Android.DownLoader.4861

Техническая информация

Вредоносные функции:

Выполняет код следующих детектируемых угроз:

Android.Click.338.origin
Android.Click.339.origin
Android.Click.340.origin
Android.DownLoader.870.origin
Android.DownLoader.906.origin
Android.DownLoader.909.origin
Android.DownLoader.929.origin
Android.DownLoader.953.origin
Android.DownLoader.956.origin
Android.DownLoader.960.origin
Android.DownLoader.977.origin
Android.RemoteCode.262.origin
Android.RemoteCode.264.origin
Android.Triada.4567
Android.Triada.482.origin

Загружает из Интернета следующие детектируемые угрозы:

Android.Click.338.origin
Android.Click.339.origin
Android.Click.340.origin
Android.DownLoader.870.origin
Android.DownLoader.906.origin
Android.DownLoader.909.origin
Android.DownLoader.929.origin
Android.DownLoader.953.origin
Android.DownLoader.956.origin
Android.DownLoader.960.origin
Android.RemoteCode.262.origin

Сетевая активность:

Подключается к:

UDP(DNS) 8####.8.4.4:53
UDP(DNS) 1####.114.114.114:53
TCP(HTTP/1.1) ss.ist####.com:8071
TCP(HTTP/1.1) ln####.jqshe####.com:80
TCP(HTTP/1.1) gd.a.s####.com:80
TCP(HTTP/1.1) res####.a####.top:80
TCP(HTTP/1.1) csd.someint####.com:80
TCP(HTTP/1.1) kz####.o0####.com:12037
TCP(HTTP/1.1) ap####.adi####.com:80
TCP(HTTP/1.1) dup.baidust####.com:80
TCP(HTTP/1.1) www.pc####.com.####.cn:80
TCP(HTTP/1.1) pco####.ta####.com:80
TCP(HTTP/1.1) api.meiju####.net:80
TCP(HTTP/1.1) a.tongdat####.com:58999
TCP(HTTP/1.1) r.ist####.com:8071
TCP(HTTP/1.1) filt####.a####.top:80
TCP(HTTP/1.1) c####.be####.s####.com:80
TCP(HTTP/1.1) a####.78####.cc:9090
TCP(HTTP/1.1) nw2.fd-####.com:80
TCP(HTTP/1.1) 2####.98.35.10:80
TCP(HTTP/1.1) p####.sho####.com:80
TCP(HTTP/1.1) pic.s####.cn.####.com:80
TCP(HTTP/1.1) 58.2####.92.50:808
TCP(HTTP/1.1) s####.al####.com:80
TCP(HTTP/1.1) ad.smudge####.com:8986
TCP(HTTP/1.1) imgna####.qc####.cn:80
TCP(HTTP/1.1) ym####.89####.com:34656
TCP(HTTP/1.1) ap####.math####.cn:80
TCP(HTTP/1.1) a####.d####.com:80
TCP(HTTP/1.1) u####.a####.top:80
TCP(HTTP/1.1) ott.h####.com:8071
TCP(HTTP/1.1) api.liyan####.com:808
TCP(HTTP/1.1) a.bjsd####.com:80
TCP(HTTP/1.1) cdn.clou####.xyz:80
TCP(HTTP/1.1) a####.adoc####.com:80
TCP(HTTP/1.1) 47.1####.59.53:900
TCP(HTTP/1.1) 1####.29.29.29:80
TCP(HTTP/1.1) 47.95.1####.130:80
TCP(HTTP/1.1) 1####.196.131.99:3001
TCP(HTTP/1.1) www.78####.cc:80
TCP(HTTP/1.1) s.zhito####.com:808
TCP(HTTP/1.1) b####.bugse####.com:3001
TCP(HTTP/1.1) 1142864####.cn-hang####.fc.####.com:80
TCP(HTTP/1.1) nw1.fd-####.com:80
TCP(HTTP/1.1) b####.bugse####.com:80
TCP(HTTP/1.1) m.jufe####.com:80
TCP(HTTP/1.1) st####.b####.com:80
TCP(HTTP/1.1) alldo####.cqs####.com.####.com:80
TCP(HTTP/1.1) gengy####.b0.a####.com:80
TCP(HTTP/1.1) i####.t####.sogo####.####.com:80
TCP(HTTP/1.1) yun.b####.com:80
TCP(HTTP/1.1) php.sho####.com:80
TCP(HTTP/1.1) www.pcon####.com.cn:80
TCP(HTTP/1.1) s.zhito####.com:999
TCP(HTTP/1.1) api.yunco####.com:80
TCP(HTTP/1.1) jx####.em####.com:10519
TCP(HTTP/1.1) wap.78####.cc:80
TCP(HTTP/1.1) p####.api.adoc####.com:80
TCP(HTTP/1.1) eff.lu.s####.com:80
TCP(HTTP/1.1) 2####.186.173.17:8888
TCP(HTTP/1.1) ivy.pcon####.com.cn:80
TCP(HTTP/1.1) gm.mm####.com:80
TCP(HTTP/1.1) ei.c####.com:80
TCP(HTTP/1.1) 39.1####.252.178:80
TCP(HTTP/1.1) b.b####.com:80
TCP(HTTP/1.1) adcha####.bz.m####.com:80
TCP(HTTP/1.1) de.ssp.harm####.cn:80
TCP(HTTP/1.1) i.ist####.com:8071
TCP(HTTP/1.1) 1####.201.175.19:80
TCP(HTTP/1.1) mh####.b0.a####.com:80
TCP(HTTP/1.1) dl.pcon####.com.cn:80
TCP(HTTP/1.1) 39.1####.5.68:80
TCP(HTTP/1.1) a.78####.cc:80
TCP(HTTP/1.1) t####.a####.top:80
TCP(HTTP/1.1) js.3con####.com.####.cn:80
TCP(HTTP/1.1) dw####.jq####.com:12037
TCP(HTTP/1.1) tinychi####.q####.com.####.com:80
TCP(HTTP/1.1) d####.dd7####.com:80
TCP(HTTP/1.1) 14.17.1####.182:80
TCP(HTTP/1.1) sl.ggve####.com:80
TCP(HTTP/1.1) err.ta####.com:80
TCP(HTTP/1.1) 78####.cc:80
TCP(HTTP/1.1) s.zhito####.com:807
TCP(HTTP/1.1) i####.doub####.com:80
TCP(HTTP/1.1) t1.mm####.cc:80
TCP(HTTP/1.1) v.sho####.com:80
TCP(HTTP/1.1) s.b####.com:80
TCP(HTTP/1.1) z.c####.com:80
TCP(HTTP/1.1) g.cn.miao####.com:80
TCP(HTTP/1.1) a####.gou.s####.com:80
TCP(HTTP/1.1) ad.l####.com:3000
TCP(HTTP/1.1) co####.ssp.adoc####.com:80
TCP(HTTP/1.1) tt####.vni####.com:20147
TCP(HTTP/1.1) b####.bugse####.com:3002
TCP(HTTP/1.1) c.c####.com:80
TCP(HTTP/1.1) oi####.kenanta####.com:80
TCP(HTTP/1.1) k####.ur####.s####.com:80
TCP(HTTP/1.1) ad.toads####.com:80
TCP(HTTP/1.1) src.i####.sogo####.####.com:80
TCP(HTTP/1.1) h####.m####.com:80
TCP(HTTP/1.1) e4####.0r####.com:10293
TCP(HTTP/1.1) s.zhito####.com:99
TCP(HTTP/1.1) ad.l####.com:80
TCP(HTTP/1.1) ssp.k####.com:80
TCP(HTTP/1.1) d.sho####.com:80
TCP(HTTP/1.1) 6z####.njt####.com:10091
TCP(TLS/1.0) f####.58.com:443
TCP(TLS/1.0) o####.u####.cn:443
TCP(TLS/1.0) z.c####.com:443
TCP(TLS/1.0) src.i####.sogo####.####.com:443
TCP(TLS/1.0) www.pcon####.com.cn:443
TCP(TLS/1.0) lhyysdk####.oss-cn-####.aliy####.com:443
TCP(TLS/1.0) na61-na####.wagbr####.adverti####.####.com:443
TCP(TLS/1.0) cn2.3####.cc.####.com:443
TCP(TLS/1.0) ivy.pcon####.com.cn:443
TCP(TLS/1.0) res.wx.qq.####.com:443
TCP(TLS/1.0) web.da.m####.com:443
TCP(TLS/1.0) c####.pc####.com.cn:443
TCP(TLS/1.0) gm.mm####.com:443
TCP(TLS/1.0) pos.b####.com:443
TCP(TLS/1.0) a####.d####.com:443
TCP(TLS/1.0) sf6-ttc####.ps####.com.####.com:443
TCP(TLS/1.0) www.google-####.com:443
TCP(TLS/1.0) u.j####.com:443
TCP(TLS/1.0) ser####.e####.s####.com:443
TCP(TLS/1.0) log.mm####.com:443
TCP(TLS/1.0) wtc.d####.com:443
TCP(TLS/1.0) et2.wagbr####.adverti####.####.com:443
TCP(TLS/1.0) jr.pc####.com.cn:443
TCP(TLS/1.0) imgna####.qc####.cn:443
TCP(TLS/1.0) min####.pc####.com.cn:443
TCP(TLS/1.0) i####.u####.cn:443
TCP(TLS/1.0) m####.pc####.com.cn:443
TCP(TLS/1.0) i####.doub####.com:443
TCP(TLS/1.0) dl.pcon####.com.cn:443
TCP(TLS/1.0) ec####.b####.com:443
TCP(TLS/1.0) g####.api.m####.com:443
TCP(TLS/1.0) po####.pc####.com.cn:443
TCP(TLS/1.0) c####.pindu####.com:443
TCP(TLS/1.0) ei.c####.com:443
TCP(TLS/1.0) api.g####.vip:443
TCP(TLS/1.0) w.i####.com:443
TCP(TLS/1.0) j1.5####.com.####.com:443
TCP(TLS/1.0) cr.3con####.com:443
TCP(TLS/1.0) img.pc####.com.cn:443
TCP(TLS/1.0) pcwe####.log.m####.com:443
TCP(TLS/1.0) mg####.pcon####.com.cn:443
TCP(TLS/1.0) at-####.pindu####.com:443
TCP(TLS/1.0) h####.m####.com:443
TCP(TLS/1.0) lp.pindu####.com:443
TCP(TLS/1.0) dualsta####.wagbr####.ali####.####.com:443
TCP(TLS/1.0) 1####.177.126.95:443
TCP(TLS/1.0) img.kuy####.com:443
TCP(TLS/1.0) s####.d####.com:443
TCP(TLS/1.0) www.pc####.com.####.cn:443
TCP(TLS/1.0) na61-####.wagbr####.ali####.####.com:443
TCP(TLS/1.0) pic.ha####.com:443
TCP(TLS/1.0) y####.58.com:443
TCP(TLS/1.0) i####.doub####.com.####.com:443
TCP(TLS/1.0) pc####.pcv####.com.cn:443
TCP(TLS/1.0) st3.wagbr####.adverti####.####.com:443
TCP(TLS/1.0) p####.pc####.com.cn:443
TCP(TLS/1.0) md####.google####.com:443
TCP(TLS/1.0) c.c####.com:443
TCP(TLS/1.0) android####.go####.com:443
TCP(TLS/1.0) 1####.194.79.95:443
TCP(TLS/1.0) hm.b####.com:443
TCP(TLS/1.0) s####.al####.com:443
TCP(TLS/1.0) th.yangk####.com:443
TCP(TLS/1.0) mo####.yangk####.com:443
TCP(TLS/1.0) mipst####.s####.cn:443
TCP(TLS/1.0) img1-do####.b0.a####.com:443
TCP(TLS/1.0) dup.baidust####.com:443
TCP(TLS/1.0) js.3con####.com.####.cn:443
TCP(TLS/1.0) p####.api.m####.com:443
TCP(TLS/1.0) us####.al####.com.####.net:443
TCP(TLS/1.0) pro####.pcon####.com.cn:443
TCP(TLS/1.0) mr####.pc####.com.cn:443
TCP(TLS/1.0) ssls####.jom####.com:443
TCP(TLS/1.0) i####.d####.com:443
TCP(TLS/1.0) counter####.pc####.com.cn:443
TCP(TLS/1.0) api.icinep####.com:443
TCP(TLS/1.0) 1####.177.119.95:443
TCP(TLS/1.0) ad1.azh####.com:9190
TCP(TLS/1.0) g.al####.com:443
TCP(TLS/1.0) mp.we####.qq.com:443
TCP(TLS/1.2) 1####.177.126.94:443
TCP(TLS/1.2) 1####.177.126.95:443
TCP 39.1####.38.98:9061
TCP gw.adv####.com:8080
TCP 1####.0.11.254:51942

Запросы DNS:

617.a####.top
617.a####.top.####.8
6z####.njt####.com
78####.cc
a####.78####.cc
a####.adoc####.com
a####.al####.com
a####.d####.com
a####.gou.s####.com
a####.m.sm.cn
a####.xapr####.com
a.78####.cc
a.bjsd####.com
a.tongdat####.com
ad.7d####.com
ad.l####.com
ad.smudge####.com
ad.toads####.com
ad1.azh####.com
ad3.azh####.com
adcha####.bz.m####.com
android####.go####.com
ap####.adi####.com
ap####.math####.cn
api.adoc####.com
api.g####.vip
api.icinep####.com
api.liyan####.com
api.m2g.adoc####.com
api.meiju####.n####.####.8
api.meiju####.net
api.meiju####.net/
api.minc####.com
api.yunco####.com
art.t####.sogo####.com
at-####.pindu####.com
at.pindu####.com
at.umt####.com
b####.bugse####.com
b####.bugse####.com
b####.t####.s####.com
b.b####.com
bbs.pc####.com.cn
bds.sn####.com
c####.be####.s####.com
c####.mm####.com
c####.pc####.com.cn
c####.pindu####.com
c####.zhito####.com
c.c####.com
cdn.boo####.com
cdn.clou####.xyz
cn2.3####.cc
co####.ssp.adoc####.com
counter####.pc####.com.cn
cr.3con####.com
csd.someint####.com
d####.dd7####.com
d.clou####.xyz
d.sho####.com
d1.sho####.com
de.ssp.harm####.cn
dl.pcon####.com.cn
dm####.gn####.com
dup.baidust####.com
dw####.jq####.com
dwf.cqs####.com
e4####.0r####.com
ec####.b####.com
eff.lu.s####.com
ei.c####.com
err.ta####.com
ex####.sn####.com
f####.58.com
f####.ur####.s####.com
fc.b####.com
ff.s####.com
filt####.a####.top
fou####.ta####.com
g####.api.m####.com
g####.bdst####.com
g.al####.com
g.cn.miao####.com
gif.lu.sogo####.com
gm.mm####.com
gw.adv####.com
gw.al####.com
gxe.h####.s####.com
h####.m####.com
hm.b####.com
i####.d####.com
i####.doub####.com
i####.doub####.com
i####.doub####.com
i####.t####.s####.com
i####.t####.sogo####.com
i####.u####.cn
i####.uc.cn
i####.uc.cn
i.ist####.com
i.sn####.com
im####.uc.cn
img.5####.com.cn
img.kuy####.com
img.pc####.com.cn
imgna####.qc####.cn
ip.remo####.com
is.sn####.com
ius.mer####.s####.com
ivy.pcon####.com.cn
j####.gol####.s####.com
j1.5####.com.cn
jr.pc####.com.cn
js.3con####.com
jti.h####.s####.com
jwz.3con####.com
jx####.em####.com
k####.ur####.s####.com
kz####.o0####.com
l####.m.sm.cn
lg.ca####.com
lg.ca####.com.####.8
lhyysdk####.oss-cn-####.aliy####.com
ln####.jqshe####.com
log.mm####.com
log.sho####.com
lp.pindu####.com
m####.go####.com
m####.i####.sogo####.com
m####.pc####.com.cn
m.jufe####.com
md####.google####.com
mg####.pcon####.com.cn
min####.pc####.com.cn
mipst####.s####.cn
mo####.pcon####.com.cn
mo####.yangk####.com
mp.we####.qq.com
mr####.pc####.com.cn
n####.be####.s####.com
n####.mer####.s####.com
n1.l####.com
n2.l####.com
nw1.fd-####.com
nw2.fd-####.com
o####.t####.s####.com
o####.u####.cn
oi####.kenanta####.com
osc.ur####.s####.com
ott.h####.com
p####.9####.com
p####.9####.com
p####.api.adoc####.com
p####.api.m####.com
p####.bugse####.com
p####.p####.s####.com
p####.pc####.com.cn
p####.sho####.com
pc####.pcv####.com.cn
pco####.c####.com
pco####.sm.cn
pcwe####.log.m####.com
php.clou####.xyz
php.sho####.com
pic.ha####.com
pic.s####.cn
plb####.u####.com
png.lu.sogo####.com
po####.pc####.com.cn
pos.b####.com
pro####.pcon####.com.cn
pv.s####.com
qhl.be####.s####.com
qxm.p####.s####.com
r####.mer####.s####.com
r####.wx.qq.com
r.ist####.com
r1.baiyuns####.com
res####.a####.top
rs1.minc####.com
s####.al####.com
s####.d####.com
s####.d####.com
s####.kt####.com
s####.kt####.com.####.8
s####.m.sm.cn
s####.shidux####.com
s.b####.com
s.zhito####.com
s2.z####.cn
s3.ps####.com
s3a.ps####.com
s4.c####.com
s5.c####.com
s9.c####.com
s96.c####.com
ser####.e####.s####.com
sf1-ttc####.ps####.com
sf3-ttc####.ps####.com
sf6-ttc####.ps####.com
sl.ggve####.com
sn####.kv####.com
src.i####.sogo####.com
ss.ist####.com
ssp.k####.com
st####.b####.com
st####.pd####.com
sw4.d####.com
t####.a####.top
t####.sogo####.com
t.clou####.xyz
t1.mm####.cc
th.yangk####.com
tt####.vni####.com
u####.a####.top
u####.u####.com
u.j####.com
v####.gou.s####.com
v####.ix####.com
v.bjsd####.com
v.h####.com
v.sho####.com
v1.c####.com
v1.fuling-####.com
v2.fuling-####.com
w####.pc####.com.cn
w####.pcon####.com.cn
w.i####.com
wap.78####.cc
wds.i####.sogo####.com
web.da.m####.com
wtc.d####.com
ww1.sin####.cn
www.78####.cc
www.78####.cc
www.google-####.com
www.m####.com
www.pc####.com.cn
www.pcon####.com.cn
www.remo####.com
www.toutiao####.com
wz.78####.cc
x####.ur####.s####.com
y####.58.com
y####.m.sm.cn
y####.p####.s####.com
ym####.89####.com
yun.b####.com
z12.c####.com
z2.c####.com
z3.c####.com
z5.c####.com
z6.c####.com
z9.c####.com

Запросы HTTP GET:

1142864####.cn-hang####.fc.####.com/qs/?pa=####
1142864####.cn-hang####.fc.####.com/xqs/?pa=####
78####.cc/index/count/count_shell?shellname=####
a####.78####.cc:9090/token/update
a####.adoc####.com/fw/task?task_id=####&ip=####
a####.d####.com/rewrite?fromid=####
a####.gou.s####.com/ask?id=####&cb=####&ssi0=####&wsg=####&_v=####
a####.gou.s####.com/wap_ask_service?callback=SOGOU_STAR_URL_CALLBACK&url...
a####.gou.s####.com/wapxml?id=1111360&h=5&w=20&fv=0&if=16&mi=0&sohuurl=h...
a.78####.cc/index/upapp/app_datas?upapp_id=####&imei=####&channel_id=####
ad.l####.com/sdk_ad
ad.l####.com:3000/api?rdtime=####&secure=####&channel=####&osv=####&adid...
adcha####.bz.m####.com/direct?cc=####
alldo####.cqs####.com.####.com/rhsdk/tktest503/xdt.jar
ap####.adi####.com/tj?key=####&rd=####&req=YWR####&token=####
ap####.math####.cn/ssp/mgm/task?taskId=####&ip=####
api.meiju####.net/plugins/80s.json
api.meiju####.net/plugins/kuaikan66.json
api.meiju####.net/plugins/micaitu.json
b####.bugse####.com/sdk_ad
b####.bugse####.com/sg001.js
b####.bugse####.com/sg002.js
b####.bugse####.com/sg003.js
b####.bugse####.com/sg004.js
b####.bugse####.com/sg005.js
b####.bugse####.com/sg006.js
b####.bugse####.com/sg007.js
b####.bugse####.com/sg008.js
b####.bugse####.com:3001/api?rdtime=####&secure=####&channel=####&osv=##...
b####.bugse####.com:3002/api?rdtime=####&secure=####&channel=####&osv=##...
b.b####.com/v.htm?et=####&bid=####&cid=####&adxid=####&p=####&ext=####
c####.be####.s####.com/ask?id=####&cb=####&ssi0=####&wsg=####&_v=####
c####.be####.s####.com/wap_ask_service?callback=SOGOU_STAR_URL_CALLBACK&...
c####.be####.s####.com/wapxml?id=1111359&h=5&w=20&fv=0&if=16&mi=0&sohuur...
c####.be####.s####.com/wapxml?id=1111360&h=5&w=20&fv=0&if=16&mi=0&sohuur...
c####.be####.s####.com/wapxml?id=1111405&h=5&w=20&fv=0&if=16&mi=0&sohuur...
c####.be####.s####.com/wapxml?id=1111406&h=5&w=20&fv=0&if=16&mi=0&sohuur...
c.c####.com/core.php?web_id=####&t=####
c.c####.com/stat.php?id=####
cdn.clou####.xyz/jar/365admo.jar
cdn.clou####.xyz/jar/ad367.jar
cdn.clou####.xyz/jar/admob1231.jar
cdn.clou####.xyz/jar/admob654.jar
cdn.clou####.xyz/jar/an0416.jar
cdn.clou####.xyz/jar/cf1231.jar
cdn.clou####.xyz/jar/js1202.jar
cdn.clou####.xyz/jar/la0116huo.jar
cdn.clou####.xyz/jar/miqiu0925.jar
cdn.clou####.xyz/jar/santi0316.jar
cdn.clou####.xyz/jar/santi_656_0401.jar
cdn.clou####.xyz/jar/so0117.jar
cdn.clou####.xyz/jar/xixi0401.jar
cdn.clou####.xyz/jar/ys1450.jar
cdn.clou####.xyz/jar/ys7781.jar
co####.ssp.adoc####.com/api/v2/SDKCommonConfig?channelCode=####&version=...
co####.ssp.adoc####.com/api/v2/fwConfig?channelCode=####&version=####
co####.ssp.adoc####.com/api/v2/fwWebviewRatioConfig?channelCode=####&ver...
co####.ssp.adoc####.com/api/v2/mgmConfig?channelCode=####&version=####
co####.ssp.adoc####.com/api/v2/mgmWebviewRatioConfig?channelCode=####&ve...
csd.someint####.com/ds/c0e92f5f05b4b44eb1140963a4131132e6f997f9842e62d9c...
d####.dd7####.com//upload/plog/cvfd.jar
d####.dd7####.com//upload/sdk/Ericdex20200324.jar
d####.dd7####.com//upload/sdk/papp09001dex20200401.jar
d####.dd7####.com//upload/sdk2/SDK442dex20200106.jar
d####.dd7####.com/upload/plog/bghu.jar
d####.dd7####.com/upload/sdk/lotusDex20200427.jar
d####.dd7####.com/upload/sdk/zawdex20200320.jar
d####.dd7####.com/upload/sdk2/hhq01dex20200218.jar
d####.dd7####.com/upload/sdk2/rq02dex20190829.jar
d####.dd7####.com/upload/sdk3/kzddex20191224.jar
dup.baidust####.com/js/os.js
eff.lu.s####.com/answer?asid=####&r=####
ei.c####.com/stat.htm?id=####&cnzz_eid=####
ei.c####.com/stat.htm?id=####&r=####&lg=####&ntime=####&cnzz_eid=####&sh...
err.ta####.com/error1.html?c=404&u=/hz.aplus.taobao.org/app.gif?&cna=QC8...
err.ta####.com/error1.html?c=404&u=/hz.aplus.taobao.org/app.gif?&cna=Qi8...
filt####.a####.top/filter_control_617.json
g.cn.miao####.com/x/k=2166195&p=7ZbJa&dx=__IPDX__&rt=2&pro=n&ns=95.211.1...
gd.a.s####.com/cityjson?ie=####
gengy####.b0.a####.com/100056.html
gengy####.b0.a####.com/100303.html
gengy####.b0.a####.com/moban5/css/comment.css
gengy####.b0.a####.com/moban5/css/common.min.css
gengy####.b0.a####.com/moban5/css/dcn_head.css
gengy####.b0.a####.com/moban5/css/detail.min.css
gengy####.b0.a####.com/moban5/css/gridism.min.css
gengy####.b0.a####.com/moban5/css/pageAdv.css
gengy####.b0.a####.com/moban5/css/pageGroup.css
gengy####.b0.a####.com/moban5/css/special.min.css
gengy####.b0.a####.com/moban5/images/p1.png
gm.mm####.com/9.gif?abc=####&rnd=####
h####.m####.com/img/ad.union.api/a3d7602e17590b2bff5055cbef64c9e0~cs_690...
i####.doub####.com/99a7725ec41021a439cfd6c81abe760d/5ea74454/video/tos/c...
i####.doub####.com/large/683cb5a1gy1g1mbi0xz6bj20go08cdg8.jpg
i####.t####.sogo####.####.com/wap/js/wp.js
imgna####.qc####.cn/upload/vod/2020-03/202003271585316569.jpg
imgna####.qc####.cn/upload/vod/2020-04/p2591913468.jpg
imgna####.qc####.cn/upload/vod/2020-04/p2595882406.jpg
ivy.pcon####.com.cn/click?id=####&adid=####&watch=####
js.3con####.com.####.cn/pcauto/2016/autopocket/aides/js/share.js
js.3con####.com.####.cn/pcauto/2016/autopocket/flexible.js
js.3con####.com.####.cn/pcauto/2016/autopocket/reset.css
js.3con####.com.####.cn/pcauto/2016/autopocket/wx_astrict.js
k####.ur####.s####.com/ask?id=####&cb=####&ssi0=####&wsg=####&_v=####
k####.ur####.s####.com/wap_ask_service?callback=SOGOU_STAR_URL_CALLBACK&...
k####.ur####.s####.com/wapxml?id=1111250&h=5&w=20&fv=0&if=16&mi=0&sohuur...
k####.ur####.s####.com/wapxml?id=1111405&h=5&w=20&fv=0&if=16&mi=0&sohuur...
k####.ur####.s####.com/wapxml?id=1111406&h=5&w=20&fv=0&if=16&mi=0&sohuur...
ln####.jqshe####.com/one/44236jghgvjhbwyf.zip
ln####.jqshe####.com/two/aksoqdqwe
ln####.jqshe####.com/u/mzkasldjqwex
ln####.jqshe####.com/zz/442ghffgtrwyf.zip
m.jufe####.com/caihua/libnms.so
m.jufe####.com/caihua/libnms64.so
m.jufe####.com/ot/so/sodown.jsp
m.jufe####.com/ot/so/sodown.jsp?type=####
m.jufe####.com/v2/cd.jsp?ch=####&androidId=####
m.jufe####.com/v2/cs.jsp?androidId=####&aid=####&action=####&ch=####
mh####.b0.a####.com/api/sdk-api-ad.js
mh####.b0.a####.com/sdk/tt_001.html
mh####.b0.a####.com/sm/tx001.js
mh####.b0.a####.com/sm/tx002.js
nw1.fd-####.com/detail/nw1?type=####&id=####
nw1.fd-####.com/detail/pict1?type=####&id=####
nw1.fd-####.com/detail/pict2?type=####&id=####
nw1.fd-####.com/favicon.ico
nw2.fd-####.com/detail/nw2?type=####&id=####
nw2.fd-####.com/detail/ut001?type=####&id=####
nw2.fd-####.com/detail/ut002?type=####&id=####
nw2.fd-####.com/favicon.ico
oi####.kenanta####.com/c/ieuwndlsn0219.zip
oi####.kenanta####.com/c/jz/kdyyeeq.zip
oi####.kenanta####.com/c/jz/wksyl.zip
oi####.kenanta####.com/c/soiueyqas.zip
p####.api.adoc####.com/ip
pco####.ta####.com/app.gif?&cna=####
pic.s####.cn.####.com/img/5e160007d3c11.jpg
res####.a####.top/LHYY.png
res####.a####.top/sdk10_6.png
res####.a####.top/sdk3.png
res####.a####.top/sdk6.png
s####.al####.com/L1/272/6837/static/wap/img/uc-32.png
s####.al####.com/L1/272/6837/static/wap/img/uc.png
s.b####.com/v.htm?et=####&bid=####&cid=####&adxid=####&ext=####
s.zhito####.com:807/528/0322pc.html
s.zhito####.com:808/0322/index.html
s.zhito####.com:808/0322/yrc_souhu.js
s.zhito####.com:808/pctja.html
s.zhito####.com:808/zhu/vip.html
s.zhito####.com:99/funt/index.html
s.zhito####.com:999/c/index.php
sl.ggve####.com/eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ4NjQiOmZhbHNlLCJ...
src.i####.sogo####.####.com/wap/css/common.css
src.i####.sogo####.####.com/wap/images/wap_logo_2.png
src.i####.sogo####.####.com/wap/images/wap_txt_1.png
src.i####.sogo####.####.com/wap/js/wp.js
st####.b####.com/1769/trnwqkpbcvn_2020424.jpg
st####.b####.com/jar/adm_296_1231.jar
t####.a####.top/percent.json
t####.a####.top/pingpaiAD.json
t1.mm####.cc/uploads/tu/201708/10075/4bba94d12b.jpg
t1.mm####.cc/uploads/tu/201708/10146/1c54f0530d.jpg
t1.mm####.cc/uploads/tu/201708/9999/rn43fff98878.png
t1.mm####.cc/uploads/tu/201712/9999/rn369851fd60.jpg
t1.mm####.cc/uploads/tu/201801/9999/rn323c1b02e4.jpg
t1.mm####.cc/uploads/tu/201801/9999/rn9b4fc68e50.jpg
tinychi####.q####.com.####.com/api_73_api.jar
tinychi####.q####.com.####.com/lijian.jar
tinychi####.q####.com.####.com/share_img.png
tinychi####.q####.com.####.com/wangyu1.jar
u####.a####.top/617.html
u####.a####.top/favicon.ico
wap.78####.cc/api/cn/1
www.78####.cc/index/backend/pro_count?event_id=####&imei=####&channel_id...
www.78####.cc/index/limit/getLimit?channel=####&project=####
www.78####.cc/index/limit/limit_get?channel=####&project=####
www.78####.cc/index/project/project_status?action=####
www.pc####.com.####.cn/autox/6a976e56b61b2febd215f6cbe5186f5f.htm
www.pc####.com.####.cn/zt/gz20160504/autopocket/images/shixiao.png
yun.b####.com/pw/666f72627974.jpg
yun.b####.com/pw/70777777.jpg
yun.b####.com/pw/765f73646b.jpg
yun.b####.com/tz/6173.jpg
yun.b####.com/xtz/1579072131.ico
z.c####.com/stat.htm?id=####&r=####&lg=####&ntime=####&cnzz_eid=####&sho...

Запросы HTTP POST:

6z####.njt####.com:10091/wisdom/marking
a.bjsd####.com/index.php?r=####
a.tongdat####.com:58999/
ad.smudge####.com:8986/api/5/detail?businessId=####&token=####&timestamp...
ad.toads####.com/api/angent
api.liyan####.com:808/get/api
api.meiju####.net/
api.yunco####.com/service/rest
csd.someint####.com/v2/lkx/3e367681-d0bc-47d4-b5b4-9996a329254f
csd.someint####.com/v2/skx/3e367681-d0bc-47d4-b5b4-9996a329254f
d.sho####.com/index.php?r=####
de.ssp.harm####.cn/r
dl.pcon####.com.cn/
dw####.jq####.com:12037/mqtrll/
dw####.jq####.com:12037/wuegnh/
e4####.0r####.com:10293/widlth/
e4####.0r####.com:10293/xkeila/
i.ist####.com:8071/6.1.1/1510864978/1
jx####.em####.com:10519/ntmili/
jx####.em####.com:10519/qazggd/
jx####.em####.com:10519/xoslvm/
kz####.o0####.com:12037/ftudgp/
ott.h####.com:8071/api/10
p####.sho####.com/index.php?r=####
php.sho####.com/index.php?r=####
r.ist####.com:8071/6.1.1/163832107/2
ss.ist####.com:8071/1
ss.ist####.com:8071/8
ssp.k####.com/api/useful
tt####.vni####.com:20147/dijc1v/
v.sho####.com/index.php?r=####
www.78####.cc/index/backend/pro_data
www.pc####.com.####.cn/
www.pcon####.com.cn/
ym####.89####.com:34656/aowbg/
ym####.89####.com:34656/ixowf/
ym####.89####.com:34656/qdkle/
ym####.89####.com:34656/rqiea/

Изменения в файловой системе:

Создает следующие файлы:

/data/data/####/-1127729055-1266689676
/data/data/####/.0afe7acc-159c-4227-a5a4-26a29504d63c
/data/data/####/.6173.apk
/data/data/####/.6173.dex
/data/data/####/.6173.dex.flock (deleted)
/data/data/####/.666f72627974.apk
/data/data/####/.666f72627974.dex
/data/data/####/.666f72627974.dex.flock (deleted)
/data/data/####/.70777777.apk
/data/data/####/.70777777.dex
/data/data/####/.70777777.dex.flock (deleted)
/data/data/####/.765f73646b.apk
/data/data/####/.765f73646b.dex
/data/data/####/.765f73646b.dex.flock (deleted)
/data/data/####/.bak
/data/data/####/.dex
/data/data/####/.dex.flock (deleted)
/data/data/####/.imprint
/data/data/####/.jg.ic
/data/data/####/.jgck
/data/data/####/002c433029720a52_0
/data/data/####/0035f663f3039469_0
/data/data/####/004063ba941718da_0
/data/data/####/005bb92749461c36_0
/data/data/####/00993f511c8b1b878830aa908a599c16c3d7ae512bc2c46...d978.0
/data/data/####/00b93eba85ba5807_0
/data/data/####/013884d6943fb5e8_0
/data/data/####/01f4cfbd4e0fddd2ad2951c27cf3b2a1.0.tmp
/data/data/####/01f4cfbd4e0fddd2ad2951c27cf3b2a1.1.tmp
/data/data/####/020ba8fc52c83adb_0
/data/data/####/0237055761d58e65_0
/data/data/####/029f3598556c673dec8a8d52ab4d3640.0.tmp
/data/data/####/029f3598556c673dec8a8d52ab4d3640.1.tmp
/data/data/####/02eeb739472e38cc_0
/data/data/####/032ae719ffba63f8_0
/data/data/####/032ae719ffba63f8_1
/data/data/####/0389ab9faa3d953a_0
/data/data/####/03cabb6fb10dcd8c_0
/data/data/####/03d9d2b54492961b_0
/data/data/####/0404a49d5efdf009_0
/data/data/####/0447386b6c35096c_0
/data/data/####/04aa8ced60890e9f_0
/data/data/####/04ee3bdf464142f1_0
/data/data/####/05386d0addb350f1_0
/data/data/####/05386d0addb350f1_0 (deleted)
/data/data/####/05386d0addb350f1_1
/data/data/####/055a253b1791588a0b7f1345d1613cf4.0.tmp
/data/data/####/055a253b1791588a0b7f1345d1613cf4.1.tmp
/data/data/####/055e9cf79245504b_0
/data/data/####/059c2c07d5410615_0
/data/data/####/05ac6e0549609ba9_0
/data/data/####/0615e1793dc156bb_0
/data/data/####/06b967472599e87b_0
/data/data/####/07dabac0e621109d_0
/data/data/####/09230ebd5f3fc307_0
/data/data/####/09eae778e4266f3d_0
/data/data/####/09ef3e63e8f1257d_0
/data/data/####/0ac6f6e034e36c66_0
/data/data/####/0b216ff092d76f60_0
/data/data/####/0b4e961dbcfa1e5f_0
/data/data/####/0b860f126084d29c_0
/data/data/####/0b860f126084d29c_1
/data/data/####/0bfe599ac466ad8c_0
/data/data/####/0bff43be09dc3ac0_0
/data/data/####/0ca3154ecae5dbf6_0
/data/data/####/0cadcc646e07bc8f_0
/data/data/####/0d5d104ff6bbcb0d_0
/data/data/####/0da42c3166426948_0
/data/data/####/0da42c3166426948_1
/data/data/####/0dbd760ae7200a21_0
/data/data/####/0dcfe22ae497a6f5_0
/data/data/####/0e350b766d596aff_0
/data/data/####/0e350b766d596aff_1
/data/data/####/0eb508a274c71c27_0
/data/data/####/0edc3b4260111370_0
/data/data/####/0f4ae6f10f650e2f_0
/data/data/####/0f4ae6f10f650e2f_1
/data/data/####/10064413bd161763_0
/data/data/####/10074901dd249c39_0
/data/data/####/1021689741840853517
/data/data/####/10_6.dex
/data/data/####/10_6.dex.flock (deleted)
/data/data/####/10_6.jar
/data/data/####/12242d426430788f_0
/data/data/####/1371d268e8af9734_0
/data/data/####/13c13c473e2251ad_0
/data/data/####/14255bde25303e94_0
/data/data/####/14255bde25303e94_1
/data/data/####/143970178-1509997924
/data/data/####/147c3a1bb9359235_0
/data/data/####/15fb8363fd8eb01e_0
/data/data/####/170802f984592fba_0
/data/data/####/183dbbda6b631d3e_0
/data/data/####/183dbbda6b631d3e_1
/data/data/####/18873752c3fbe12ffe85ee4952f33c449532fba942089c4....0.tmp
/data/data/####/1892a402b5d76062_0
/data/data/####/18f95d787d70eb81_0
/data/data/####/1ab1a36d887a253edd1fe33ff509a07e.0.tmp
/data/data/####/1ab1a36d887a253edd1fe33ff509a07e.1.tmp
/data/data/####/1ac357d754362dda_0
/data/data/####/1ae8d446b4f6eb4d_0
/data/data/####/1ba1d91323947632_0
/data/data/####/1d026c55377b99e5_0
/data/data/####/1d026c55377b99e5_1
/data/data/####/1d7b835975580124_0
/data/data/####/1da5ea9459853deb_0
/data/data/####/1db32d5b0ea34da8_0
/data/data/####/1ddc9efeb1d38e2a_0
/data/data/####/1ddf6f41acda3f22_0
/data/data/####/1df5d2d3c925371c_0
/data/data/####/1e030574286a6601_0 (deleted)
/data/data/####/1fc8a1ff49d7949e_0
/data/data/####/1fefa1aab95f7606_0
/data/data/####/21b60fb6adc59d02_0
/data/data/####/2350b68d6a62d810_0
/data/data/####/24a52531b50817fa_0
/data/data/####/24a52531b50817fa_1
/data/data/####/25e50a1a6bc283a6_0
/data/data/####/25e50a1a6bc283a6_1
/data/data/####/267d778e2ab8659263fd9fd49f3b76795a38a2dac099769....0.tmp
/data/data/####/26c3bb76e764a4ef_0
/data/data/####/277b2511eb0bb743_0
/data/data/####/27a12217fbf8a6cc1e3be1513f3f75d23de2030b93f00b7....0.tmp
/data/data/####/27a37f462535ebe5_0
/data/data/####/27dac8705e581c47_0
/data/data/####/27dac8705e581c47_1
/data/data/####/27f2dd6b1ceca7b927c695cad6d8d546.0.tmp
/data/data/####/27f2dd6b1ceca7b927c695cad6d8d546.1.tmp
/data/data/####/28780868a7f56aeb_0
/data/data/####/28BFF8DF45B978D339EFBD230A17100A.dex
/data/data/####/28BFF8DF45B978D339EFBD230A17100A.dex.flock (deleted)
/data/data/####/2940195bd9870d6e_0
/data/data/####/2940195bd9870d6e_1
/data/data/####/2D877BEFD33FF12D858B92AAFB6A567E.dex
/data/data/####/2D877BEFD33FF12D858B92AAFB6A567E.dex.flock (deleted)
/data/data/####/2a3dfb3a6c31c48f_0
/data/data/####/2aa9e69abb60aab5_0
/data/data/####/2acd9e7703ca2a0c_0
/data/data/####/2b7aecb27116ad5d_0
/data/data/####/2bd1f3c5cfbb3bc3_0
/data/data/####/2c2ec79e71877e90_0
/data/data/####/2c334140fa61cd0a_0
/data/data/####/2cac6c995d87e8d6_0
/data/data/####/2d3d3dac044588cf_0
/data/data/####/2d7dbb7560ef5d52_0 (deleted)
/data/data/####/2da8fe95accb7a54_0
/data/data/####/2dc7f6c5cb93851e_0
/data/data/####/2de6ab0a76a49120_0
/data/data/####/2e1e520bc235bdae_0
/data/data/####/2e3442dbeec09ce5_0
/data/data/####/2ed3eac51318b802_0
/data/data/####/2ed3eac51318b802_1
/data/data/####/2f6decba0c380779f0f84cd8ad625be0ad4e3522aa19cfd....0.tmp
/data/data/####/2f95d7fc33973727_0
/data/data/####/3.dex
/data/data/####/3.dex.flock (deleted)
/data/data/####/3.jar
/data/data/####/300e5be1abe62f84_0
/data/data/####/31b1fb3f27e5b9d19b21a1e984bbc17c2d2845b311e5619....0.tmp
/data/data/####/32363b24414e7d62_0
/data/data/####/32363b24414e7d62_1
/data/data/####/329dc8fb49340655_0
/data/data/####/32ce07365dba1fa2_0
/data/data/####/33693a2685f0853474ce4d8ee9d4231449a46194b221f36....0.tmp
/data/data/####/33864d89480ac8a1_0
/data/data/####/33912fd3e41a1b88_0 (deleted)
/data/data/####/33af4d7018cf6b16_0
/data/data/####/33e4018af87192a8_0
/data/data/####/33e4018af87192a8_1
/data/data/####/33ee2f5be0e6ed51ce602437a4031e8e15611e97add0532....0.tmp
/data/data/####/341d6b40b9354a4d_0
/data/data/####/346e1769a165f737_0
/data/data/####/34f555466244ab3e_0
/data/data/####/3580d14f108d3868_0
/data/data/####/365admo.dex
/data/data/####/365admo.dex.flock (deleted)
/data/data/####/36bd1ba46f08b1f74e67523b148cad7501751d6bb3c8789....0.tmp
/data/data/####/371c7b5554cba12e_0
/data/data/####/37afbb7ac428e4b4_0
/data/data/####/38a3f4dfa9cd6126_0
/data/data/####/38a3f4dfa9cd6126_1
/data/data/####/395730b727f5f4de_0
/data/data/####/397646fcac866f12_0
/data/data/####/3a2fcb23e4d9fe4f_0
/data/data/####/3aa8c578ada69609_0
/data/data/####/3abb42379d15316d_0
/data/data/####/3b1e9d75c231f00f_0
/data/data/####/3b292fdb599cde70_0
/data/data/####/3b292fdb599cde70_0 (deleted)
/data/data/####/3be8da3d1394c8fc_0
/data/data/####/3be8da3d1394c8fc_1
/data/data/####/3cb727cc96df62330d2b9b7a70ab24e2
/data/data/####/3cb727cc96df62330d2b9b7a70ab24e2.tmp
/data/data/####/3d9bd4bb049c8456deff1668245780d7.db
/data/data/####/3de01e4f40637562_0
/data/data/####/3de01e4f40637562_0 (deleted)
/data/data/####/3ec0cc838a8e5b7e_0
/data/data/####/3f18f259733763d3_0
/data/data/####/3f5ee1bd08ecc988_0
/data/data/####/402a3c145e89fe017738b95148df3bc9.0.tmp
/data/data/####/402a3c145e89fe017738b95148df3bc9.1.tmp
/data/data/####/40e0f963a2250852f304aeddb3cc470b.0.tmp
/data/data/####/40e0f963a2250852f304aeddb3cc470b.1.tmp
/data/data/####/4121c7f7211b2d73_0
/data/data/####/412d5f1a0654348f_0
/data/data/####/4196930b8d2de562_0
/data/data/####/41d2e5485a86e13c_0
/data/data/####/41d469a6557bc896_0
/data/data/####/41d469a6557bc896_1
/data/data/####/422a4fbd527c9210_0
/data/data/####/42e3379b554d697429c03f7f78da57aa.0.tmp
/data/data/####/42e3379b554d697429c03f7f78da57aa.1.tmp
/data/data/####/42e5e248972b0535_0
/data/data/####/42e5e248972b0535_1
/data/data/####/43242c37dc2e8254_0
/data/data/####/4356f30e304272fa_0
/data/data/####/435c83863b9b93ec_0
/data/data/####/437c42f44a8b804b_0
/data/data/####/437c42f44a8b804b_1
/data/data/####/439168ca0e1cec0b_0 (deleted)
/data/data/####/43c135500a0372f5_0
/data/data/####/43c135500a0372f5_1
/data/data/####/441681f9d08bfcf0_0
/data/data/####/441681f9d08bfcf0_1
/data/data/####/44367F39739CCD6BBF960E91E7DB78B2.xml
/data/data/####/447ee3d18713e665a9b46ca341e2c070.0.tmp
/data/data/####/447ee3d18713e665a9b46ca341e2c070.1.tmp
/data/data/####/44f1ec00ed710311_0
/data/data/####/450592729684279328
/data/data/####/453b6a5777b939fa_0
/data/data/####/453b6a5777b939fa_1
/data/data/####/4601f2033fc3ef90_0
/data/data/####/47be3b8cb8d42727_0
/data/data/####/48209c2cd1026531_0
/data/data/####/48871a7d8183a532_0
/data/data/####/49daf83dcfc6fb00_0 (deleted)
/data/data/####/4B8DB6B83129A65A2EF4DCFC1393C3B0.xml
/data/data/####/4D002E28A394CE875ED647EEEB8EECAC.dex
/data/data/####/4D002E28A394CE875ED647EEEB8EECAC.dex.flock (deleted)
/data/data/####/4b38870776331023_0
/data/data/####/4b7a61d49fc85259_0
/data/data/####/4baf45cd7e2e427e_0
/data/data/####/4baf45cd7e2e427e_1
/data/data/####/4bd434318cde824f_0
/data/data/####/4c59859bb5284e4e_0
/data/data/####/4cd364d8943482f6_0
/data/data/####/4d38a3d6886d5711_0
/data/data/####/4d38a3d6886d5711_1
/data/data/####/4d5ca0a7a529139e_0
/data/data/####/4d5ca0a7a529139e_1
/data/data/####/4d948299c7c7d7fc_0
/data/data/####/4e2bd367a1906312_0
/data/data/####/4e45bac7838d2deb_0
/data/data/####/4ef35ad1feaee4fc_0
/data/data/####/4f118e10919f4aceba83a27652ccc452.0.tmp
/data/data/####/4f118e10919f4aceba83a27652ccc452.1.tmp
/data/data/####/4f47c95533b04330_0
/data/data/####/4f7e2ffb3680f21fad700b75d1349413.0.tmp
/data/data/####/4f7e2ffb3680f21fad700b75d1349413.1.tmp
/data/data/####/4f95e0c1f6e7451f_0
/data/data/####/4ff4f166d8bb4bd0_0
/data/data/####/5047aef51e20473a_0
/data/data/####/50cdd785f1d086ed_0
/data/data/####/5127fc73890942ea_0
/data/data/####/513e02a47673dbbf_0
/data/data/####/518031ecbff9259d_0
/data/data/####/51e40dbfa53ba83f_0
/data/data/####/5211de8999019f43_0
/data/data/####/524bf2afa10898e7_0
/data/data/####/52caff5bfc91c86d_0
/data/data/####/52da49ca5f40d289_0
/data/data/####/53da7a6394497b0b_0
/data/data/####/54500874f61556d7_0
/data/data/####/54500874f61556d7_1
/data/data/####/54af89560b5ef756_0
/data/data/####/55862c8f70d63493_0
/data/data/####/560772d1d4de18b4_0
/data/data/####/560ea55e7daa7b10_0
/data/data/####/56d3c3db18f3d36d_0
/data/data/####/571ec11f763f3f9c_0
/data/data/####/5731148B02391003626E1D6AA6E7C848.dex
/data/data/####/5731148B02391003626E1D6AA6E7C848.dex.flock (deleted)
/data/data/####/57462e6895375a35_0
/data/data/####/5780138be979e61a_0
/data/data/####/57b0d8f0784a8cea_0
/data/data/####/5802e7bea47f1ea8_0
/data/data/####/580bac411723fe45_0
/data/data/####/58c29718f8ad1fe702b446a9175e474e55472bbf1724736....0.tmp
/data/data/####/58f6ba4154becf57_0
/data/data/####/5910a6be22202308_0
/data/data/####/592meiju_data.xml
/data/data/####/596b7d5e30df79df_0
/data/data/####/59758326fec1ef13_0
/data/data/####/5994eced150a6949_0
/data/data/####/59c260ccde420c96_0
/data/data/####/59c260ccde420c96_1
/data/data/####/59d103a390634512_0
/data/data/####/59d103a390634512_1
/data/data/####/5a69b321fb263283_0
/data/data/####/5c3997a2304c560c_0
/data/data/####/5dd3260a8e5f3e9a_0
/data/data/####/5dd3260a8e5f3e9a_1
/data/data/####/5e3d137e1e0450fe_0 (deleted)
/data/data/####/5f853b06fbf7a44a_0
/data/data/####/6.dex
/data/data/####/6.dex.flock (deleted)
/data/data/####/6.jar
/data/data/####/61b3e3a71cda4c03_0
/data/data/####/61cd2e1d3cc2ed2a_0
/data/data/####/61d018678fdd98b9_0
/data/data/####/626bfd2719831f00_0
/data/data/####/63647157ab827c94_0
/data/data/####/63647157ab827c94_1
/data/data/####/6386dcf4ebe7763f_0
/data/data/####/6391cf2a2c29425a_0
/data/data/####/63a57dbfda0dbee2_0
/data/data/####/63da4bf181d398ae_0
/data/data/####/640a2962e32fd15b_0
/data/data/####/642f6dfe2c0e2a07_0
/data/data/####/6482e71fdc3c23be_0
/data/data/####/6578b2cafe3332df_0
/data/data/####/659695aabd247007_0
/data/data/####/65ae84be8977c611_0
/data/data/####/65b629cc1ec321cf_0
/data/data/####/65d6f483d1d752ae_0
/data/data/####/66f1a4e97724d4ab_0
/data/data/####/67f8548a929d7358_0
/data/data/####/680ca67f7562abeb_0
/data/data/####/68502514a0cf50e8464b1b6c5fd20399.0.tmp
/data/data/####/68502514a0cf50e8464b1b6c5fd20399.1.tmp
/data/data/####/68b52e0940577667_0
/data/data/####/68cb373f19866a00_0
/data/data/####/694620a2949c1fcdf0810b7f96b79440.0.tmp
/data/data/####/694620a2949c1fcdf0810b7f96b79440.1.tmp
/data/data/####/69520e093494a8f0_0
/data/data/####/69520e093494a8f0_1
/data/data/####/697d6052e5aebd34_0
/data/data/####/69a19d9fb61a02e1eebe0271147cc930.0.tmp
/data/data/####/69a19d9fb61a02e1eebe0271147cc930.1.tmp
/data/data/####/6B2F4FEDB1346F9E3AE1C0D381EEFBC9.dex
/data/data/####/6B2F4FEDB1346F9E3AE1C0D381EEFBC9.dex.flock (deleted)
/data/data/####/6a47560fb094614e_0
/data/data/####/6a6b6c0d664bd8316aa1ffa6243f73b22da0cf9f07b1108....0.tmp
/data/data/####/6b0046aa35b4ccb58938330566f1083b.0.tmp
/data/data/####/6b0046aa35b4ccb58938330566f1083b.1
/data/data/####/6b1650ab8bc88d9d_0
/data/data/####/6b5e047f7f3e9593_0
/data/data/####/6b8f08e44f0dabab_0
/data/data/####/6cc2396ef21a11e6_0
/data/data/####/6cca847935c8af83b5386c466243959d.0.tmp
/data/data/####/6cca847935c8af83b5386c466243959d.1.tmp
/data/data/####/6d0ebcc2ae290998_0
/data/data/####/6d0ebcc2ae290998_1
/data/data/####/6d1d0ffa082e4971_0
/data/data/####/6d4d18fcc28fb9ad_0
/data/data/####/6d97ee5b82e95201_0
/data/data/####/6dd3d2c3b88c2eb4d97d67ac9c8104152725cc5f0bef9fb....0.tmp
/data/data/####/6df6c637b6dade71_0
/data/data/####/6df6c637b6dade71_1
/data/data/####/6e552c05a132499f_0
/data/data/####/6e7c729411b02b32_0
/data/data/####/6e8078c13b375a62_0
/data/data/####/6e8078c13b375a62_1
/data/data/####/6f182f23ff9d74e8bc48ee4f8ad28391238807a2c249e7d....0.tmp
/data/data/####/6f427bccc8ac71e5_0
/data/data/####/6f983fb035a4a7af_0 (deleted)
/data/data/####/701f76628bb91193_0
/data/data/####/701f76628bb91193_1
/data/data/####/703827f10f565f0a_0
/data/data/####/703827f10f565f0a_1
/data/data/####/7122a78f7e09799e_0
/data/data/####/71344ad6f6ea636b_0
/data/data/####/717e144651393dda_0
/data/data/####/71ba5d2ed22a10e3_0
/data/data/####/71ea3523cdcca367_0
/data/data/####/72022d3d0dc39944_0
/data/data/####/72022d3d0dc39944_1
/data/data/####/7267aba2f4ad2b8a_0
/data/data/####/72806375f850b862_0
/data/data/####/72e5f6a7283a9e465b414e0192c071c9.0.tmp
/data/data/####/72e5f6a7283a9e465b414e0192c071c9.1.tmp
/data/data/####/734bb5a235533674_0
/data/data/####/73637402f8ba566d816b8013f83750c255dce8e0d74a88b....0.tmp
/data/data/####/747586ba281af8a4_0
/data/data/####/74cc40abe940518b_0
/data/data/####/74cc40abe940518b_0 (deleted)
/data/data/####/74d334e92f1698cc_0
/data/data/####/75523d5642c4ecc8_0
/data/data/####/75c16f3c1d07f06a_0
/data/data/####/7701029832
/data/data/####/775114fd2ec802a8_0
/data/data/####/779f8be592bdd193_0
/data/data/####/77b8cafd27f11a5c_0
/data/data/####/77b8cafd27f11a5c_1
/data/data/####/786c2308289855c6_0
/data/data/####/796d734153fd2ccb_0
/data/data/####/796d734153fd2ccb_1
/data/data/####/796e48831b5b1365_0
/data/data/####/796e48831b5b1365_1
/data/data/####/7c93ccd504af0356_0
/data/data/####/7cbf62915c2bf508_0
/data/data/####/7cd10bff8f2a94da_0
/data/data/####/7ce1be5fe1ba72c5_0
/data/data/####/7d1c5a462c99f4e4_0
/data/data/####/7eb0cf3fc803cfb5_0
/data/data/####/7ec6aba14498b4e7_0 (deleted)
/data/data/####/7f6af636b9e2c447_0
/data/data/####/7f6af636b9e2c447_1
/data/data/####/815887e26b8c65b6_0
/data/data/####/828f7491a42c8581_0
/data/data/####/83a3ab2cf1f566ec_0
/data/data/####/83c9bf0f61ebbd71_0
/data/data/####/83ed898acbf32fc8_0
/data/data/####/844dd84a1f9eb848_0
/data/data/####/849bcc37a62528a2_0
/data/data/####/849bcc37a62528a2_1
/data/data/####/84c1528b4bf94e46_0
/data/data/####/84d927f34b30c7e6d5219293a15559c1b2b0c9b8a2b14ed....0.tmp
/data/data/####/85755035a8603666_0
/data/data/####/85755035a8603666_1
/data/data/####/85d67f99e81b7178_0
/data/data/####/85d67f99e81b7178_0 (deleted)
/data/data/####/863004a433e04030_0
/data/data/####/863004a433e04030_1
/data/data/####/86c75724a55cc402_0
/data/data/####/86c75724a55cc402_1
/data/data/####/86d7008cf15a0d1c_0
/data/data/####/87236ad5fabafe74_0
/data/data/####/87236ad5fabafe74_1
/data/data/####/8754f86089dca2c2_0
/data/data/####/8754f86089dca2c2_1
/data/data/####/8785383caa94e49b_0
/data/data/####/88b06b7f629765d5_0
/data/data/####/89362e32c96c9e1e_0
/data/data/####/8985584c9c84dcc6_0
/data/data/####/8996bfa32c612e5af45292c3c848893440fbfcb9b4bb9f0....0.tmp
/data/data/####/899e1cf862eb567b_0
/data/data/####/89c3ebdccfa3527c_0
/data/data/####/8EAD111D030291821E19A80E344C340A.xml
/data/data/####/8a6d09791c72b631_0
/data/data/####/8acde8d882ffc931_0
/data/data/####/8b1fa47aa943ee43_0
/data/data/####/8b67457f6986d3c5_0
/data/data/####/8c8426cbc670641a_0
/data/data/####/8cb9fc596ece5fde_0
/data/data/####/8cb9fc596ece5fde_1
/data/data/####/8d292da60ccfddeb_0
/data/data/####/8e26b8828319c397_0
/data/data/####/8f593fb3d330dd7e_0
/data/data/####/8fd202430b8f7da6_0
/data/data/####/8fd202430b8f7da6_1
/data/data/####/8fdf92a07966bb8a_0
/data/data/####/90171e066eda1aad_0
/data/data/####/9052e590b82bdd5f_0
/data/data/####/90b57187f5301ffb_0
/data/data/####/90e0e9f9c3a7d1534b3a6b5bfe314e3769e34aa777151c0....0.tmp
/data/data/####/911fa9572963d6ad_0
/data/data/####/91c0612f7cba5c37_0
/data/data/####/91c0612f7cba5c37_0 (deleted)
/data/data/####/91f1d1cfdc761870_0
/data/data/####/91f922d76d9df1fed961e5ceb359cbd8.0.tmp
/data/data/####/91f922d76d9df1fed961e5ceb359cbd8.1.tmp
/data/data/####/91fab3cbe0e076b2_0
/data/data/####/92db9027f8b1a026_0
/data/data/####/93a34fe8d0bdbc1425e88dd745161a17.db
/data/data/####/9432f2bee74d9869_0
/data/data/####/9465699929ce09dc_0
/data/data/####/956a0bb07e3cfd92_0
/data/data/####/95a09da54a3ff34d_0
/data/data/####/95af0b1788c6c286_0
/data/data/####/95e5173d29e3e8db_0
/data/data/####/9618302918.xml
/data/data/####/9618302918.xml.bak
/data/data/####/9618302918.xml.bak (deleted)
/data/data/####/96d5f240c2c2de79_0
/data/data/####/96f65ed5af8b99cb_0
/data/data/####/984c804183a2cf79_0
/data/data/####/984c804183a2cf79_1
/data/data/####/985958d976619751_0
/data/data/####/985958d976619751_1
/data/data/####/98befb81d204d61c_0
/data/data/####/9a51ae6b891c1205_0
/data/data/####/9a51ae6b891c1205_1
/data/data/####/9a7d17fae8e149b8_0
/data/data/####/9b6bed0ba766d8d5_0
/data/data/####/9b8a0c723634bdf6d6bd033da71461cfca87c6f39247de5....0.tmp
/data/data/####/9bf0775d49f02f95_0
/data/data/####/9c5441a9d57564ad_0
/data/data/####/9c9920f466e937bc_0
/data/data/####/9c9920f466e937bc_1
/data/data/####/9cdf8e397c1dc061_0
/data/data/####/9cdf8e397c1dc061_1
/data/data/####/9d01397fa01b8eca_0
/data/data/####/9dc1652b593483f66c5e75fc645fdcca.0.tmp
/data/data/####/9dc1652b593483f66c5e75fc645fdcca.1.tmp
/data/data/####/9e96157f964538d5_0
/data/data/####/9f163f82585d79ed_0
/data/data/####/CBA2A7EDFE513B7DF1E6E2F7B359B143.dex
/data/data/####/CBA2A7EDFE513B7DF1E6E2F7B359B143.dex.flock (deleted)
/data/data/####/Cookies-journal
/data/data/####/Ericdex20200324.dex
/data/data/####/Ericdex20200324.dex.flock (deleted)
/data/data/####/HttpDNSConstantsJson.xml
/data/data/####/Ix132mMskey1.xml
/data/data/####/Ix132mMtasks.xml
/data/data/####/Ix132mMtasks.xml.bak
/data/data/####/SDK442dex20200106.dex
/data/data/####/SDK442dex20200106.dex.flock (deleted)
/data/data/####/UM_PROBE_DATA.xml
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/_p.xml
/data/data/####/_sh.xml
/data/data/####/a02d7e3a71396d6d_0
/data/data/####/a03b372067ac0f01_0
/data/data/####/a04d33d2557661c6_0
/data/data/####/a07bb1e87e378c6f_0
/data/data/####/a0a9d3ccb694a79c_0
/data/data/####/a0fe5ad0aab93bce_0
/data/data/####/a1345af851b5d4e46e74031fc7d536c8bc80f66ddf25a90....0.tmp
/data/data/####/a1c99c4413a5be70_0
/data/data/####/a1c99c4413a5be70_1
/data/data/####/a26e7edb2a32cced_0
/data/data/####/a299ebccc6d2f08c29168c41caa787c4.0.tmp
/data/data/####/a299ebccc6d2f08c29168c41caa787c4.1.tmp
/data/data/####/a2b42f3bd4a5cb0b_0
/data/data/####/a2c3f7a8dcf8b410_0
/data/data/####/a2c3f7a8dcf8b410_1
/data/data/####/a33e035148ab6bd8_0
/data/data/####/a3b5947d808f1622_0
/data/data/####/a3c9b7c5fef14b77_0
/data/data/####/a3ca36e329b27495_0
/data/data/####/a3f1c74a1c41652b_0
/data/data/####/a4093a022d29d1a4_0
/data/data/####/a41fee5f67efe4d2_0
/data/data/####/a4273c23c15aa06f_0
/data/data/####/a479b66197ae99e752e0c72712a3dc732edbf492ab42033....0.tmp
/data/data/####/a4e24c45beb2f915_0
/data/data/####/a4e24c45beb2f915_1
/data/data/####/a64c1e96dff7749f_0
/data/data/####/a66d0d2829591b10979dd89fe5a1d3c0.0.tmp
/data/data/####/a66d0d2829591b10979dd89fe5a1d3c0.1.tmp
/data/data/####/a67fd3337a4cbeeb_0
/data/data/####/a727ac31c3963cff_0
/data/data/####/a826327090167833_0 (deleted)
/data/data/####/a894974a22107322_0
/data/data/####/a894974a22107322_1
/data/data/####/a8e6cc6fb5b834aece4f3e17ae98040d.0.tmp
/data/data/####/a8e6cc6fb5b834aece4f3e17ae98040d.1
/data/data/####/a8ef1a7c1e3df512_0
/data/data/####/a8fda075f57a20ae_0
/data/data/####/a9085a031bf56460_0
/data/data/####/a90fd01747e7eaf4_0 (deleted)
/data/data/####/a93c2f125758edf3_0
/data/data/####/a95bfe1862d2566f_0
/data/data/####/a95bfe1862d2566f_1
/data/data/####/aa6f7bde9d003f03_0
/data/data/####/aabd5a60157972d1_0
/data/data/####/aabd5a60157972d1_1
/data/data/####/ab93efc634d7d9f3_0
/data/data/####/abca18c9feeeda42_0
/data/data/####/abe11f2a9066fe2f_0
/data/data/####/abe11f2a9066fe2f_1
/data/data/####/ac3bac9df149e6b66668f60b7cd58af2.0.tmp
/data/data/####/ac3bac9df149e6b66668f60b7cd58af2.1.tmp
/data/data/####/ac93af5061c2e81c_0
/data/data/####/acd7107db556993d_0
/data/data/####/ad25f1c04613bc20_0
/data/data/####/ad367.dex
/data/data/####/ad367.dex.flock (deleted)
/data/data/####/ad3b50f6a40053fd_0
/data/data/####/adf54fa386ae1e4e_0
/data/data/####/admob654.dex
/data/data/####/admob654.dex.flock (deleted)
/data/data/####/af37b48a9b9694a6_0
/data/data/####/af718ea2158bb085_0
/data/data/####/afe1992854b16214a6b3494a42b504a2437be6efd708319....0.tmp
/data/data/####/an0416.dex
/data/data/####/an0416.dex.flock (deleted)
/data/data/####/api.dex
/data/data/####/api.dex.flock (deleted)
/data/data/####/api.jar
/data/data/####/atai.jar
/data/data/####/b086eeb020eac0a6_0
/data/data/####/b09c26e505efe914afb8a50bd6a4dbba.0.tmp
/data/data/####/b09c26e505efe914afb8a50bd6a4dbba.1.tmp
/data/data/####/b134433f70598b7b_0
/data/data/####/b18458f123f03116_0
/data/data/####/b1ab189a4df79dc4_0
/data/data/####/b1dee636f3931e4f_0
/data/data/####/b2139a0ffaad8c63_0 (deleted)
/data/data/####/b3ec4dd349f64b66_0
/data/data/####/b3f2879f85cc5602_0
/data/data/####/b428357b7b257efc_0
/data/data/####/b4c7b48d2fbdae34_0
/data/data/####/b53b231049a48a65_0
/data/data/####/b61d13c584629a05_0
/data/data/####/b6457cf732db334b_0 (deleted)
/data/data/####/b69ffef53a0cc083_0
/data/data/####/b704bc6006131134_0
/data/data/####/b8209bb1e4744be2_0
/data/data/####/b9ad3b586a9604a7_0
/data/data/####/b9d57ddf954b9a14b3ac62836efd03e36adeef0787e41db....0.tmp
/data/data/####/ba1338171092a5a4_0
/data/data/####/ba366ee139f93dc2_0
/data/data/####/ba4c7071690b097d_0
/data/data/####/ba7ad1f451059e55_0
/data/data/####/bab743a2ed4b1924_0
/data/data/####/bb229b2983b3f087b727ccd257ac3e14.0.tmp
/data/data/####/bb229b2983b3f087b727ccd257ac3e14.1.tmp
/data/data/####/bba6d4932c5b8f33_0
/data/data/####/bbe56e5ad213e593_0
/data/data/####/bc078a07d6abef3e_0
/data/data/####/bcad4dfef986d4cb_0
/data/data/####/bcad4dfef986d4cb_1
/data/data/####/bce3070284f2c280_0
/data/data/####/bce3070284f2c280_1
/data/data/####/bce53bbc561a8b8b_0
/data/data/####/bce53bbc561a8b8b_1
/data/data/####/bd87adbbfc97690d2e721c3d2ef1af2d
/data/data/####/bd87adbbfc97690d2e721c3d2ef1af2d.tmp
/data/data/####/bdc18bc6fcbb6d64_0
/data/data/####/be34ff59610e630b_0
/data/data/####/beb02b72c003f2ef_0
/data/data/####/bf659fbfa5b67dbb_0
/data/data/####/bf90714ead386c23_0
/data/data/####/bghu.dex
/data/data/####/bghu.dex.flock (deleted)
/data/data/####/c.dat
/data/data/####/c0254dd203563caa_0
/data/data/####/c0bb250ce0b30532_0
/data/data/####/c112256c04e7d836_0
/data/data/####/c23b92c5ccad358d_0
/data/data/####/c2a22b733c47aacb_0
/data/data/####/c4401b0cacca7f37_0
/data/data/####/c4675ba43698b860_0
/data/data/####/c4ed73920db97071_0
/data/data/####/c4f05b631c28c571_0
/data/data/####/c4f17eea123852c4_0
/data/data/####/c547248a55d99adc_0
/data/data/####/c58499f2c088385e_0
/data/data/####/c58499f2c088385e_1
/data/data/####/c61749cb4c9afd15_0
/data/data/####/c78d3336b70424f4_0
/data/data/####/c84c562e326fd369_0
/data/data/####/c880b676acc3d439_0
/data/data/####/c8a25915bf4f8dbd_0
/data/data/####/c92c9ccc17b14098_0
/data/data/####/ca1f97befa394bd9_0
/data/data/####/ca5c33d691cd1011_0
/data/data/####/ca733ef3a009bc70_0
/data/data/####/cae5c874b9e11c4c_0
/data/data/####/caf5cd9dbc03b462_0
/data/data/####/cb26c397f09ee1c5_0
/data/data/####/cb4fe77d7f247e2c_0
/data/data/####/cb4fe77d7f247e2c_1
/data/data/####/cb6de7f442e4b57e_0
/data/data/####/cc0d16159a5ef129_0
/data/data/####/cc1762e4e00e5421_0
/data/data/####/cc6e1a0621ad3dc5_0
/data/data/####/cca2da790f141be8b8b357c73092b75a.0.tmp
/data/data/####/cca2da790f141be8b8b357c73092b75a.1.tmp
/data/data/####/cdaeb425fe344e29_0
/data/data/####/cdc1c3035b436a72_0
/data/data/####/ce818a1f2604843e_0
/data/data/####/cecd9e3c202946ab_0
/data/data/####/cecd9e3c202946ab_1
/data/data/####/cf1231.dex
/data/data/####/cf1231.dex.flock (deleted)
/data/data/####/cf2e27e3b769064d_0
/data/data/####/cf87ff1a10e331dceff3d69161f39091.0.tmp
/data/data/####/cf87ff1a10e331dceff3d69161f39091.1.tmp
/data/data/####/cf8b229ec05a9fde_0
/data/data/####/cfdsd.xml
/data/data/####/cfdsd.xml.bak
/data/data/####/cfdsd.xml.bak (deleted)
/data/data/####/classes.dex
/data/data/####/classes.dex;classes2.dex
/data/data/####/classes.dex;classes3.dex
/data/data/####/classes.oat
/data/data/####/com.meiju592.app_preferences.xml
/data/data/####/countIp.xml
/data/data/####/cvfd.dex
/data/data/####/cvfd.dex.flock (deleted)
/data/data/####/d021c6409a69bb00_0
/data/data/####/d02b0c9719e9d37f_0
/data/data/####/d02b0c9719e9d37f_1
/data/data/####/d07444cce2869831_0
/data/data/####/d07444cce2869831_1
/data/data/####/d08aa6f73439d30e_0
/data/data/####/d124446d2658f551_0
/data/data/####/d124446d2658f551_1
/data/data/####/d16a429aed0054b4_0 (deleted)
/data/data/####/d1a8e1674c0bc9e0_0
/data/data/####/d1b59327dbc33967_0
/data/data/####/d1f9108d30364229_0
/data/data/####/d28b1cc6676980e9_0
/data/data/####/d33461741a383042_0
/data/data/####/d3aed6f581f03126_0
/data/data/####/d40e2bb21bd12fa0_0
/data/data/####/d4158f5934faeaca_0
/data/data/####/d4158f5934faeaca_1
/data/data/####/d4219fff9a178666_0
/data/data/####/d4219fff9a178666_1
/data/data/####/d4894f92d705f340_0
/data/data/####/d492fe2116eb6a2b_0
/data/data/####/d4c18c28841f04b5_0 (deleted)
/data/data/####/d56af94a7d54c81c_0
/data/data/####/d5d4df1e4f1976a4_0
/data/data/####/d62dfe0b847ca604_0
/data/data/####/d6e15c66ae6fdaa0_0
/data/data/####/d70484395feaaff4_0
/data/data/####/d70484395feaaff4_1
/data/data/####/d7405ca117e81779_0
/data/data/####/d767ce82254a43ea_0
/data/data/####/d767ce82254a43ea_1
/data/data/####/d87f72522a510d52_0
/data/data/####/d88ce5e82ed4af40_0
/data/data/####/dW1weF9pbnRlcm5hbF8xNTg4MDE5NDM4OTUx;
/data/data/####/dW1weF9pbnRlcm5hbF8xNTg4MDE5NDQzNzM5;
/data/data/####/da16f7c07344520b_0
/data/data/####/da16f7c07344520b_1
/data/data/####/da2c66618b0cf65e_0
/data/data/####/db64144592e6c02b040383ecdf104e9c1d3c316f1fc6c34....0.tmp
/data/data/####/dc7d0b90240ef62e_0
/data/data/####/dc839320bbc5128e_0
/data/data/####/dce48bacc63a1cb5_0
/data/data/####/de1038af3d850c48_0
/data/data/####/de1038af3d850c48_1
/data/data/####/de3wq2u.data-journal
/data/data/####/de6ecf71d27ee3dd_0
/data/data/####/de7f68a4de1b01da_0
/data/data/####/df2f8d958c4dd64b_0
/data/data/####/df31068f21e2cc13_0
/data/data/####/df998637f9288745_0
/data/data/####/dns_ip_info.db
/data/data/####/dns_ip_info.db-journal
/data/data/####/downUmeng.dex (deleted)
/data/data/####/downUmeng.dex.flock (deleted)
/data/data/####/downUmeng.jar
/data/data/####/downloader.db-journal
/data/data/####/dwaswa3x.xml
/data/data/####/dwaswa3x.xml.bak
/data/data/####/dwaswa3x.xml.bak (deleted)
/data/data/####/dwrsw2w33x.xml
/data/data/####/dwrsw2w33x.xml.bak
/data/data/####/dwrsw2w33x.xml.bak (deleted)
/data/data/####/dwssedjb.data-journal
/data/data/####/dwwawau.data-journal
/data/data/####/dwwsdws.data-journal
/data/data/####/dzbcsa.xml
/data/data/####/dzbcsa.xml.bak
/data/data/####/dzbcsa.xml.bak (deleted)
/data/data/####/e057af20f37e2748_0
/data/data/####/e1222035e204fc41_0
/data/data/####/e2199162cf1e93a0e18ce028025cb923.0.tmp
/data/data/####/e2199162cf1e93a0e18ce028025cb923.1.tmp
/data/data/####/e29bc6e5e9997098_0
/data/data/####/e29bc6e5e9997098_1
/data/data/####/e2be2cad701429a5_0
/data/data/####/e3ac272f72c88002_0
/data/data/####/e3e05ba914da625d_0
/data/data/####/e47dfd5b18814039_0
/data/data/####/e49eeb0c100ac5282a7d023a2d2f94ebeca6247c319feb6....0.tmp
/data/data/####/e5863f2edaa7b33a_0
/data/data/####/e5acf68bb44a311b_0
/data/data/####/e5ed92445862591a_0
/data/data/####/e60a1fb2b4146722129ac1d05188cff8119b6fbd77c5b32....0.tmp
/data/data/####/e6740be65e62f6b4_0
/data/data/####/e6f3dfb9675fd5e6_0
/data/data/####/e7453d21dd301e5d_0
/data/data/####/e7aeec34673c3ecb_0
/data/data/####/e7aeec34673c3ecb_1
/data/data/####/e7fc75818e64cf88_0
/data/data/####/e7fc75818e64cf88_1
/data/data/####/e8c5dcebd15237df_0
/data/data/####/e8fc9c245e74e6cd_0
/data/data/####/e91fe506f9ee02da_0
/data/data/####/ea4e99e506221d1e_0
/data/data/####/eb4807bc07a39c7e_0
/data/data/####/eb732b8565bc157c_0
/data/data/####/ec0411f68f8ce798_0
/data/data/####/ed562419c2d9bd4b_0
/data/data/####/ed72338c0ec7e4cd_0
/data/data/####/edaabf2cbd78b31b_0
/data/data/####/edb4d53551cff320_0
/data/data/####/edbc28ba3bfa98e2_0
/data/data/####/edd2f34b651adb6a_0
/data/data/####/edghy6trds.xml
/data/data/####/edghy6trds.xml.bak
/data/data/####/ef3053a5614a8eb4_0
/data/data/####/ef3e3cf75ff31cb0af5d33e45b2eb39d.0.tmp
/data/data/####/ef3e3cf75ff31cb0af5d33e45b2eb39d.1
/data/data/####/eff3e676a2f95135_0
/data/data/####/efff4a2e5cf1ffa4_0
/data/data/####/efff4a2e5cf1ffa4_1
/data/data/####/exchangeIdentity.json
/data/data/####/exid.dat
/data/data/####/f011034da46aa6e9_0
/data/data/####/f026ef5c8fbda785bdc0f43ad98c9383.db
/data/data/####/f03a2b54d96ad247_0
/data/data/####/f06786887f7337c7_0
/data/data/####/f0c332500b625c00_0
/data/data/####/f152829e70be79bf_0
/data/data/####/f154f7f5ffad9903_0
/data/data/####/f222514fc8f9fd53_0
/data/data/####/f280aa81003c3558_0
/data/data/####/f280aa81003c3558_1
/data/data/####/f2a36e5788173d19_0 (deleted)
/data/data/####/f2f79132fefa27e07c217dd3e03eaee1.0.tmp
/data/data/####/f2f79132fefa27e07c217dd3e03eaee1.1.tmp
/data/data/####/f2fd141d18d594cc_0
/data/data/####/f2fd141d18d594cc_1
/data/data/####/f37e4e195121e04e_0
/data/data/####/f38f85ee2b65cdd9_0 (deleted)
/data/data/####/f3952fd4870a7c90_0
/data/data/####/f3a985fe33aaa6ab_0
/data/data/####/f3b10db176b0debe_0
/data/data/####/f3w3we3tg.data-journal
/data/data/####/f425523403e54736_0
/data/data/####/f4c61f414d0d9ac2_0
/data/data/####/f50fd18752b98d15_0
/data/data/####/f525a4064f188445_0
/data/data/####/f55425cbd92223fc_0
/data/data/####/f56326aa8e139886_0
/data/data/####/f56326aa8e139886_1
/data/data/####/f60dba52dae1056b_0
/data/data/####/f677881527ee4389_0
/data/data/####/f6aef918229e5fa2_0
/data/data/####/f6aef918229e5fa2_1
/data/data/####/f6b55f9716ad66b5_0
/data/data/####/f71229f082fdd91c_0
/data/data/####/f73105c88adf13ce36cff6ebcfaf8f42.0.tmp
/data/data/####/f73105c88adf13ce36cff6ebcfaf8f42.1.tmp
/data/data/####/fa658dff0f50f999_0
/data/data/####/fa8105dd002bc5ea_0 (deleted)
/data/data/####/faf4fab9ebb56c72_0
/data/data/####/fc9e63e876fc7c8e_0
/data/data/####/fcba44512e4448ed_0
/data/data/####/fcf54abc02c76d37_0
/data/data/####/fd4010801c66c73c_0
/data/data/####/fd4a3463151fa0bb_0
/data/data/####/fdff05b75977b015_0
/data/data/####/fe54c0bde7010814_0
/data/data/####/fe54c0bde7010814_1
/data/data/####/fee23d0c7ee0acbc_0
/data/data/####/ff3e1df6194b0b34c11343756be7c7bb86151bc52a8d826....0.tmp
/data/data/####/ff92fa8ee764d768_0
/data/data/####/ffa3015b13d53234_0
/data/data/####/ffa3015b13d53234_1
/data/data/####/ffa32140e4ad68dd_0
/data/data/####/ffa32140e4ad68dd_1
/data/data/####/ffd504745b42f808_0
/data/data/####/gameid
/data/data/####/gameid.zip
/data/data/####/hdp.xml
/data/data/####/hdp.xml.bak
/data/data/####/hffjhas.data-journal
/data/data/####/http_58.218.92.50_808.localstorage-journal
/data/data/####/http_s.zhitoudsp.com_808.localstorage-journal
/data/data/####/https_pos.baidu.com_0.localstorage-journal
/data/data/####/https_price.pcauto.com.cn_0.localstorage-journal
/data/data/####/https_sw4.duoyi.com_0.localstorage-journal
/data/data/####/https_sw4sy.duoyi.com_0.localstorage-journal
/data/data/####/https_www.mgtv.com_0.localstorage-journal
/data/data/####/https_yz.m.sm.cn_0.localstorage-journal
/data/data/####/i==1.2.0&&zhaohuiyou修改_1588019438998_envelope.log
/data/data/####/index
/data/data/####/info.xml
/data/data/####/javasdklog.xml
/data/data/####/journal.tmp
/data/data/####/js1202.dex
/data/data/####/js1202.dex.flock (deleted)
/data/data/####/kdrd3ew4.data-journal
/data/data/####/kdsedqe.data-journal
/data/data/####/kzddex20191224.dex
/data/data/####/kzddex20191224.dex.flock (deleted)
/data/data/####/la0116huo.dex
/data/data/####/la0116huo.dex.flock (deleted)
/data/data/####/libcwzdnq.so
/data/data/####/libcwzdnq.so-32
/data/data/####/libcwzdnq.so-64
/data/data/####/libdkb
/data/data/####/libjiagu.so
/data/data/####/libnms.so
/data/data/####/libnms64.so
/data/data/####/libxwgfuv.so
/data/data/####/libxwgfuv.so-32
/data/data/####/libxwgfuv.so-64
/data/data/####/lijian.dex
/data/data/####/lijian.dex.flock (deleted)
/data/data/####/lijian.jar
/data/data/####/limeoktc.dex
/data/data/####/limeoktc.dex.flock (deleted)
/data/data/####/limeoktc.jar
/data/data/####/lotusDex20200427.dex
/data/data/####/lotusDex20200427.dex.flock (deleted)
/data/data/####/lpl.xml
/data/data/####/lpl.xml.bak
/data/data/####/lpl.xml.bak (deleted)
/data/data/####/meijuniaoV2.db-journal
/data/data/####/metrics_guid
/data/data/####/miqiu0925.dex
/data/data/####/miqiu0925.dex.flock (deleted)
/data/data/####/nggvdd.data-journal
/data/data/####/owsddza.xml
/data/data/####/owsddza.xml.bak
/data/data/####/papp09001dex20200401.dex
/data/data/####/papp09001dex20200401.dex.flock (deleted)
/data/data/####/peccar.png (deleted)
/data/data/####/proc_auxv
/data/data/####/q2wqw2q2.data-journal
/data/data/####/qweswws.data-journal
/data/data/####/qwevwwssww.xml
/data/data/####/qwevwwssww.xml.bak
/data/data/####/rq02dex20190829.dex
/data/data/####/rq02dex20190829.dex.flock (deleted)
/data/data/####/rq_file.xml
/data/data/####/santi0316.dex
/data/data/####/santi0316.dex.flock (deleted)
/data/data/####/santi_656_0401.dex
/data/data/####/santi_656_0401.dex.flock (deleted)
/data/data/####/sdk_config.xml
/data/data/####/so0117.dex
/data/data/####/so0117.dex.flock (deleted)
/data/data/####/sp_reward_video_adslot.xml
/data/data/####/sp_reward_video_adslot_preload.xml
/data/data/####/sp_reward_video_cache_933657183.xml
/data/data/####/spu_ti.xml
/data/data/####/spu_yj.xml
/data/data/####/swwkwsghf.data-journal
/data/data/####/t==8.0.0&&zhaohuiyou修改_1588019445377_envelope.log
/data/data/####/the-real-index
/data/data/####/trhcvdox.dex (deleted)
/data/data/####/trhcvdox.dex.flock (deleted)
/data/data/####/trhcvdox.jar
/data/data/####/tt_sdk_settings.xml
/data/data/####/tt_sdk_settings.xml.bak
/data/data/####/ttopenadsdk.xml
/data/data/####/ttopenadsdk.xml.bak
/data/data/####/ua.db
/data/data/####/ua.db-journal
/data/data/####/ugr5trds.data-journal
/data/data/####/um_pri.xml
/data/data/####/umdat.xml
/data/data/####/umeng_common_config.xml
/data/data/####/umeng_common_location.xml
/data/data/####/umeng_general_config.xml
/data/data/####/umeng_it.cache
/data/data/####/vpef.xml
/data/data/####/vpef.xml.bak
/data/data/####/wangyu.dex
/data/data/####/wangyu.dex.flock (deleted)
/data/data/####/wangyu.jar
/data/data/####/wbwgdesf.xml
/data/data/####/wbwgdesf.xml.bak
/data/data/####/wbwgdesf.xml.bak (deleted)
/data/data/####/wesdrdsqse.xml
/data/data/####/wesdrdsqse.xml.bak
/data/data/####/wesdrdsqse.xml.bak (deleted)
/data/data/####/wesw2qse.xml
/data/data/####/wesw2qse.xml.bak
/data/data/####/wesw2qse.xml.bak (deleted)
/data/data/####/wewse23wws.data-journal
/data/data/####/wiwsf.xml
/data/data/####/wiwsf.xml.bak
/data/data/####/wjrwwwsswsf.xml
/data/data/####/wjrwwwsswsf.xml.bak
/data/data/####/wjrwwwsswsf.xml.bak (deleted)
/data/data/####/wki82w22awf.xml
/data/data/####/wki82w22awf.xml.bak
/data/data/####/wki82w22awf.xml.bak (deleted)
/data/data/####/wqe3e42.xml
/data/data/####/wqe3e42.xml.bak
/data/data/####/wr4532de.xml
/data/data/####/wr4532de.xml.bak
/data/data/####/wr4532de.xml.bak (deleted)
/data/data/####/wrw3dsw32x.xml
/data/data/####/wrw3dsw32x.xml.bak
/data/data/####/wrwwswe.xml
/data/data/####/wrwwswe.xml.bak
/data/data/####/wry6reww322.xml
/data/data/####/wry6reww322.xml.bak
/data/data/####/wry6reww322.xml.bak (deleted)
/data/data/####/wsdewse.xml
/data/data/####/wsdewse.xml.bak
/data/data/####/wsdewse.xml.bak (deleted)
/data/data/####/wtwtggs.data-journal
/data/data/####/ww2w32yr-journal
/data/data/####/wwawds.data-journal
/data/data/####/wweds3sws.data-journal
/data/data/####/wwsrswf.data-journal
/data/data/####/wwssse.xml
/data/data/####/wwssse.xml.bak
/data/data/####/wwssse.xml.bak (deleted)
/data/data/####/wwswswewax.xml
/data/data/####/wwswswewax.xml.bak
/data/data/####/wwwseds.data-journal
/data/data/####/xdtversion.xml
/data/data/####/xixi0401.dex
/data/data/####/xixi0401.dex.flock (deleted)
/data/data/####/yd_config_c.xml
/data/data/####/ys1450.dex
/data/data/####/ys1450.dex.flock (deleted)
/data/data/####/ys7781.dex
/data/data/####/ys7781.dex.flock (deleted)
/data/data/####/zawdex20200320.dex
/data/data/####/zawdex20200320.dex.flock (deleted)
/data/data/####/zgf.xml
/data/data/####/zrhzaf.png
/data/media/####/.a.dat
/data/media/####/.adfwe.dat
/data/media/####/.cca.dat
/data/media/####/.dzc
/data/media/####/.eiz
/data/media/####/.hwm
/data/media/####/.nid
/data/media/####/.qosu
/data/media/####/.umm.dat
/data/media/####/.usdis
/data/media/####/0f4e1d5ae60f6339bf30f0a3de1b4923.png
/data/media/####/1CB551FD968DD49C5B213B49C1352E1C
/data/media/####/28BFF8DF45B978D339EFBD230A17100A (deleted)
/data/media/####/28BFF8DF45B978D339EFBD230A17100A.jar
/data/media/####/28BFF8DF45B978D339EFBD230A17100A.temp
/data/media/####/2D877BEFD33FF12D858B92AAFB6A567E
/data/media/####/2D877BEFD33FF12D858B92AAFB6A567E.jar
/data/media/####/2D877BEFD33FF12D858B92AAFB6A567E.temp
/data/media/####/365admo.jar
/data/media/####/4D002E28A394CE875ED647EEEB8EECAC (deleted)
/data/media/####/4D002E28A394CE875ED647EEEB8EECAC.jar
/data/media/####/4D002E28A394CE875ED647EEEB8EECAC.temp
/data/media/####/5731148B02391003626E1D6AA6E7C848
/data/media/####/5731148B02391003626E1D6AA6E7C848.jar
/data/media/####/5731148B02391003626E1D6AA6E7C848.temp
/data/media/####/6B2F4FEDB1346F9E3AE1C0D381EEFBC9
/data/media/####/6B2F4FEDB1346F9E3AE1C0D381EEFBC9.temp
/data/media/####/6B2F4FEDB1346F9E3AE1C0D381EEFBC9.zip
/data/media/####/6D8605C6EB52E8C1B47753D805DB7D02
/data/media/####/9088D7915D2BC2DEE6562BDECE89F3E2
/data/media/####/961EA7E2036C89A047B08219D658170F
/data/media/####/C8A11676494AD470F7C88E355D34B620
/data/media/####/CBA2A7EDFE513B7DF1E6E2F7B359B143.temp
/data/media/####/CBA2A7EDFE513B7DF1E6E2F7B359B143.zip
/data/media/####/Ericdex20200324.jar
/data/media/####/SDK442dex20200106.jar
/data/media/####/_pn
/data/media/####/_shn
/data/media/####/a66e18a21d276453dadbcdb7886e83da
/data/media/####/ad367.jar
/data/media/####/adm_296_1231.jar
/data/media/####/admob654.jar
/data/media/####/an0416.jar
/data/media/####/bghu.jar
/data/media/####/c80db44e7c67381dcc711daaa1a8d74f.tmp
/data/media/####/cf1231.jar
/data/media/####/cvfd.jar
/data/media/####/d07ff86f78c1653889752206f807ad48.jpg
/data/media/####/date40003000700
/data/media/####/exr
/data/media/####/f51f8692c8caea18dd70de6589f56633.tmp
/data/media/####/httpdns.log
/data/media/####/js1202.jar
/data/media/####/kzddex20191224.jar
/data/media/####/la0116huo.jar
/data/media/####/lotusDex20200427.jar
/data/media/####/miqiu0925.jar
/data/media/####/papp09001dex20200401.jar
/data/media/####/pidfile.txt
/data/media/####/plcfg.xml
/data/media/####/rq02dex20190829.jar
/data/media/####/santi0316.jar
/data/media/####/santi_656_0401.jar
/data/media/####/so0117.jar
/data/media/####/temp_pkg_info.json
/data/media/####/uyh
/data/media/####/xixi0401.jar
/data/media/####/ys1450.jar
/data/media/####/ys7781.jar
/data/media/####/zawdex20200320.jar
/data/misc/####/primary.prof

Другие:

Запускает следующие shell-скрипты:

/system/bin/cat /proc/cpuinfo
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
/system/bin/dex2oat --instruction-set=x86 --dex-file=<Package Folder>/.jiagu/classes.dex --dex-file=<Package Folder>/.jiagu/classes.dex:classes2.dex --dex-file=<Package Folder>/.jiagu/classes.dex:classes3.dex --oat-file=<Package Folder>/.jiagu/classes.oat --inline-depth-limit=0 --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/.elvpp/trhcvdox.jar --oat-fd=379 --oat-location=/data/user/0/<Package>/.elvpp/trhcvdox.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/.ftnps/limeoktc.jar --oat-fd=287 --oat-location=/data/user/0/<Package>/.ftnps/limeoktc.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_cache/.hefbdhsfb/api/api.jar --oat-fd=210 --oat-location=/data/user/0/<Package>/app_cache/.hefbdhsfb/api/api.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_cache/.hefbdhsfb/lijian/lijian.jar --oat-fd=194 --oat-location=/data/user/0/<Package>/app_cache/.hefbdhsfb/lijian/lijian.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_cache/.hefbdhsfb/wangyu/wangyu.jar --oat-fd=299 --oat-location=/data/user/0/<Package>/app_cache/.hefbdhsfb/wangyu/wangyu.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_df_file/.6173.apk --oat-fd=191 --oat-location=/data/user/0/<Package>/files/.6173.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_df_file/.666f72627974.apk --oat-fd=234 --oat-location=/data/user/0/<Package>/files/.666f72627974.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_df_file/.70777777.apk --oat-fd=202 --oat-location=/data/user/0/<Package>/files/.70777777.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_df_file/.765f73646b.apk --oat-fd=191 --oat-location=/data/user/0/<Package>/files/.765f73646b.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/cacheUmeng/oatCache/downUmeng.jar --oat-fd=118 --oat-location=/data/user/0/<Package>/cache/cacheUmeng/oatCache/downUmeng/downUmeng.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/.0afe7acc-159c-4227-a5a4-26a29504d63c --oat-fd=411 --oat-location=/data/user/0/<Package>/files/.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/10_6.jar --oat-fd=134 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/10_6.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/3.jar --oat-fd=200 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/3.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/6.jar --oat-fd=201 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/6.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/365admo.jar --oat-fd=470 --oat-location=/data/user/0/<Package>/365admo.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/Ericdex20200324.jar --oat-fd=438 --oat-location=/data/user/0/<Package>/Ericdex20200324.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/SDK442dex20200106.jar --oat-fd=469 --oat-location=/data/user/0/<Package>/SDK442dex20200106.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/ad367.jar --oat-fd=447 --oat-location=/data/user/0/<Package>/ad367.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/admob654.jar --oat-fd=352 --oat-location=/data/user/0/<Package>/admob654.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/an0416.jar --oat-fd=468 --oat-location=/data/user/0/<Package>/an0416.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/bghu.jar --oat-fd=411 --oat-location=/data/user/0/<Package>/bghu.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/cf1231.jar --oat-fd=198 --oat-location=/data/user/0/<Package>/cf1231.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/cvfd.jar --oat-fd=379 --oat-location=/data/user/0/<Package>/cvfd.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/js1202.jar --oat-fd=452 --oat-location=/data/user/0/<Package>/js1202.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/kzddex20191224.jar --oat-fd=463 --oat-location=/data/user/0/<Package>/kzddex20191224.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/la0116huo.jar --oat-fd=302 --oat-location=/data/user/0/<Package>/la0116huo.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/lotusDex20200427.jar --oat-fd=456 --oat-location=/data/user/0/<Package>/lotusDex20200427.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/miqiu0925.jar --oat-fd=440 --oat-location=/data/user/0/<Package>/miqiu0925.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/papp09001dex20200401.jar --oat-fd=419 --oat-location=/data/user/0/<Package>/papp09001dex20200401.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/rq02dex20190829.jar --oat-fd=346 --oat-location=/data/user/0/<Package>/rq02dex20190829.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/santi0316.jar --oat-fd=434 --oat-location=/data/user/0/<Package>/santi0316.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/santi_656_0401.jar --oat-fd=373 --oat-location=/data/user/0/<Package>/santi_656_0401.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/so0117.jar --oat-fd=341 --oat-location=/data/user/0/<Package>/so0117.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/xixi0401.jar --oat-fd=404 --oat-location=/data/user/0/<Package>/xixi0401.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/ys1450.jar --oat-fd=459 --oat-location=/data/user/0/<Package>/ys1450.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/ys7781.jar --oat-fd=224 --oat-location=/data/user/0/<Package>/ys7781.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/Tencent/ys/Loader/zawdex20200320.jar --oat-fd=465 --oat-location=/data/user/0/<Package>/zawdex20200320.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/hr/<Package>/xn/6B2F4FEDB1346F9E3AE1C0D381EEFBC9.zip --oat-fd=373 --oat-location=/data/user/0/<Package>/files/6B2F4FEDB1346F9E3AE1C0D381EEFBC9.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/obg/<Package>/xxno/28BFF8DF45B978D339EFBD230A17100A.jar --oat-fd=381 --oat-location=/data/user/0/<Package>/files/28BFF8DF45B978D339EFBD230A17100A.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/obg/<Package>/xxno/2D877BEFD33FF12D858B92AAFB6A567E.jar --oat-fd=420 --oat-location=/data/user/0/<Package>/files/2D877BEFD33FF12D858B92AAFB6A567E.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/vm/<Package>/txws/4D002E28A394CE875ED647EEEB8EECAC.jar --oat-fd=319 --oat-location=/data/user/0/<Package>/files/4D002E28A394CE875ED647EEEB8EECAC.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/vm/<Package>/txws/5731148B02391003626E1D6AA6E7C848.jar --oat-fd=214 --oat-location=/data/user/0/<Package>/files/5731148B02391003626E1D6AA6E7C848.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/zh/<Package>/bnc/6B2F4FEDB1346F9E3AE1C0D381EEFBC9.zip --oat-fd=399 --oat-location=/data/user/0/<Package>/files/6B2F4FEDB1346F9E3AE1C0D381EEFBC9.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/zh/<Package>/bnc/CBA2A7EDFE513B7DF1E6E2F7B359B143.zip --oat-fd=432 --oat-location=/data/user/0/<Package>/files/CBA2A7EDFE513B7DF1E6E2F7B359B143.dex --compiler-filter=speed
cat /proc/version
cat /sys/class/net/wlan0/address
getprop
getprop ro.board.platform
getprop ro.build.display.id
getprop ro.build.version.emui
getprop ro.build.version.opporom
getprop ro.letv.release.version
getprop ro.miui.ui.version.name
getprop ro.product.cpu.abi
getprop ro.vivo.os.build.display.id
ls /
ls /sys/class/thermal

Использует следующие алгоритмы для шифрования данных:

AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-PKCS5Padding
DES
DESede-CBC-PKCS5Padding
Des-ECB-NoPadding
RSA-None-PKCS1Padding

Использует следующие алгоритмы для расшифровки данных:

AES-CBC-NoPadding
AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-PKCS5Padding
DES
DESede-CBC-PKCS5Padding
Des-ECB-NoPadding
RSA-None-PKCS1Padding

Осуществляет доступ к приватному интерфейсу ITelephony.

Использует специальную библиотеку для скрытия исполняемого байт-кода.

Получает информацию о местоположении.

Получает информацию о сети.

Получает информацию о телефоне (номер, IMEI и т. д.).

Получает информацию об установленных приложениях.

Добавляет задания в системный планировщик.

Отрисовывает собственные окна поверх других приложений.

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней