0ffb9ac4e9d3f4b1_0
  • /data/data/####/1002
  • /data/data/####/1004
  • /data/data/####/104bee012a939edd_0
  • /data/data/####/104bee012a939edd_1
  • /data/data/####/105498_auMini_1
  • /data/data/####/10a1d1deb4cdf7f0_0
  • /data/data/####/10a1d1deb4cdf7f0_1
  • /data/data/####/10f669926f0ab8f1_0
  • /data/data/####/11125183843950.0
  • /data/data/####/115651e8fe360a58_0
  • /data/data/####/118dead3e139c249_0
  • /data/data/####/118dead3e139c249_0 (deleted)
  • /data/data/####/118dead3e139c249_1
  • /data/data/####/118dead3e139c249_1 (deleted)
  • /data/data/####/1193735283
  • /data/data/####/11a21237aedd822d_0
  • /data/data/####/121154de33e3893a_0
  • /data/data/####/121154de33e3893a_1
  • /data/data/####/13129575757486.0
  • /data/data/####/1334f68eb9c48f6f_0
  • /data/data/####/1334f68eb9c48f6f_1
  • /data/data/####/1360f6a4b9d50d29_0
  • /data/data/####/139841564f2f10c6_0
  • /data/data/####/13_2.dex
  • /data/data/####/13_2.dex.flock (deleted)
  • /data/data/####/13_2.jar
  • /data/data/####/13e28c58f58485f7_0
  • /data/data/####/13e28c58f58485f7_1
  • /data/data/####/144b63a271cec8e4_0
  • /data/data/####/144b63a271cec8e4_1
  • /data/data/####/144e24579ce934e5_0
  • /data/data/####/14_1.dex
  • /data/data/####/14_1.dex.flock (deleted)
  • /data/data/####/14_1.jar
  • /data/data/####/1502509754
  • /data/data/####/154582f320eb2eb1_0 (deleted)
  • /data/data/####/1570e3db16c9eb52_0
  • /data/data/####/16.dex
  • /data/data/####/16.dex.flock (deleted)
  • /data/data/####/16.jar
  • /data/data/####/1622216993a743a8bd4a0ad17fb3aa5e
  • /data/data/####/166eae457d296537_0
  • /data/data/####/16a53576f642d66f_0
  • /data/data/####/16c87ccd94af5d73_0
  • /data/data/####/16d5ef83f4913f6b_0
  • /data/data/####/16fe05b494fc3a28_0
  • /data/data/####/16fe05b494fc3a28_1
  • /data/data/####/1714af51f380b9f7_0
  • /data/data/####/175f5652cc6a087a_0
  • /data/data/####/1765c4c3498ad57b_0
  • /data/data/####/17ea0929b9ab949e_0
  • /data/data/####/1837152f6b55e5b4_0
  • /data/data/####/18406a17b79392fa_0
  • /data/data/####/18406a17b79392fa_1
  • /data/data/####/1892a402b5d76062_0
  • /data/data/####/1895803892628b81_0
  • /data/data/####/18_6.dex
  • /data/data/####/18_6.dex.flock (deleted)
  • /data/data/####/18_6.jar
  • /data/data/####/18c7ddd87c42176a_0
  • /data/data/####/18c7ddd87c42176a_1
  • /data/data/####/19.dex
  • /data/data/####/19.dex.flock (deleted)
  • /data/data/####/19.jar
  • /data/data/####/193a487d7c23806e_0
  • /data/data/####/195ce99079bbfc65_0
  • /data/data/####/1a05205444eee87c_0
  • /data/data/####/1a3b9f06634d6aa0_0
  • /data/data/####/1ab98caf4fb6c63b_0
  • /data/data/####/1b07d579dd74839f_0
  • /data/data/####/1b5bd8d09db3b317_0
  • /data/data/####/1b8108e9e95e561b_0
  • /data/data/####/1b96abb5e601f756_0
  • /data/data/####/1bb6dc897590a900_0
  • /data/data/####/1bba09f270a7f6ba_0
  • /data/data/####/1be9229e610d75f6_0
  • /data/data/####/1bf7c45e886cf02a_0
  • /data/data/####/1c0c8cfe272578e3_0
  • /data/data/####/1c12f0f394f55fe7_0
  • /data/data/####/1c7bad7a3f0ab07b_0
  • /data/data/####/1c80012b64d33395_0
  • /data/data/####/1c80012b64d33395_0 (deleted)
  • /data/data/####/1db32d5b0ea34da8_0 (deleted)
  • /data/data/####/1dcc26f052e5c9c6_0
  • /data/data/####/1deed7936f7b7aa8_0
  • /data/data/####/1e113ece9b8c76de_0
  • /data/data/####/1e266c345f1af614_0
  • /data/data/####/1f760b557988923f_0
  • /data/data/####/2.dex
  • /data/data/####/2.dex.flock (deleted)
  • /data/data/####/2.jar
  • /data/data/####/208ace4d499c0eb9_0
  • /data/data/####/21.dex
  • /data/data/####/21.dex.flock (deleted)
  • /data/data/####/21.jar
  • /data/data/####/2169cf53b2a4e5f3_0
  • /data/data/####/21a762a3526f21db_0
  • /data/data/####/21a8abbe23d78289_0
  • /data/data/####/225b86d1c0aec8f3_0
  • /data/data/####/2272a3fac7257405_0
  • /data/data/####/22e416a9c076c17e_0
  • /data/data/####/22e416a9c076c17e_1
  • /data/data/####/238d9f975af98564_0
  • /data/data/####/23d06b8c081d8c5f_0
  • /data/data/####/24733fadba49d4d5_0
  • /data/data/####/24733fadba49d4d5_1
  • /data/data/####/2490a717f7acc9d2_0
  • /data/data/####/256a99a3dbfff906_0
  • /data/data/####/25741ad191bd6163_0
  • /data/data/####/2662150fa0bb814e_0
  • /data/data/####/2704aaeef4eeb65c_0
  • /data/data/####/27087d27f6f0be19_0
  • /data/data/####/278b770367373ed2_0
  • /data/data/####/27ab344f5ab952ca_0
  • /data/data/####/27bb99749ddad726_0 (deleted)
  • /data/data/####/27dac8705e581c47_0 (deleted)
  • /data/data/####/27fc9c9d5fd4f0af_0
  • /data/data/####/28efd16fb4cb1df0_0 (deleted)
  • /data/data/####/28f27ccea8d1210e_0
  • /data/data/####/2928b6ac6f142ee2_0
  • /data/data/####/29d464eb875cbd17_0
  • /data/data/####/29dff9ac079a0e9d_0
  • /data/data/####/29e0e38ce32d2537_0
  • /data/data/####/29fc6152acdc0507_0
  • /data/data/####/2EC68123E317AA1FD3F2E11EBECF4D88.xml
  • /data/data/####/2a02b077baa09b3b178b64e03536627e.xml
  • /data/data/####/2aa1522c5107ea40_0
  • /data/data/####/2aa4107be187b13e_0 (deleted)
  • /data/data/####/2aa9e69abb60aab5_0
  • /data/data/####/2aea4329b6928b82_0
  • /data/data/####/2b4ff8d5552fa07d_0
  • /data/data/####/2bcb1fb9409ae3fe_0
  • /data/data/####/2bf4558d0539dc79_0
  • /data/data/####/2bf4558d0539dc79_1
  • /data/data/####/2c009e98f573c81e_0
  • /data/data/####/2c009e98f573c81e_1
  • /data/data/####/2c27a5142ff9a17c_0
  • /data/data/####/2c27a5142ff9a17c_1
  • /data/data/####/2c649830da04d7ad_0
  • /data/data/####/2c68dfa3cd3709ea_0
  • /data/data/####/2d04b3b41301c52a_0
  • /data/data/####/2d7dbb7560ef5d52_0 (deleted)
  • /data/data/####/2d9a0b30c04a2b9e_0
  • /data/data/####/2d9a0b30c04a2b9e_1
  • /data/data/####/2dcb1dd08cc844d6_0
  • /data/data/####/2df26fd8296078c4_0
  • /data/data/####/2df26fd8296078c4_0 (deleted)
  • /data/data/####/2e3442dbeec09ce5_0
  • /data/data/####/2f95d7fc33973727_0
  • /data/data/####/2fa506479d6a5411_0
  • /data/data/####/2fc33fe21cdd6ca5_0
  • /data/data/####/2fc43fc35e5a3bdd_0
  • /data/data/####/30532bb4aada490b_0
  • /data/data/####/306904005d8f53c1_0
  • /data/data/####/30a21d7353366909_0 (deleted)
  • /data/data/####/30ad3950ea0bbe55_0
  • /data/data/####/30fba8223bb80901_0
  • /data/data/####/3204547b340ef019_0
  • /data/data/####/32363b24414e7d62_0
  • /data/data/####/32363b24414e7d62_1
  • /data/data/####/3236707ab33bbec7_0
  • /data/data/####/3254d3cbd7c042de_0
  • /data/data/####/32a0cb2ff73b938e_0
  • /data/data/####/330c97b5c44b271e_0
  • /data/data/####/3327275
  • /data/data/####/336b8a40c156a00e_0
  • /data/data/####/337e0a82ec4d8a55_0
  • /data/data/####/33c44b1783ea9023_0
  • /data/data/####/33e4018af87192a8_0
  • /data/data/####/33e4018af87192a8_1
  • /data/data/####/340064b150c93939_0
  • /data/data/####/34836447ee6b815a_0
  • /data/data/####/360d1ee61e40f4e5_0
  • /data/data/####/36427e4920f8eb7d_0
  • /data/data/####/365288a2c7ff3ac9_0
  • /data/data/####/368329eed6ed9768_0
  • /data/data/####/368329eed6ed9768_0 (deleted)
  • /data/data/####/36f6359401e75f7f_0
  • /data/data/####/37afbb7ac428e4b4_0
  • /data/data/####/385E7FA9A763AF89E661BD99B4A389AC (deleted)
  • /data/data/####/385E7FA9A763AF89E661BD99B4A389AC.dex
  • /data/data/####/385E7FA9A763AF89E661BD99B4A389AC.dex.flock (deleted)
  • /data/data/####/385E7FA9A763AF89E661BD99B4A389AC.jar
  • /data/data/####/385E7FA9A763AF89E661BD99B4A389AC.temp
  • /data/data/####/38a3f4dfa9cd6126_0
  • /data/data/####/38a3f4dfa9cd6126_1
  • /data/data/####/397646fcac866f12_0
  • /data/data/####/3A0BC3C0D4BC531841993226451CFE45.xml
  • /data/data/####/3a2ab9ca05390b05_0
  • /data/data/####/3a2ab9ca05390b05_1
  • /data/data/####/3aa8c578ada69609_0 (deleted)
  • /data/data/####/3ae3c7b2fb217154_0
  • /data/data/####/3ae3c7b2fb217154_1
  • /data/data/####/3b19de4d40d68ca8_0
  • /data/data/####/3b62cea39f2dd48d_0
  • /data/data/####/3bf14a697f2a9f42_0
  • /data/data/####/3c2d3a814038c7b2_0
  • /data/data/####/3c3a74d032803b76_0
  • /data/data/####/3c7eb63299da5201_0
  • /data/data/####/3d00c92aa7f3e97e_0
  • /data/data/####/3e13328c128ccf69_0
  • /data/data/####/3e1ec50d1289a13e_0 (deleted)
  • /data/data/####/3e21c11a9b089dee_0
  • /data/data/####/3ea59a5329011dee_0
  • /data/data/####/3eecf220b9124084_0
  • /data/data/####/3eedad0b0e9a7476_0
  • /data/data/####/3ef119408a746c94_0
  • /data/data/####/3f2c16d5ef49666e_0
  • /data/data/####/3fb0d52f7384f4aa_0
  • /data/data/####/3feedb668c40a32f_0
  • /data/data/####/3feedb668c40a32f_1
  • /data/data/####/3ffd8524beb24493_0
  • /data/data/####/4002fe9e75e4dd9f_0
  • /data/data/####/40158013a238b071_0
  • /data/data/####/40850388063687a1_0
  • /data/data/####/40c3c9045cebca2b_0
  • /data/data/####/40f34fd2fd0a918f_0
  • /data/data/####/40f34fd2fd0a918f_1
  • /data/data/####/416f44c4d9cb8619_0
  • /data/data/####/417ca5b5c10de85d_0
  • /data/data/####/41b28aac676ce607_0
  • /data/data/####/41ff7445dcec9fed_0
  • /data/data/####/421df4d3314fc046_0
  • /data/data/####/424961eba0ff4faf_0
  • /data/data/####/424961eba0ff4faf_0 (deleted)
  • /data/data/####/42df31d3f3bf7f7d_0
  • /data/data/####/42f4e9fddcb05833_0
  • /data/data/####/433e208f4c619e19_0
  • /data/data/####/437c42f44a8b804b_0
  • /data/data/####/437c42f44a8b804b_1
  • /data/data/####/43c135500a0372f5_0
  • /data/data/####/43c135500a0372f5_1
  • /data/data/####/43f04c324e39cc75_0
  • /data/data/####/44082007421986bd_0
  • /data/data/####/441681f9d08bfcf0_0
  • /data/data/####/441681f9d08bfcf0_1
  • /data/data/####/443e9e6b0c271e68_0
  • /data/data/####/44522a87d9956ad61c7e68df923366c6.db
  • /data/data/####/448ba2ff12c3ba3a_0
  • /data/data/####/45377cabc0ec62d8_0
  • /data/data/####/458ce6d190da1be4_0
  • /data/data/####/4703f08c30894161_0
  • /data/data/####/48209c2cd1026531_0
  • /data/data/####/483c220f3ec18c9c_0
  • /data/data/####/4888ffa5770b83f0_0
  • /data/data/####/48b0f27d024556da_0
  • /data/data/####/498a3343ded4b654_0
  • /data/data/####/49df20de5e65b859_0 (deleted)
  • /data/data/####/4af265048812c467_0
  • /data/data/####/4af7b77718d8f9d0_0
  • /data/data/####/4b38870776331023_0
  • /data/data/####/4b611b1f2506eda8_0
  • /data/data/####/4b81b2988ef8999c_0
  • /data/data/####/4ba0a4eb5b1710e6_0
  • /data/data/####/4c157e0687c58592_0
  • /data/data/####/4d2f381c300d6fad_0
  • /data/data/####/4d4ee3172b4ba1a6_0 (deleted)
  • /data/data/####/4d858c5c80a9199b_0
  • /data/data/####/4d9e31893cd14211_0
  • /data/data/####/4d9e31893cd14211_1
  • /data/data/####/4db916ef84d5fdcc_0
  • /data/data/####/4dcffd2eade2cc75_0
  • /data/data/####/4e1538600515ee36_0
  • /data/data/####/4e3de4c3c4ecc02c_0
  • /data/data/####/4ec52135bee15690_0
  • /data/data/####/4f47c95533b04330_0
  • /data/data/####/4ff993ac7c60df56_0
  • /data/data/####/5030bdd70647b030_0
  • /data/data/####/5127fc73890942ea_0
  • /data/data/####/51e40dbfa53ba83f_0
  • /data/data/####/51e40dbfa53ba83f_0 (deleted)
  • /data/data/####/523a071fbcc8f66d_0
  • /data/data/####/52e3a692870b428b_0
  • /data/data/####/53449baab4e9a773_0
  • /data/data/####/539eab966463f620_0
  • /data/data/####/53d43201c96c9804_0
  • /data/data/####/53e5db321646dfac_0
  • /data/data/####/53eaeadc40c6586b_0
  • /data/data/####/53eaeadc40c6586b_1
  • /data/data/####/5403497acaa17925_0
  • /data/data/####/54405bdc809b8acd_0
  • /data/data/####/5448b54cf098a12b_0
  • /data/data/####/54663408912e3595_0
  • /data/data/####/54663408912e3595_1
  • /data/data/####/54bef14dba2b0d80_0
  • /data/data/####/54fdf7d907b8fe07_0
  • /data/data/####/556ea2a5968c6e3d_0
  • /data/data/####/55770da226b8633e_0
  • /data/data/####/55D7BCC60A702BAE5286696DA6D7F6E4
  • /data/data/####/55D7BCC60A702BAE5286696DA6D7F6E4.dex
  • /data/data/####/55D7BCC60A702BAE5286696DA6D7F6E4.dex.flock (deleted)
  • /data/data/####/55D7BCC60A702BAE5286696DA6D7F6E4.temp
  • /data/data/####/55D7BCC60A702BAE5286696DA6D7F6E4.zip
  • /data/data/####/55d24bef58a290b9_0 (deleted)
  • /data/data/####/568781e27f413189_0
  • /data/data/####/569ee0f3498736bf_0
  • /data/data/####/569ee0f3498736bf_1
  • /data/data/####/56e5d0609be9a16e_0
  • /data/data/####/5780138be979e61a_0
  • /data/data/####/5863d53f709d2965_0
  • /data/data/####/58837f87a0bc315b_0
  • /data/data/####/58837f87a0bc315b_1
  • /data/data/####/5896f9015cdeebcf_0
  • /data/data/####/591f857048026da3_0
  • /data/data/####/59758326fec1ef13_0
  • /data/data/####/5a07cf112fbb397e_0 (deleted)
  • /data/data/####/5a11a93c9e02bdba_0
  • /data/data/####/5a73f2971dcc9dbd_0
  • /data/data/####/5b1db251c9b734b4_0
  • /data/data/####/5b1db251c9b734b4_1
  • /data/data/####/5bdc79785c518683_0
  • /data/data/####/5bfdbd43c88b59aa_0
  • /data/data/####/5c00a5b013166ed5_0
  • /data/data/####/5c00a5b013166ed5_1
  • /data/data/####/5c4d4a12cc110f77_0
  • /data/data/####/5c746f34c632b914_0
  • /data/data/####/5c947b473b2ce9fd_0
  • /data/data/####/5d12364857f9d198_0
  • /data/data/####/5d1574c3556948fb_0
  • /data/data/####/5d1574c3556948fb_1
  • /data/data/####/5d58bcda667657f3_0
  • /data/data/####/5d72dd5c58f2e48a_0
  • /data/data/####/5dad17e30a597c44_0
  • /data/data/####/5daeafb861d127b4_0
  • /data/data/####/5e1e6917d79dc9fd_0
  • /data/data/####/5e1f6b25785532cf_0
  • /data/data/####/5e43e309e6af847c_0
  • /data/data/####/5e43e309e6af847c_1
  • /data/data/####/5f34f3662c8ec7f1_0
  • /data/data/####/5f68576affe9395b_0
  • /data/data/####/5fc8261c16eb3a74_0
  • /data/data/####/608755f9dd621319_0
  • /data/data/####/60aa4400df5a29c6_0
  • /data/data/####/60d261f2c2e238bb_0
  • /data/data/####/60d69d08cd955f8f_0
  • /data/data/####/6112aaa339976642_0
  • /data/data/####/6137a2808a037afe_0
  • /data/data/####/6183422051d197ca_0
  • /data/data/####/6183422051d197ca_1
  • /data/data/####/61a36d8bab759c5e_0
  • /data/data/####/61c490d6d27b31f6_0
  • /data/data/####/61c490d6d27b31f6_1
  • /data/data/####/61d06e016be06135_0
  • /data/data/####/62167383b4e8c678_0
  • /data/data/####/62316b87c9b52a0c_0
  • /data/data/####/623a4ae6e9433451_0
  • /data/data/####/62e640f48bcdc978_0
  • /data/data/####/62f40c0688bb4e3c_0 (deleted)
  • /data/data/####/63312b81d24b3e33_0
  • /data/data/####/6362de5957b6b997_0
  • /data/data/####/640a2962e32fd15b_0 (deleted)
  • /data/data/####/641c89943bf536fb_0
  • /data/data/####/64be62a3db4a7a74_0
  • /data/data/####/65465f12a6f31f2d_0
  • /data/data/####/65868d50368b543c_0
  • /data/data/####/65c47a2c1821ade1_0
  • /data/data/####/65c47a2c1821ade1_1
  • /data/data/####/65d827f844ecc572_0
  • /data/data/####/65ddeb272ae08109_0
  • /data/data/####/65ddeb272ae08109_1
  • /data/data/####/66aa4ab7d801ef5a_0
  • /data/data/####/66aa4ab7d801ef5a_1
  • /data/data/####/66d2524800695a81_0
  • /data/data/####/67055a5fb779a696_0
  • /data/data/####/673e7e97fa245982_0
  • /data/data/####/67ae0fd2bf07af20_0 (deleted)
  • /data/data/####/67c1a7fd63d4e1c5_0
  • /data/data/####/6841be03447dc95e_0
  • /data/data/####/68cb373f19866a00_0
  • /data/data/####/69256f29c0fc07fe_0
  • /data/data/####/69256f29c0fc07fe_1
  • /data/data/####/69a13fcef91faf0c_0
  • /data/data/####/6a3e0e07abee9ae5_0
  • /data/data/####/6a9e7bd18fd3463c_0
  • /data/data/####/6aca59b90f48c428_0
  • /data/data/####/6aca59b90f48c428_1
  • /data/data/####/6b069f6ccdd20710_0
  • /data/data/####/6b1b7859e20c2ee1_0
  • /data/data/####/6b1b7859e20c2ee1_0 (deleted)
  • /data/data/####/6b721312991f6b11_0
  • /data/data/####/6b9fd12082490b6e_0
  • /data/data/####/6ce1335901d35d4d_0
  • /data/data/####/6cf9d4625c15632d_0
  • /data/data/####/6d0ebcc2ae290998_0
  • /data/data/####/6d0ebcc2ae290998_1
  • /data/data/####/6ddfb705a8e20019_0
  • /data/data/####/6df6c637b6dade71_0
  • /data/data/####/6df6c637b6dade71_1
  • /data/data/####/6e55d84104dedc4f_0
  • /data/data/####/6e90cfff650272ec_0
  • /data/data/####/6f4579bceb23fe45_0
  • /data/data/####/6f5afa0a0e7a635e_0
  • /data/data/####/6f5afa0a0e7a635e_1
  • /data/data/####/6fd3d758faa0f07bee808d8384419953.db
  • /data/data/####/6fe74b026b1083e3_0
  • /data/data/####/701f76628bb91193_0
  • /data/data/####/701f76628bb91193_1
  • /data/data/####/703827f10f565f0a_0
  • /data/data/####/703827f10f565f0a_1
  • /data/data/####/70b2d128b14c857a_0
  • /data/data/####/70c1d51663b60f5e_0
  • /data/data/####/70da9e45aa134753_0
  • /data/data/####/7122a78f7e09799e_0
  • /data/data/####/714a0e0e4f3aad99_0
  • /data/data/####/71737cc9f6021feb_0
  • /data/data/####/71ba5d2ed22a10e3_0
  • /data/data/####/71f129760f73d8cf_0
  • /data/data/####/724103452ee0114d_0
  • /data/data/####/724103452ee0114d_0 (deleted)
  • /data/data/####/7256A17995AA65F989B6622B9B448418
  • /data/data/####/7267b81533f579e5_0
  • /data/data/####/732a1f61427f6b30_0
  • /data/data/####/73a99fa2d0f0e252_0
  • /data/data/####/74a2e7bbcf90778c_0
  • /data/data/####/74cc40abe940518b_0
  • /data/data/####/74d334e92f1698cc_0
  • /data/data/####/74d334e92f1698cc_0 (deleted)
  • /data/data/####/75c16f3c1d07f06a_0
  • /data/data/####/75c181d2088e5bba_0 (deleted)
  • /data/data/####/75e4899936bc416b_0
  • /data/data/####/76012d39c70d2b65_0
  • /data/data/####/760562357
  • /data/data/####/76487633aa50419a_0 (deleted)
  • /data/data/####/76a12070ce601320_0
  • /data/data/####/76d844e20b895be2_0
  • /data/data/####/7700a0b72f008c1a_0
  • /data/data/####/7700a0b72f008c1a_1
  • /data/data/####/775114fd2ec802a8_0
  • /data/data/####/775114fd2ec802a8_0 (deleted)
  • /data/data/####/77d2cef917da2d05_0
  • /data/data/####/78649def1ca317ff_0
  • /data/data/####/78649def1ca317ff_1
  • /data/data/####/786c2308289855c6_0
  • /data/data/####/796e48831b5b1365_0
  • /data/data/####/796e48831b5b1365_1
  • /data/data/####/7a74e6a940caa3e3_0
  • /data/data/####/7abbebe7a9e017d9_0
  • /data/data/####/7b198090fb522dca_0
  • /data/data/####/7b4b3b5359f04293_0
  • /data/data/####/7b9c53b3a7deea46_0
  • /data/data/####/7ba3d918ae142d66_0
  • /data/data/####/7c3209aa74d7be8d_0
  • /data/data/####/7c435067e3133af9_0
  • /data/data/####/7c85989ad2599e45_0
  • /data/data/####/7c85989ad2599e45_1
  • /data/data/####/7c99b6955eb2950a_0
  • /data/data/####/7d17b98bb139e7f2_0
  • /data/data/####/7d73ddc30536cb59_0
  • /data/data/####/7d868837e0459708_0
  • /data/data/####/7f6af636b9e2c447_0
  • /data/data/####/7f6af636b9e2c447_1
  • /data/data/####/8000c5bc05da4f56bfbbe7bf6247bc32
  • /data/data/####/80d1112fddee9414_0
  • /data/data/####/8117827ccc3b947f_0
  • /data/data/####/82ed8a92a3fb39f1_0
  • /data/data/####/82ed8a92a3fb39f1_0 (deleted)
  • /data/data/####/82fe1ad0b406a1e7_0
  • /data/data/####/8312ddfbacc46e6e_0
  • /data/data/####/8312ddfbacc46e6e_1
  • /data/data/####/8327f78368c29d2b_0
  • /data/data/####/8327f78368c29d2b_1
  • /data/data/####/8414d672e18ee19f_0
  • /data/data/####/8414d672e18ee19f_1
  • /data/data/####/842083a76f7fdfb1_0
  • /data/data/####/844055d2bd4ac8e5_0
  • /data/data/####/8476bca22d3b292d_0
  • /data/data/####/8483b7491b1f419647d94d8f5e3761a3.db
  • /data/data/####/8483b7491b1f419647d94d8f5e3761a3.dex
  • /data/data/####/8483b7491b1f419647d94d8f5e3761a3.dex.flock (deleted)
  • /data/data/####/8483b7491b1f419647d94d8f5e3761a3.jar
  • /data/data/####/84a7d5cdc534c4a9_0
  • /data/data/####/84fe6bd43db424fd_0
  • /data/data/####/85124477066118.0
  • /data/data/####/85205083
  • /data/data/####/8522e61f521461bb_0
  • /data/data/####/8522e61f521461bb_0 (deleted)
  • /data/data/####/85d67f99e81b7178_0
  • /data/data/####/86e352520428ed62_0
  • /data/data/####/87dcb2d211c0751a_0
  • /data/data/####/87fa00889fa2200d85126ce71b2b9722.db
  • /data/data/####/88184680902805e4_0
  • /data/data/####/8845d94ea7072623_0
  • /data/data/####/88730750bb3b5741_0
  • /data/data/####/88c574582736709a_0
  • /data/data/####/88c78b9bdf5fe330_0
  • /data/data/####/88c78b9bdf5fe330_1
  • /data/data/####/891de16376e6fa36_0
  • /data/data/####/899d9b83432868f8_0
  • /data/data/####/89b009b574e26220_0
  • /data/data/####/89dab13c33ca4b0e_0
  • /data/data/####/89db8239622cf716_0
  • /data/data/####/89fcdf37f58d10e7_0
  • /data/data/####/8E9A20EC5272B8CE23E7EA5D5F8ABBFE
  • /data/data/####/8E9A20EC5272B8CE23E7EA5D5F8ABBFE.dex
  • /data/data/####/8E9A20EC5272B8CE23E7EA5D5F8ABBFE.dex.flock (deleted)
  • /data/data/####/8E9A20EC5272B8CE23E7EA5D5F8ABBFE.temp
  • /data/data/####/8E9A20EC5272B8CE23E7EA5D5F8ABBFE.zip
  • /data/data/####/8EAD111D030291821E19A80E344C340A.xml
  • /data/data/####/8a2934dd805d639d_0
  • /data/data/####/8a5080f951c0f076_0
  • /data/data/####/8acde8d882ffc931_0
  • /data/data/####/8b60a217e15e648f_0 (deleted)
  • /data/data/####/8be546bf03ddce82_0
  • /data/data/####/8be546bf03ddce82_0 (deleted)
  • /data/data/####/8c6a8d722ae0c8b9_0
  • /data/data/####/8c866478e63b36ec_0
  • /data/data/####/8cc6e85bf56b28b4_0
  • /data/data/####/8d46c1cd7169e7f8_0
  • /data/data/####/8dab80188a466ed7_0
  • /data/data/####/8e24387cec515e14_0 (deleted)
  • /data/data/####/8e726d58afc1cedf_0
  • /data/data/####/8e8d1dd6ed14123f22370599a111f83c
  • /data/data/####/8e988d96c6a77848d6e8765280690a75
  • /data/data/####/8f29ee98473d3d38_0
  • /data/data/####/8f29ee98473d3d38_0 (deleted)
  • /data/data/####/8fbf90c5aba36f90_0
  • /data/data/####/9046d811a4fb2308_0
  • /data/data/####/906bc51ec1c41c2b_0
  • /data/data/####/908813706
  • /data/data/####/90b1104956b14b78_0
  • /data/data/####/90c8ee9014e9a211_0
  • /data/data/####/90c8ee9014e9a211_1
  • /data/data/####/90d7296812216341_0
  • /data/data/####/91c0612f7cba5c37_0
  • /data/data/####/92130130073719.0
  • /data/data/####/9252c20c42f95909_0
  • /data/data/####/92ef0b7ff73cf615_0
  • /data/data/####/92f0a7b4c847430a1beda845b3cec429.db
  • /data/data/####/9345293c61c33c6c_0
  • /data/data/####/934cc80fce47460c_0
  • /data/data/####/93c3fca555a974f5_0
  • /data/data/####/9480cf9959435c91_0
  • /data/data/####/950624a16a5839d6_0
  • /data/data/####/961305607a3d7f88_0
  • /data/data/####/96cfef336d13e34a_0
  • /data/data/####/96f65ed5af8b99cb_0
  • /data/data/####/971ce0c04e7c231e_0
  • /data/data/####/9786b6af5bfdda7c_0
  • /data/data/####/97c8d7cc1a433064_0
  • /data/data/####/97d00e68f753bb03_0
  • /data/data/####/982c9e6dd519dd50_0
  • /data/data/####/983192334df152ac_0 (deleted)
  • /data/data/####/9836131b8fd41813_0
  • /data/data/####/9838696cd8872bbc_0
  • /data/data/####/985958d976619751_0
  • /data/data/####/985958d976619751_0 (deleted)
  • /data/data/####/985958d976619751_1
  • /data/data/####/997d4849604d757b_0
  • /data/data/####/99a00936cf1752aa_0
  • /data/data/####/9B060EC94F8A7CCEA899EA8436E636EA
  • /data/data/####/9B060EC94F8A7CCEA899EA8436E636EA.dex
  • /data/data/####/9B060EC94F8A7CCEA899EA8436E636EA.dex.flock (deleted)
  • /data/data/####/9B060EC94F8A7CCEA899EA8436E636EA.temp
  • /data/data/####/9B060EC94F8A7CCEA899EA8436E636EA.zip
  • /data/data/####/9a51ae6b891c1205_0
  • /data/data/####/9a51ae6b891c1205_1
  • /data/data/####/9a72577e669f93e8_0
  • /data/data/####/9a7ec8f72def8521_0
  • /data/data/####/9b2c7922ed890728_0
  • /data/data/####/9b49a59805418693_0
  • /data/data/####/9b9273713e205445_0
  • /data/data/####/9b9273713e205445_0 (deleted)
  • /data/data/####/9cdf8e397c1dc061_0
  • /data/data/####/9cdf8e397c1dc061_1
  • /data/data/####/9dfac5cbc9626fe1_0
  • /data/data/####/9e21ecadee589d71_0
  • /data/data/####/9e33e46164f54c08_0
  • /data/data/####/9e691af8435c62f3_0
  • /data/data/####/9e691af8435c62f3_1
  • /data/data/####/9e6ed3c4a7bb611b_0
  • /data/data/####/9e6ed3c4a7bb611b_1
  • /data/data/####/9e905e1aac0dc7b1_0
  • /data/data/####/9ef98f07e8de0ef4_0
  • /data/data/####/9ef98f07e8de0ef4_1
  • /data/data/####/9f65e0c71f10859e_0
  • /data/data/####/9f7a7d01e592e9b0_0
  • /data/data/####/9ff63083d56153a8_0
  • /data/data/####/ACCS_BINDumeng;58107fdec8957663fb003c19.xml
  • /data/data/####/ACCS_SDK.xml
  • /data/data/####/ACCS_SDK.xml (deleted)
  • /data/data/####/ACCS_SDK.xml.bak (deleted)
  • /data/data/####/ACCS_SDK_CHANNEL.xml
  • /data/data/####/ACCS_SDK_CHANNEL.xml.bak
  • /data/data/####/AGOO_BIND.xml
  • /data/data/####/Agoo_AppStore.xml
  • /data/data/####/Alvin2.xml
  • /data/data/####/BUGLY_COMMON_VALUES.xml
  • /data/data/####/BuglySdkInfos.xml
  • /data/data/####/C2BCE207F8DC95728EE62069E6A30887
  • /data/data/####/CCCC5B8911BBCB224E5317F7FB929A12 (deleted)
  • /data/data/####/CCCC5B8911BBCB224E5317F7FB929A12.dex
  • /data/data/####/CCCC5B8911BBCB224E5317F7FB929A12.dex.flock (deleted)
  • /data/data/####/CCCC5B8911BBCB224E5317F7FB929A12.jar
  • /data/data/####/CCCC5B8911BBCB224E5317F7FB929A12.temp
  • /data/data/####/CURRENT
  • /data/data/####/ContextData.xml
  • /data/data/####/ContextData.xml (deleted)
  • /data/data/####/Cookies
  • /data/data/####/Cookies-journal
  • /data/data/####/CprPt.dex
  • /data/data/####/CprPt.dex.flock (deleted)
  • /data/data/####/CprPt.jar
  • /data/data/####/D75E99C9A338D24A1F840F280B0877ED
  • /data/data/####/D75E99C9A338D24A1F840F280B0877ED.dex
  • /data/data/####/D75E99C9A338D24A1F840F280B0877ED.dex.flock (deleted)
  • /data/data/####/D75E99C9A338D24A1F840F280B0877ED.temp
  • /data/data/####/D75E99C9A338D24A1F840F280B0877ED.zip
  • /data/data/####/D967A959D8E39AF63D48D9EACAEC1F70
  • /data/data/####/D967A959D8E39AF63D48D9EACAEC1F70.dex
  • /data/data/####/D967A959D8E39AF63D48D9EACAEC1F70.dex.flock (deleted)
  • /data/data/####/D967A959D8E39AF63D48D9EACAEC1F70.temp
  • /data/data/####/D967A959D8E39AF63D48D9EACAEC1F70.zip
  • /data/data/####/Databases.db-journal
  • /data/data/####/Emp.xml
  • /data/data/####/Emp.xml.bak
  • /data/data/####/LOCK
  • /data/data/####/LOG
  • /data/data/####/MANIFEST-000001
  • /data/data/####/MessageStore.db-journal
  • /data/data/####/MsgLogStore.db-journal
  • /data/data/####/NIMSDK_Config_f7274dbc6d1b56317a1437bb9d42f596.xml
  • /data/data/####/NIMSDK_Config_f7274dbc6d1b56317a1437bb9d42f596_...ea.xml
  • /data/data/####/QuotaManager-journal
  • /data/data/####/UM_PROBE_DATA.xml
  • /data/data/####/Unicorn.f7274dbc6d1b56317a1437bb9d42f596.xml
  • /data/data/####/Unicorn.f7274dbc6d1b56317a1437bb9d42f596.xml.bak
  • /data/data/####/WebViewBasePrefs.xml
  • /data/data/####/WebViewBasePrefs.xml.bak
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/XkdjsIx132mM356507059351895comm.xml
  • /data/data/####/XkdjsIx132mM356507059351895tasks.xml
  • /data/data/####/XkdjsIx132mM356507059351895tasks.xml.bak
  • /data/data/####/XkdjsIx132mMskey1.xml
  • /data/data/####/ZH503.dex
  • /data/data/####/ZH503.dex.flock (deleted)
  • /data/data/####/ZH503.jar
  • /data/data/####/__Baidu_Stat_SDK_SendRem.xml
  • /data/data/####/__Baidu_Stat_SDK_SendRem.xml.bak
  • /data/data/####/___rb.p12___
  • /data/data/####/__cid__v1__.dat
  • /data/data/####/__local_ap_info_cache.json
  • /data/data/####/__local_last_session.json
  • /data/data/####/__local_stat_cache.json
  • /data/data/####/__rbpr_up18__
  • /data/data/####/__send_data_1609795480287
  • /data/data/####/_p.xml
  • /data/data/####/_pn
  • /data/data/####/_sh.xml
  • /data/data/####/_shn
  • /data/data/####/a07a8302f7912652_0
  • /data/data/####/a09cf1aa1780a59557762c3886a9c00b
  • /data/data/####/a0d323a0d7d0f411_0 (deleted)
  • /data/data/####/a1a83b9fc691fa90_0
  • /data/data/####/a1f12ee22819cd65_0
  • /data/data/####/a24ef98679b73a80_0
  • /data/data/####/a24ef98679b73a80_1
  • /data/data/####/a251424a3169599a_0
  • /data/data/####/a2992489f23794ec_0
  • /data/data/####/a32ce5ffc7fc0e10_0
  • /data/data/####/a32ce5ffc7fc0e10_1
  • /data/data/####/a3330c53b7fb1ee3_0
  • /data/data/####/a3330c53b7fb1ee3_1
  • /data/data/####/a3375ecdec2f7ee1_0
  • /data/data/####/a352853bbe5b3bb5_0
  • /data/data/####/a35fa98919a998ed_0
  • /data/data/####/a3b5947d808f1622_0
  • /data/data/####/a3d4ee107aaa76b1_0
  • /data/data/####/a475ff9285d74b0e_0
  • /data/data/####/a4e24c45beb2f915_0
  • /data/data/####/a4e24c45beb2f915_1
  • /data/data/####/a638bb367fdde138_0 (deleted)
  • /data/data/####/a63d24d5d473f1b9_0 (deleted)
  • /data/data/####/a647a1882e31d214_0
  • /data/data/####/a714f4aaf9f6d1d5_0
  • /data/data/####/a720d24ec977941b_0
  • /data/data/####/a76f9cdb641e9bdd_0
  • /data/data/####/a77f3a923af93153_0
  • /data/data/####/a7b98e10c2278e2d_0
  • /data/data/####/a800221491f42f37_0
  • /data/data/####/a8fda075f57a20ae_0
  • /data/data/####/a8fda075f57a20ae_0 (deleted)
  • /data/data/####/a9085a031bf56460_0
  • /data/data/####/a9d8c031a140d79c_0
  • /data/data/####/a9d8c031a140d79c_1
  • /data/data/####/aa36e2c3c9be5e18_0
  • /data/data/####/aa5cfe7bdfd70c34_0
  • /data/data/####/aabd5a60157972d1_0
  • /data/data/####/aabd5a60157972d1_1
  • /data/data/####/aac6ca6a55c38cfc_0
  • /data/data/####/aac6ca6a55c38cfc_0 (deleted)
  • /data/data/####/ab413a0348d40dcb_0 (deleted)
  • /data/data/####/ab71ff1a5489bf0d_0
  • /data/data/####/abe2e0f18188f3cc_0
  • /data/data/####/acbd5115a1c35cb3_0
  • /data/data/####/accs.db-journal
  • /data/data/####/ad2336169c605001_0
  • /data/data/####/ada942d8a628349f_0
  • /data/data/####/adinitdex.xml
  • /data/data/####/ae1d677f4980dcd4_0
  • /data/data/####/ae1d677f4980dcd4_1
  • /data/data/####/ae396555dedd62dc_0
  • /data/data/####/ae60d848c917ef10_0
  • /data/data/####/af304c85df88e440_0
  • /data/data/####/afc432ee41dd7f5a_0
  • /data/data/####/agoo.pid
  • /data/data/####/ahq_spu_ti.xml
  • /data/data/####/appuserid.xml
  • /data/data/####/b1c61655a8c505cb_0
  • /data/data/####/b1dee636f3931e4f_0
  • /data/data/####/b25824b7b18e356e_0
  • /data/data/####/b2b2f71d8b9b4e2a_0
  • /data/data/####/b2b2f71d8b9b4e2a_1
  • /data/data/####/b2f425da10609579_0
  • /data/data/####/b3252a85bb63bd34_0
  • /data/data/####/b3252a85bb63bd34_1
  • /data/data/####/b32e156f2c6e21a8_0
  • /data/data/####/b3ac94895e3b8adc_0
  • /data/data/####/b3ec4dd349f64b66_0
  • /data/data/####/b3ec4dd349f64b66_0 (deleted)
  • /data/data/####/b3f2879f85cc5602_0
  • /data/data/####/b41bac59fb2b5890_0
  • /data/data/####/b47168177ea8d666_0
  • /data/data/####/b48d8f5929d09875_0
  • /data/data/####/b4b087dcbcac375c_0
  • /data/data/####/b4b087dcbcac375c_1
  • /data/data/####/b4fbfd286c5504b6_0 (deleted)
  • /data/data/####/b5175655228f4e79_0
  • /data/data/####/b54b34a830d4478c_0
  • /data/data/####/b59eb8ef5a973268_0
  • /data/data/####/b5ccf0b1e4cc8ce3_0
  • /data/data/####/b5ef65fdaa194c86_0 (deleted)
  • /data/data/####/b5ff4d8974d2b8f3_0
  • /data/data/####/b5ff4d8974d2b8f3_1
  • /data/data/####/b66942b4b4abc045_0
  • /data/data/####/b66942b4b4abc045_1
  • /data/data/####/b6a64341877827a6_0
  • /data/data/####/b704bc6006131134_0
  • /data/data/####/b75058728ee5d442_0
  • /data/data/####/b75058728ee5d442_1
  • /data/data/####/b7667fc3f2e6380e_0
  • /data/data/####/b7da7dd8d009eda3_0
  • /data/data/####/b7e0deb47b5cf16b_0
  • /data/data/####/b8246304478ec3e8_0
  • /data/data/####/b8356b7aea7615b3_0
  • /data/data/####/b838d1be9cea3f02_0
  • /data/data/####/b8692ae2b1246794_0
  • /data/data/####/b8a5512caaa4676e_0
  • /data/data/####/b8e33bffc0db8b37_0
  • /data/data/####/b8e33bffc0db8b37_1
  • /data/data/####/b909708b41351de6_0
  • /data/data/####/b913433b2dfda0a8_0
  • /data/data/####/b9eaca1b933b72fe_0
  • /data/data/####/ba05cc7da96b89c7_0
  • /data/data/####/ba0dff421344411e_0
  • /data/data/####/ba168df849d259ae_0
  • /data/data/####/ba168df849d259ae_1
  • /data/data/####/ba4d10cf6ae1d514_0
  • /data/data/####/ba4d10cf6ae1d514_0 (deleted)
  • /data/data/####/ba4fa4efca7d79a2_0
  • /data/data/####/ba8801163cdbbe85_0
  • /data/data/####/ba9ae812603fec0e_0
  • /data/data/####/bab743a2ed4b1924_0
  • /data/data/####/baeec8eaa7201e92_0
  • /data/data/####/baidu_mtj_sdk_record.xml
  • /data/data/####/bb27969b6961b50e_0
  • /data/data/####/bb75cc3d260c7856_0
  • /data/data/####/bc08a6bdcb7ea46d_0
  • /data/data/####/bc1e60581d0f0a2c_0
  • /data/data/####/bc6973211187d5aa_0
  • /data/data/####/bc6973211187d5aa_0 (deleted)
  • /data/data/####/bc98939b68d75f6e_0
  • /data/data/####/bcc1c06b5aac4120_0 (deleted)
  • /data/data/####/bce3070284f2c280_0 (deleted)
  • /data/data/####/bce53bbc561a8b8b_0
  • /data/data/####/bce53bbc561a8b8b_1
  • /data/data/####/bce63c922e09cced_0
  • /data/data/####/bd8eb6ea053bed81_0
  • /data/data/####/be1d0b62f8a4fb59_0
  • /data/data/####/be34ff59610e630b_0
  • /data/data/####/be49ea9551e5b397_0
  • /data/data/####/bf1a31aac1fc296a_0
  • /data/data/####/bf5963b0292bda23_0
  • /data/data/####/bf659fbfa5b67dbb_0
  • /data/data/####/bf9eb5af3a6fe25a_0
  • /data/data/####/bfb0e63a6c4e352158be3df98d18dae5.xml
  • /data/data/####/bugly_db_-journal
  • /data/data/####/c148ee5351191aa1_0
  • /data/data/####/c148ee5351191aa1_1
  • /data/data/####/c173b58fb0b39c8f_0
  • /data/data/####/c1b78db80c75cd3b_0
  • /data/data/####/c2d99935a59ac3c1_0
  • /data/data/####/c330674b16005a08_0
  • /data/data/####/c330674b16005a08_1
  • /data/data/####/c3961b4351c3a2e8_0
  • /data/data/####/c3a486782557661b_0
  • /data/data/####/c3b8f08934d84847_0
  • /data/data/####/c3ce53a85d06ed10_0
  • /data/data/####/c3fb31aa44af0d5d_0 (deleted)
  • /data/data/####/c41e664ff29d32f2_0
  • /data/data/####/c439f55a3c45e4e8_0
  • /data/data/####/c4505193769d8305_0 (deleted)
  • /data/data/####/c46ec291ec8aa0ce_0 (deleted)
  • /data/data/####/c4c7046355a18024_0
  • /data/data/####/c4c7046355a18024_1
  • /data/data/####/c4eb1e1923ec3d7a_0
  • /data/data/####/c58499f2c088385e_0
  • /data/data/####/c58499f2c088385e_1
  • /data/data/####/c5ba4a3689a58202_0
  • /data/data/####/c5c59e456023874c_0
  • /data/data/####/c5fe303d702c9e05_0
  • /data/data/####/c7ce1868366f1643_0
  • /data/data/####/c85487cc4c4abd05_0
  • /data/data/####/c89f1d3e1c1dc1c6_0
  • /data/data/####/c9137fd3b2577d23_0
  • /data/data/####/c97e4be06f9bcc08_0
  • /data/data/####/ca1d2f7ac512cfd3_0
  • /data/data/####/caddc58bda77b6fa_0
  • /data/data/####/cafea92638905398_0
  • /data/data/####/cb4fe77d7f247e2c_0
  • /data/data/####/cb4fe77d7f247e2c_1
  • /data/data/####/cb62f6c67c1bea13_0
  • /data/data/####/cb941dbf4b387cf5_0 (deleted)
  • /data/data/####/cbb5284591d87bbd_0
  • /data/data/####/cc09413e6d8074c7_0
  • /data/data/####/cc68d2876a78262b_0
  • /data/data/####/cc68d2876a78262b_1
  • /data/data/####/cd88afa177121778_0
  • /data/data/####/cdu_st_-1510132342
  • /data/data/####/cdu_st_-1897404729
  • /data/data/####/cdu_st_-1963733048
  • /data/data/####/cdu_st_-646630316
  • /data/data/####/cdu_st_-724289219
  • /data/data/####/cdu_st_-752754616
  • /data/data/####/cdu_st_1495260626
  • /data/data/####/cdu_st_465275389
  • /data/data/####/ce585b4ed277dd3b_0
  • /data/data/####/ce6bfe832d74e393_0
  • /data/data/####/ceb082c68efb53dc_0
  • /data/data/####/cf1d0aa2c70a002a_0
  • /data/data/####/cf228b404981d779_0
  • /data/data/####/cf60ecf539516ab7_0
  • /data/data/####/cf60ecf539516ab7_1
  • /data/data/####/channel_umeng_common_config.xml
  • /data/data/####/chuanglan_report_2.2.1.db
  • /data/data/####/chuanglan_report_2.2.1.db-journal
  • /data/data/####/com.qiyukf.analytics.xml
  • /data/data/####/com.qiyukf.analytics.xml.bak
  • /data/data/####/com.qq.e.sdkconfig.xml
  • /data/data/####/com.wswy.wzcx.BETA_VALUES.xml
  • /data/data/####/com.wswy.wzcx.BETA_VALUES.xml.bak
  • /data/data/####/com.wswy.wzcx_preferences.xml
  • /data/data/####/commsdoisfkf.xml
  • /data/data/####/commsdoisfkf.xml.bak
  • /data/data/####/comwroteogigeoig.xml
  • /data/data/####/comxcxid.xml
  • /data/data/####/core_info
  • /data/data/####/core_umeng_common_config.xml
  • /data/data/####/countApi.xml
  • /data/data/####/countIp.xml
  • /data/data/####/crashrecord.xml
  • /data/data/####/d030519e882caef3_0
  • /data/data/####/d07444cce2869831_0
  • /data/data/####/d07444cce2869831_1
  • /data/data/####/d079cbf2d9c70d74_0
  • /data/data/####/d119490a6becf284_0 (deleted)
  • /data/data/####/d1315e6ffa5bf717_0
  • /data/data/####/d16703a0b88298e1_0
  • /data/data/####/d1a8e1674c0bc9e0_0
  • /data/data/####/d21e82424e375d5e_0
  • /data/data/####/d287f3b3d29faea9_0
  • /data/data/####/d287f3b3d29faea9_1
  • /data/data/####/d2e47e2b694f0a00_0
  • /data/data/####/d2e47e2b694f0a00_0 (deleted)
  • /data/data/####/d31af07624232886_0
  • /data/data/####/d359028385ebc4cc_0
  • /data/data/####/d3a2960a48b6d7c1_0 (deleted)
  • /data/data/####/d3aaa887a9a6fe1e_0
  • /data/data/####/d3b0ef86f1bb16f0_0
  • /data/data/####/d3bcfc438c2747e0_0
  • /data/data/####/d3ea521e82b392e9_0
  • /data/data/####/d4158f5934faeaca_0
  • /data/data/####/d4158f5934faeaca_1
  • /data/data/####/d4219fff9a178666_0
  • /data/data/####/d4219fff9a178666_1
  • /data/data/####/d423b9d2f3615e6b_0
  • /data/data/####/d4e0c16ad36e6ea4_0
  • /data/data/####/d5725a795cc86947_0
  • /data/data/####/d590aa0ace56e03f_0
  • /data/data/####/d610f1c85c12d6d3_0
  • /data/data/####/d634d6a375d6adb1_0
  • /data/data/####/d67f0c1bd77059cc_0
  • /data/data/####/d67f0c1bd77059cc_1
  • /data/data/####/d6abf5061d55d220_0
  • /data/data/####/d6abf5061d55d220_1
  • /data/data/####/d6c7c8d58e129d15_0
  • /data/data/####/d70484395feaaff4_0
  • /data/data/####/d70484395feaaff4_1
  • /data/data/####/d7405ca117e81779_0
  • /data/data/####/d7a14e30636d52e10b35d10c02578019
  • /data/data/####/d864be584178f1a2_0
  • /data/data/####/d8650f4f6adebebe_0
  • /data/data/####/d8a3dae861949c75_0
  • /data/data/####/d8fb4a1ed58bca7e_0
  • /data/data/####/d94453f763d17058_0
  • /data/data/####/d9b05f9248965258_0
  • /data/data/####/d9b05f9248965258_1
  • /data/data/####/d9bbfbf84ad9150c_0
  • /data/data/####/d9d34ab831a48495_0
  • /data/data/####/dW1weF9pbnRlcm5hbF8xNjA5Nzk1NDY5Mjky;
  • /data/data/####/dW1weF9pbnRlcm5hbF8xNjA5Nzk1NDc0MDgw;
  • /data/data/####/da030b8af24fd224_0
  • /data/data/####/da09932d4dfbb91e_0
  • /data/data/####/da16f7c07344520b_0
  • /data/data/####/da16f7c07344520b_1
  • /data/data/####/da74123c1a166caa_0
  • /data/data/####/data.m
  • /data/data/####/db0ce7c53e8e5ca7_0
  • /data/data/####/db0ce7c53e8e5ca7_1
  • /data/data/####/dbf59e42573b233e_0
  • /data/data/####/dbf59e42573b233e_1
  • /data/data/####/dc38c5092942450f_0
  • /data/data/####/dcb5f342a0d20bbf_0
  • /data/data/####/dcb5f342a0d20bbf_1
  • /data/data/####/dd40f02a31d2a56b_0
  • /data/data/####/ddc58ef5ac224bb4_0
  • /data/data/####/de1038af3d850c48_0
  • /data/data/####/de1038af3d850c48_1
  • /data/data/####/de16c2759de1941c_0
  • /data/data/####/de71db3e53e5ed1c9ad70389c00d4f8b.temp
  • /data/data/####/de798fdf743db380_0
  • /data/data/####/de798fdf743db380_1
  • /data/data/####/deb31af4a4bd59c2_0
  • /data/data/####/ded03278e9616a9b_0
  • /data/data/####/ded57d0c2dc3cb13_0
  • /data/data/####/devCloudSetting.cfg
  • /data/data/####/devCloudSetting.sig
  • /data/data/####/df31068f21e2cc13_0
  • /data/data/####/df4df1a8cc3026cb_0 (deleted)
  • /data/data/####/df54f80a05e24ef1_0
  • /data/data/####/df68d78f536707f4_0
  • /data/data/####/dg26064744.apk
  • /data/data/####/dg26064744_o
  • /data/data/####/dg26064744_o.flock (deleted)
  • /data/data/####/download_upload
  • /data/data/####/dso_deps
  • /data/data/####/dso_lock
  • /data/data/####/dso_manifest
  • /data/data/####/dso_state
  • /data/data/####/e0a83b4c4277c39f_0
  • /data/data/####/e12ebe5e20066b64_0
  • /data/data/####/e12ebe5e20066b64_0 (deleted)
  • /data/data/####/e14fda9b0e23cfa6_0 (deleted)
  • /data/data/####/e2841a86931d36fe_0
  • /data/data/####/e38a2c4dc7cc2799_0
  • /data/data/####/e3b9a8368d28bf60_0
  • /data/data/####/e3c9a901318c852f_0
  • /data/data/####/e3c9a901318c852f_1
  • /data/data/####/e4171639e2e413f0_0
  • /data/data/####/e4c52c0cc48e84b7_0
  • /data/data/####/e538442f3698bbde_0
  • /data/data/####/e561d5ae31d919cf_0
  • /data/data/####/e561d5ae31d919cf_1
  • /data/data/####/e5873100130d781b_0 (deleted)
  • /data/data/####/e591d07211ac4681_0
  • /data/data/####/e5936cef9f03f77c_0
  • /data/data/####/e59f8ea9b30d5965_0
  • /data/data/####/e6740be65e62f6b4_0
  • /data/data/####/e6740be65e62f6b4_0 (deleted)
  • /data/data/####/e6864431d25c4ca5_0
  • /data/data/####/e6864431d25c4ca5_1
  • /data/data/####/e6954283cf43b2b9_0
  • /data/data/####/e6ab05a22113654c_0
  • /data/data/####/e6e83c7d8e74902a_0
  • /data/data/####/e6e83c7d8e74902a_1
  • /data/data/####/e6f3dfb9675fd5e6_0
  • /data/data/####/e7aeec34673c3ecb_0
  • /data/data/####/e7aeec34673c3ecb_1
  • /data/data/####/e7f2f40b7560bd6c_0
  • /data/data/####/e7fc75818e64cf88_0
  • /data/data/####/e7fc75818e64cf88_1
  • /data/data/####/e8158b4f5d502beb_0
  • /data/data/####/e8158b4f5d502beb_1
  • /data/data/####/e85353d64db1469a_0 (deleted)
  • /data/data/####/e8737a5944f44a4e_0
  • /data/data/####/e88c21c65c589aac_0
  • /data/data/####/e95158e06ea16a6b_0
  • /data/data/####/e9856fabf34a750a_0
  • /data/data/####/e99b43bdaddfaf91_0
  • /data/data/####/eHhkX3Nw.xml
  • /data/data/####/ea094c543184914e_0
  • /data/data/####/eab3cbbcfb7bb663_0
  • /data/data/####/eb0e7c205d7a39ce_0 (deleted)
  • /data/data/####/eb889f2e4a6d16ab_0
  • /data/data/####/eba63fd7ce88bdd3_0
  • /data/data/####/ebd8f25a005e530f_0
  • /data/data/####/ebdbddcc4900eab085d631926602f06c.db
  • /data/data/####/ebdddc54b5fa84f3_0
  • /data/data/####/ebe09cfd93953349_0
  • /data/data/####/ec19285abaceb429_0
  • /data/data/####/ece8cbf640293411_0
  • /data/data/####/ed3f932d76d2e9d0_0
  • /data/data/####/eda71b6912a3d5b1_0
  • /data/data/####/ede6951a9e10773f_0
  • /data/data/####/ee1f99d3a8e6fbfe_0
  • /data/data/####/ee2f94c0d517eefe_0
  • /data/data/####/ee34f4756e37c7dc_0
  • /data/data/####/ee3b4467c99b1223_0
  • /data/data/####/ee497c9f4f3d9af8_0
  • /data/data/####/ee497c9f4f3d9af8_1
  • /data/data/####/ee9a7deab17d43b6_0
  • /data/data/####/eef2970169375413_0
  • /data/data/####/eef49dcc00eec521_0
  • /data/data/####/ef1f297e3e436acd_0 (deleted)
  • /data/data/####/ef3053a5614a8eb4_0
  • /data/data/####/ef344706e67335b1_0
  • /data/data/####/ef3c178b16b5d90c_0
  • /data/data/####/ef3c178b16b5d90c_1
  • /data/data/####/ef3f252ad2784b7a_0
  • /data/data/####/efa70cf2348f2ec1_0
  • /data/data/####/efa70cf2348f2ec1_1
  • /data/data/####/efe0232fcaa5e56d_0
  • /data/data/####/efe0232fcaa5e56d_1
  • /data/data/####/efff4a2e5cf1ffa4_0
  • /data/data/####/exchangeIdentity.json
  • /data/data/####/exid.dat
  • /data/data/####/f038a437f37da540_0
  • /data/data/####/f055a623f8dfd329_0
  • /data/data/####/f0ce70e706fe4a54_0
  • /data/data/####/f21251cedaa1a8e8_0
  • /data/data/####/f2165b222a66790f_0 (deleted)
  • /data/data/####/f26005bf558319ec_0
  • /data/data/####/f280aa81003c3558_0
  • /data/data/####/f280aa81003c3558_1
  • /data/data/####/f2cf0ef5fb39912c_0 (deleted)
  • /data/data/####/f2f039395760e4eb_0
  • /data/data/####/f3787ae30692c43f_0
  • /data/data/####/f3a6bda2971bc672_0
  • /data/data/####/f3f11e57c70cd1a7_0
  • /data/data/####/f3fd737f543f7791_0
  • /data/data/####/f41bd8233813ffbf_0 (deleted)
  • /data/data/####/f4d2ca0fd4eb28fc_0
  • /data/data/####/f4f824156f3402d1_0
  • /data/data/####/f5f5b1df2eb0f9d7_0
  • /data/data/####/f5f5b1df2eb0f9d7_1
  • /data/data/####/f6522f9d1e0a9381_0
  • /data/data/####/f6890460e9ac02a7_0
  • /data/data/####/f6890460e9ac02a7_1
  • /data/data/####/f68bc57d65292701_0
  • /data/data/####/f71229f082fdd91c_0
  • /data/data/####/f72390bf6267fa19_0
  • /data/data/####/f7fb80f469700c08_0
  • /data/data/####/f8025f56886d94aa_0
  • /data/data/####/f86427f1730b39f3_0
  • /data/data/####/f882a32b747f6680_0
  • /data/data/####/f8b53a8acdcecac4_0
  • /data/data/####/f8be5f58a25c04bd_0
  • /data/data/####/f8c3add21d112f42_0
  • /data/data/####/f92498602f89d01d_0
  • /data/data/####/f9bd0b0b69a7172d_0
  • /data/data/####/f9c6ec85947e9b1a_0
  • /data/data/####/fa4cf065735eaef6_0
  • /data/data/####/fa7736b673dc89fa_0
  • /data/data/####/face9c43966f43a9_0
  • /data/data/####/face9c43966f43a9_1
  • /data/data/####/fas.xml
  • /data/data/####/fas.xml.bak
  • /data/data/####/fbae491bc5c143fa_0
  • /data/data/####/fbb28c91aea250fe_0
  • /data/data/####/fbd856c9241b294d_0
  • /data/data/####/fc8a5c04c8eb2eda_0 (deleted)
  • /data/data/####/fc8d53054928b6b0_0
  • /data/data/####/fcccd33594bd39ca_0
  • /data/data/####/fd1ca5b4b03d18dc_0
  • /data/data/####/fd1ca5b4b03d18dc_1
  • /data/data/####/fd51c6b5c9b19512_0
  • /data/data/####/fd79bafaa96326ee_0
  • /data/data/####/fdb3ee4a0f92cee8_0
  • /data/data/####/fdc43bf3e6ad1937_0
  • /data/data/####/fdc4938f200eb659_0
  • /data/data/####/fde22d5e5aecf70e_0
  • /data/data/####/fdf7ce8dcd31aec4_0
  • /data/data/####/fe4a2cdf7d70df69_0
  • /data/data/####/fe4a2cdf7d70df69_1
  • /data/data/####/fe9f98dd76a3d713_0
  • /data/data/####/fee17728fea0390d_0
  • /data/data/####/fefda678109eae81_0
  • /data/data/####/ffdcbd329e1528e634db218feffecfc5.db
  • /data/data/####/fff232d1a4f95122_0
  • /data/data/####/gameid
  • /data/data/####/gameid.zip
  • /data/data/####/gdt_config.cfg
  • /data/data/####/gdt_download.db
  • /data/data/####/gdt_download.db-journal
  • /data/data/####/gdt_stat.db
  • /data/data/####/gdt_stat.db-journal
  • /data/data/####/gdt_suid
  • /data/data/####/http_1020p.zhitouip.com_808.localstorage (deleted)
  • /data/data/####/http_1020p.zhitouip.com_808.localstorage-journal
  • /data/data/####/http_1020yy.admasterto.com_99.localstorage (deleted)
  • /data/data/####/http_1020yy.admasterto.com_99.localstorage-journal
  • /data/data/####/http_www.news18a.com_0.localstorage (deleted)
  • /data/data/####/http_www.news18a.com_0.localstorage-journal
  • /data/data/####/httpdns_config_cache.xml
  • /data/data/####/httpdns_config_cache.xml.bak
  • /data/data/####/httpdns_config_cache.xml.bak (deleted)
  • /data/data/####/https_newcar.xcar.com.cn_0.localstorage (deleted)
  • /data/data/####/https_newcar.xcar.com.cn_0.localstorage-journal
  • /data/data/####/https_price.pcauto.com.cn_0.localstorage-journal
  • /data/data/####/https_pro.m.jd.com_0.localstorage-journal
  • /data/data/####/https_sw4.duoyi.com_0.localstorage-journal
  • /data/data/####/https_wap.sogou.com_0.localstorage-journal
  • /data/data/####/hxdata.xml
  • /data/data/####/i==1.2.0&&3.8.2_1609795469441_envelope.log
  • /data/data/####/i==1.2.0&&3.8.2_1609795474149_envelope.log
  • /data/data/####/index
  • /data/data/####/info.xml
  • /data/data/####/journal
  • /data/data/####/journal.tmp
  • /data/data/####/kk_datas_info.xml
  • /data/data/####/kk_datas_info.xml.bak
  • /data/data/####/km01
  • /data/data/####/km09_4589.so
  • /data/data/####/km09_4589.so_tmp
  • /data/data/####/km13
  • /data/data/####/kms_02ext
  • /data/data/####/kw_136602
  • /data/data/####/kw_136602_tmp
  • /data/data/####/libCtaApiLib.so
  • /data/data/####/libMMANDKSignature.so
  • /data/data/####/libShanYCore.so
  • /data/data/####/libcocklogic-1.1.3.so
  • /data/data/####/libcuid.so
  • /data/data/####/libdrow (deleted)
  • /data/data/####/libgifimage.so
  • /data/data/####/libimagepipeline.so
  • /data/data/####/libkm05.so
  • /data/data/####/libkm05_64.so
  • /data/data/####/libnative-filters.so
  • /data/data/####/libnative-imagetranscoder.so
  • /data/data/####/libnms.so
  • /data/data/####/libnnc.so
  • /data/data/####/libnthjvo.so
  • /data/data/####/libnthjvo.so-32
  • /data/data/####/libnthjvo.so-64
  • /data/data/####/libpl_droidsonroids_gif.so
  • /data/data/####/libtnet-3.1.14.so
  • /data/data/####/libtobEmbedEncrypt.so
  • /data/data/####/libturingau.so
  • /data/data/####/libyaqcore_gdtadv.so
  • /data/data/####/libyaqstub_gdtadv.so
  • /data/data/####/local_crash_lock
  • /data/data/####/logdb.db
  • /data/data/####/logdb.db-journal
  • /data/data/####/message_accs_db
  • /data/data/####/message_accs_db-journal
  • /data/data/####/metrics_guid
  • /data/data/####/mok.xml
  • /data/data/####/mp28.tmp
  • /data/data/####/mp3.tmp
  • /data/data/####/mpdc_105498_1
  • /data/data/####/msg.db-journal
  • /data/data/####/mtaois.png
  • /data/data/####/mtj_auto.config
  • /data/data/####/mtj_autoTracker.js
  • /data/data/####/native_record_lock (deleted)
  • /data/data/####/p6623042.apk
  • /data/data/####/p6623042_o (deleted)
  • /data/data/####/p6623042_o.flock (deleted)
  • /data/data/####/pref_bl
  • /data/data/####/proc_auxv
  • /data/data/####/qiyu_save_f7274dbc6d1b56317a1437bb9d42f596.xml
  • /data/data/####/qqsz_file.xml
  • /data/data/####/sdkCloudSetting.cfg
  • /data/data/####/sdkCloudSetting.sig
  • /data/data/####/sdkinit.xml
  • /data/data/####/sdkinit.xml.bak
  • /data/data/####/security_info
  • /data/data/####/shanyan_share_data.xml
  • /data/data/####/shanyan_share_data.xml.bak
  • /data/data/####/sp2.dex.flock (deleted)
  • /data/data/####/sp2.jar
  • /data/data/####/sp28.dex
  • /data/data/####/sp28.dex.flock (deleted)
  • /data/data/####/sp28.jar
  • /data/data/####/sp3.dex
  • /data/data/####/sp3.dex.flock (deleted)
  • /data/data/####/sp3.jar
  • /data/data/####/spUtils.xml
  • /data/data/####/sp_name.xml
  • /data/data/####/spu_ti.xml
  • /data/data/####/spu_yj.xml
  • /data/data/####/ssoconfigs.xml
  • /data/data/####/t==8.1.2&&3.8.2_1609795470266_envelope.log
  • /data/data/####/tbs_download_config.xml
  • /data/data/####/tbs_download_config.xml.bak
  • /data/data/####/tbs_download_stat.xml
  • /data/data/####/tbs_pv_config
  • /data/data/####/tbslock.txt
  • /data/data/####/the-real-index
  • /data/data/####/trace_circle.data
  • /data/data/####/turingfd_conf_105498_auMini.xml
  • /data/data/####/turingfd_conf_105498_auMini.xml.bak
  • /data/data/####/turingfd_protect_105498_47_auMini.xml
  • /data/data/####/ua.db
  • /data/data/####/ua.db-journal
  • /data/data/####/um_pri.xml
  • /data/data/####/umdat.xml
  • /data/data/####/umengDB.db
  • /data/data/####/umengDB.dex
  • /data/data/####/umengDB.dex.flock (deleted)
  • /data/data/####/umengDB.jar
  • /data/data/####/umeng_common_config.xml
  • /data/data/####/umeng_common_location.xml
  • /data/data/####/umeng_general_config.xml
  • /data/data/####/umeng_it.cache
  • /data/data/####/umeng_message_state.xml
  • /data/data/####/umengc.db
  • /data/data/####/unicorn#cheese#
  • /data/data/####/update_lc
  • /data/data/####/upz_5
  • /data/data/####/wBrand.xml
  • /data/data/####/xdtversion.xml
  • /data/data/####/xflwrpsl.dex (deleted)
  • /data/data/####/xflwrpsl.dex.flock (deleted)
  • /data/data/####/xflwrpsl.jar
  • /data/data/####/yd_config_c.xml
  • /data/misc/####/primary.prof
Miscellaneous:
Executes the following shell scripts:
  • /proc/4589/exe
  • /system/bin/cat /proc/cpuinfo
  • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
  • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/.mqglg/xflwrpsl.jar --oat-fd=212 --oat-location=/data/user/0/<Package>/.mqglg/xflwrpsl.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_cachedata/files/55D7BCC60A702BAE5286696DA6D7F6E4.zip --oat-fd=336 --oat-location=/data/user/0/<Package>/files/55D7BCC60A702BAE5286696DA6D7F6E4.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_cachedata/files/8E9A20EC5272B8CE23E7EA5D5F8ABBFE.zip --oat-fd=229 --oat-location=/data/user/0/<Package>/files/8E9A20EC5272B8CE23E7EA5D5F8ABBFE.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_cachedata/files/9B060EC94F8A7CCEA899EA8436E636EA.zip --oat-fd=287 --oat-location=/data/user/0/<Package>/files/9B060EC94F8A7CCEA899EA8436E636EA.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_cachedata/files/D75E99C9A338D24A1F840F280B0877ED.zip --oat-fd=309 --oat-location=/data/user/0/<Package>/files/D75E99C9A338D24A1F840F280B0877ED.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_cachedata/files/D967A959D8E39AF63D48D9EACAEC1F70.zip --oat-fd=331 --oat-location=/data/user/0/<Package>/files/D967A959D8E39AF63D48D9EACAEC1F70.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_xddd/p28/sp28.jar --oat-fd=149 --oat-location=/data/user/0/<Package>/app_xddd/p28/sp28.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_xddd/p3/sp3.jar --oat-fd=137 --oat-location=/data/user/0/<Package>/app_xddd/p3/sp3.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/data/<Package>/files/385E7FA9A763AF89E661BD99B4A389AC.jar --oat-fd=166 --oat-location=/data/user/0/<Package>/files/385E7FA9A763AF89E661BD99B4A389AC.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/data/<Package>/files/CCCC5B8911BBCB224E5317F7FB929A12.jar --oat-fd=169 --oat-location=/data/user/0/<Package>/files/CCCC5B8911BBCB224E5317F7FB929A12.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/.2403297477.apk --oat-fd=120 --oat-location=/data/user/0/<Package>/code_cache/.2403297477.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/.2969407120.apk --oat-fd=145 --oat-location=/data/user/0/<Package>/code_cache/.2969407120.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/.3050965755.apk --oat-fd=136 --oat-location=/data/user/0/<Package>/code_cache/.3050965755.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/.3492835548.apk --oat-fd=185 --oat-location=/data/user/0/<Package>/code_cache/.3492835548.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/.4013622486.apk --oat-fd=93 --oat-location=/data/user/0/<Package>/code_cache/.4013622486.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/13_2.jar --oat-fd=287 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/13_2.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/14_1.jar --oat-fd=287 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/14_1.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/16.jar --oat-fd=311 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/16.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/18_6.jar --oat-fd=311 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/18_6.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/19.jar --oat-fd=326 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/19.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/2.jar --oat-fd=299 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/2.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/21.jar --oat-fd=181 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/21.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/8483b7491b1f419647d94d8f5e3761a3.jar --oat-fd=332 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/8483b7491b1f419647d94d8f5e3761a3.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/oatCache/downUmeng/umengDB.jar --oat-fd=93 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/oatCache/downUmeng/umengDB.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/dg26064744.apk --oat-fd=319 --oat-location=/data/user/0/<Package>/files/dg26064744_o --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/p6623042.apk --oat-fd=92 --oat-location=/data/user/0/<Package>/files/p6623042_o --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tda/ZH503.jar --oat-fd=100 --oat-location=/data/user/0/<Package>/files/tda/ZH503.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tda/ZH503.jar --oat-fd=150 --oat-location=/data/user/0/<Package>/files/tda/ZH503.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=<Package Folder>/extfiles/CprPt.jar --oat-fd=158 --oat-location=<Package Folder>/extfiles/CprPt.dex --compiler-filter=speed
  • /system/bin/df
  • /system/bin/getprop
  • /system/lib/arm/houdini /data/user/0/<Package>/files/kms_02ext /data/user/0/<Package>/files/kms_02ext --ru89 0 /data/user/0/<Package>/files/debuggerd_real
  • /system/lib/arm/houdini <Package Folder>/files/kw_136602 <Package Folder>/files/kw_136602 3 267525
  • cat /proc/version
  • cat /sys/class/net/wlan0/address
  • getprop
  • getprop ro.board.platform
  • getprop ro.build.display.id
  • getprop ro.build.version.emui
  • getprop ro.build.version.opporom
  • getprop ro.miui.ui.version.name
  • getprop ro.product.cpu.abi
  • getprop ro.smartisan.version
  • getprop ro.vivo.os.version
  • getprop ro.yunos.build.version
  • logcat -d -v threadtime
  • ls /
  • ls /sys/class/thermal
  • sh -c <Package Folder>/files/kw_136602 3 267525 &
  • sh -c cat /proc/4636/maps
Uses the following algorithms to encrypt data:
  • AES-CBC-PKCS5Padding
  • AES-CBC-PKCS7Padding
  • AES-ECB-NoPadding
  • AES-ECB-PKCS5Padding
  • AES-ECB-PKCS7Padding
  • AES-GCM-NoPadding
  • DES
  • DES-CBC-PKCS5Padding
  • DES-ECB-PKCS5Padding
  • RSA-ECB-NoPadding
  • RSA-ECB-PKCS1Padding
  • RSA-None-PKCS1Padding
Uses the following algorithms to decrypt data:
  • AES
  • AES-CBC-NoPadding
  • AES-CBC-PKCS5Padding
  • AES-CBC-PKCS7Padding
  • AES-ECB-NoPadding
  • AES-ECB-PKCS5Padding
  • AES-ECB-PKCS7Padding
  • DES
  • DES-CBC-PKCS5Padding
  • DES-ECB-PKCS5Padding
  • RSA-ECB-PKCS1Padding
  • RSA-None-PKCS1Padding
Accesses the ITelephony private interface.
Gets information about location.
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Gets information about APN settings.
Gets information about installed apps.
Adds tasks to the system scheduler.
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android