Pour les utilisateurs

Fermer

Bibliothèque
Ma bibliothèque

+ Ajouter à la bibliothèque

Recherche
Recherche

Contacter-nous !
Support 24/24 | Rules regarding submitting

Envoyer un message

Requête à l'aide du formulaire

Nous téléphoner

0 825 300 230

Forum

Vos requêtes

  • Toutes : -
  • Non clôturées : -
  • Dernière : le -
Créer une nouvelle requête

Nous téléphoner

0 825 300 230

Profil

FR

RU CN DE EN ES FR IT JP KZ UZ PL BY
Fermer
Services support
Scanners
Dr.Web vxCube
Démo
Bibliothèque virale
Base documentaire

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Actualités

Android.Triada.4925

Added to the Dr.Web virus database: 2021-04-13

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.DownLoader.1007.origin
  • Android.RemoteCode.314.origin
  • Android.RemoteCode.316.origin
  • Android.Triada.510.origin
  • Android.Triada.559.origin
  • Android.Triada.560.origin
  • Android.Triada.561.origin
  • Android.Triada.567.origin
Threat detection based on machine learning.
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(HTTP/1.1) pq-chin####.b0.a####.com:80
  • TCP(HTTP/1.1) 1####.55.41.199:8080
  • TCP(HTTP/1.1) i####.sogo####.com.####.com:80
  • TCP(HTTP/1.1) 58.2####.198.157:999
  • TCP(HTTP/1.1) www.d####.xyz:80
  • TCP(HTTP/1.1) www-new####.b0.a####.com:80
  • TCP(HTTP/1.1) mg.meit####.com:8071
  • TCP(HTTP/1.1) js.wt####.com:80
  • TCP(HTTP/1.1) d####.cn:80
  • TCP(HTTP/1.1) k####.ur####.s####.com:80
  • TCP(HTTP/1.1) sd.bu####.vip:80
  • TCP(HTTP/1.1) adcha####.bz.m####.com:80
  • TCP(HTTP/1.1) 1####.76.103.4:28018
  • TCP(HTTP/1.1) 1####.201.175.19:80
  • TCP(HTTP/1.1) w####.c####.com:80
  • TCP(HTTP/1.1) 58.2####.92.50:808
  • TCP(HTTP/1.1) xiaox####.adse####.adan####.com:80
  • TCP(HTTP/1.1) 1713464####.cn-qin####.fc.####.com:80
  • TCP(HTTP/1.1) c####.zhit####.com:99
  • TCP(HTTP/1.1) caa-qiu####.b0.a####.com:80
  • TCP(HTTP/1.1) api.yunco####.com:80
  • TCP(HTTP/1.1) kyy####.wwe####.com:17001
  • TCP(HTTP/1.1) 1####.77.67.185:28018
  • TCP(HTTP/1.1) jpg.i####.sogo####.####.com:80
  • TCP(HTTP/1.1) i####.wt####.com:80
  • TCP(HTTP/1.1) p####.gou.s####.com:80
  • TCP(HTTP/1.1) u####.b0.upa####.com:80
  • TCP(HTTP/1.1) tc.c####.com:80
  • TCP(HTTP/1.1) c####.jumen####.com:80
  • TCP(HTTP/1.1) app.a####.top:80
  • TCP(HTTP/1.1) t####.a####.top:80
  • TCP(HTTP/1.1) bbt####.wwe####.com:17001
  • TCP(HTTP/1.1) mh####.b0.a####.com:80
  • TCP(HTTP/1.1) ask.c####.com.####.com:80
  • TCP(HTTP/1.1) ha-qiuc####.b0.a####.com:80
  • TCP(HTTP/1.1) api.a####.ads####.cn:80
  • TCP(HTTP/1.1) cn.f####.top:8080
  • TCP(HTTP/1.1) lo.bu####.vip:80
  • TCP(HTTP/1.1) api.adoc####.com:80
  • TCP(HTTP/1.1) c####.baidust####.com.####.com:80
  • TCP(HTTP/1.1) gif.lu.sogo####.####.com:80
  • TCP(HTTP/1.1) z.c####.com:80
  • TCP(HTTP/1.1) 14.17.1####.182:80
  • TCP(HTTP/1.1) zha####.zhit####.com:808
  • TCP(HTTP/1.1) ip####.com:80
  • TCP(HTTP/1.1) c####.be####.s####.com:80
  • TCP(HTTP/1.1) i.c####.com.####.com:80
  • TCP(HTTP/1.1) pos.b####.com:80
  • TCP(HTTP/1.1) dup.baidust####.com:80
  • TCP(HTTP/1.1) t####.sogo####.com.####.com:80
  • TCP(HTTP/1.1) www.pc####.com.####.cn:80
  • TCP(HTTP/1.1) 2####.186.173.17:8888
  • TCP(HTTP/1.1) 47.95.1####.130:80
  • TCP(HTTP/1.1) newap####.math####.cn:80
  • TCP(HTTP/1.1) gd.a.s####.com:80
  • TCP(HTTP/1.1) 2####.73.129.195:28018
  • TCP(HTTP/1.1) ec####.b####.com:80
  • TCP(HTTP/1.1) duk.p####.com.####.com:80
  • TCP(HTTP/1.1) gn####.f####.top:8080
  • TCP(HTTP/1.1) p####.hfc####.com:80
  • TCP(HTTP/1.1) flf####.aog####.com:19001
  • TCP(HTTP/1.1) api.40088####.com:8181
  • TCP(HTTP/1.1) d####.i####.com:80
  • TCP(HTTP/1.1) cl-5307####.g####.co:80
  • TCP(HTTP/1.1) co####.ssp.adoc####.com:80
  • TCP(HTTP/1.1) kyy####.wwe####.com:17002
  • TCP(HTTP/1.1) p####.api.adoc####.com:80
  • TCP(HTTP/1.1) u####.a####.top:80
  • TCP(HTTP/1.1) www.c####.com.####.com:80
  • TCP(HTTP/1.1) c####.c####.cn:80
  • TCP(HTTP/1.1) 47.1####.222.149:996
  • TCP(HTTP/1.1) r####.bu####.vip:80
  • TCP(HTTP/1.1) n####.wangmei####.cn:80
  • TCP(TLS/1.0) 1####.194.73.100:443
  • TCP(TLS/1.0) pc####.api.m####.com:443
  • TCP(TLS/1.0) vip.bz.m####.com:443
  • TCP(TLS/1.0) 1142864####.cn-hang####.fc.####.com:443
  • TCP(TLS/1.0) p####.api.m####.com:443
  • TCP(TLS/1.0) 1####.74.90.25:31828
  • TCP(TLS/1.0) ad####.a####.com:443
  • TCP(TLS/1.0) www.qq####.ltd:443
  • TCP(TLS/1.0) hm.b####.com:443
  • TCP(TLS/1.0) w.m####.com:443
  • TCP(TLS/1.0) rc-cha####.bz.m####.com:443
  • TCP(TLS/1.0) s1.h####.com:443
  • TCP(TLS/1.0) 2####.h####.com.####.cn:443
  • TCP(TLS/1.0) md####.google####.com:443
  • TCP(TLS/1.0) pc.bz.m####.com:443
  • TCP(TLS/1.0) st####.h####.com:443
  • TCP(TLS/1.0) instant####.google####.com:443
  • TCP(TLS/1.0) a####.d####.com:443
  • TCP(TLS/1.0) s.51zishe####.com:443
  • TCP(TLS/1.0) www.m####.com:443
  • TCP(TLS/1.0) ne####.x####.com.cn:443
  • TCP(TLS/1.0) yun.b####.com:443
  • TCP(TLS/1.0) 64.2####.164.95:443
  • TCP(TLS/1.0) c####.x####.com.####.com:443
  • TCP(TLS/1.0) api.g####.vip:443
  • TCP(TLS/1.0) android####.go####.com:443
  • TCP(TLS/1.0) vi####.m####.com:443
  • TCP(TLS/1.0) mobi####.bz.m####.com:443
  • TCP(TLS/1.0) jingtai####.oss-cn-####.aliy####.com:443
  • TCP(TLS/1.0) c####.d####.v2.####.com:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) api.fou####.com:443
  • TCP(TLS/1.0) h####.m####.com:443
  • TCP(TLS/1.0) plat####.api.m####.com:443
  • TCP(TLS/1.0) u.api.m####.com:443
  • TCP(TLS/1.0) hd-pcwe####.log.m####.com:443
  • TCP(TLS/1.0) pos.b####.com:443
  • TCP(TLS/1.0) 1####.h####.com.####.com:443
  • TCP(TLS/1.0) s####.x####.com.cn:443
  • TCP(TLS/1.0) 1####.194.73.95:443
  • TCP(TLS/1.2) 64.2####.164.94:443
  • TCP(TLS/1.2) 1####.194.73.95:443
  • TCP(TLS/1.2) 1####.194.73.100:443
  • TCP 1####.0.40.254:37470
DNS requests:
  • 0####.h####.com
  • 1####.h####.com
  • 2####.h####.com
  • 3####.h####.com
  • 4####.h####.com
  • 653.a####.top
  • 653.a####.top.####.8
  • a####.d####.com
  • a####.new####.com
  • ad####.a####.com
  • adcha####.bz.m####.com
  • android####.go####.com
  • api.40088####.com
  • api.a####.ads####.cn
  • api.adoc####.com
  • api.fou####.com
  • api.g####.vip
  • api.yunco####.com
  • app.a####.top
  • ask.c####.com
  • bbs.c####.com
  • bbt####.wwe####.com
  • c####.baidust####.com
  • c####.be####.s####.com
  • c####.c####.cn
  • c####.d####.v2.####.com
  • c####.f####.top
  • c####.jumen####.com
  • c####.x####.com.cn
  • c####.zhit####.com
  • caa.qi####.cn
  • cdn.i.arie####.com
  • cn.f####.top
  • co####.ssp.adoc####.com
  • css.m####.com
  • d####.cn
  • duk.p####.com
  • dup.baidust####.com
  • ec####.b####.com
  • f####.c####.com
  • fc.b####.com
  • flf####.aog####.com
  • geb####.slj####.com
  • gif.lu.sogo####.com
  • gn####.f####.top
  • h####.c####.com
  • h####.m####.com
  • ha.qi####.cn
  • hd-pcwe####.log.m####.com
  • hm.b####.com
  • i####.sogo####.com
  • i####.wt####.com
  • i.c####.com
  • img.lu.sogo####.com
  • img.m####.com
  • instant####.google####.com
  • ip####.com
  • jingtai####.oss-cn-####.aliy####.com
  • jpg.i####.sogo####.com
  • js.wt####.com
  • jti.h####.s####.com
  • jxs####.slj####.com
  • k####.ur####.s####.com
  • kyy####.wwe####.com
  • lg.ca####.com
  • lg.ca####.com.####.8
  • lla####.slj####.com
  • lo.bu####.vip
  • m####.go####.com
  • md####.google####.com
  • mg.meit####.com
  • mobi####.bz.m####.com
  • n####.wangmei####.cn
  • ne####.x####.com.cn
  • newap####.math####.cn
  • p####.api.adoc####.com
  • p####.api.m####.com
  • p####.bugse####.com
  • p####.google####.com
  • p####.gou.s####.com
  • p####.hfc####.com
  • p####.p####.s####.com
  • pc####.api.m####.####.8
  • pc####.api.m####.com
  • pc####.api.m####.com
  • pc.bz.m####.com
  • plat####.api.m####.com
  • pos.b####.com
  • pq.chin####.net
  • pv.s####.com
  • qxm.p####.s####.com
  • r####.bu####.vip
  • r####.bu####.vip
  • rc-cha####.bz.m####.com
  • s####.x####.com.cn
  • s.51zishe####.com
  • s1.h####.com
  • s11.c####.com
  • s20.c####.com
  • s23.c####.com
  • s3.h####.com
  • s4.c####.com
  • s5.c####.com
  • s9.c####.com
  • s95.c####.com
  • s96.c####.com
  • sd.bu####.vip
  • sm.ca####.com
  • src.i####.sogo####.com
  • st####.h####.com
  • sta####.c####.com
  • sta####.c####.com
  • t####.a####.top
  • t####.sogo####.com
  • tc.c####.com
  • u####.a####.top
  • u####.b0.upa####.com
  • u.api.m####.com
  • ucst####.c####.com
  • v1.c####.com
  • vi####.m####.com
  • vip.bz.m####.com
  • w####.c####.com
  • w.i####.com
  • w.m####.com
  • wa.bu####.vip
  • www.c####.com
  • www.d####.xyz
  • www.m####.com
  • www.new####.com
  • www.pc####.com.cn
  • www.qq####.ltd
  • xiaox####.adse####.adan####.com
  • ycb####.slj####.com
  • yun.b####.com
  • zha####.zhit####.com
HTTP GET requests:
  • 58.2####.92.50:808/gh.html
  • 58.2####.92.50:808/kw2.html
  • 58.2####.92.50:808/ydc.html
  • 58.2####.92.50:808/ydc.html?1####
  • 58.2####.92.50:808/ydm.html
  • adcha####.bz.m####.com/direct?cc=####
  • app.a####.top/anshuaControl.json
  • app.a####.top/api.json
  • ask.c####.com.####.com/askques/expert/getAll
  • ask.c####.com.####.com/askques/questions/show/802640
  • ask.c####.com.####.com/js/cookie.js?2009101####
  • ask.c####.com.####.com/style/iask.css
  • ask.c####.com.####.com/style/images/ask2_blind4.gif
  • ask.c####.com.####.com/style/images/ask_done.gif
  • ask.c####.com.####.com/style/images/ask_pink.gif
  • ask.c####.com.####.com/style/images/ask_return.jpg
  • ask.c####.com.####.com/style/images/tab_pink_r_b.gif
  • ask.c####.com.####.com/style/images/tab_pink_r_t.gif
  • ask.c####.com.####.com/style/images/zj_online_bg.gif
  • ask.c####.com.####.com/style/word.css
  • ask.c####.com.####.com/styles/images/bg.gif
  • ask.c####.com.####.com/styles/images/nav_bg.jpg
  • ask.c####.com.####.com/styles/images/nav_menu2_block.gif
  • ask.c####.com.####.com/styles/images/search_sub.gif
  • ask.c####.com.####.com/styles/images/tabnavi.gif
  • c####.baidust####.com.####.com/cpro/ui/c.js
  • c####.be####.s####.com/ask?id=####&cb=####&ssi0=####&wsg=####&_v=####
  • c####.be####.s####.com/wap_ask_service?callback=####&url=####
  • c####.c####.cn/stat.php?site_id=####
  • c####.jumen####.com/init.php
  • c####.zhit####.com:99/newcar/index.html
  • c####.zhit####.com:99/pctja.html
  • c####.zhit####.com:99/wts/index.html?zha####
  • caa-qiu####.b0.a####.com/
  • caa-qiu####.b0.a####.com/css/base_v6.css
  • caa-qiu####.b0.a####.com/css/reset.css
  • caa-qiu####.b0.a####.com/wo.js?key=####
  • caa-qiu####.b0.a####.com/yvo.js?key=####
  • cl-5307####.g####.co/p16_02.ttf
  • cl-5307####.g####.co/p23_03.ttf
  • cl-5307####.g####.co/p27_16.ttf
  • cl-5307####.g####.co/p3_02.ttf
  • cl-5307####.g####.co/p44_02.ttf
  • co####.ssp.adoc####.com/api/v2/SDKActiveConfig?version=####&channelCode=...
  • co####.ssp.adoc####.com/api/v2/SDKCommonConfig?channelCode=####&version=...
  • co####.ssp.adoc####.com/api/v2/mgmConfig?channelCode=####&version=####
  • co####.ssp.adoc####.com/api/v2/mgmWebviewRatioConfig?channelCode=####&ve...
  • d####.cn/fenpei.html?1####
  • d####.cn/fenpei.html?2####
  • d####.i####.com/iwt/a.gif?url=####&ua=####&uuid=####&sign=####&ts=####
  • duk.p####.com.####.com/rhsdk/new506/xdt.jar
  • dup.baidust####.com/js/os.js
  • ec####.b####.com/se.jpg?type=####&ver=####&rdm=####
  • gd.a.s####.com/cityjson?ie=####
  • gif.lu.sogo####.####.com/wap/js/aw.js
  • gif.lu.sogo####.####.com/wap/js/wp.js
  • gn####.f####.top:8080/qsad/api/getAd/TKIshJdOMGdP7AB4ACY8CQ==
  • ha-qiuc####.b0.a####.com/
  • ha-qiuc####.b0.a####.com/css/base_v6.css
  • ha-qiuc####.b0.a####.com/css/reset.css
  • ha-qiuc####.b0.a####.com/wo.js?key=####
  • ha-qiuc####.b0.a####.com/yvo.js?key=####
  • ha-qiuc####.b0.a####.com/yvo2.js?key=####
  • i####.sogo####.com.####.com/app/a/200630/37acdc935b4072f85f2a563241dc9c2f
  • i####.wt####.com/auto/202002/css20200810/index_red_noflow.css
  • i####.wt####.com/top/202002/css/index_red_noflow.css
  • i.c####.com.####.com/css/images/foot-pic-836x60.gif
  • i.c####.com.####.com/css/layout1.css
  • i.c####.com.####.com/images/ico-25x25.gif
  • i.c####.com.####.com/js/new_sw.js?t=####
  • i.c####.com.####.com/style/ask.css?v=####
  • i.c####.com.####.com/style/frame-inner.css
  • i.c####.com.####.com/style/images/ask-cms-but-88x25.gif
  • i.c####.com.####.com/style/images/ask-cms-icon-14x14.gif
  • i.c####.com.####.com/style/images/ask-cms-top-2.gif
  • i.c####.com.####.com/style/images/ask_bg.gif
  • i.c####.com.####.com/style/images/ask_good.gif
  • i.c####.com.####.com/style/images/ask_green.gif
  • i.c####.com.####.com/style/images/ask_tiwen.jpg
  • i.c####.com.####.com/style/images/tab_pink_d.gif
  • i.c####.com.####.com/style/images/tab_pink_l_b.gif
  • i.c####.com.####.com/style/images/tab_pink_l_t.gif
  • i.c####.com.####.com/style/images/zj_online_foot.gif
  • i.c####.com.####.com/style/images/zj_online_t.gif
  • i.c####.com.####.com/styles/images/ci123_logo_ask.gif
  • i.c####.com.####.com/styles/images/icon.gif
  • i.c####.com.####.com/styles/images/nav_city_bg_160.gif
  • i.c####.com.####.com/styles/images/nav_mall_left.gif
  • i.c####.com.####.com/styles/images/nav_menu2_bg.gif
  • i.c####.com.####.com/styles/images/nav_menu2_block2.gif
  • i.c####.com.####.com/styles/images/nav_menu2_right.gif
  • i.c####.com.####.com/styles/images/nav_menu3_bg.gif
  • i.c####.com.####.com/styles/images/nav_menu3_s.gif
  • i.c####.com.####.com/styles/images/nav_tool.gif
  • i.c####.com.####.com/styles/menu_style.css?v=####
  • ip####.com/json/?lang=####
  • jpg.i####.sogo####.####.com/wap/js/wp.js
  • js.wt####.com/js/iwt/iwt1.0.1.js
  • k####.ur####.s####.com/ask?id=####&cb=####&ssi0=####&wsg=####&_v=####
  • k####.ur####.s####.com/wap_ask_service?callback=####&url=####
  • lo.bu####.vip/v1/log/track?key=####&mtype=####&device_####&pkg=####&subi...
  • mh####.b0.a####.com/sdk/cj007_cj007.html
  • mh####.b0.a####.com/sdk/cj013_cj013.html
  • n####.wangmei####.cn/styles/common.css
  • n####.wangmei####.cn/w5561/
  • n####.wangmei####.cn/w5562/
  • newap####.math####.cn/ssp/mgm/task?taskId=####&ip=####
  • p####.api.adoc####.com/ip
  • p####.gou.s####.com/wap_ask_service?callback=####&url=####
  • p####.gou.s####.com/wapxml?id=####&h=####&w=####&fv=####&if=####&mi=####...
  • p####.hfc####.com/c/12Y7TDHJSTY.zip
  • p####.hfc####.com/c/3Y4tjasjtwgsdk.zip
  • p####.hfc####.com/c/TeruKyer20210319.zip
  • p####.hfc####.com/c/TuxsTrzt.zip
  • p####.hfc####.com/c/asidahduah.zip
  • p####.hfc####.com/c/khbbgytad.zip
  • p####.hfc####.com/c/l/3Y23klvgdyedjsgdjwn.zip
  • p####.hfc####.com/c/ouasdasd.zip
  • p####.hfc####.com/c/puzanhvynvgh.zip
  • p####.hfc####.com/c/uasjdnyfea.zip
  • p####.hfc####.com/two/bhbasdd
  • pos.b####.com/bfp/snippetcacher.php?dpv=####&di=####
  • pq-chin####.b0.a####.com/yvo2.js?key=####
  • r####.bu####.vip/assets/bdtj/it8.html?hmsr=####&hmpl=####
  • r####.bu####.vip/assets/bdtj/ppt.html?hmsr=####&hmpl=####&hmcu=####
  • sd.bu####.vip/v1/log/track?key=####&mtype=####&device_####&pkg=####&subi...
  • t####.a####.top/anshua.json
  • t####.sogo####.com.####.com/wap/images/sg_logo.png
  • t####.sogo####.com.####.com/wap/js/anticheat.min.js
  • tc.c####.com/adimage.php?filename=####&contenttype=####
  • tc.c####.com/adscache/caches/104.js?n=####
  • tc.c####.com/adscache/caches/105.js?n=####
  • tc.c####.com/adscache/caches/106.js?n=####
  • tc.c####.com/adscache/caches/108.js?n=####
  • tc.c####.com/adscache/caches/109.js?n=####
  • tc.c####.com/adscache/caches/160.js?n=####
  • tc.c####.com/adscache/caches/163.js?n=####
  • tc.c####.com/adscache/caches/177.js?n=####
  • tc.c####.com/adscache/caches/178.js?n=####
  • tc.c####.com/adscache/caches/183.js?n=####
  • tc.c####.com/adscache/caches/187.js?n=####
  • tc.c####.com/adscache/caches/196.js?n=####
  • tc.c####.com/adscache/caches/205.js?n=####
  • tc.c####.com/adscache/caches/215.js?n=####
  • tc.c####.com/adscache/caches/216.js?n=####
  • tc.c####.com/adscache/caches/217.js?n=####
  • tc.c####.com/adscache/caches/227.js?n=####
  • tc.c####.com/adscache/caches/238.js?n=####
  • tc.c####.com/adscache/caches/239.js?n=####
  • tc.c####.com/adscache/caches/240.js?n=####
  • tc.c####.com/adscache/caches/242.js?n=####
  • tc.c####.com/adscache/caches/243.js?n=####
  • tc.c####.com/adscache/caches/245.js?n=####
  • tc.c####.com/adscache/caches/246.js?n=####
  • tc.c####.com/adscache/caches/25.js?n=####
  • tc.c####.com/adscache/caches/27.js?n=####
  • tc.c####.com/adscache/caches/280.js?n=####
  • tc.c####.com/adscache/caches/296.js?n=####
  • tc.c####.com/adscache/caches/304.js?n=####
  • tc.c####.com/adscache/caches/305.js?n=####
  • tc.c####.com/adscache/caches/306.js?n=####
  • tc.c####.com/adscache/caches/307.js?n=####
  • tc.c####.com/adscache/caches/308.js?n=####
  • tc.c####.com/adscache/caches/340.js?n=####
  • tc.c####.com/adscache/caches/344.js?n=####
  • tc.c####.com/adscache/caches/391.js?n=####
  • tc.c####.com/adscache/caches/393.js?n=####
  • tc.c####.com/adscache/caches/4.js?n=####
  • tc.c####.com/adscache/caches/401.js?n=####
  • tc.c####.com/adscache/caches/436.js?n=####
  • tc.c####.com/adscache/caches/492.js?n=####
  • tc.c####.com/adscache/caches/499.js?n=####
  • tc.c####.com/adscache/caches/510.js?n=####
  • tc.c####.com/adscache/caches/657.js?n=####
  • tc.c####.com/adscache/caches/72.js?n=####
  • tc.c####.com/adscache/caches/img/140912cms-300x250.jpg.jpg
  • tc.c####.com/adscache/caches/img/640x150.jpg.jpg
  • tc.c####.com/adx.js
  • tc.c####.com/iframeads/adsdispatch.php?pid=####
  • tc.c####.com/js/tcjs.php
  • u####.a####.top/653.html
  • u####.a####.top/js1002.html
  • u####.b0.upa####.com/image/auto/160630/lazyload50.jpg
  • u####.b0.upa####.com/libs/jquery/jquery-2.0.3.min.js
  • w####.c####.com/abc/xyz/point/index.php
  • w####.c####.com/abc/xyz/point/single.php?bid=####
  • www-new####.b0.a####.com/index1.html
  • www.c####.com.####.com/adicon-bottom.png
  • www.c####.com.####.com/ast/js/jquery_172.js
  • www.c####.com.####.com/ast/loginface/cookielogin10.js
  • www.c####.com.####.com/ast/loginface/cookielogin10.js?v=####
  • www.c####.com.####.com/ast/loginface/style5.css?v=####
  • www.c####.com.####.com/avatar/2239/2239072.png
  • www.c####.com.####.com/avatar/2239/2239073.png
  • www.c####.com.####.com/avatar/2998/2998265.png
  • www.c####.com.####.com/avatar/37261/37261674.png?124963####
  • www.c####.com.####.com/avatar/685/685624.png
  • www.c####.com.####.com/baike/d/272.html
  • www.c####.com.####.com/baike/d/455.html
  • www.c####.com.####.com/baike/js/global_js.js
  • www.c####.com.####.com/baike/js/jquery.cookie.js
  • www.c####.com.####.com/baike/styles/images/a-mark.png
  • www.c####.com.####.com/baike/styles/images/b-mark.png
  • www.c####.com.####.com/baike/styles/images/bksprite.png
  • www.c####.com.####.com/baike/styles/images/share.png
  • www.c####.com.####.com/baike/styles/images/view.jpg
  • www.c####.com.####.com/baike/styles/images/web-title.jpg
  • www.c####.com.####.com/baike/styles/index9.css
  • www.c####.com.####.com/banner3.html?d=####
  • www.c####.com.####.com/bd.png
  • www.c####.com.####.com/c/_i_?_=####
  • www.c####.com.####.com/c/d_i_?_=####
  • www.c####.com.####.com/c/if_i_?_=####
  • www.c####.com.####.com/c/sammer_i?_=####
  • www.c####.com.####.com/c/soft_i_?_=####
  • www.c####.com.####.com/c/wk_i_?_=####
  • www.c####.com.####.com/cmbbs/main.js
  • www.c####.com.####.com/cms_days/1409739247_5323.jpg
  • www.c####.com.####.com/cms_days/1434526867_5090.jpg
  • www.c####.com.####.com/cms_days/1434526867_5560.jpg
  • www.c####.com.####.com/cms_days/1445414149_5740.jpg
  • www.c####.com.####.com/cms_days/1470300063_4970.jpg
  • www.c####.com.####.com/cms_days/1470300063_9688.jpg
  • www.c####.com.####.com/cms_days/1490774108_3411.jpg
  • www.c####.com.####.com/cms_days/1559800050_5016.jpg
  • www.c####.com.####.com/css/other.css
  • www.c####.com.####.com/d/article.php/107
  • www.c####.com.####.com/d/post/18389085.html
  • www.c####.com.####.com/e/i.html
  • www.c####.com.####.com/e/i.js
  • www.c####.com.####.com/favicon.ico
  • www.c####.com.####.com/globalMsg.js
  • www.c####.com.####.com/home.png
  • www.c####.com.####.com/images/user_sig_split.gif
  • www.c####.com.####.com/img/new_85_1.gif
  • www.c####.com.####.com/js/iwt1.0.1.js
  • www.c####.com.####.com/jscripts/doc.js
  • www.c####.com.####.com/page-title.png
  • www.c####.com.####.com/photo/160_120/7148/1a95134ca46b17b93ae40e9415d906...
  • www.c####.com.####.com/photo/160_120/7264/93d30a4ee64d4e1b716e4d570245c7...
  • www.c####.com.####.com/photo/160_120/8763/27fe31e4c85387108c98da3e0fa04c...
  • www.c####.com.####.com/photo/160_120/8821/0e14935ebf31731351d4bee00e9395...
  • www.c####.com.####.com/style/images/bg_header.jpg
  • www.c####.com.####.com/style/images/icon.gif
  • www.c####.com.####.com/style/images/icon_num.gif
  • www.c####.com.####.com/style/images/search.gif
  • www.c####.com.####.com/style/images/use_tool.gif
  • www.c####.com.####.com/style/newPost.css?v=####
  • www.c####.com.####.com/style/style_board.css
  • www.c####.com.####.com/style/style_post3.css
  • www.c####.com.####.com/upload/images/36e4891658f5d7d0dc5b8a85e8cdee46.jpg
  • www.c####.com.####.com/xuetang20140819/css/detail1217.css?v=####
  • www.c####.com.####.com/xuetang20140819/css/style1217.css?v=####
  • www.c####.com.####.com/xuetang20140819/img/icon2.png
  • www.c####.com.####.com/xuetang20140819/img/icon_png24.png
  • www.c####.com.####.com/xuetang20140819/img/web-title.jpg
  • www.c####.com.####.com/xuetang20140819/js/loginface.js
  • www.pc####.com.####.cn/autox/6a976e56b61b2febd215f6cbe5186f5f.htm
  • z.c####.com/stat.htm?id=####&cnzz_eid=####
  • zha####.zhit####.com:808/zhangpc/index.html
  • zha####.zhit####.com:808/zhangpc/yrc_001pc.js
HTTP POST requests:
  • 1713464####.cn-qin####.fc.####.com/gwd/up
  • api.40088####.com:8181/v3/entry/list
  • api.a####.ads####.cn/thirdparty/sapi/chn
  • api.adoc####.com/titan/monitor/device_info
  • api.yunco####.com/service/rest
  • bbt####.wwe####.com:17001/an2y3z/
  • bbt####.wwe####.com:17001/cbcvu9/
  • cn.f####.top:8080/qsad/api/c/c
  • flf####.aog####.com:19001/vgqcuctsmu/
  • kyy####.wwe####.com:17001/karawc/
  • kyy####.wwe####.com:17002/5rhxg/
  • kyy####.wwe####.com:17002/6a4it/
  • kyy####.wwe####.com:17002/jw1pw/
  • mg.meit####.com:8071/api/v101
  • newap####.math####.cn/titan/monitor/device_info
  • sd.bu####.vip/v1/project/sdk
  • sd.bu####.vip/v1/wake/list
  • www.d####.xyz/Orders/getlive?channel=####&Slevi=####&anmac=####&anosv=##...
  • www.d####.xyz/Orders/getliveshua?channel=####&Slevi=####&anid=####&anmac...
  • www.d####.xyz/Orders/pigchannel?channel=####&nochannel=####
  • xiaox####.adse####.adan####.com/server/ad/v1
File system changes:
Creates the following files:
  • /data/data/####/.2403297477.apk
  • /data/data/####/.2403297477.dex
  • /data/data/####/.2403297477.dex.flock (deleted)
  • /data/data/####/.2969407120.apk
  • /data/data/####/.2969407120.dex
  • /data/data/####/.2969407120.dex.flock (deleted)
  • /data/data/####/.3050965755.apk
  • /data/data/####/.3050965755.dex
  • /data/data/####/.3050965755.dex.flock (deleted)
  • /data/data/####/03a16097009cd037_0
  • /data/data/####/052da7393728e70c_0
  • /data/data/####/052da7393728e70c_1
  • /data/data/####/05386d0addb350f1_0
  • /data/data/####/05386d0addb350f1_1
  • /data/data/####/0571ff6a4cb3db85_0
  • /data/data/####/0574760c185fb809_0
  • /data/data/####/0574760c185fb809_1
  • /data/data/####/059ce224b100dcdb_0
  • /data/data/####/06af843611460037_0
  • /data/data/####/06af843611460037_1
  • /data/data/####/070a5ab53776874e_0
  • /data/data/####/0904dd88a702fb1c_0
  • /data/data/####/0904dd88a702fb1c_1
  • /data/data/####/09a6ef8b80cdc388_0
  • /data/data/####/09eddd9f7a13d712_0
  • /data/data/####/0a6b8061838b4749_0
  • /data/data/####/0ba72ca2ab0433c9_0
  • /data/data/####/0c7bafd49e831e7d_0
  • /data/data/####/0cc1813f222c92e2_0
  • /data/data/####/0e73154956080eb6_0
  • /data/data/####/0e9d9a03ec43f3b6_0
  • /data/data/####/10c232bf2cf6944e_0
  • /data/data/####/1193735283
  • /data/data/####/11bf47e486bbf254_0
  • /data/data/####/11c6cd50aee85502_0
  • /data/data/####/13278d9b411b96cd_0
  • /data/data/####/13278d9b411b96cd_1
  • /data/data/####/134be4f9f88ba94c_0
  • /data/data/####/1502509754
  • /data/data/####/16ba9ae145b027b3_0 (deleted)
  • /data/data/####/186ec5a00d432bf7_0 (deleted)
  • /data/data/####/18a8ef79807e30e9_0
  • /data/data/####/18a8ef79807e30e9_1
  • /data/data/####/18d370d2ac0b1e8b_0 (deleted)
  • /data/data/####/198470b6590b03a1_0
  • /data/data/####/199f2f20f8cacc28_0
  • /data/data/####/199f2f20f8cacc28_1
  • /data/data/####/1a40604f560c7f1d_0
  • /data/data/####/1a40604f560c7f1d_1
  • /data/data/####/1c55fc6090f68a24_0
  • /data/data/####/1cf3915ed93430bd_0
  • /data/data/####/1edb02c30d0776cf_0
  • /data/data/####/1efe5dcf42ac5511_0
  • /data/data/####/1efe5dcf42ac5511_1
  • /data/data/####/1f5356114d46fc83_0
  • /data/data/####/1f5356114d46fc83_0 (deleted)
  • /data/data/####/1fb0b356e7fc8514_0
  • /data/data/####/2021_04_13readzibao.xml
  • /data/data/####/20da8dc53d2687ca_0
  • /data/data/####/2172f6e469e5340a_0 (deleted)
  • /data/data/####/22175443bc63ffeb_0
  • /data/data/####/2254818adfee2f14_0
  • /data/data/####/22d87494eb9509eb_0
  • /data/data/####/25a742f2cd96c734_0
  • /data/data/####/26f928c827592f39_0
  • /data/data/####/27879498ef9c9689_0
  • /data/data/####/27dac8705e581c47_0
  • /data/data/####/27dac8705e581c47_1
  • /data/data/####/289c742cb05b91e9_0
  • /data/data/####/289c742cb05b91e9_1
  • /data/data/####/289f8f245c63e675_0
  • /data/data/####/2948cb8da2553809_0
  • /data/data/####/2952029974287ba4_0
  • /data/data/####/29857e5b185b6c8f_0 (deleted)
  • /data/data/####/29aef394b660f54d_0
  • /data/data/####/29b4f8f2efec44dd_0
  • /data/data/####/2b6de135735c318e_0 (deleted)
  • /data/data/####/2bb367c593030658_0
  • /data/data/####/2bb51011981679ff_0
  • /data/data/####/2c8aee03a308f1dc_0
  • /data/data/####/2c8aee03a308f1dc_1
  • /data/data/####/2d1d5122e535b11c_0
  • /data/data/####/2d3464a38259a114_0
  • /data/data/####/2d81e3d580a586aa_0 (deleted)
  • /data/data/####/2da27b22ee32400b_0
  • /data/data/####/2dc9fe42e18dab11_0
  • /data/data/####/2f4453b894254670_0
  • /data/data/####/300ba0aa62d44627_0
  • /data/data/####/304e64786a28e2f2_0
  • /data/data/####/305b631d7bbe696b_0
  • /data/data/####/30ca67afa67fdd9e_0
  • /data/data/####/30ca67afa67fdd9e_1
  • /data/data/####/3159da40b80bc5b5_0
  • /data/data/####/31a3f6c3f0152fd5_0
  • /data/data/####/31a3f6c3f0152fd5_1
  • /data/data/####/3236707ab33bbec7_0
  • /data/data/####/327f561eab5eb4b2_0
  • /data/data/####/327f561eab5eb4b2_1
  • /data/data/####/32cfd5b311076858_0
  • /data/data/####/3327275
  • /data/data/####/334ecf5a6dbecdb4_0
  • /data/data/####/336b8a40c156a00e_0 (deleted)
  • /data/data/####/33849fce5eb82d37_0
  • /data/data/####/33FC58C31FB491BC01333548F6507866.dex
  • /data/data/####/33FC58C31FB491BC01333548F6507866.dex.flock (deleted)
  • /data/data/####/344e7c07ea7f3741_0
  • /data/data/####/345f9dd4ddb6ccb2_0
  • /data/data/####/35106c5304abdde0_0
  • /data/data/####/3543d479433fbf97_0
  • /data/data/####/3608be51986c6f11_0
  • /data/data/####/3664bb0f495515af_0
  • /data/data/####/368329eed6ed9768_0
  • /data/data/####/36858e149e31f3d8_0
  • /data/data/####/37562faffefcf8b5_0
  • /data/data/####/37562faffefcf8b5_1
  • /data/data/####/3792facb119ac865_0
  • /data/data/####/37e57bd6f643a805_0
  • /data/data/####/3806033d7d8f4351_0
  • /data/data/####/3a7b0bf5416ebd60_0
  • /data/data/####/3b7dc2ae44ce2d2b_0
  • /data/data/####/3bc7ed444611a887_0
  • /data/data/####/3c95a9180ae7e19d_0
  • /data/data/####/3da7bb653c2c9f40_0
  • /data/data/####/3e00b748f92e87ec_0
  • /data/data/####/3e00b748f92e87ec_1
  • /data/data/####/3e19a939047a2c42_0
  • /data/data/####/3e19a939047a2c42_1
  • /data/data/####/3e51efc1c77e3206_0
  • /data/data/####/3e51efc1c77e3206_1
  • /data/data/####/424961eba0ff4faf_0
  • /data/data/####/4260d820ef5b4725_0
  • /data/data/####/42EF8A3EFC8DE246EF6BE2A6A7AA380B.dex
  • /data/data/####/42EF8A3EFC8DE246EF6BE2A6A7AA380B.dex.flock (deleted)
  • /data/data/####/43188e4c7f5bbfa5_0
  • /data/data/####/43188e4c7f5bbfa5_1
  • /data/data/####/432d07f9b13ae059_0
  • /data/data/####/4397b72bdfe218b9_0
  • /data/data/####/4397b72bdfe218b9_1
  • /data/data/####/43dd8768e800a4cb_0
  • /data/data/####/441e8b695652351f_0
  • /data/data/####/447a8567e12d5bc9_0
  • /data/data/####/4488723df67cddca_0
  • /data/data/####/4663b41a79f3951b_0
  • /data/data/####/47EDB4E7D8953EADC1D68DE1FD348769.dex
  • /data/data/####/47EDB4E7D8953EADC1D68DE1FD348769.dex.flock (deleted)
  • /data/data/####/47f55016548746cb_0
  • /data/data/####/4863afdec10ce0f7_0
  • /data/data/####/48ad00444790d2ad_0
  • /data/data/####/491fc489ca5c09e2_0
  • /data/data/####/491fc489ca5c09e2_1
  • /data/data/####/492ff31faff4ff43_0
  • /data/data/####/496b18d35eb5430c_0
  • /data/data/####/496b18d35eb5430c_1
  • /data/data/####/4a959f590a6a9eca_0
  • /data/data/####/4a96897df3ff906b_0
  • /data/data/####/4a96897df3ff906b_1
  • /data/data/####/4b2ec3e245f58a21_0
  • /data/data/####/4b2ec3e245f58a21_1
  • /data/data/####/4c50b05284c7d095_0
  • /data/data/####/4cd8b6a53da97139_0 (deleted)
  • /data/data/####/4d9e31893cd14211_0
  • /data/data/####/4d9e31893cd14211_1
  • /data/data/####/4dc387a6f88a988e_0
  • /data/data/####/4e20d5db48019aaf_0
  • /data/data/####/4fd400627418e188_0
  • /data/data/####/4fd400627418e188_0 (deleted)
  • /data/data/####/50b9bec156ef4a03_0
  • /data/data/####/50cd774a764a7178_0
  • /data/data/####/50e8def63ad9bed1_0
  • /data/data/####/50e8def63ad9bed1_1
  • /data/data/####/5108699136afe508_0
  • /data/data/####/51F834546E1B2B19B8BEF5098FAFFD19.dex
  • /data/data/####/51F834546E1B2B19B8BEF5098FAFFD19.dex.flock (deleted)
  • /data/data/####/52ffcf53611c8f76_0
  • /data/data/####/538088c80801c8be_0
  • /data/data/####/53e2590398bcba3c_0
  • /data/data/####/54AE2A187DE0596E8A7C359047AE12D5.dex
  • /data/data/####/54AE2A187DE0596E8A7C359047AE12D5.dex.flock (deleted)
  • /data/data/####/54fb2a7a945db526_0
  • /data/data/####/5503ab90723a4a82_0
  • /data/data/####/5503ab90723a4a82_1
  • /data/data/####/5555b7d89bbdb864_0
  • /data/data/####/5555b7d89bbdb864_1
  • /data/data/####/55df755d9113a4fa_0
  • /data/data/####/55df755d9113a4fa_0 (deleted)
  • /data/data/####/55df755d9113a4fa_1
  • /data/data/####/56d22bab2f8082ec_0
  • /data/data/####/57621f22220ee81f_0
  • /data/data/####/5790f1f637bc7155_0
  • /data/data/####/57e1d0be8de8614e_0
  • /data/data/####/5854dd33b65a4979_0
  • /data/data/####/58837f87a0bc315b_0
  • /data/data/####/59b0a905fbd5cf14_0
  • /data/data/####/59b417e112fb48a7_0
  • /data/data/####/59d1be81f9e50cdd_0
  • /data/data/####/5A596F7433DA4A9994F78A3553069154.dex
  • /data/data/####/5A596F7433DA4A9994F78A3553069154.dex.flock (deleted)
  • /data/data/####/5bd69f909036e55a_0
  • /data/data/####/5c8d038af1cf6a15_0
  • /data/data/####/5c8ecf4ccf552d9f_0
  • /data/data/####/5cdf03e901554490_0
  • /data/data/####/5ee34b61bf04d841_0
  • /data/data/####/60261ef0eddd827e_0
  • /data/data/####/613c3e7a014fbc56_0
  • /data/data/####/61ab53582e5e1f8a_0
  • /data/data/####/639201456f08268b_0
  • /data/data/####/67a0512cc5e43f44_0
  • /data/data/####/68171d9c873e38e9_0
  • /data/data/####/6817f0df710748ec_0 (deleted)
  • /data/data/####/6847176a02444990_0
  • /data/data/####/6847176a02444990_1
  • /data/data/####/68525aca86d6d82f_0
  • /data/data/####/6881b5a336ab9fa9_0
  • /data/data/####/68DEC76182C6E7F775B58FEB5EDC33E0.dex
  • /data/data/####/68DEC76182C6E7F775B58FEB5EDC33E0.dex.flock (deleted)
  • /data/data/####/693c6c9db5937bb0_0
  • /data/data/####/696f32134ad2c993_0
  • /data/data/####/69df1810aa10b905_0
  • /data/data/####/69eeb0f02de8fb80_0
  • /data/data/####/6b1b7859e20c2ee1_0
  • /data/data/####/6c99f8b29855df58_0
  • /data/data/####/6ca770d65e76c9ce_0
  • /data/data/####/6cab1dd7cba0ca12_0
  • /data/data/####/6cc5080bc6efbe55_0 (deleted)
  • /data/data/####/6d4b8488f8f3c4fb_0
  • /data/data/####/6d8f6d226fd1a906_0
  • /data/data/####/6e1e5d121f280764_0
  • /data/data/####/6e67f4edd403b5fa_0
  • /data/data/####/6e67f4edd403b5fa_1
  • /data/data/####/6ec054a5ead80582_0
  • /data/data/####/7123828dace3445b_0
  • /data/data/####/7123828dace3445b_1
  • /data/data/####/71bed5456ef63d6b_0
  • /data/data/####/728915d9256de840_0
  • /data/data/####/72ef24ed14556dda_0
  • /data/data/####/738175f7228816f8_0
  • /data/data/####/748d4326ffd375bd_0
  • /data/data/####/74a1d10ac80563df_0
  • /data/data/####/74a1d10ac80563df_1
  • /data/data/####/74d334e92f1698cc_0
  • /data/data/####/7563103c5ec74c82_0
  • /data/data/####/756a3eef8797c8ed_0
  • /data/data/####/76fa166d1303208e_0
  • /data/data/####/7861724e418729a1_0
  • /data/data/####/786abe8977519b32_0 (deleted)
  • /data/data/####/78abac4c146e5727_0
  • /data/data/####/792de6de4caffd59_0
  • /data/data/####/792de6de4caffd59_1
  • /data/data/####/7980dd479b946917_0 (deleted)
  • /data/data/####/79c25b7cbad13564_0 (deleted)
  • /data/data/####/7a763de5bc6f39c9_0 (deleted)
  • /data/data/####/7ab10d097d8f1d11_0
  • /data/data/####/7add91cdfe6122b9_0
  • /data/data/####/7b4fa92e9c155721_0
  • /data/data/####/7bbaa2c74aca6074_0
  • /data/data/####/7c1c76413d079100_0
  • /data/data/####/7c27969807ed557c_0
  • /data/data/####/7c27969807ed557c_1
  • /data/data/####/7c778db17be9191b_0
  • /data/data/####/7c99b6955eb2950a_0
  • /data/data/####/7cf726773deb49c6_0
  • /data/data/####/7cf726773deb49c6_1
  • /data/data/####/7db80d8b014f87a9_0
  • /data/data/####/7e39273e11a4c679_0
  • /data/data/####/7ed7e3de20037e25_0 (deleted)
  • /data/data/####/7ef04a8e4abf9b38_0
  • /data/data/####/7faa1a6cfd40f4b2_0
  • /data/data/####/80f57d79464952be_0
  • /data/data/####/810e8570d24dcf0b_0
  • /data/data/####/818336991fb68c19_0
  • /data/data/####/818336991fb68c19_0 (deleted)
  • /data/data/####/8358e8c7f6953b1a_0
  • /data/data/####/848f942b6db3bf58_0
  • /data/data/####/85205083
  • /data/data/####/864dd7f0e3f3a45c_0
  • /data/data/####/865DDFDE477A3DC51518CBC284893178.dex
  • /data/data/####/865DDFDE477A3DC51518CBC284893178.dex.flock (deleted)
  • /data/data/####/86bf307bd597599d_0
  • /data/data/####/871021047b8d4872_0
  • /data/data/####/877a72fba06915e7_0
  • /data/data/####/885f308c66e93cad_0
  • /data/data/####/89b2598c8f14d892_0
  • /data/data/####/8a17bef7616cac3c_0
  • /data/data/####/8b6f099ccdcf3e07_0
  • /data/data/####/8bccc18d68aaa37e_0 (deleted)
  • /data/data/####/8be546bf03ddce82_0
  • /data/data/####/8c8fba465376a16a_0
  • /data/data/####/8cab184b88040def_0
  • /data/data/####/8faa1e64ef5ddf5d_0
  • /data/data/####/9052e339c8a13cfb_0
  • /data/data/####/9070f57fffbdc536_0
  • /data/data/####/91312152ea760f59_0
  • /data/data/####/913f60674c22db79_0
  • /data/data/####/9207d62d18a4ad73_0
  • /data/data/####/9207d62d18a4ad73_1
  • /data/data/####/923d32ae6c25f2b7_0
  • /data/data/####/923d32ae6c25f2b7_1
  • /data/data/####/925ad5a02fa26249_0
  • /data/data/####/9314ec5a7e21a343_0
  • /data/data/####/93318b74c2d4881a_0 (deleted)
  • /data/data/####/935f8bdfaf60156a_0
  • /data/data/####/93678d69142594b9_0
  • /data/data/####/93bd996194271a0f_0
  • /data/data/####/94ab5be9ef691e99_0
  • /data/data/####/950e9604600cc179_0
  • /data/data/####/95c9c67e164cdc38_0
  • /data/data/####/96395d084dd2f43b_0
  • /data/data/####/96395d084dd2f43b_1
  • /data/data/####/9663d57fe8c82dee_0
  • /data/data/####/970ceb5c7bb53337_0
  • /data/data/####/983192334df152ac_0 (deleted)
  • /data/data/####/985958d976619751_0
  • /data/data/####/985958d976619751_1
  • /data/data/####/98bbadd6a2bc9db7_0
  • /data/data/####/9c802c31a4ad47df_0
  • /data/data/####/9cb1bc8d6b035b17_0
  • /data/data/####/9d08eeb386c29d7a_0
  • /data/data/####/9d33ada572df1ddf_0
  • /data/data/####/9e74370f439e0870_0
  • /data/data/####/9edf11af3e976ca0_0 (deleted)
  • /data/data/####/Cookies-journal
  • /data/data/####/D75E99C9A338D24A1F840F280B0877ED.dex
  • /data/data/####/D75E99C9A338D24A1F840F280B0877ED.dex.flock (deleted)
  • /data/data/####/Emp.xml
  • /data/data/####/Emp.xml.bak
  • /data/data/####/F0736D63ACA7F31E7D1990D953ED1922.dex
  • /data/data/####/F0736D63ACA7F31E7D1990D953ED1922.dex.flock (deleted)
  • /data/data/####/F306422A50185CD1D1975B917A5A5962.dex
  • /data/data/####/F306422A50185CD1D1975B917A5A5962.dex.flock (deleted)
  • /data/data/####/Ix132mMskey1.xml
  • /data/data/####/Ix132mMtasks.xml
  • /data/data/####/Ix132mMtasks.xml.bak
  • /data/data/####/STORE_MAIN.xml
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/___rb.p12___
  • /data/data/####/__cid__v1__.dat
  • /data/data/####/__rbpr_up18__
  • /data/data/####/a0a6aecd490cabd7_0
  • /data/data/####/a1ad25019ae337ce_0
  • /data/data/####/a1ad25019ae337ce_1
  • /data/data/####/a1fd7c3272b09c56_0
  • /data/data/####/a2b1bf2e2f0b1d2f_0
  • /data/data/####/a2b1bf2e2f0b1d2f_1
  • /data/data/####/a3d27d7ccaafe4d3_0
  • /data/data/####/a3d44880f5857a99_0
  • /data/data/####/a4395c37a9fe0946_0
  • /data/data/####/a599ca8669d53c44_0
  • /data/data/####/a5afc76552ac9fba_0
  • /data/data/####/a5dcd5e747e88e99_0
  • /data/data/####/a8e9a51516ac9934_0
  • /data/data/####/aaebb82f790ae150_0
  • /data/data/####/abs.xml
  • /data/data/####/ac1d40b1e6cd7878_0
  • /data/data/####/ac1d40b1e6cd7878_0 (deleted)
  • /data/data/####/ad4e6698d603d66d_0
  • /data/data/####/ad6ffd6294e6d642_0
  • /data/data/####/add6e83659896dcb_0
  • /data/data/####/ae2e6037f9df9f05_0
  • /data/data/####/aec321db7552fcb7_0
  • /data/data/####/aee7842c4fda2e11_0
  • /data/data/####/afa84d18baf3c8ec_0
  • /data/data/####/afc432ee41dd7f5a_0
  • /data/data/####/afc432ee41dd7f5a_1
  • /data/data/####/ahq_spu_ti.xml
  • /data/data/####/b0712b431e2458ee_0
  • /data/data/####/b20fce2a7facac03_0
  • /data/data/####/b275fadf0ca9f202_0
  • /data/data/####/b2c6c6bb27f8613b_0
  • /data/data/####/b2f5adba5dfc1d43_0
  • /data/data/####/b37aafdfba84caca_0
  • /data/data/####/b4ebbfe2fd9fc81a_0
  • /data/data/####/b544dfd4dd2a0a49_0
  • /data/data/####/b6108f0258f362a2_0
  • /data/data/####/b6108f0258f362a2_1
  • /data/data/####/b658df43504c4461_0
  • /data/data/####/b697fc909f81bce6_0
  • /data/data/####/b716dea34989f43b_0
  • /data/data/####/b73451d7c92818c0_0
  • /data/data/####/b74fcb5f57829f97_0
  • /data/data/####/b77f17956aceae83_0
  • /data/data/####/b7ae703c56542ec7_0
  • /data/data/####/b85b44f223923253_0
  • /data/data/####/b9a5402a24041e6e_0
  • /data/data/####/bb6167b9314f48ab_0
  • /data/data/####/bc29b7b70babcc85_0
  • /data/data/####/bc29b7b70babcc85_1
  • /data/data/####/bc33107cfceaaa7c_0
  • /data/data/####/bc6cba40d46eae4e_0
  • /data/data/####/bc6cba40d46eae4e_1
  • /data/data/####/bcad4dfef986d4cb_0
  • /data/data/####/bda7049d681da6e2_0
  • /data/data/####/be554f35dee4bf29_0
  • /data/data/####/be554f35dee4bf29_1
  • /data/data/####/beccfb6faabbd74e_0
  • /data/data/####/bf30031f8bd47355_0
  • /data/data/####/bf335fd4298c6504_0
  • /data/data/####/bff0016603800b2c_0
  • /data/data/####/c02816cd5941d9b5_0
  • /data/data/####/c05507fe881eed5f_0
  • /data/data/####/c05507fe881eed5f_1
  • /data/data/####/c05a5249408877b1_0
  • /data/data/####/c08b4de273799391_0
  • /data/data/####/c37d16b601ef6180_0
  • /data/data/####/c4c7046355a18024_0
  • /data/data/####/c4c7046355a18024_0 (deleted)
  • /data/data/####/c4c7046355a18024_1
  • /data/data/####/c5367926008d137d_0
  • /data/data/####/c5c3b27db18763fa_0
  • /data/data/####/c5c3b27db18763fa_1
  • /data/data/####/c709eb7e22d5f9c3_0
  • /data/data/####/c709eb7e22d5f9c3_1
  • /data/data/####/c79a64f0afb7e1a9_0
  • /data/data/####/c7f51f2f63765e65_0
  • /data/data/####/c82b3d7888ca20ee_0
  • /data/data/####/c82b3d7888ca20ee_1
  • /data/data/####/c8b2565063bf8049_0
  • /data/data/####/cbc72a3eb95ee1fd_0
  • /data/data/####/cc3c202a7e18a664_0
  • /data/data/####/ccc1734876831815_0
  • /data/data/####/ccf40e84f3246233_0
  • /data/data/####/cd24d733e9067dc4_0
  • /data/data/####/cd6f4a72c3a838a0_0
  • /data/data/####/cd6f4a72c3a838a0_1
  • /data/data/####/ce7653d669c2693c_0
  • /data/data/####/cf0ce22c2b3949de_0
  • /data/data/####/cf0ce22c2b3949de_1
  • /data/data/####/cf3fea772fd2104c_0 (deleted)
  • /data/data/####/com.kmvo.xygz_preferences.xml
  • /data/data/####/comacerbzvm.xml
  • /data/data/####/comwusigeuzxci.xml
  • /data/data/####/comwusigeuzxci.xml.bak
  • /data/data/####/comxcxid.xml
  • /data/data/####/comxcxid.xml.bak
  • /data/data/####/countApi.xml
  • /data/data/####/d07255804ad34c41_0
  • /data/data/####/d1c6fcde5f750485_0
  • /data/data/####/d2288d162dc1be8f_0
  • /data/data/####/d2695b99e1142016_0
  • /data/data/####/d310c0e3df918122_0
  • /data/data/####/d3451e8a1d543a40_0 (deleted)
  • /data/data/####/d36fea425ffd1664_0
  • /data/data/####/d49b0bd54672d981_0
  • /data/data/####/d57a64d57bf641a2_0
  • /data/data/####/d6cfdb60a4b71bce_0
  • /data/data/####/d7753b21e5938a07_0
  • /data/data/####/d8dbb00fa87d7f11_0
  • /data/data/####/d952ff91f27e44a2_0
  • /data/data/####/d9faea2b4b928702_0
  • /data/data/####/dad634afeb374a83_0
  • /data/data/####/data.m
  • /data/data/####/db9c88a79eca22ec_0
  • /data/data/####/dc0567e1f9ec191e_0
  • /data/data/####/dc0567e1f9ec191e_1
  • /data/data/####/dc1279e829b25497_0
  • /data/data/####/dc1279e829b25497_1
  • /data/data/####/dce3e65cb2a3ba0e_0
  • /data/data/####/dce3e65cb2a3ba0e_1
  • /data/data/####/df219ae7e3677b9c_0
  • /data/data/####/df219ae7e3677b9c_1
  • /data/data/####/df624de35b3e247b_0
  • /data/data/####/e01831310f2d53e9_0
  • /data/data/####/e0cc22fbd494cacc_0
  • /data/data/####/e1091179fd18b446_0
  • /data/data/####/e13ade0358217955_0
  • /data/data/####/e252ed1232066fb2_0 (deleted)
  • /data/data/####/e27f5cb830028b82_0
  • /data/data/####/e27f5cb830028b82_1
  • /data/data/####/e28b5ba5d9b70676_0
  • /data/data/####/e31e2b6ecd3e78cf_0
  • /data/data/####/e31e2b6ecd3e78cf_1
  • /data/data/####/e41c38eab55c9e57_0
  • /data/data/####/e591e2681af16715_0
  • /data/data/####/e5e3a8b36e20edaa_0
  • /data/data/####/e6c7d918986159d3_0
  • /data/data/####/e7b081539edb9e0c_0
  • /data/data/####/e8806c393c212628_0
  • /data/data/####/e964a80714d778ac_0
  • /data/data/####/e9718a5916a26937_0
  • /data/data/####/e9fce6b96743fdbf_0
  • /data/data/####/eHhkX3Nw.xml
  • /data/data/####/eaed362e71cb6067_0
  • /data/data/####/ebdce518493d6d0b_0
  • /data/data/####/ece4adbf07c9d4b4_0
  • /data/data/####/ee360c63cc80bdc0_0
  • /data/data/####/ee594ee541344bc3_0 (deleted)
  • /data/data/####/ef8577d81c3b55fe_0
  • /data/data/####/ef8577d81c3b55fe_1
  • /data/data/####/f0a2fdad4cc0ba66_0
  • /data/data/####/f24382a6622b7b8e_0
  • /data/data/####/f26005bf558319ec_0
  • /data/data/####/f3b10db176b0debe_0
  • /data/data/####/f495d3b8838162f0_0
  • /data/data/####/f4c48756b74d98b0_0
  • /data/data/####/f4d30074c0c40657_0
  • /data/data/####/f53ce28bddfb5a94_0
  • /data/data/####/f5405eafe1e6c5b5_0
  • /data/data/####/f87d1dcc9be2b9e4_0
  • /data/data/####/f8f7147affba7464_0
  • /data/data/####/f9f884e7cc3a2a4a_0
  • /data/data/####/fa7736b673dc89fa_0
  • /data/data/####/faa94fdfe1472342_0
  • /data/data/####/fas.xml
  • /data/data/####/fas.xml.bak
  • /data/data/####/fc21226e7e737ee0_0
  • /data/data/####/fc483e0133447b44_0
  • /data/data/####/fcafdb6697c94d1f_0
  • /data/data/####/fe00a63d224cef9b_0
  • /data/data/####/fec0b3bd7133d5a8_0
  • /data/data/####/fec0b3bd7133d5a8_1
  • /data/data/####/ff7be7879fd8c715_0
  • /data/data/####/ffcab1e05a855112_0
  • /data/data/####/gPjE.dex
  • /data/data/####/gPjE.dex.flock (deleted)
  • /data/data/####/gPjE.jar
  • /data/data/####/http_58.218.92.50_808.localstorage-journal
  • /data/data/####/http_ask.ci123.com_0.localstorage-journal
  • /data/data/####/http_bbs.ci123.com_0.localstorage-journal
  • /data/data/####/http_www.ci123.com_0.localstorage-journal
  • /data/data/####/http_www.news18a.com_0.localstorage-journal
  • /data/data/####/http_zhangpc.zhitouip.com_808.localstorage-journal
  • /data/data/####/https_w.mgtv.com_0.localstorage-journal
  • /data/data/####/hxdata.xml
  • /data/data/####/index
  • /data/data/####/km01
  • /data/data/####/km09_4073.so
  • /data/data/####/km09_4073.so_tmp
  • /data/data/####/km13
  • /data/data/####/kms_02ext
  • /data/data/####/kw_137728
  • /data/data/####/kw_137728_tmp (deleted)
  • /data/data/####/libkm05.so
  • /data/data/####/libkm05_64.so
  • /data/data/####/metrics_guid
  • /data/data/####/mp16.tmp
  • /data/data/####/mp23.tmp
  • /data/data/####/mp27.tmp
  • /data/data/####/mp3.tmp
  • /data/data/####/mp44.tmp
  • /data/data/####/myconfig.xml
  • /data/data/####/pref_bl
  • /data/data/####/proc_auxv
  • /data/data/####/qi542320.apk
  • /data/data/####/qi542320_o
  • /data/data/####/qi542320_o.flock (deleted)
  • /data/data/####/qqsz_file.xml
  • /data/data/####/readzibao.xml
  • /data/data/####/ri.xml
  • /data/data/####/sdkinit.xml
  • /data/data/####/sdkinit.xml.bak
  • /data/data/####/sp16.dex
  • /data/data/####/sp16.dex.flock (deleted)
  • /data/data/####/sp16.jar
  • /data/data/####/sp23.dex
  • /data/data/####/sp23.dex.flock (deleted)
  • /data/data/####/sp23.jar
  • /data/data/####/sp27.dex
  • /data/data/####/sp27.dex.flock (deleted)
  • /data/data/####/sp27.jar
  • /data/data/####/sp3.dex
  • /data/data/####/sp3.dex.flock (deleted)
  • /data/data/####/sp3.jar
  • /data/data/####/sp44.dex
  • /data/data/####/sp44.dex.flock (deleted)
  • /data/data/####/sp44.jar
  • /data/data/####/sp_name.xml
  • /data/data/####/sp_name.xml.bak
  • /data/data/####/sp_pnio.xml
  • /data/data/####/spu_gz.xml
  • /data/data/####/spu_ti.xml
  • /data/data/####/spu_yj.xml
  • /data/data/####/szsh.xml
  • /data/data/####/the-real-index
  • /data/data/####/umengc.db
  • /data/data/####/uo.xml
  • /data/data/####/upz_5
  • /data/data/####/wBrand.xml
  • /data/data/####/web_info.xml
  • /data/data/####/xconf.xml
  • /data/data/####/xdt.dex
  • /data/data/####/xdt.dex.flock (deleted)
  • /data/data/####/xdt.jar
  • /data/data/####/xdtversion.xml
  • /data/media/####/.did
  • /data/media/####/.sxpc
  • /data/media/####/0DA6795BC4C4A5E065B1DDF3489B2558
  • /data/media/####/2021_04_13zibao
  • /data/media/####/33FC58C31FB491BC01333548F6507866
  • /data/media/####/33FC58C31FB491BC01333548F6507866.jar
  • /data/media/####/33FC58C31FB491BC01333548F6507866.temp
  • /data/media/####/4150B67B7A25EC827B10016C015401DC
  • /data/media/####/42EF8A3EFC8DE246EF6BE2A6A7AA380B
  • /data/media/####/42EF8A3EFC8DE246EF6BE2A6A7AA380B.temp
  • /data/media/####/42EF8A3EFC8DE246EF6BE2A6A7AA380B.zip
  • /data/media/####/47EDB4E7D8953EADC1D68DE1FD348769
  • /data/media/####/47EDB4E7D8953EADC1D68DE1FD348769.temp
  • /data/media/####/47EDB4E7D8953EADC1D68DE1FD348769.zip
  • /data/media/####/51F834546E1B2B19B8BEF5098FAFFD19
  • /data/media/####/51F834546E1B2B19B8BEF5098FAFFD19.temp
  • /data/media/####/51F834546E1B2B19B8BEF5098FAFFD19.zip
  • /data/media/####/54AE2A187DE0596E8A7C359047AE12D5
  • /data/media/####/54AE2A187DE0596E8A7C359047AE12D5.temp
  • /data/media/####/54AE2A187DE0596E8A7C359047AE12D5.zip
  • /data/media/####/5A596F7433DA4A9994F78A3553069154
  • /data/media/####/5A596F7433DA4A9994F78A3553069154.temp
  • /data/media/####/5A596F7433DA4A9994F78A3553069154.zip
  • /data/media/####/68DEC76182C6E7F775B58FEB5EDC33E0
  • /data/media/####/68DEC76182C6E7F775B58FEB5EDC33E0.temp
  • /data/media/####/68DEC76182C6E7F775B58FEB5EDC33E0.zip
  • /data/media/####/865DDFDE477A3DC51518CBC284893178
  • /data/media/####/865DDFDE477A3DC51518CBC284893178.temp
  • /data/media/####/865DDFDE477A3DC51518CBC284893178.zip
  • /data/media/####/933222D38468A7355428245A267B14FA
  • /data/media/####/B1982BB12AA1D70AE6F0A6179639C8AF
  • /data/media/####/B6CBB835E17D59920451CB35C289C049
  • /data/media/####/BBD54D910D295D7E3D5B6076141D6C61
  • /data/media/####/D1F52F53DF8E090E2243D0705DB02652
  • /data/media/####/D75E99C9A338D24A1F840F280B0877ED
  • /data/media/####/D75E99C9A338D24A1F840F280B0877ED.temp
  • /data/media/####/D75E99C9A338D24A1F840F280B0877ED.zip
  • /data/media/####/F0736D63ACA7F31E7D1990D953ED1922
  • /data/media/####/F0736D63ACA7F31E7D1990D953ED1922.temp
  • /data/media/####/F0736D63ACA7F31E7D1990D953ED1922.zip
  • /data/media/####/F11832B65281857628793ACEB8601D0E
  • /data/media/####/F306422A50185CD1D1975B917A5A5962
  • /data/media/####/F306422A50185CD1D1975B917A5A5962.temp
  • /data/media/####/F306422A50185CD1D1975B917A5A5962.zip
  • /data/media/####/F67204BA08EAFA75211D5FE1EB25E5F1
  • /data/media/####/gd
  • /data/media/####/isreadzibao
  • /data/media/####/ov
  • /data/misc/####/primary.prof
Miscellaneous:
Executes the following shell scripts:
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_xddd/p16/sp16.jar --oat-fd=255 --oat-location=/data/user/0/<Package>/app_xddd/p16/sp16.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_xddd/p23/sp23.jar --oat-fd=330 --oat-location=/data/user/0/<Package>/app_xddd/p23/sp23.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_xddd/p27/sp27.jar --oat-fd=343 --oat-location=/data/user/0/<Package>/app_xddd/p27/sp27.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_xddd/p3/sp3.jar --oat-fd=311 --oat-location=/data/user/0/<Package>/app_xddd/p3/sp3.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_xddd/p44/sp44.jar --oat-fd=320 --oat-location=/data/user/0/<Package>/app_xddd/p44/sp44.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/.2403297477.apk --oat-fd=94 --oat-location=/data/user/0/<Package>/code_cache/.2403297477.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/.2969407120.apk --oat-fd=132 --oat-location=/data/user/0/<Package>/code_cache/.2969407120.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/.3050965755.apk --oat-fd=149 --oat-location=/data/user/0/<Package>/code_cache/.3050965755.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/qi542320.apk --oat-fd=88 --oat-location=/data/user/0/<Package>/files/qi542320_o --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tda/xdt.jar --oat-fd=87 --oat-location=/data/user/0/<Package>/files/tda/xdt.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/ayjk/<Package>/nktu/33FC58C31FB491BC01333548F6507866.jar --oat-fd=46 --oat-location=/data/user/0/<Package>/files/33FC58C31FB491BC01333548F6507866.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/42EF8A3EFC8DE246EF6BE2A6A7AA380B.zip --oat-fd=136 --oat-location=/data/user/0/<Package>/files/42EF8A3EFC8DE246EF6BE2A6A7AA380B.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/47EDB4E7D8953EADC1D68DE1FD348769.zip --oat-fd=144 --oat-location=/data/user/0/<Package>/files/47EDB4E7D8953EADC1D68DE1FD348769.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/51F834546E1B2B19B8BEF5098FAFFD19.zip --oat-fd=73 --oat-location=/data/user/0/<Package>/files/51F834546E1B2B19B8BEF5098FAFFD19.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/54AE2A187DE0596E8A7C359047AE12D5.zip --oat-fd=135 --oat-location=/data/user/0/<Package>/files/54AE2A187DE0596E8A7C359047AE12D5.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/5A596F7433DA4A9994F78A3553069154.zip --oat-fd=86 --oat-location=/data/user/0/<Package>/files/5A596F7433DA4A9994F78A3553069154.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/68DEC76182C6E7F775B58FEB5EDC33E0.zip --oat-fd=249 --oat-location=/data/user/0/<Package>/files/68DEC76182C6E7F775B58FEB5EDC33E0.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/865DDFDE477A3DC51518CBC284893178.zip --oat-fd=210 --oat-location=/data/user/0/<Package>/files/865DDFDE477A3DC51518CBC284893178.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/D75E99C9A338D24A1F840F280B0877ED.zip --oat-fd=45 --oat-location=/data/user/0/<Package>/files/D75E99C9A338D24A1F840F280B0877ED.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/F0736D63ACA7F31E7D1990D953ED1922.zip --oat-fd=256 --oat-location=/data/user/0/<Package>/files/F0736D63ACA7F31E7D1990D953ED1922.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/F306422A50185CD1D1975B917A5A5962.zip --oat-fd=48 --oat-location=/data/user/0/<Package>/files/F306422A50185CD1D1975B917A5A5962.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=<Package Folder>/extfiles/gPjE.jar --oat-fd=38 --oat-location=<Package Folder>/extfiles/gPjE.dex --compiler-filter=speed
  • /system/lib/arm/houdini /data/user/0/<Package>/files/kms_02ext /data/user/0/<Package>/files/kms_02ext --ru89 0 /data/user/0/<Package>/files/debuggerd_real
  • /system/lib/arm/houdini <Package Folder>/files/kw_137728 <Package Folder>/files/kw_137728 3 267009
  • cat /proc/version
  • cat /sys/class/net/wlan0/address
  • getprop ro.build.version.emui
  • getprop ro.build.version.opporom
  • getprop ro.miui.ui.version.name
  • getprop ro.smartisan.version
  • getprop ro.vivo.os.version
  • getprop ro.yunos.build.version
  • sh -c <Package Folder>/files/kw_137728 3 267009 &
  • sh -c cat /proc/4098/maps
Uses the following algorithms to encrypt data:
  • AES-CBC-PKCS5Padding
  • AES-CBC-PKCS7Padding
  • DES
  • RSA-ECB-PKCS1Padding
  • RSA-None-PKCS1Padding
Uses the following algorithms to decrypt data:
  • AES
  • AES-CBC-NoPadding
  • AES-CBC-PKCS5Padding
  • AES-CBC-PKCS7Padding
  • AES-ECB-PKCS5Padding
  • DES
  • DES-CBC-PKCS5Padding
  • RSA-ECB-PKCS1Padding
  • RSA-None-PKCS1Padding
Accesses the ITelephony private interface.
Gets information about location.
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Gets information about installed apps.
Adds tasks to the system scheduler.
Displays its own windows over windows of other apps.
Requests the system alert window permission.

Recommandations pour le traitement

Android

  1. Si votre appareil mobile fonctionne correctement, veuillez télécharger et installer sur votre appareil mobile le produit antivirus gratuit Dr.Web для Android Light. Lancez un scan complet et suivez les recommandations sur la neutralisation des menaces détectées.
  2. Si l'appareil mobile est bloqué par le Trojan de la famille Android.Locker (un message sur une violation grave de la loi ou une demande de rançon s’affichent sur l'écran de l'appareil mobile), procédez comme suit :
    • démarrez votre Smartphone ou votre tablette en mode sans échec (si vous ne savez pas comment faire, consultez la documentation de l'appareil mobile ou contactez le fabricant) ;
    • puis téléchargez et installez sur votre appareil contaminé le produit antivirus gratuit Dr.Web для Android Light et lancez un scan complet puis suivez les recommandations sur la neutralisation des menaces détectées ;
    • Débranchez votre appareil et rebranchez-le.

En savoir plus sur Dr.Web pour Android

Free trial

14 days

Download now
Get it on Google Play