Підтримка
Цілодобова підтримка | Правила звернення

Зателефонуйте

Глобальна підтримка:
+7 (495) 789-45-86

Поширені запитання |  Форум |  Бот самопідтримки Telegram

Ваші запити

  • Всі: -
  • Незакриті: -
  • Останій: -

Зателефонуйте

Глобальна підтримка:
+7 (495) 789-45-86

Зв'яжіться з нами Незакриті запити: 

Профіль

Профіль

Android.Click.1129

Добавлен в вирусную базу Dr.Web: 2020-12-25

Описание добавлено:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Click.345.origin
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(HTTP/1.1) api.map.b####.com:80
  • TCP(HTTP/1.1) amdc####.m.ta####.com:80
  • TCP(HTTP/1.1) 1####.27.70.235:80
  • TCP(HTTP/1.1) 58.2####.92.50:808
  • TCP(HTTP/1.1) 47.1####.185.46:80
  • TCP(HTTP/1.1) c.c####.com:80
  • TCP(HTTP/1.1) ask.c####.com.####.com:80
  • TCP(HTTP/1.1) u####.c####.com:80
  • TCP(HTTP/1.1) xiaox####.adse####.adan####.com:80
  • TCP(HTTP/1.1) filt####.a####.top:80
  • TCP(HTTP/1.1) d####.cn:80
  • TCP(HTTP/1.1) www-new####.b0.a####.com:80
  • TCP(HTTP/1.1) 10####.admast####.com:99
  • TCP(HTTP/1.1) api.z####.com:80
  • TCP(HTTP/1.1) cou####.5####.com:80
  • TCP(HTTP/1.1) www.pc####.com.####.cn:80
  • TCP(HTTP/1.1) u####.dspliul####.com:99
  • TCP(HTTP/1.1) cc.7####.cn:80
  • TCP(HTTP/1.1) c####.baidust####.com.####.com:80
  • TCP(HTTP/1.1) tc.c####.com:80
  • TCP(HTTP/1.1) a####.d####.com:80
  • TCP(HTTP/1.1) rs.c####.com:80
  • TCP(HTTP/1.1) 47.1####.211.73:80
  • TCP(HTTP/1.1) c####.zhit####.com:807
  • TCP(HTTP/1.1) 58.2####.198.157:999
  • TCP(HTTP/1.1) f####.c####.com.####.com:80
  • TCP(HTTP/1.1) c####.zhit####.com:99
  • TCP(HTTP/1.1) cn.f####.top:8080
  • TCP(HTTP/1.1) 4####.98.31.107:901
  • TCP(HTTP/1.1) bbs.c####.com.####.com:80
  • TCP(HTTP/1.1) c####.jumen####.com:80
  • TCP(HTTP/1.1) g####.c####.com:80
  • TCP(HTTP/1.1) 1####.131.79.3:8090
  • TCP(HTTP/1.1) and####.b####.qq.com:80
  • TCP(HTTP/1.1) s####.jom####.com:80
  • TCP(HTTP/1.1) api.a####.ads####.cn:80
  • TCP(HTTP/1.1) to.d####.cn:80
  • TCP(HTTP/1.1) ec####.b####.com:80
  • TCP(HTTP/1.1) ches####.b0.a####.com:80
  • TCP(HTTP/1.1) z.c####.com:80
  • TCP(HTTP/1.1) c####.c####.cn:80
  • TCP(HTTP/1.1) www.c####.com.####.com:80
  • TCP(HTTP/1.1) 1####.zhit####.com:808
  • TCP(HTTP/1.1) u####.a####.top:80
  • TCP(HTTP/1.1) t.hy####.com.cn:80
  • TCP(HTTP/1.1) gd.a.s####.com:80
  • TCP(HTTP/1.1) dup.baidust####.com:80
  • TCP(HTTP/1.1) auto-ne####.b0.a####.com:80
  • TCP(HTTP/1.1) 14.17.1####.182:80
  • TCP(HTTP/1.1) api.yunco####.com:80
  • TCP(HTTP/1.1) res####.a####.top:80
  • TCP(HTTP/1.1) i.c####.com.####.com:80
  • TCP(HTTP/1.1) res####.a####.com:80
  • TCP(HTTP/1.1) app.a####.top:80
  • TCP(HTTP/1.1) adcha####.bz.m####.com:80
  • TCP(HTTP/1.1) m-news1####.b0.a####.com:80
  • TCP(HTTP/1.1) ucst####.c####.com.####.com:80
  • TCP(HTTP/1.1) l####.tbs.qq.com:80
  • TCP(HTTP/1.1) t####.a####.top:80
  • TCP(HTTP/1.1) ad.api.clou####.xyz:80
  • TCP(HTTP/1.1) w####.c####.com:80
  • TCP(HTTP/1.1) pv.new####.com:80
  • TCP(HTTP/1.1) 1####.zhit####.com:99
  • TCP(TLS/1.0) i####.d####.com:443
  • TCP(TLS/1.0) lhyysdk####.oss-cn-####.aliy####.com:443
  • TCP(TLS/1.0) j1.5####.com.####.com:443
  • TCP(TLS/1.0) ip.ws.1####.net:443
  • TCP(TLS/1.0) jump####.58.com:443
  • TCP(TLS/1.0) h####.m####.com:443
  • TCP(TLS/1.0) res.wx.qq.####.com:443
  • TCP(TLS/1.0) dn-gro####.q####.me:443
  • TCP(TLS/1.0) c.c####.com:443
  • TCP(TLS/1.0) ches####.b0.a####.com:443
  • TCP(TLS/1.0) nic####.l.qq.com:443
  • TCP(TLS/1.0) api.growi####.com:443
  • TCP(TLS/1.0) c####.d####.v2.####.com:443
  • TCP(TLS/1.0) api.g####.vip:443
  • TCP(TLS/1.0) trac####.58.com:443
  • TCP(TLS/1.0) t.hy####.com.cn:443
  • TCP(TLS/1.0) dxp.b####.com:443
  • TCP(TLS/1.0) n####.qq.com.####.net:443
  • TCP(TLS/1.0) 2####.107.1.100:443
  • TCP(TLS/1.0) 1####.217.168.202:443
  • TCP(TLS/1.0) s1.h####.com:443
  • TCP(TLS/1.0) res####.a####.com:443
  • TCP(TLS/1.0) commu####.xw.qq.com:443
  • TCP(TLS/1.0) z.c####.com:443
  • TCP(TLS/1.0) css.m####.com:443
  • TCP(TLS/1.0) qy-swa####.qi####.com:443
  • TCP(TLS/1.0) m-news1####.b0.a####.com:443
  • TCP(TLS/1.0) s####.x####.com.cn:443
  • TCP(TLS/1.0) lbs.net####.im:443
  • TCP(TLS/1.0) u.api.m####.com:443
  • TCP(TLS/1.0) sy.cl####.com:443
  • TCP(TLS/1.0) p####.api.m####.com:443
  • TCP(TLS/1.0) www.m####.com:443
  • TCP(TLS/1.0) g.cn.miao####.com:443
  • TCP(TLS/1.0) api####.58.com.cn:443
  • TCP(TLS/1.0) ap1.qi####.com:443
  • TCP(TLS/1.0) pos.b####.com:443
  • TCP(TLS/1.0) st####.h####.com:443
  • TCP(TLS/1.0) gm.mm####.com:443
  • TCP(TLS/1.0) ne####.x####.com.cn:443
  • TCP(TLS/1.0) wtc.d####.com:443
  • TCP(TLS/1.0) sw4.d####.com:443
  • TCP(TLS/1.0) w.m####.com:443
  • TCP(TLS/1.0) x5.g####.tv:16006
  • TCP(TLS/1.0) a####.d####.com:443
  • TCP(TLS/1.0) dc52####.58.com.####.com:443
  • TCP(TLS/1.0) m####.g####.com.####.com:443
  • TCP(TLS/1.0) al####.u####.com:443
  • TCP(TLS/1.0) hm.b####.com:443
  • TCP(TLS/1.0) tm-####.oss-cn-####.aliy####.com:443
  • TCP(TLS/1.2) 1####.217.19.195:443
  • TCP(TLS/1.2) 1####.217.17.74:443
  • TCP 8.1####.244.92:9054
  • TCP gw.adv####.com:8080
  • TCP zb-cent####.m.ta####.com:80
  • TCP l####.net####.im:8080
  • TCP zb-cent####.m.ta####.com:443
DNS requests:
  • 1####.zhit####.com
  • 10####.admast####.com
  • 602.a####.top
  • 602.a####.top.####.8
  • a####.d####.com
  • a####.man.aliy####.com
  • a####.new####.com
  • a####.new####.com
  • a.ch####.com
  • ad.api.clou####.xyz
  • adcha####.bz.m####.com
  • al####.new####.com
  • al####.new####.com
  • al####.new####.com
  • al####.new####.com
  • amdc####.m.ta####.com
  • and####.b####.qq.com
  • ap1.qi####.com
  • api####.58.com.cn
  • api.a####.ads####.cn
  • api.g####.vip
  • api.growi####.com
  • api.map.b####.com
  • api.yunco####.com
  • api.z####.com
  • app.a####.top
  • ask.c####.com
  • ass####.xca####.com
  • at.umt####.com
  • b####.s####.b####.com
  • bbs.c####.com
  • c####.baidust####.com
  • c####.c####.cn
  • c####.d####.v2.####.com
  • c####.jumen####.com
  • c####.mm####.com
  • c####.zhit####.com
  • c.5####.com.cn
  • c.c####.com
  • cc.7####.cn
  • cn.f####.top
  • commu####.xw.qq.com
  • cou####.5####.com
  • css.m####.com
  • d####.58.com
  • d####.cn
  • dn-gro####.q####.me
  • dup.baidust####.com
  • dwf.linx####.com
  • dxp.b####.com
  • ec####.b####.com
  • f####.c####.com
  • filt####.a####.top
  • g####.c####.com
  • g.cn.miao####.com
  • gw.adv####.com
  • h####.b####.com
  • h####.m####.com
  • hm.b####.com
  • i####.cheshi####.com
  • i####.d####.com
  • i####.x####.com.cn
  • i####.xca####.com
  • i.c####.com
  • id.d####.com
  • img.5####.com.cn
  • ip.ws.1####.net
  • ip.zhit####.com
  • j1.5####.com.cn
  • js.cheshi####.com
  • jump####.58.com
  • l####.58.com
  • l####.net####.im
  • l####.tbs.qq.com
  • lbs.net####.im
  • lhyysdk####.oss-cn-####.aliy####.com
  • m####.cheshi####.com
  • m####.g####.com
  • m####.go####.com
  • m.5####.com
  • m.new####.com
  • ne####.x####.com.cn
  • nic####.l.qq.com
  • p####.5####.com.cn
  • p####.5####.com.cn
  • p####.api.m####.com
  • plb####.u####.com
  • pos.b####.com
  • pv.new####.com
  • pv.s####.com
  • qdl.d####.com
  • qy-swa####.qi####.com
  • r####.wx.qq.com
  • res####.a####.com
  • res####.a####.top
  • rs.c####.com
  • s####.e.qq.com
  • s####.x####.com.cn
  • s1.h####.com
  • s11.c####.com
  • s20.c####.com
  • s22.c####.com
  • s23.c####.com
  • s3.h####.com
  • s4.c####.com
  • s5.c####.com
  • s9.c####.com
  • s95.c####.com
  • s96.c####.com
  • st####.h####.com
  • sw4.d####.com
  • sy.cl####.com
  • t####.a####.top
  • t.cr-nie####.com
  • t2.5####.com.cn
  • t4.5####.com.cn
  • tc.c####.com
  • tm-####.oss-cn-####.aliy####.com
  • to.d####.cn
  • trac####.58.com
  • u####.a####.top
  • u####.c####.com
  • u####.dspliul####.com
  • u####.u####.com
  • u.api.m####.com
  • ucst####.c####.com
  • umen####.m.ta####.com
  • umengj####.m.ta####.com
  • v1.c####.com
  • w####.58.com
  • w####.c####.com
  • w####.qq.com
  • w.m####.com
  • we####.58.com
  • webl####.ches####.com
  • wtc.d####.com
  • www.c####.com
  • www.ch####.com
  • www.m####.com
  • www.new####.com
  • www.pc####.com.cn
  • x5.g####.tv
  • xiaox####.adse####.adan####.com
  • z1.c####.com
  • z11.c####.com
  • z12.c####.com
  • z2.c####.com
  • z3.c####.com
  • z9.c####.com
HTTP GET requests:
  • 1####.zhit####.com:808/1020p/index.html
  • 1####.zhit####.com:808/1020p/yrc_001pc.js
  • 1####.zhit####.com:99/wap/index.html?10####
  • 10####.admast####.com:99/1020yy/index.html
  • 10####.admast####.com:99/bu/lian36.html
  • 10####.admast####.com:99/bu/y360.html?5####
  • 10####.admast####.com:99/bu/y480.html?5####
  • 58.2####.92.50:808/gh.html
  • 58.2####.92.50:808/ydc.html
  • 58.2####.92.50:808/ydm.html
  • a####.d####.com/rewrite?fromid=####
  • adcha####.bz.m####.com/direct?cc=####
  • api.map.b####.com/api?v=####&ak=####
  • api.z####.com/v1/advert/config?platform=####&versionCode=####&timestamp=...
  • app.a####.top/anshuaControl.json
  • app.a####.top/api.json
  • app.a####.top/pingpaiAD.json
  • ask.c####.com.####.com/askques/expert/getAll
  • ask.c####.com.####.com/askques/questions/show/655955
  • ask.c####.com.####.com/askques/questions/show/687977
  • ask.c####.com.####.com/askques/questions/show/738132
  • ask.c####.com.####.com/askques/questions/show/761976
  • ask.c####.com.####.com/askques/questions/show/768888
  • ask.c####.com.####.com/askques/questions/show/771684
  • ask.c####.com.####.com/css/layout1.css
  • ask.c####.com.####.com/js/cookie.js?2009101####
  • ask.c####.com.####.com/js/new_sw.js?t=####
  • ask.c####.com.####.com/style/ask.css?v=####
  • ask.c####.com.####.com/style/frame-inner.css
  • ask.c####.com.####.com/style/iask.css
  • ask.c####.com.####.com/style/images/ask-cms-but-88x25.gif
  • ask.c####.com.####.com/style/images/ask_return.jpg
  • ask.c####.com.####.com/style/images/ask_tiwen.jpg
  • ask.c####.com.####.com/style/word.css
  • ask.c####.com.####.com/styles/images/bg.gif
  • ask.c####.com.####.com/styles/menu_style.css?v=####
  • auto-ne####.b0.a####.com/
  • auto-ne####.b0.a####.com/admin_seller/js/laydate.js
  • auto-ne####.b0.a####.com/admin_seller/js/theme/default/laydate.css?v=####
  • auto-ne####.b0.a####.com/auto/201812/js/brand.js
  • auto-ne####.b0.a####.com/auto/202002/css20201223/index_red.css?v=####
  • auto-ne####.b0.a####.com/auto/202002/image/title_live.png
  • auto-ne####.b0.a####.com/js/CommonUtil.mini.js
  • auto-ne####.b0.a####.com/js/CommonUtil.mini.js?v=####
  • auto-ne####.b0.a####.com/js/city_substation_data.js
  • auto-ne####.b0.a####.com/js/ina_ad_init.js
  • auto-ne####.b0.a####.com/js/index_sign_data_cache.js
  • auto-ne####.b0.a####.com/js/publicAppWebview.js
  • auto-ne####.b0.a####.com/top/201812/image/logo.png
  • auto-ne####.b0.a####.com/top/202002/css/index_red.css
  • bbs.c####.com.####.com/banner3.html?d=####
  • bbs.c####.com.####.com/css/other.css
  • bbs.c####.com.####.com/d/post/18111950.html
  • bbs.c####.com.####.com/images/user_sig_split.gif
  • bbs.c####.com.####.com/jscripts/doc.js
  • bbs.c####.com.####.com/style/images/icon.gif
  • bbs.c####.com.####.com/style/images/search.gif
  • bbs.c####.com.####.com/style/images/use_tool.gif
  • bbs.c####.com.####.com/style/newPost.css?v=####
  • bbs.c####.com.####.com/style/style_board.css
  • bbs.c####.com.####.com/style/style_post3.css
  • c####.baidust####.com.####.com/cpro/ui/c.js
  • c####.c####.cn/stat.php?site_id=####
  • c####.jumen####.com/go_pc_index.php
  • c####.jumen####.com/init.php
  • c####.jumen####.com/init_wap.php
  • c####.jumen####.com/init_wap_product.php?id=####
  • c####.zhit####.com:807/528/cheshi.html?p####
  • c####.zhit####.com:807/528/cheshi.html?p250?1####
  • c####.zhit####.com:807/528/cheshi.html?p250?5####
  • c####.zhit####.com:99/newcar/index.html
  • c####.zhit####.com:99/pctja.html
  • c####.zhit####.com:99/tat/index.html
  • c####.zhit####.com:99/wap/index.html
  • c####.zhit####.com:99/wts/index.html?1####
  • c####.zhit####.com:99/wtsnews/index.html
  • c.c####.com/stat.php?id=####
  • c.c####.com/stat.php?id=####&web_id=####
  • c.c####.com/z_stat.php?id=####
  • c.c####.com/z_stat.php?id=####&web_id=####
  • cc.7####.cn/PClick.aspx?AID=####&KEY=####
  • ches####.b0.a####.com/3g/180419/image/back.png
  • ches####.b0.a####.com/3g/180419/image/home.png
  • ches####.b0.a####.com/3g/image/lazyload.jpg
  • ches####.b0.a####.com/3g/js/bit_spell_province_city_data.js
  • ches####.b0.a####.com/3g/version/180327/image/fhdb.png
  • ches####.b0.a####.com/3g/version/180327/image/logo.png
  • ches####.b0.a####.com/3g/version/180327/js/lazyload.js
  • ches####.b0.a####.com/4610/
  • ches####.b0.a####.com/4937/
  • ches####.b0.a####.com/app/js/iscroll.js
  • ches####.b0.a####.com/auto/201711/image/loading.png
  • ches####.b0.a####.com/auto/201711/image/loading_614_307.png
  • ches####.b0.a####.com/auto/201711/image/loading_70_70.png
  • ches####.b0.a####.com/auto/202002/css20200810/index_red_noflow.css
  • ches####.b0.a####.com/auto/202002/image/new.png
  • ches####.b0.a####.com/auto/202002/image/toutiao.png
  • ches####.b0.a####.com/auto/202002/js/public_20200506.js
  • ches####.b0.a####.com/bseries/5aea9c3246199_3.jpg
  • ches####.b0.a####.com/bseries/5b56a2d1ab652_3.jpg
  • ches####.b0.a####.com/bseries/5caafe34358e1_3.jpg
  • ches####.b0.a####.com/bseries/5d12d3b01e1ed_3.jpg
  • ches####.b0.a####.com/bseries/5d4299c7991b0_3.jpg
  • ches####.b0.a####.com/bseries/5d5281c05b50a_3.jpg
  • ches####.b0.a####.com/bseries/5e674e3a35f6b_3.jpg
  • ches####.b0.a####.com/bseries/5fc26e097f91b_3.jpg
  • ches####.b0.a####.com/car/mobile/css/index.css
  • ches####.b0.a####.com/car/mobile/image/hot.png
  • ches####.b0.a####.com/global/ad_icon.png
  • ches####.b0.a####.com/image/ad_ina/adm_ina_15947828883028538454.jpg!2600
  • ches####.b0.a####.com/image/ad_ina/adm_ina_16011875748893168127.jpg!2600
  • ches####.b0.a####.com/image/ad_ina/adm_ina_16061022451750541803.jpg!2600
  • ches####.b0.a####.com/image/ad_ina/adm_ina_16061022515290751717.jpg!2600
  • ches####.b0.a####.com/image/ad_ina/adm_ina_16068074630965591588.jpg!2600
  • ches####.b0.a####.com/image/ad_ina/adm_ina_16068074667577299813.jpg!2600
  • ches####.b0.a####.com/image/ad_ina/adm_ina_16074119996953023968.jpg!2600
  • ches####.b0.a####.com/image/ad_ina/adm_ina_16074122595339148574.jpg!2600
  • ches####.b0.a####.com/image/ad_ina/adm_ina_16085306211516987924.jpg!2600
  • ches####.b0.a####.com/image/ad_ina/adm_ina_16085309773043404994.jpg!2600
  • ches####.b0.a####.com/image/admin/touxiang.jpg
  • ches####.b0.a####.com/js/cnzz_statistics.js
  • ches####.b0.a####.com/js/index_bseries_data_cache.js
  • ches####.b0.a####.com/js/iwt/iwt1.0.1.js
  • ches####.b0.a####.com/js/jquery-1.7.2.min.js
  • ches####.b0.a####.com/js/widgets/adapter-mini.js?20####
  • ches####.b0.a####.com/top/202002/css/index_red_noflow.css
  • ches####.b0.a####.com/top/image/ewm_top.png
  • ches####.b0.a####.com/userPhoto/user_15145333888266.jpg
  • ches####.b0.a####.com/userPhoto/user_15148730635504.jpg
  • cou####.5####.com/click.aspx?id=####&logo=####
  • cou####.5####.com/sa.htm?id=####&refe=####&location=####&color=####&reso...
  • d####.cn/fenpei.html?1####
  • d####.cn/fenpei.html?2####
  • dup.baidust####.com/js/os.js
  • ec####.b####.com/se.jpg?type=####&ver=####&rdm=####
  • f####.c####.com.####.com/ast/js/jquery_172.js
  • f####.c####.com.####.com/ast/loginface/cookielogin10.js
  • f####.c####.com.####.com/ast/loginface/cookielogin10.js?d=####
  • f####.c####.com.####.com/ast/loginface/style5.css?d=####
  • f####.c####.com.####.com/ast/loginface/style5.css?v=####
  • f####.c####.com.####.com/js/iwt1.0.1.js
  • filt####.a####.top/filter_control_602.json
  • g####.c####.com/images/llk_laser.png
  • gd.a.s####.com/cityjson?ie=####
  • i.c####.com.####.com/avatar/1625/1625757.png
  • i.c####.com.####.com/avatar/2149/2149078.png
  • i.c####.com.####.com/avatar/2716/2716536.png
  • i.c####.com.####.com/avatar/2750/2750810.png
  • i.c####.com.####.com/avatar/2807/2807075.png
  • i.c####.com.####.com/avatar/37261/37261674.png?124963####
  • i.c####.com.####.com/avatar/no.png
  • m-news1####.b0.a####.com/cooperate/online/indexall.html?channel=####
  • m-news1####.b0.a####.com/cooperate/online/producta.html
  • pv.new####.com/js/spv.js
  • res####.a####.top/LHYY.png
  • res####.a####.top/sdk13_2.png
  • res####.a####.top/sdk14_1.png
  • res####.a####.top/sdk16.png
  • res####.a####.top/sdk18_6.png
  • res####.a####.top/sdk19.png
  • res####.a####.top/sdk2.png
  • res####.a####.top/sdk21.png
  • rs.c####.com/d/items/download/882
  • rs.c####.com/images/ad_new.jpg
  • rs.c####.com/images/logo_1.gif
  • rs.c####.com/images/media.jpg
  • rs.c####.com/images/qq.gif
  • rs.c####.com/images/real.jpg
  • rs.c####.com/images/sina.gif
  • rs.c####.com/images/web.gif
  • rs.c####.com/js/ajax.js?d=####
  • rs.c####.com/js/common.js?d=####
  • rs.c####.com/js/jquery-1.3.2.js?d=####
  • rs.c####.com/style/images/more_city1.png
  • rs.c####.com/style/images/search_btn.png
  • rs.c####.com/style/style4.css?d=####
  • s####.jom####.com/static/api/js/share.js?v=89860593.js?cdnversion=####
  • t####.a####.top/anshua.json
  • t####.a####.top/req.json
  • t.hy####.com.cn/dar?_t=####&type=####&v=####&_z=####&_inst=####&hat_cid=...
  • tc.c####.com/adscache/caches/104.js?n=####
  • tc.c####.com/adscache/caches/105.js?n=####
  • tc.c####.com/adscache/caches/106.js?n=####
  • tc.c####.com/adscache/caches/108.js?n=####
  • tc.c####.com/adscache/caches/109.js?n=####
  • tc.c####.com/adscache/caches/160.js?n=####
  • tc.c####.com/adscache/caches/163.js?n=####
  • tc.c####.com/adscache/caches/171.js?n=####
  • tc.c####.com/adscache/caches/183.js?n=####
  • tc.c####.com/adscache/caches/187.js?n=####
  • tc.c####.com/adscache/caches/196.js?n=####
  • tc.c####.com/adscache/caches/205.js?n=####
  • tc.c####.com/adscache/caches/215.js?n=####
  • tc.c####.com/adscache/caches/216.js?n=####
  • tc.c####.com/adscache/caches/227.js?n=####
  • tc.c####.com/adscache/caches/238.js?n=####
  • tc.c####.com/adscache/caches/239.js?n=####
  • tc.c####.com/adscache/caches/240.js?n=####
  • tc.c####.com/adscache/caches/245.js?n=####
  • tc.c####.com/adscache/caches/246.js?n=####
  • tc.c####.com/adscache/caches/25.js?n=####
  • tc.c####.com/adscache/caches/27.js?n=####
  • tc.c####.com/adscache/caches/280.js?n=####
  • tc.c####.com/adscache/caches/296.js?n=####
  • tc.c####.com/adscache/caches/308.js?n=####
  • tc.c####.com/adscache/caches/344.js?n=####
  • tc.c####.com/adscache/caches/391.js?n=####
  • tc.c####.com/adscache/caches/4.js?n=####
  • tc.c####.com/adscache/caches/436.js?n=####
  • tc.c####.com/adscache/caches/482.js?n=####
  • tc.c####.com/adscache/caches/492.js?n=####
  • tc.c####.com/adscache/caches/509.js?n=####
  • tc.c####.com/adscache/caches/510.js?n=####
  • tc.c####.com/adscache/caches/588.js?n=####
  • tc.c####.com/adscache/caches/589.js?n=####
  • tc.c####.com/adscache/caches/590.js?n=####
  • tc.c####.com/adscache/caches/591.js?n=####
  • tc.c####.com/adscache/caches/657.js?n=####
  • tc.c####.com/adscache/caches/72.js?n=####
  • tc.c####.com/adx.js
  • tc.c####.com/iframeads/adsdispatch.php?pid=####
  • tc.c####.com/js/tcjs.php
  • tc.c####.com/js/tcjs.php?d=####
  • to.d####.cn/03YjLSCb67
  • u####.a####.top/js1002.html
  • u####.c####.com/js/auth.js
  • u####.c####.com/js/auth.js?d=####
  • u####.dspliul####.com:99/ip/index.html
  • ucst####.c####.com.####.com/cmbbs/main.js
  • ucst####.c####.com.####.com/globalMsg.js
  • w####.c####.com/abc/xyz/point/index.php
  • www-new####.b0.a####.com/
  • www-new####.b0.a####.com/index1.html
  • www.c####.com.####.com/baike/d/921.html
  • www.c####.com.####.com/baike/js/global_js.js
  • www.c####.com.####.com/baike/js/jquery.cookie.js
  • www.c####.com.####.com/baike/styles/index9.css
  • www.pc####.com.####.cn/autox/6a976e56b61b2febd215f6cbe5186f5f.htm
  • z.c####.com/stat.htm?id=####&r=####&lg=####&ntime=####&cnzz_eid=####&sho...
HTTP POST requests:
  • ad.api.clou####.xyz/ads
  • amdc####.m.ta####.com/amdc/mobileDispatch?appkey=####&deviceId=####&plat...
  • and####.b####.qq.com/rqd/async?aid=####
  • api.a####.ads####.cn/thirdparty/sapi/chn
  • api.yunco####.com/service/rest
  • api.z####.com/app/version/android-upgrade
  • api.z####.com/pc/news/get-article-category
  • api.z####.com/tab-conf/app-column-conf
  • api.z####.com/tab-conf/app-sys-conf
  • api.z####.com/tips/index
  • api.z####.com/v1/advert/list
  • cn.f####.top:8080/qsad/api/c/c
  • l####.tbs.qq.com/ajax?c=####&k=####
  • res####.a####.com/v3/weather/weatherInfo
  • xiaox####.adse####.adan####.com/server/ad/v1
File system changes:
Creates the following files:
  • /data/data/####/.imprint
  • /data/data/####/012b74133fdf49a5_0
  • /data/data/####/012b74133fdf49a5_1
  • /data/data/####/014d9be8b502af39_0
  • /data/data/####/016469da084a4397_0
  • /data/data/####/01a9c35074de0933_0
  • /data/data/####/0247b3f9820a634b_0
  • /data/data/####/02c38fb567116a57_0
  • /data/data/####/02c38fb567116a57_1
  • /data/data/####/02d21e0d1dc3a31e_0
  • /data/data/####/0383b0eb3616915d_0
  • /data/data/####/042c79232c7a1d76_0 (deleted)
  • /data/data/####/045e11be193339bd_0
  • /data/data/####/052da7393728e70c_0
  • /data/data/####/052da7393728e70c_1
  • /data/data/####/05386d0addb350f1_0
  • /data/data/####/05386d0addb350f1_1
  • /data/data/####/0574760c185fb809_0
  • /data/data/####/0574760c185fb809_1
  • /data/data/####/059ce224b100dcdb_0
  • /data/data/####/05b7cba98c4459ec_0
  • /data/data/####/0634ddfd759f6044_0
  • /data/data/####/0634ddfd759f6044_1
  • /data/data/####/06806d1ab42c64e9_0
  • /data/data/####/07f73fea9095b957_0
  • /data/data/####/07f73fea9095b957_0 (deleted)
  • /data/data/####/07f73fea9095b957_1
  • /data/data/####/0852fd322eaf8324_0
  • /data/data/####/0855371fee0275aa_0
  • /data/data/####/0857f4e7076c158d_0 (deleted)
  • /data/data/####/0882e181e38fb4cf_0
  • /data/data/####/0904dd88a702fb1c_0
  • /data/data/####/0904dd88a702fb1c_1
  • /data/data/####/094665b14c80f681_0
  • /data/data/####/09bcfedb0ddfe868_0
  • /data/data/####/09d7a6d210e68980_0
  • /data/data/####/0a2c50a059146742_0
  • /data/data/####/0a9a08a38fcef2fc_0
  • /data/data/####/0a9a08a38fcef2fc_1
  • /data/data/####/0bb8920827c1385e_0
  • /data/data/####/0bb8920827c1385e_1
  • /data/data/####/0bec43b8a5f92a19_0
  • /data/data/####/0c181f216e5025d2_0
  • /data/data/####/0c7bafd49e831e7d_0
  • /data/data/####/0cf6f2234bc02ea9_0
  • /data/data/####/0d8f251c673e3914_0
  • /data/data/####/0dd31706a8bb694e_0
  • /data/data/####/0e258c9e22c171d0_0
  • /data/data/####/0f1d9d8bd3ad86e8_0
  • /data/data/####/0f1d9d8bd3ad86e8_1
  • /data/data/####/0f2779b12b857e2c_0
  • /data/data/####/0f2779b12b857e2c_1
  • /data/data/####/0f79282d05978d57_0
  • /data/data/####/0fa8a130a9ea48a3_0
  • /data/data/####/1002
  • /data/data/####/1004
  • /data/data/####/1008508ebcb1d93c_0
  • /data/data/####/11042dd7d97db148_0
  • /data/data/####/118dead3e139c249_0
  • /data/data/####/118dead3e139c249_1
  • /data/data/####/1212e85596f7f0eb_0 (deleted)
  • /data/data/####/12cf1d6e9eaad25b_0
  • /data/data/####/12cf1d6e9eaad25b_1
  • /data/data/####/12e2619ea9b2510c_0
  • /data/data/####/131c5621f0a55b37_0
  • /data/data/####/13_2.dex
  • /data/data/####/13_2.dex.flock (deleted)
  • /data/data/####/13_2.jar
  • /data/data/####/13f4e87aa1f12ff29292651f2e6dc343.db
  • /data/data/####/141487ea8cb66a86_0
  • /data/data/####/14379ef3f69dc9de_0
  • /data/data/####/143aaa97c4c01858_0
  • /data/data/####/144b63a271cec8e4_0
  • /data/data/####/144b63a271cec8e4_1
  • /data/data/####/14_1.dex
  • /data/data/####/14_1.dex.flock (deleted)
  • /data/data/####/14_1.jar
  • /data/data/####/14d22df71203a566_0 (deleted)
  • /data/data/####/14d47fe79dd55332_0
  • /data/data/####/14fc72dac5d5b53f_0
  • /data/data/####/1561daadd778e5f8_0
  • /data/data/####/15e4bbf047938f79_0
  • /data/data/####/15e4bbf047938f79_1
  • /data/data/####/16.dex
  • /data/data/####/16.dex.flock (deleted)
  • /data/data/####/16.jar
  • /data/data/####/162f1c67197965e8_0
  • /data/data/####/16cafb3eac3a9377_0
  • /data/data/####/16e5aa769a286560_0
  • /data/data/####/1714af51f380b9f7_0
  • /data/data/####/1751cc065bbb601b_0
  • /data/data/####/17ea0929b9ab949e_0
  • /data/data/####/18146731218568.0
  • /data/data/####/182ec8dfa7f20bc9_0
  • /data/data/####/186ec5a00d432bf7_0 (deleted)
  • /data/data/####/18_6.dex
  • /data/data/####/18_6.dex.flock (deleted)
  • /data/data/####/18_6.jar
  • /data/data/####/18a8ef79807e30e9_0
  • /data/data/####/18a8ef79807e30e9_1
  • /data/data/####/18c6422eca9ec5ef_0
  • /data/data/####/19.dex
  • /data/data/####/19.dex.flock (deleted)
  • /data/data/####/19.jar
  • /data/data/####/196b650fdebb458a_0
  • /data/data/####/19a45be68494c685_0
  • /data/data/####/19df352927b2f166_0
  • /data/data/####/19df352927b2f166_1
  • /data/data/####/1a27a39068b5fb73_0
  • /data/data/####/1a70bab5e1db459e_0
  • /data/data/####/1afe2ef43958f008_0
  • /data/data/####/1b1cdaf450ca016d_0
  • /data/data/####/1b25a197628dfa1f_0
  • /data/data/####/1b25a197628dfa1f_1
  • /data/data/####/1b445e0418e68fb1_0
  • /data/data/####/1b4b26017e5e01eb_0
  • /data/data/####/1b4b26017e5e01eb_1
  • /data/data/####/1bbf98ffbf670261_0
  • /data/data/####/1bc46b67c32fa9f1_0
  • /data/data/####/1c14adc66f100237_0
  • /data/data/####/1d77c8a52d225529_0
  • /data/data/####/1e71fc79ef3de359_0
  • /data/data/####/1ea6ac3c73966810_0
  • /data/data/####/1edb02c30d0776cf_0
  • /data/data/####/1eed30ef6fd02789_0
  • /data/data/####/1efe5dcf42ac5511_0
  • /data/data/####/1efe5dcf42ac5511_1
  • /data/data/####/1f5356114d46fc83_0
  • /data/data/####/1f66753450a93634_0
  • /data/data/####/2.dex
  • /data/data/####/2.dex.flock (deleted)
  • /data/data/####/2.jar
  • /data/data/####/20ac091c84943d1e_0
  • /data/data/####/20d09c4509655c75_0
  • /data/data/####/20da8dc53d2687ca_0
  • /data/data/####/21.dex
  • /data/data/####/21.dex.flock (deleted)
  • /data/data/####/21.jar
  • /data/data/####/213c237408fe5a6a_0
  • /data/data/####/218ec1915d9c74fe_0
  • /data/data/####/22f20ecbf7d63e59_0
  • /data/data/####/22fd9c191b4aec96_0
  • /data/data/####/2354bed44e242bff_0
  • /data/data/####/23a9d409f28c06f2_0
  • /data/data/####/23c9dfa6d14d4869_0
  • /data/data/####/23c9dfa6d14d4869_1
  • /data/data/####/23d969b740c57643_0
  • /data/data/####/24733fadba49d4d5_0
  • /data/data/####/24733fadba49d4d5_1
  • /data/data/####/24de09954321d9a6_0
  • /data/data/####/2512f4e57cedcc27_0
  • /data/data/####/2512f4e57cedcc27_1
  • /data/data/####/25ee3bdd4623aa0a_0
  • /data/data/####/26a41e3e920af333_0
  • /data/data/####/26aa429b74bed05e_0 (deleted)
  • /data/data/####/26bd069f5109baad_0
  • /data/data/####/2751c3114481a153_0
  • /data/data/####/27879498ef9c9689_0
  • /data/data/####/27dac8705e581c47_0
  • /data/data/####/27dac8705e581c47_1
  • /data/data/####/27f21573c1da928f_0 (deleted)
  • /data/data/####/280edd942332dde2_0
  • /data/data/####/280edd942332dde2_1
  • /data/data/####/289c742cb05b91e9_0
  • /data/data/####/289c742cb05b91e9_1
  • /data/data/####/2928b6ac6f142ee2_0
  • /data/data/####/29334cc0e208994c_0
  • /data/data/####/2948cb8da2553809_0
  • /data/data/####/2963fb5ff08d56e3_0
  • /data/data/####/2a3ca1223d6af331_0
  • /data/data/####/2a9664c14945e2ec_0
  • /data/data/####/2aa72a439941f9b4_0
  • /data/data/####/2b4fe861107d3979_0
  • /data/data/####/2b57b6e3acdbc8e7_0 (deleted)
  • /data/data/####/2bcb377be00cfedd_0
  • /data/data/####/2bd5c934d1399df0_0
  • /data/data/####/2bf42c2c1fa2cc97_0
  • /data/data/####/2c009e98f573c81e_0
  • /data/data/####/2c009e98f573c81e_1
  • /data/data/####/2c67c851ad41bec2_0
  • /data/data/####/2d3a8cb34d63b5a7_0
  • /data/data/####/2d3a8cb34d63b5a7_1
  • /data/data/####/2d7f4ca6cb5ae834_0
  • /data/data/####/2d81e3d580a586aa_0 (deleted)
  • /data/data/####/2da27b22ee32400b_0
  • /data/data/####/2e0dd1b88e948719_0
  • /data/data/####/2e424e1c5011ca9f_0 (deleted)
  • /data/data/####/2f5619080a99385d_0 (deleted)
  • /data/data/####/2fac496ea105423d_0
  • /data/data/####/2fbe92069596173c_0
  • /data/data/####/2fc33fe21cdd6ca5_0
  • /data/data/####/30ea36fca3413c4a_0
  • /data/data/####/3111cd0b45b82efe_0
  • /data/data/####/3159da40b80bc5b5_0
  • /data/data/####/31a3f6c3f0152fd5_0
  • /data/data/####/31a3f6c3f0152fd5_1
  • /data/data/####/3236707ab33bbec7_0
  • /data/data/####/3236707ab33bbec7_1
  • /data/data/####/32e715e0674f2295_0
  • /data/data/####/336b8a40c156a00e_0
  • /data/data/####/33c44b1783ea9023_0 (deleted)
  • /data/data/####/34124ad4597cdcba_0
  • /data/data/####/3503bf0ecfe0adb8_0
  • /data/data/####/3522186f1233414cadaef8b909e0dd84
  • /data/data/####/36179d11703439f4_0
  • /data/data/####/368329eed6ed9768_0
  • /data/data/####/374c8a01b8aa9603_0
  • /data/data/####/374c8a01b8aa9603_1
  • /data/data/####/37c6ce44c3f302b9_0
  • /data/data/####/381d208656ab5ae3_0
  • /data/data/####/38aef608e3dd2f13_0
  • /data/data/####/391907c256b1aa82_0
  • /data/data/####/39b3205d7e630cc7_0
  • /data/data/####/3a260934db814e51_0
  • /data/data/####/3a2ab9ca05390b05_0
  • /data/data/####/3a2ab9ca05390b05_1
  • /data/data/####/3a90f28d630e9396_0
  • /data/data/####/3aeb3057ab157426_0
  • /data/data/####/3af4d730a3697b54_0
  • /data/data/####/3af4d730a3697b54_1
  • /data/data/####/3b0ba8a0009e12ba_0
  • /data/data/####/3d1a00d0992aa022_0
  • /data/data/####/3d1a5d95821ce17a_0
  • /data/data/####/3d23403af9fe1063_0
  • /data/data/####/3d2b0a8852e2edeb_0
  • /data/data/####/3d5d98c17d40d7d0_0
  • /data/data/####/3d9a70f3e2a7c3f0_0
  • /data/data/####/3da7bb653c2c9f40_0
  • /data/data/####/3e00b748f92e87ec_0
  • /data/data/####/3e00b748f92e87ec_0 (deleted)
  • /data/data/####/3e00b748f92e87ec_1
  • /data/data/####/3e19a939047a2c42_0
  • /data/data/####/3e19a939047a2c42_1
  • /data/data/####/3e1ec50d1289a13e_0
  • /data/data/####/3e5a4f5d39a413f5_0 (deleted)
  • /data/data/####/3eed5762dc3d868c_0
  • /data/data/####/3ef119408a746c94_0
  • /data/data/####/3fcaf75195d69a13_0
  • /data/data/####/407fcd8daed0b478_0
  • /data/data/####/4114a160cf0250f0_0
  • /data/data/####/424961eba0ff4faf_0
  • /data/data/####/429e07694c9f8d9f_0
  • /data/data/####/42bd3c6e4b8480fa_0
  • /data/data/####/430060d3511fc865_0
  • /data/data/####/43188e4c7f5bbfa5_0
  • /data/data/####/43188e4c7f5bbfa5_0 (deleted)
  • /data/data/####/43188e4c7f5bbfa5_1
  • /data/data/####/4397b72bdfe218b9_0
  • /data/data/####/4397b72bdfe218b9_1
  • /data/data/####/43db90177b365bb0_0
  • /data/data/####/441681f9d08bfcf0_0
  • /data/data/####/441681f9d08bfcf0_1
  • /data/data/####/44522a87d9956ad61c7e68df923366c6.db
  • /data/data/####/44e5ac3dc8befdf9_0
  • /data/data/####/44fb2bebd544479b_0
  • /data/data/####/44fb2bebd544479b_1
  • /data/data/####/46146006966043.0
  • /data/data/####/4733122d72f2ef98_0
  • /data/data/####/47b85ecf254a5d76_0
  • /data/data/####/4846794f0937258c_0
  • /data/data/####/485a9af9d566a579_0
  • /data/data/####/485a9af9d566a579_1
  • /data/data/####/4863afdec10ce0f7_0
  • /data/data/####/48745609189eca01_0
  • /data/data/####/491fc489ca5c09e2_0
  • /data/data/####/491fc489ca5c09e2_1
  • /data/data/####/492a470d1121bb86_0
  • /data/data/####/492a470d1121bb86_1
  • /data/data/####/494caf84aee533f1_0
  • /data/data/####/494caf84aee533f1_1
  • /data/data/####/495065d70451e84c_0
  • /data/data/####/495065d70451e84c_0 (deleted)
  • /data/data/####/49d5b0f2482da054_0
  • /data/data/####/4a39a78eafef48f8_0
  • /data/data/####/4a39a78eafef48f8_1
  • /data/data/####/4a433bdfa1773c54_0
  • /data/data/####/4a724009ef763b0d_0
  • /data/data/####/4abd702ca420c7c8_0
  • /data/data/####/4b2ec3e245f58a21_0
  • /data/data/####/4b2ec3e245f58a21_1
  • /data/data/####/4b611b1f2506eda8_0
  • /data/data/####/4b81b2988ef8999c_0
  • /data/data/####/4ba0a4eb5b1710e6_0
  • /data/data/####/4dc387a6f88a988e_0
  • /data/data/####/4ed1cf339d594660_0
  • /data/data/####/4fe7bd89a01cf83a_0
  • /data/data/####/5013e905d952702c_0
  • /data/data/####/5013e905d952702c_1
  • /data/data/####/50b36ca066b55914_0
  • /data/data/####/5140a4ce17814e9a_0
  • /data/data/####/5183169eaef1dd1f_0
  • /data/data/####/51cea2530a941c68_0
  • /data/data/####/51cea2530a941c68_0 (deleted)
  • /data/data/####/51d9004be4335f4f_0
  • /data/data/####/5203313eede2b1f3_0
  • /data/data/####/528481ab3f7fffb5_0
  • /data/data/####/52f6f58b403f0455_0
  • /data/data/####/534cff5679442686_0
  • /data/data/####/5374f6e75bc05afb_0
  • /data/data/####/5374f6e75bc05afb_0 (deleted)
  • /data/data/####/539eab966463f620_0
  • /data/data/####/53c81f11e4253cfe_0
  • /data/data/####/53f04a45fa1cbc6a_0
  • /data/data/####/5555b7d89bbdb864_0
  • /data/data/####/5555b7d89bbdb864_1
  • /data/data/####/556f88ca096b389d_0
  • /data/data/####/55739953689165a9_0
  • /data/data/####/569ee0f3498736bf_0
  • /data/data/####/569ee0f3498736bf_1
  • /data/data/####/5706d65ed6817d29_0
  • /data/data/####/570ad6b43a1a3e8f_0
  • /data/data/####/570ad6b43a1a3e8f_0 (deleted)
  • /data/data/####/570ad6b43a1a3e8f_1
  • /data/data/####/5790f1f637bc7155_0
  • /data/data/####/57d28d7bad050b1d_0
  • /data/data/####/57efa8f2e3630b1e_0
  • /data/data/####/58837f87a0bc315b_0
  • /data/data/####/58837f87a0bc315b_1
  • /data/data/####/5911c4bb7d5ee4b9_0
  • /data/data/####/59d1be81f9e50cdd_0
  • /data/data/####/5a5e34cc7f7c8ff4_0
  • /data/data/####/5a5e34cc7f7c8ff4_1
  • /data/data/####/5ad505a24dbaeace_0
  • /data/data/####/5ad505a24dbaeace_1
  • /data/data/####/5af556cf350c638a_0
  • /data/data/####/5bb933ea9be111ad_0
  • /data/data/####/5bb933ea9be111ad_1
  • /data/data/####/5c00a5b013166ed5_0
  • /data/data/####/5c00a5b013166ed5_1
  • /data/data/####/5c3db104098ca227_0
  • /data/data/####/5c3db104098ca227_1
  • /data/data/####/5c5538ffcf97af4f_0
  • /data/data/####/5c8ecf4ccf552d9f_0
  • /data/data/####/5d1574c3556948fb_0
  • /data/data/####/5d1574c3556948fb_1
  • /data/data/####/5d683802d8ee2239_0 (deleted)
  • /data/data/####/5de5a69fb38a0bf3_0
  • /data/data/####/5e0bdb64bdfe5b53_0
  • /data/data/####/5f458e915ad3b20a_0
  • /data/data/####/5f458e915ad3b20a_1
  • /data/data/####/600f698f07738e4f_0
  • /data/data/####/61c490d6d27b31f6_0
  • /data/data/####/61c490d6d27b31f6_1
  • /data/data/####/6370eefdd5319079_0
  • /data/data/####/63d98b65fea76a6d_0
  • /data/data/####/6467952938b1d95d_0
  • /data/data/####/64ee947779e4d190_0
  • /data/data/####/65143539276743.0
  • /data/data/####/6564aebbb84c09e8_0
  • /data/data/####/65674a7edd86f6d0_0
  • /data/data/####/6658a64b9f68aa16_0
  • /data/data/####/6817f0df710748ec_0
  • /data/data/####/6817f0df710748ec_1
  • /data/data/####/6837fcb3fe509c34_0
  • /data/data/####/6945698bc4293e51_0
  • /data/data/####/6945698bc4293e51_1
  • /data/data/####/69eeb0f02de8fb80_0
  • /data/data/####/6a3dd62ef125d1a5_0
  • /data/data/####/6ac410bac341b98f_0
  • /data/data/####/6b1b7859e20c2ee1_0
  • /data/data/####/6b8178f227cf61d7_0
  • /data/data/####/6ca4104aadb04916_0
  • /data/data/####/6ca4104aadb04916_1
  • /data/data/####/6cab1dd7cba0ca12_0
  • /data/data/####/6d39849546ae8e77_0
  • /data/data/####/6d3d2beba90572d3_0
  • /data/data/####/6d6dc737b8de578e_0
  • /data/data/####/6d6dc737b8de578e_1
  • /data/data/####/6de4096f5a845aae_0
  • /data/data/####/6e33ab312152edce_0
  • /data/data/####/6e67f4edd403b5fa_0
  • /data/data/####/6e67f4edd403b5fa_1
  • /data/data/####/6eb7180358616cc4_0
  • /data/data/####/6eb7180358616cc4_0 (deleted)
  • /data/data/####/6f0ba99c43b4f40d_0
  • /data/data/####/6f7d4a78d0395992_0
  • /data/data/####/6fd3d758faa0f07bee808d8384419953.db
  • /data/data/####/700e3e492cb5998e_0
  • /data/data/####/700e96eac9502aba_0
  • /data/data/####/703444da28ae150c_0
  • /data/data/####/70d577145f2f78aa_0
  • /data/data/####/70d577145f2f78aa_0 (deleted)
  • /data/data/####/71094bab84f24626_0
  • /data/data/####/71094bab84f24626_1
  • /data/data/####/7123828dace3445b_0
  • /data/data/####/7123828dace3445b_1
  • /data/data/####/71b8dd6146dde11f_0
  • /data/data/####/72142903222886.0
  • /data/data/####/724103452ee0114d_0
  • /data/data/####/72ef24ed14556dda_0
  • /data/data/####/736ab718885f3924_0
  • /data/data/####/738fd2a611ca33da_0
  • /data/data/####/738fd2a611ca33da_0 (deleted)
  • /data/data/####/73c899e60bb0956c_0
  • /data/data/####/73cde24237d107a5_0
  • /data/data/####/7414ce5ce0a6c68b_0
  • /data/data/####/7414ce5ce0a6c68b_1
  • /data/data/####/74a1d10ac80563df_0
  • /data/data/####/74a1d10ac80563df_1
  • /data/data/####/74a2e7bbcf90778c_0
  • /data/data/####/74d334e92f1698cc_0
  • /data/data/####/75390cc97da7686d_0
  • /data/data/####/7610e5804bc65a01_0
  • /data/data/####/7651efb21a612ff6_0
  • /data/data/####/7651efb21a612ff6_1
  • /data/data/####/76679980c034f098_0 (deleted)
  • /data/data/####/76b3ab52250b3439_0 (deleted)
  • /data/data/####/76b6cb3406fa3746_0
  • /data/data/####/76ca32cbd151ffea_0 (deleted)
  • /data/data/####/76fa166d1303208e_0
  • /data/data/####/7705ff002c77642d_0
  • /data/data/####/77b22adbd4f27b25_0
  • /data/data/####/77d2cef917da2d05_0
  • /data/data/####/78ff1d8db422349c_0
  • /data/data/####/790b67f75b271811_0
  • /data/data/####/7980dd479b946917_0 (deleted)
  • /data/data/####/79b7941e195ef518_0
  • /data/data/####/7a74e6a940caa3e3_0
  • /data/data/####/7a7c720ccc596c4b_0
  • /data/data/####/7a85d3d6a6797c00_0 (deleted)
  • /data/data/####/7ac017b009d0a17d_0
  • /data/data/####/7b49799e7939f835_0
  • /data/data/####/7b4fa92e9c155721_0
  • /data/data/####/7b5975ba2db034c7_0
  • /data/data/####/7b5975ba2db034c7_1
  • /data/data/####/7b67abb7faaa96f5_0
  • /data/data/####/7ba9a9db263108523469055fe693c18c
  • /data/data/####/7c1912083fb82904_0
  • /data/data/####/7c1912083fb82904_1
  • /data/data/####/7c1a594fac6a60bd_0
  • /data/data/####/7c435067e3133af9_0
  • /data/data/####/7c99b6955eb2950a_0
  • /data/data/####/7d292155b82925be_0
  • /data/data/####/7d292155b82925be_1
  • /data/data/####/7d2eff1312f848bc_0
  • /data/data/####/7de2686d55a0e1d3_0
  • /data/data/####/7eef527ded5b01e7_0
  • /data/data/####/7f7d87d91d8283d4_0
  • /data/data/####/8050d4503cd4a709_0
  • /data/data/####/815d5d36ddbac124_0
  • /data/data/####/817d0e5e75ae1ed2_0
  • /data/data/####/817d0e5e75ae1ed2_1
  • /data/data/####/82a658fd643eb3ed_0
  • /data/data/####/8312ddfbacc46e6e_0
  • /data/data/####/8312ddfbacc46e6e_1
  • /data/data/####/8313ca61f08da20f_0
  • /data/data/####/834a983781bfb5a3_0
  • /data/data/####/8358e8c7f6953b1a_0
  • /data/data/####/84d7e9a027b104b7_0
  • /data/data/####/851b8ca8c4cdb47e_0
  • /data/data/####/85d2522abe04b5cb_0
  • /data/data/####/86bd85bfb137aad1_0
  • /data/data/####/86bd85bfb137aad1_1
  • /data/data/####/87ca4086ba20f201171c56273c6eba2c.db
  • /data/data/####/87fa00889fa2200d85126ce71b2b9722.db
  • /data/data/####/88108c8cf27dada8_0
  • /data/data/####/88184680902805e4_0
  • /data/data/####/885f308c66e93cad_0
  • /data/data/####/88c574582736709a_0
  • /data/data/####/892b7aad25a29e2a_0
  • /data/data/####/895952d99b73fa85_0 (deleted)
  • /data/data/####/89d2be85e2552873_0 (deleted)
  • /data/data/####/8aff05f6c36e0971_0
  • /data/data/####/8bccc18d68aaa37e_0
  • /data/data/####/8bccc18d68aaa37e_1
  • /data/data/####/8bdd001f56932692_0
  • /data/data/####/8be546bf03ddce82_0
  • /data/data/####/8be546bf03ddce82_0 (deleted)
  • /data/data/####/8c9be85a9cd8dc84_0
  • /data/data/####/8d46c1cd7169e7f8_0
  • /data/data/####/8d5e5c7eca28d249_0
  • /data/data/####/8d6cae49611e204c_0
  • /data/data/####/8e0b7d3925c5d52d_0
  • /data/data/####/8e0b7d3925c5d52d_0 (deleted)
  • /data/data/####/8e726d58afc1cedf_0
  • /data/data/####/8e988d96c6a77848d6e8765280690a75
  • /data/data/####/8f03f7abe785798d_0
  • /data/data/####/9077dc0345dcf0e8_0
  • /data/data/####/90a56c623cd6fc4f_0
  • /data/data/####/90c8ee9014e9a211_0
  • /data/data/####/90c8ee9014e9a211_1
  • /data/data/####/91312152ea760f59_0
  • /data/data/####/917aedb4f4dfb818_0
  • /data/data/####/91cce1a9f03ab086_0
  • /data/data/####/9207d62d18a4ad73_0
  • /data/data/####/9207d62d18a4ad73_1
  • /data/data/####/923d32ae6c25f2b7_0
  • /data/data/####/923d32ae6c25f2b7_1
  • /data/data/####/92f0a7b4c847430a1beda845b3cec429.db
  • /data/data/####/932395a5c09d6cee_0
  • /data/data/####/932395a5c09d6cee_1
  • /data/data/####/9327cf1930106696_0
  • /data/data/####/93318b74c2d4881a_0 (deleted)
  • /data/data/####/9353530c5891847f_0
  • /data/data/####/9413893bda75d6a6_0
  • /data/data/####/94ecdfaa06b9858d_0
  • /data/data/####/95321a607ee3dd97_0
  • /data/data/####/958d0de48eee09f7_0
  • /data/data/####/95c9c67e164cdc38_0
  • /data/data/####/9621272f21a3ef80_0
  • /data/data/####/96395d084dd2f43b_0
  • /data/data/####/96395d084dd2f43b_1
  • /data/data/####/9665067d4109aee3_0
  • /data/data/####/96cfef336d13e34a_0
  • /data/data/####/96f65ed5af8b99cb_0
  • /data/data/####/982c9e6dd519dd50_0
  • /data/data/####/985958d976619751_0
  • /data/data/####/985958d976619751_1
  • /data/data/####/98645d66f617b884_0
  • /data/data/####/9a0349e32425b648_0
  • /data/data/####/9a0e1620c4159abe_0
  • /data/data/####/9a3dd1edce516eed_0
  • /data/data/####/9a47ba2747e566b4_0
  • /data/data/####/9a47ba2747e566b4_1
  • /data/data/####/9a5f6c9a315e80aa_0
  • /data/data/####/9ac27884b4cd666a_0
  • /data/data/####/9ad7c562d1808bcb_0
  • /data/data/####/9be7e66a8de51e80_0
  • /data/data/####/9cbdc9525dfd7b44_0
  • /data/data/####/9cbdc9525dfd7b44_1
  • /data/data/####/9cdf8e397c1dc061_0
  • /data/data/####/9cdf8e397c1dc061_1
  • /data/data/####/9cf026fa7171030f_0
  • /data/data/####/9cf7dce52a2b3dab_0
  • /data/data/####/9d255e91eada7ef2_0
  • /data/data/####/9dc32306d12bd702_0
  • /data/data/####/9e691af8435c62f3_0
  • /data/data/####/9e691af8435c62f3_1
  • /data/data/####/9eef7be4661f4f7d_0
  • /data/data/####/9f1b1b2bbfdb665f_0
  • /data/data/####/9f573a3bcbfefc46_0
  • /data/data/####/9f63ea6a6e7e1953_0
  • /data/data/####/9fb939e6b74c963c_0
  • /data/data/####/ACCS_BINDumeng;58107fdec8957663fb003c19.xml
  • /data/data/####/ACCS_SDK.xml
  • /data/data/####/ACCS_SDK_CHANNEL.xml
  • /data/data/####/ACCS_SDK_CHANNEL.xml.bak
  • /data/data/####/AGOO_BIND.xml
  • /data/data/####/Agoo_AppStore.xml
  • /data/data/####/Alvin2.xml
  • /data/data/####/BUGLY_COMMON_VALUES.xml
  • /data/data/####/ContextData.xml
  • /data/data/####/Cookies-journal
  • /data/data/####/Emp.xml
  • /data/data/####/Emp.xml.bak
  • /data/data/####/MessageStore.db-journal
  • /data/data/####/MsgLogStore.db-journal
  • /data/data/####/NIMSDK_Config_f7274dbc6d1b56317a1437bb9d42f596.xml
  • /data/data/####/NIMSDK_Config_f7274dbc6d1b56317a1437bb9d42f596_...6a.xml
  • /data/data/####/UM_PROBE_DATA.xml
  • /data/data/####/Unicorn.f7274dbc6d1b56317a1437bb9d42f596.xml
  • /data/data/####/Unicorn.f7274dbc6d1b56317a1437bb9d42f596.xml.bak
  • /data/data/####/WebViewBasePrefs.xml
  • /data/data/####/WebViewBasePrefs.xml.bak
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/XkdjsIx132mM356507059351895comm.xml
  • /data/data/####/XkdjsIx132mM356507059351895tasks.xml
  • /data/data/####/XkdjsIx132mM356507059351895tasks.xml.bak
  • /data/data/####/XkdjsIx132mMskey1.xml
  • /data/data/####/__Baidu_Stat_SDK_SendRem.xml
  • /data/data/####/__local_ap_info_cache.json
  • /data/data/####/__local_last_session.json
  • /data/data/####/__local_stat_cache.json
  • /data/data/####/__send_data_1608905711093
  • /data/data/####/a02668e61a3ab438_0
  • /data/data/####/a075d7a6965c76ae_0
  • /data/data/####/a0a025fa16443d55_0
  • /data/data/####/a0ddb34794eae528_0
  • /data/data/####/a1fcef3b142993f7_0
  • /data/data/####/a20b747e3720f684_0
  • /data/data/####/a2332502fffd2e28_0
  • /data/data/####/a23445ef8cd9dff9_0
  • /data/data/####/a24ef98679b73a80_0
  • /data/data/####/a24ef98679b73a80_1
  • /data/data/####/a2593e8b045c301a_0
  • /data/data/####/a2b1bf2e2f0b1d2f_0
  • /data/data/####/a2b1bf2e2f0b1d2f_1
  • /data/data/####/a31c6404786e8cd7_0
  • /data/data/####/a3330c53b7fb1ee3_0
  • /data/data/####/a3330c53b7fb1ee3_1
  • /data/data/####/a36f4be4c0737c3c_0
  • /data/data/####/a36f4be4c0737c3c_1
  • /data/data/####/a3d27d7ccaafe4d3_0
  • /data/data/####/a402a22805b678c6_0
  • /data/data/####/a423ace8ea12d427_0
  • /data/data/####/a5372666f2be7282_0
  • /data/data/####/a5ca32c9f1019735_0
  • /data/data/####/a5dcd5e747e88e99_0
  • /data/data/####/a607bc0033142622_0
  • /data/data/####/a607bc0033142622_1
  • /data/data/####/a6bbeb4739398742_0
  • /data/data/####/a7245a70bba17549_0
  • /data/data/####/a7245a70bba17549_1
  • /data/data/####/a75b7fd883759ea7_0
  • /data/data/####/a75b7fd883759ea7_1
  • /data/data/####/a786e28057bbebf7_0
  • /data/data/####/a793e9954dc19f9c_0
  • /data/data/####/a7d4cb57903d9661_0
  • /data/data/####/a7fc973c30ed8315_0
  • /data/data/####/a856dd86050d3a5b_0
  • /data/data/####/a8dff506de79b5d9_0
  • /data/data/####/a90f576518ceece1_0 (deleted)
  • /data/data/####/a99555e927f4550a_0
  • /data/data/####/a9ad88043d24266d_0
  • /data/data/####/a9ad88043d24266d_1
  • /data/data/####/aa381277b8ef36b9_0
  • /data/data/####/ab20b87688d9e3e0_0
  • /data/data/####/ab9f03d66e586bf5_0
  • /data/data/####/ab9f03d66e586bf5_1
  • /data/data/####/ac2e2dfd7621c390_0
  • /data/data/####/ac5ac067256a2b5d_0
  • /data/data/####/acb0110537840db1_0
  • /data/data/####/acb936d86c5b05ca_0
  • /data/data/####/acb936d86c5b05ca_0 (deleted)
  • /data/data/####/accs.db-journal
  • /data/data/####/ad9c4b36fe61c96d_0
  • /data/data/####/ade1c8d3d11cdf5a_0
  • /data/data/####/aec321db7552fcb7_0
  • /data/data/####/aee61271ebc7d86d_0
  • /data/data/####/aee7842c4fda2e11_0
  • /data/data/####/aee7842c4fda2e11_1
  • /data/data/####/af38e8b978e66b9d_0
  • /data/data/####/afa84d18baf3c8ec_0
  • /data/data/####/afdbbf0da7990b5f_0
  • /data/data/####/agoo.pid
  • /data/data/####/ahq_spu_ti.xml
  • /data/data/####/b0389c89da7b72a5_0 (deleted)
  • /data/data/####/b099c7371ece45d3_0
  • /data/data/####/b11bd2fc5a78162c_0
  • /data/data/####/b11bd2fc5a78162c_1
  • /data/data/####/b12985b6207e9295_0
  • /data/data/####/b22de04844294f48_0
  • /data/data/####/b2c6c6bb27f8613b_0
  • /data/data/####/b2f7a37c8828109a_0
  • /data/data/####/b35947bb9af61ecf_0
  • /data/data/####/b35947bb9af61ecf_1
  • /data/data/####/b3c47b92a1a0659b_0
  • /data/data/####/b4115e4ba4d87e97_0
  • /data/data/####/b477fb53a489f155_0
  • /data/data/####/b4b603799f294881a1090c52adc8dff0
  • /data/data/####/b51658c0c8ca749b_0
  • /data/data/####/b5ccf0b1e4cc8ce3_0
  • /data/data/####/b6a92b36b32973b0_0
  • /data/data/####/b6bc7db2622db785_0
  • /data/data/####/b704bc6006131134_0
  • /data/data/####/b704bc6006131134_0 (deleted)
  • /data/data/####/b730b5fc74ae90c1_0
  • /data/data/####/b73451d7c92818c0_0
  • /data/data/####/b7365c19e02b640b_0
  • /data/data/####/b75058728ee5d442_0
  • /data/data/####/b75058728ee5d442_1
  • /data/data/####/b7c4e14ded46af98_0
  • /data/data/####/b7c4e14ded46af98_0 (deleted)
  • /data/data/####/b8218f4ef2ac55b3_0
  • /data/data/####/b8218f4ef2ac55b3_1
  • /data/data/####/ba07a493c12cc0f5_0
  • /data/data/####/ba168df849d259ae_0
  • /data/data/####/ba168df849d259ae_1
  • /data/data/####/ba4d10cf6ae1d514_0
  • /data/data/####/baa94221fa4eee98_0
  • /data/data/####/baidu_mtj_sdk_record.xml
  • /data/data/####/baidu_mtj_sdk_record.xml.bak
  • /data/data/####/bba47554ad947f65_0 (deleted)
  • /data/data/####/bc1e60581d0f0a2c_0
  • /data/data/####/bc6cba40d46eae4e_0
  • /data/data/####/bc6cba40d46eae4e_1
  • /data/data/####/bce3070284f2c280_0
  • /data/data/####/bce3070284f2c280_1
  • /data/data/####/bce53bbc561a8b8b_0
  • /data/data/####/bce53bbc561a8b8b_1
  • /data/data/####/bd0654fd910f1b4c_0
  • /data/data/####/bd2b79ca792c3093_0
  • /data/data/####/be34ff59610e630b_0
  • /data/data/####/be539def1af51c16_0
  • /data/data/####/be6bc5fcbc5042e1_0
  • /data/data/####/be6bc5fcbc5042e1_1
  • /data/data/####/bfcbafe647f20c37_0
  • /data/data/####/bfcbafe647f20c37_1
  • /data/data/####/bff0016603800b2c_0
  • /data/data/####/bff00742c6123b21_0
  • /data/data/####/bugly_db_-journal
  • /data/data/####/c026a69252a97175_0
  • /data/data/####/c026a69252a97175_0 (deleted)
  • /data/data/####/c026a69252a97175_1
  • /data/data/####/c05507fe881eed5f_0
  • /data/data/####/c05507fe881eed5f_1
  • /data/data/####/c07a5d4e2140dc57_0
  • /data/data/####/c07f2279817a4d44_0
  • /data/data/####/c07f2279817a4d44_0 (deleted)
  • /data/data/####/c07f2279817a4d44_1
  • /data/data/####/c08a83f5b600a0d3_0
  • /data/data/####/c18323a249e4b4b9_0
  • /data/data/####/c18323a249e4b4b9_0 (deleted)
  • /data/data/####/c18323a249e4b4b9_1
  • /data/data/####/c2daa2fd4731027b_0
  • /data/data/####/c2daa2fd4731027b_1
  • /data/data/####/c2fb573d7d41fe11_0
  • /data/data/####/c3a12b3d737e940e_0
  • /data/data/####/c3a486782557661b_0
  • /data/data/####/c57578a145388c96_0
  • /data/data/####/c5b2922fd92d469a_0
  • /data/data/####/c5b2922fd92d469a_1
  • /data/data/####/c5c3b27db18763fa_0
  • /data/data/####/c5c3b27db18763fa_0 (deleted)
  • /data/data/####/c5c3b27db18763fa_1
  • /data/data/####/c5c59e456023874c_0
  • /data/data/####/c6cef99157b5b2ad_0
  • /data/data/####/c6f0f0fbc13e3fff_0
  • /data/data/####/c74174bb7cfaddb0_0
  • /data/data/####/c7ce1868366f1643_0
  • /data/data/####/c7e617e81709b325_0
  • /data/data/####/c814a9497c05f07b_0
  • /data/data/####/c82b3d7888ca20ee_0
  • /data/data/####/c82b3d7888ca20ee_1
  • /data/data/####/c87f808e3ab06d0a_0
  • /data/data/####/c87f808e3ab06d0a_1
  • /data/data/####/c96baec254dc13c2_0
  • /data/data/####/c96baec254dc13c2_1
  • /data/data/####/ca5064e85d6ac664_0
  • /data/data/####/ca5cb7729749e34f_0
  • /data/data/####/cbb5284591d87bbd_0
  • /data/data/####/cc0d8a1ec1786471_0
  • /data/data/####/cc3482982e8cca34_0
  • /data/data/####/cc3c202a7e18a664_0
  • /data/data/####/cc918d54e4236ca2_0 (deleted)
  • /data/data/####/ccfbbd88569e5a54_0
  • /data/data/####/cd068a516ef90603_0
  • /data/data/####/cd6f4a72c3a838a0_0
  • /data/data/####/cd6f4a72c3a838a0_1
  • /data/data/####/cd82534e789d3c79_0
  • /data/data/####/cde7604b5627c309_0
  • /data/data/####/cdu_st_-1510132342
  • /data/data/####/cdu_st_-1897404729
  • /data/data/####/cdu_st_-1963733048
  • /data/data/####/cdu_st_-646630316
  • /data/data/####/cdu_st_-724289219
  • /data/data/####/cdu_st_-752754616
  • /data/data/####/cdu_st_1495260626
  • /data/data/####/cdu_st_465275389
  • /data/data/####/ce2e44aefaecb4e4_0 (deleted)
  • /data/data/####/ce4affdb3330f273_0
  • /data/data/####/ce6b85216491be9c6960dbbe14aeec9e
  • /data/data/####/ceb6fef03e8cbb20_0
  • /data/data/####/cf0ce22c2b3949de_0
  • /data/data/####/cf0ce22c2b3949de_1
  • /data/data/####/cf3fea772fd2104c_0 (deleted)
  • /data/data/####/cf89d854ffbbac14_0
  • /data/data/####/cfb42f9c5f87e15d_0
  • /data/data/####/cfbbb0ccb074c662_0
  • /data/data/####/channel_umeng_common_config.xml
  • /data/data/####/chuanglan_report_2.2.1.db
  • /data/data/####/chuanglan_report_2.2.1.db-journal
  • /data/data/####/com.qiyukf.analytics.xml
  • /data/data/####/com.qiyukf.analytics.xml.bak
  • /data/data/####/com.wswy.wzcx.BETA_VALUES.xml
  • /data/data/####/com.wswy.wzcx.BETA_VALUES.xml.bak
  • /data/data/####/com.wswy.wzcx_preferences.xml
  • /data/data/####/core_info
  • /data/data/####/core_umeng_common_config.xml
  • /data/data/####/countIp.xml
  • /data/data/####/crashrecord.xml
  • /data/data/####/d06be3c9add02dbc_0
  • /data/data/####/d119490a6becf284_0
  • /data/data/####/d119490a6becf284_1
  • /data/data/####/d1c6fcde5f750485_0
  • /data/data/####/d1f622306a155333_0
  • /data/data/####/d22dcc77e78e58cd_0
  • /data/data/####/d2591fa159b01138_0
  • /data/data/####/d287f3b3d29faea9_0
  • /data/data/####/d28833403bca6b75_0
  • /data/data/####/d28833403bca6b75_0 (deleted)
  • /data/data/####/d2b0a76f17705746_0
  • /data/data/####/d2e47e2b694f0a00_0
  • /data/data/####/d2fdf758d33f177e_0
  • /data/data/####/d2feb00f81ba5c80_0
  • /data/data/####/d32d08134dc3ac99_0
  • /data/data/####/d33e996f81efda72_0 (deleted)
  • /data/data/####/d517e37d47e0c27d_0
  • /data/data/####/d590aa0ace56e03f_0
  • /data/data/####/d63cbe116550c9e2_0
  • /data/data/####/d644e68cb390fd23_0
  • /data/data/####/d6efb2c47f5beb38_0
  • /data/data/####/d6f631104ff48497_0 (deleted)
  • /data/data/####/d7753b21e5938a07_0
  • /data/data/####/d7a14e30636d52e10b35d10c02578019
  • /data/data/####/d7c540be98fd0877_0
  • /data/data/####/d834d6619b6220be_0
  • /data/data/####/d864be584178f1a2_0
  • /data/data/####/d8c3efd76e9e67cb_0
  • /data/data/####/d8ea2db50924ba59_0
  • /data/data/####/d94453f763d17058_0
  • /data/data/####/d9cd9863e1577378_0
  • /data/data/####/d9faea2b4b928702_0
  • /data/data/####/d9faea2b4b928702_0 (deleted)
  • /data/data/####/dW1weF9pbnRlcm5hbF8xNjA4OTA1NzA0OTU0;
  • /data/data/####/dW1weF9pbnRlcm5hbF8xNjA4OTA1NzAyMzI1;
  • /data/data/####/da16f7c07344520b_0
  • /data/data/####/da16f7c07344520b_1
  • /data/data/####/da38c63cdca8b7ef_0
  • /data/data/####/da63ee935671e4fd_0
  • /data/data/####/da63ee935671e4fd_1
  • /data/data/####/db207bb59ff91e23_0
  • /data/data/####/dbea396f1590d597_0
  • /data/data/####/dbea396f1590d597_1
  • /data/data/####/dc0567e1f9ec191e_0
  • /data/data/####/dc0567e1f9ec191e_1
  • /data/data/####/dce3e65cb2a3ba0e_0
  • /data/data/####/dce3e65cb2a3ba0e_1
  • /data/data/####/dd2c1704e4c81fd6_0
  • /data/data/####/dd6672fe28722dc9_0
  • /data/data/####/ddc636203446e5a1_0
  • /data/data/####/ddc6b7169e57ec29_0
  • /data/data/####/de6ec7a513ae464e_0
  • /data/data/####/ded2cda574de3877_0
  • /data/data/####/df219ae7e3677b9c_0
  • /data/data/####/df219ae7e3677b9c_1
  • /data/data/####/dfe2e668a886753a_0
  • /data/data/####/dfee1be5db92502a_0
  • /data/data/####/download_upload
  • /data/data/####/dso_deps
  • /data/data/####/dso_lock
  • /data/data/####/dso_manifest
  • /data/data/####/dso_state
  • /data/data/####/e057d17aa01aca99_0
  • /data/data/####/e09e71409dbc1612_0
  • /data/data/####/e0a83b4c4277c39f_0
  • /data/data/####/e1db36645b57fd8b_0
  • /data/data/####/e25825b644abd298_0
  • /data/data/####/e27f5cb830028b82_0
  • /data/data/####/e27f5cb830028b82_0 (deleted)
  • /data/data/####/e27f5cb830028b82_1
  • /data/data/####/e2c9cb6bf8f587bc_0 (deleted)
  • /data/data/####/e39039973842927a_0
  • /data/data/####/e3976b6a295e2bd5_0
  • /data/data/####/e3b91a1deef6bd3b_0
  • /data/data/####/e4c52c0cc48e84b7_0 (deleted)
  • /data/data/####/e507463c7bd4834e_0
  • /data/data/####/e507463c7bd4834e_1
  • /data/data/####/e52310e4aa37d26e_0
  • /data/data/####/e5386daff992d46c_0
  • /data/data/####/e5386daff992d46c_0 (deleted)
  • /data/data/####/e5386daff992d46c_1
  • /data/data/####/e56094dc3fdfa124_0
  • /data/data/####/e5873100130d781b_0 (deleted)
  • /data/data/####/e60b058c9080fc35_0 (deleted)
  • /data/data/####/e6864431d25c4ca5_0
  • /data/data/####/e6864431d25c4ca5_1
  • /data/data/####/e68e4a0203c350bb_0
  • /data/data/####/e68e4a0203c350bb_1
  • /data/data/####/e6d1e2105a30a810_0
  • /data/data/####/e6d1e2105a30a810_1
  • /data/data/####/e7628f4d1a038499_0 (deleted)
  • /data/data/####/e802810f86303dd5_0
  • /data/data/####/e802810f86303dd5_1
  • /data/data/####/e8806c393c212628_0
  • /data/data/####/e898ffab5be03224_0
  • /data/data/####/e8fcc854ac705ccb_0
  • /data/data/####/e8fcc854ac705ccb_1
  • /data/data/####/e95bee4e4d0270a4_0
  • /data/data/####/eHhkX3Nw.xml
  • /data/data/####/ea5c21f72d818240_0
  • /data/data/####/eb58fa7875ee8d95_0
  • /data/data/####/ebdbddcc4900eab085d631926602f06c.db
  • /data/data/####/ec8493fe80e39ddf_0
  • /data/data/####/ecee03d83395eb24_0
  • /data/data/####/ed2dba8c04eb7ee9_0
  • /data/data/####/edd3d77c83d8c6ec_0
  • /data/data/####/edd3d77c83d8c6ec_1
  • /data/data/####/edef7f2c2459794a_0
  • /data/data/####/ee497c9f4f3d9af8_0
  • /data/data/####/ee497c9f4f3d9af8_1
  • /data/data/####/ee50642496acd419_0
  • /data/data/####/ee50642496acd419_1
  • /data/data/####/ee81a5232b756f10_0
  • /data/data/####/eed5f6460d7ae987_0 (deleted)
  • /data/data/####/ef3c178b16b5d90c_0
  • /data/data/####/ef3c178b16b5d90c_1
  • /data/data/####/ef8577d81c3b55fe_0
  • /data/data/####/ef8577d81c3b55fe_1
  • /data/data/####/efe0232fcaa5e56d_0
  • /data/data/####/efe0232fcaa5e56d_1
  • /data/data/####/efff4a2e5cf1ffa4_0
  • /data/data/####/efff4a2e5cf1ffa4_1
  • /data/data/####/exchangeIdentity.json
  • /data/data/####/exid.dat
  • /data/data/####/f0397a7fc5573bab_0
  • /data/data/####/f0a1999d2276fc11_0
  • /data/data/####/f198e4832b774d35_0
  • /data/data/####/f24382a6622b7b8e_0
  • /data/data/####/f2654992971169ff_0
  • /data/data/####/f2af50c06822ce7a_0
  • /data/data/####/f30cc1a72bc8e9a2_0
  • /data/data/####/f34704abb3fbd4a6_0
  • /data/data/####/f3b10db176b0debe_0
  • /data/data/####/f3b35067e75f1897_0
  • /data/data/####/f5474c250e0daed1_0
  • /data/data/####/f54f024ae57e307f_0
  • /data/data/####/f56146a25443a547_0
  • /data/data/####/f6e63ea8de02ebda_0
  • /data/data/####/f6e63ea8de02ebda_1
  • /data/data/####/f71229f082fdd91c_0
  • /data/data/####/f7ecc3008244efd3_0
  • /data/data/####/f7f8f1e259890f84_0
  • /data/data/####/f882a32b747f6680_0
  • /data/data/####/f8a1b29b47c5b0d4_0
  • /data/data/####/f8c3add21d112f42_0
  • /data/data/####/f93126d87d784b44_0
  • /data/data/####/f960f2a5eb56e212_0
  • /data/data/####/fa0df3f5d1d8df57_0
  • /data/data/####/fabd5622ea5d7df9_0
  • /data/data/####/face9c43966f43a9_0
  • /data/data/####/face9c43966f43a9_1
  • /data/data/####/fb6d84878940febc_0
  • /data/data/####/fce6bb607bc739dd_0
  • /data/data/####/fd6f10cde292cbb2_0
  • /data/data/####/fd7465cfb93a2248_0
  • /data/data/####/fdfd8abffab705b5_0
  • /data/data/####/fdfd8abffab705b5_0 (deleted)
  • /data/data/####/fe161122616b209f_0
  • /data/data/####/fe24372fe6925cdf_0
  • /data/data/####/fec0b3bd7133d5a8_0
  • /data/data/####/fec0b3bd7133d5a8_1
  • /data/data/####/ff1512c2ea07d315_0
  • /data/data/####/http_1020p.zhitouip.com_808.localstorage-journal
  • /data/data/####/http_1020yy.admasterto.com_99.localstorage-journal
  • /data/data/####/http_58.218.92.50_808.localstorage-journal
  • /data/data/####/http_ask.ci123.com_0.localstorage-journal
  • /data/data/####/http_auto.news18a.com_0.localstorage-journal
  • /data/data/####/http_bbs.ci123.com_0.localstorage-journal
  • /data/data/####/http_www.ci123.com_0.localstorage-journal
  • /data/data/####/http_www.news18a.com_0.localstorage-journal
  • /data/data/####/httpdns_config_cache.xml
  • /data/data/####/httpdns_config_cache.xml.bak
  • /data/data/####/https_newcar.xcar.com.cn_0.localstorage-journal
  • /data/data/####/https_sw4.duoyi.com_0.localstorage-journal
  • /data/data/####/https_w.mgtv.com_0.localstorage-journal
  • /data/data/####/hxdata.xml
  • /data/data/####/i==1.2.0&&3.8.2_1608905702393_envelope.log
  • /data/data/####/index
  • /data/data/####/info.xml
  • /data/data/####/journal
  • /data/data/####/journal.tmp
  • /data/data/####/libCtaApiLib.so
  • /data/data/####/libMMANDKSignature.so
  • /data/data/####/libShanYCore.so
  • /data/data/####/libcocklogic-1.1.3.so
  • /data/data/####/libcuid.so
  • /data/data/####/libgifimage.so
  • /data/data/####/libimagepipeline.so
  • /data/data/####/libnative-filters.so
  • /data/data/####/libnative-imagetranscoder.so
  • /data/data/####/libnms.so
  • /data/data/####/libpl_droidsonroids_gif.so
  • /data/data/####/libtnet-3.1.14.so
  • /data/data/####/libtobEmbedEncrypt.so
  • /data/data/####/libturingau.so
  • /data/data/####/libyaqcore_gdtadv.so
  • /data/data/####/libyaqstub_gdtadv.so
  • /data/data/####/local_crash_lock
  • /data/data/####/logdb.db
  • /data/data/####/logdb.db-journal
  • /data/data/####/message_accs_db
  • /data/data/####/message_accs_db-journal
  • /data/data/####/metrics_guid
  • /data/data/####/msg.db-journal
  • /data/data/####/mtj_auto.config
  • /data/data/####/mtj_autoTracker.js
  • /data/data/####/native_record_lock (deleted)
  • /data/data/####/proc_auxv
  • /data/data/####/qiyu_save_f7274dbc6d1b56317a1437bb9d42f596.xml
  • /data/data/####/security_info
  • /data/data/####/shanyan_share_data.xml
  • /data/data/####/shanyan_share_data.xml.bak
  • /data/data/####/spUtils.xml
  • /data/data/####/spu_ti.xml
  • /data/data/####/spu_yj.xml
  • /data/data/####/ssoconfigs.xml
  • /data/data/####/t==8.1.2&&3.8.2_1608905706863_envelope.log
  • /data/data/####/tbs_download_config.xml
  • /data/data/####/tbs_download_config.xml.bak
  • /data/data/####/tbs_download_stat.xml
  • /data/data/####/tbs_pv_config
  • /data/data/####/tbscoreinstall.txt
  • /data/data/####/tbslock.txt
  • /data/data/####/the-real-index
  • /data/data/####/trace_circle.data
  • /data/data/####/ua.db
  • /data/data/####/ua.db-journal
  • /data/data/####/um_pri.xml
  • /data/data/####/umdat.xml
  • /data/data/####/umengDB.db
  • /data/data/####/umengDB.dex
  • /data/data/####/umengDB.dex.flock (deleted)
  • /data/data/####/umengDB.jar
  • /data/data/####/umeng_common_config.xml
  • /data/data/####/umeng_common_location.xml
  • /data/data/####/umeng_general_config.xml
  • /data/data/####/umeng_it.cache
  • /data/data/####/umeng_message_state.xml
  • /data/data/####/unicorn#cheese#
  • /data/data/####/update_lc
  • /data/data/####/xdtversion.xml
  • /data/misc/####/primary.prof
Miscellaneous:
Executes the following shell scripts:
  • /system/bin/cat /proc/cpuinfo
  • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
  • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/13_2.jar --oat-fd=243 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/13_2.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/14_1.jar --oat-fd=226 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/14_1.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/16.jar --oat-fd=228 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/16.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/18_6.jar --oat-fd=106 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/18_6.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/19.jar --oat-fd=242 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/19.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/2.jar --oat-fd=225 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/2.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/21.jar --oat-fd=209 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/21.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/oatCache/downUmeng/umengDB.jar --oat-fd=65 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/oatCache/downUmeng/umengDB.dex --compiler-filter=speed
  • getprop
  • getprop ro.build.display.id
  • getprop ro.build.version.emui
  • getprop ro.build.version.opporom
  • getprop ro.miui.ui.version.name
  • getprop ro.product.cpu.abi
  • getprop ro.smartisan.version
  • getprop ro.vivo.os.version
  • logcat -d -v threadtime
  • ls /
  • ls /sys/class/thermal
Uses the following algorithms to encrypt data:
  • AES-CBC-NoPadding
  • AES-CBC-PKCS5Padding
  • AES-CBC-PKCS7Padding
  • AES-ECB-NoPadding
  • AES-ECB-PKCS5Padding
  • AES-ECB-PKCS7Padding
  • AES-GCM-NoPadding
  • DES-CBC-PKCS5Padding
  • RSA-ECB-NoPadding
  • RSA-ECB-PKCS1Padding
Uses the following algorithms to decrypt data:
  • AES
  • AES-CBC-NoPadding
  • AES-CBC-PKCS5Padding
  • AES-CBC-PKCS7Padding
  • AES-ECB-NoPadding
  • AES-ECB-PKCS5Padding
  • AES-GCM-NoPadding
  • DES
  • DES-CBC-PKCS5Padding
Accesses the ITelephony private interface.
Gets information about location.
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Gets information about APN settings.
Gets information about installed apps.
Adds tasks to the system scheduler.
Displays its own windows over windows of other apps.

Рекомендации по лечению


Android

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке