FOR CUSTOMERS

Close

Library
My library

+ Add to library

Search
Search

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

A query form

Call us

+7 (495) 789-45-86

Forum

Your tickets

New ticket

Call us

+7 (495) 789-45-86

Profile

EN

RU CN DE EN ES FR IT JP KZ UZ PL BY
Close
Support services
Scanners
Dr.Web vxCube
Trial
VCI investigations
Virus library
Knowledge base

Technologies

Terminology

Training and education

Myths

News

Android.DownLoader.4964

Added to the Dr.Web virus database: 2020-12-14

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.DownLoader.960.origin
  • Android.Mobifun.30.origin
  • Android.RemoteCode.231.origin
  • Android.RemoteCode.238.origin
  • Android.RemoteCode.309.origin
  • Android.RemoteCode.6122
  • Android.Triada.4567
  • Android.Triada.510.origin
  • Android.Triada.537.origin
  • Android.Triada.541.origin
  • Android.Triada.546.origin
  • Android.Triada.554.origin
  • Android.Xiny.293.origin
  • Android.Xiny.5386
Downloads the following detected threats from the Internet:
  • Android.RemoteCode.231.origin
  • Android.Triada.541.origin
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(HTTP/1.1) gold####.world:80
  • TCP(HTTP/1.1) c####.s9####.com:10238
  • TCP(HTTP/1.1) q####.qi1####.com:14302
  • TCP(HTTP/1.1) ssl.c####.com.####.net:80
  • TCP(HTTP/1.1) w####.go2c####.org:80
  • TCP(HTTP/1.1) c####.s9####.com:10278
  • TCP(HTTP/1.1) d####.qi1####.com:14302
  • TCP(HTTP/1.1) www.d####.xyz:80
  • TCP(HTTP/1.1) s4####.cloudi####.com.####.net:80
  • TCP(HTTP/1.1) api.bi####.com:80
  • TCP(HTTP/1.1) c####.6k####.com:10238
  • TCP(HTTP/1.1) qu####.site:80
  • TCP(HTTP/1.1) 66.1####.218.92:80
  • TCP(HTTP/1.1) gn####.f####.top:8080
  • TCP(HTTP/1.1) z.c####.com:80
  • TCP(HTTP/1.1) prelo####.u####.com:5500
  • TCP(HTTP/1.1) 5.z####.top:80
  • TCP(HTTP/1.1) t####.knight####.com:80
  • TCP(HTTP/1.1) x####.g####.com:8808
  • TCP(HTTP/1.1) www.go####.com:80
  • TCP(HTTP/1.1) s####.b####.com:80
  • TCP(HTTP/1.1) c####.howdo####.net:80
  • TCP(HTTP/1.1) p####.pay####.com:80
  • TCP(HTTP/1.1) res.wildpet####.info:80
  • TCP(HTTP/1.1) ac23f54####.cdscd####.com:80
  • TCP(HTTP/1.1) k####.xyz:80
  • TCP(HTTP/1.1) 4.z####.top:9001
  • TCP(HTTP/1.1) cdn.tab####.com:80
  • TCP(HTTP/1.1) hw9####.new####.com:80
  • TCP(HTTP/1.1) h####.b####.com:80
  • TCP(HTTP/1.1) new.beauty####.net:80
  • TCP(HTTP/1.1) 1####.17.35.12:80
  • TCP(HTTP/1.1) cl-5307####.g####.co:80
  • TCP(HTTP/1.1) d0####.98####.com:10091
  • TCP(HTTP/1.1) h5ng####.ly####.com:80
  • TCP(HTTP/1.1) sele####.offerst####.net:80
  • TCP(HTTP/1.1) c####.vortexm####.mobi:80
  • TCP(HTTP/1.1) fo####.site:80
  • TCP(HTTP/1.1) lo####.suibyu####.com:80
  • TCP(HTTP/1.1) www.npr.org.####.net:80
  • TCP(HTTP/1.1) t####.omob####.com:80
  • TCP(HTTP/1.1) sdk.wildpet####.info:80
  • TCP(HTTP/1.1) ne####.s####.com:6262
  • TCP(HTTP/1.1) api.applove####.com:80
  • TCP(HTTP/1.1) prelo####.hishen####.com.####.com:80
  • TCP(HTTP/1.1) gc4####.9####.com:80
  • TCP(HTTP/1.1) log.koapk####.com:80
  • TCP(HTTP/1.1) t####.mialltr####.com:80
  • TCP(HTTP/1.1) x####.me####.com:10248
  • TCP(HTTP/1.1) lo####.applove####.com:80
  • TCP(HTTP/1.1) gd.a.s####.com:80
  • TCP(HTTP/1.1) dy.kr.wildpet####.info:80
  • TCP(HTTP/1.1) sdk.jedi####.net:9001
  • TCP(HTTP/1.1) ne####.s####.com:8033
  • TCP(HTTP/1.1) x####.me####.com:10238
  • TCP(HTTP/1.1) y####.k8####.com:80
  • TCP(HTTP/1.1) d####.dd7####.com:80
  • TCP(HTTP/1.1) api.dc.tkcre####.com:80
  • TCP(HTTP/1.1) actwebm####.g2####.com:80
  • TCP(HTTP/1.1) en.f####.top:8080
  • TCP(HTTP/1.1) www.n####.cn.####.com:80
  • TCP(HTTP/1.1) 13.2####.16.115:8081
  • TCP(TLS/1.0) eye.recap####.xyz:443
  • TCP(TLS/1.0) www.gst####.com:443
  • TCP(TLS/1.0) fm.c####.com.####.net:443
  • TCP(TLS/1.0) clk.tap####.com:443
  • TCP(TLS/1.0) im####.tab####.com:443
  • TCP(TLS/1.0) www.free####.com:443
  • TCP(TLS/1.0) cds.tab####.com:443
  • TCP(TLS/1.0) x.bidsw####.net:443
  • TCP(TLS/1.0) cdn.jsde####.net:443
  • TCP(TLS/1.0) actwebm####.g2####.com:443
  • TCP(TLS/1.0) z.c####.com:443
  • TCP(TLS/1.0) sconten####.xx.f####.net:443
  • TCP(TLS/1.0) 125f69b####.trccm####.com:443
  • TCP(TLS/1.0) digice####.rubicon####.com.####.net:443
  • TCP(TLS/1.0) www.npr.org.####.net:443
  • TCP(TLS/1.0) gd.a.s####.com:443
  • TCP(TLS/1.0) jsc.adske####.com:443
  • TCP(TLS/1.0) f####.gst####.com:443
  • TCP(TLS/1.0) trkson####.com:443
  • TCP(TLS/1.0) vice-we####.v####.com:443
  • TCP(TLS/1.0) e####.vap.l####.com:443
  • TCP(TLS/1.0) dis.cr####.com:443
  • TCP(TLS/1.0) ad.mobocli####.com:443
  • TCP(TLS/1.0) c####.pay####.com:443
  • TCP(TLS/1.0) sb.scoreca####.com.####.net:443
  • TCP(TLS/1.0) i####.cn####.com.####.net:443
  • TCP(TLS/1.0) a####.cloudf####.com:443
  • TCP(TLS/1.0) p####.w####.com:443
  • TCP(TLS/1.0) c.c####.com:443
  • TCP(TLS/1.0) cm.idealm####.io:443
  • TCP(TLS/1.0) www.qq####.ltd:443
  • TCP(TLS/1.0) i####.yle.fi:443
  • TCP(TLS/1.0) y####.fi:443
  • TCP(TLS/1.0) wcf.seven####.com:443
  • TCP(TLS/1.0) adser####.go####.com:443
  • TCP(TLS/1.0) faceboo####.cn:443
  • TCP(TLS/1.0) par####.googlea####.com:443
  • TCP(TLS/1.0) analy####.ray####.com:443
  • TCP(TLS/1.0) aac####.ho####.com:443
  • TCP(TLS/1.0) l####.b####.com:443
  • TCP(TLS/1.0) lg####.contex####.com:443
  • TCP(TLS/1.0) net.ray####.com:443
  • TCP(TLS/1.0) h####.b####.com:443
  • TCP(TLS/1.0) g.geo####.com:443
  • TCP(TLS/1.0) datasta####.zhuifen####.top:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) cse.go####.com:443
  • TCP(TLS/1.0) p####.rubicon####.com:443
  • TCP(TLS/1.0) 125f5f5####.trccmp####.com:443
  • TCP(TLS/1.0) a####.app####.com:443
  • TCP(TLS/1.0) a####.b####.com:443
  • TCP(TLS/1.0) id5-####.com:443
  • TCP(TLS/1.0) e1.em####.com:443
  • TCP(TLS/1.0) qu####.site:443
  • TCP(TLS/1.0) yh####.zhuifen####.top:443
  • TCP(TLS/1.0) cm.lentain####.com:443
  • TCP(TLS/1.0) cpi-of####.com:443
  • TCP(TLS/1.0) creativ####.com:443
  • TCP(TLS/1.0) tpc.googles####.com:443
  • TCP(TLS/1.0) us-scp####.ali####.com:443
  • TCP(TLS/1.0) do####.geo.ipo####.net:443
  • TCP(TLS/1.0) al####.u####.com:443
  • TCP(TLS/1.0) s####.tab####.com:443
  • TCP(TLS/1.0) im####.wsj.net:443
  • TCP(TLS/1.0) btt####.com:443
  • TCP(TLS/1.0) 372d19a####.safef####.googles####.com:443
  • TCP(TLS/1.0) n####.bellm####.ca.####.net:443
  • TCP(TLS/1.0) pag####.googles####.com:443
  • TCP(TLS/1.0) as####.nst.com.my:443
  • TCP(TLS/1.0) s.c.ap####.net:443
  • TCP(TLS/1.0) www.travelc####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) san.cbc.ca.####.net:443
  • TCP(TLS/1.0) m####.ad####.org:443
  • TCP(TLS/1.0) cdn.amppro####.org:443
  • TCP(TLS/1.0) s####.adske####.co.uk:443
  • TCP(TLS/1.0) food####.space:443
  • TCP(TLS/1.0) 2-01-27####.cdx.ced####.net:443
  • TCP(TLS/1.0) trc.tab####.com:443
  • TCP(TLS/1.0) fortun####.ho####.com:443
  • TCP(TLS/1.0) www.dutch####.nl:443
  • TCP(TLS/1.0) clie####.go####.com:443
  • TCP(TLS/1.0) sett####.crashly####.com:443
  • TCP(TLS/1.0) googl####.g.doublec####.net:443
  • TCP(TLS/1.0) dsp.adke####.com:443
  • TCP(TLS/1.0) gm.mm####.com:443
  • TCP(TLS/1.0) android####.go####.com:443
  • TCP(TLS/1.0) 1142864####.cn-hong####.fc.####.com:443
  • TCP(TLS/1.0) mc.ya####.ru:443
  • TCP(TLS/1.0) eus.rubicon####.com.####.net:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) api.face####.com:443
  • TCP(TLS/1.0) fk-set####.ray####.com:443
  • TCP(TLS/1.0) s####.mybest####.com:443
  • TCP(TLS/1.0) sslbdst####.jom####.com:443
  • TCP(TLS/1.0) ai.adta####.tech:443
  • TCP(TLS/1.0) cdn-adn####.ray####.com:443
  • TCP(TLS/1.0) s2.reuters####.net:443
  • TCP(TLS/1.0) www.story####.net:443
  • TCP(TLS/1.0) 64.2####.162.95:443
  • TCP(TLS/1.0) www.science####.org:443
  • TCP(TLS/1.0) app-mea####.com:443
  • TCP(TLS/1.0) f####.google####.com:443
  • TCP(TLS/1.0) jsc.m####.com:443
  • TCP(TLS/1.0) cm.g.doublec####.net:443
  • TCP(TLS/1.0) yun.b####.com:443
  • TCP(TLS/1.0) pug-####.pubm####.com:443
  • TCP(TLS/1.0) www.cl1236####.com:443
  • TCP(TLS/1.0) lp.cooktra####.com:443
  • TCP(TLS/1.0) api.dc.tkcre####.com:443
  • TCP(TLS/1.0) 64.2####.164.95:443
  • TCP(TLS/1.2) c####.s9####.com:443
  • TCP(TLS/1.2) 64.2####.162.95:443
  • TCP(TLS/1.2) 64.2####.164.95:443
  • TCP(TLS/1.2) 74.1####.205.138:443
  • TCP(TLS/1.2) 64.2####.162.94:443
DNS requests:
  • 125f5f5####.trccm####.com
  • 125f5f5####.trccmp####.com
  • 125f69b####.trccm####.com
  • 372d19a####.safef####.googles####.com
  • 4.z####.top
  • 5.z####.top
  • 7.zhuifen####.top
  • a####.app####.com
  • a####.b####.com
  • a####.cloudf####.com
  • aac####.ho####.com
  • actwebm####.g2####.com
  • ad.mobocli####.com
  • adser####.go####.com
  • adser####.go####.nl
  • ai.adta####.tech
  • ams.creativ####.com
  • analy####.ray####.com
  • android####.go####.com
  • ap####.uc.cn
  • api.applove####.com
  • api.bi####.com
  • api.crashly####.com
  • api.crashly####.com.####.8
  • api.dc.tkcre####.com
  • api.s####.com
  • app-mea####.com
  • as####.nst.com.my
  • bh.contex####.com
  • bi####.bi####.com
  • btt####.com
  • c####.6k####.com
  • c####.ali####.com
  • c####.f####.top
  • c####.howdo####.net
  • c####.mm####.com
  • c####.pay####.com
  • c####.s9####.com
  • c####.vortexm####.mobi
  • c.c####.com
  • cdn-adn####.ray####.com
  • cdn-pre####.yige####.com
  • cdn.adske####.com
  • cdn.amppro####.org
  • cdn.jsde####.net
  • cdn.m####.com
  • cdn.tab####.com
  • cds.tab####.com
  • ce.l####.com
  • clic####.free####.com
  • clie####.go####.com
  • clk.tap####.com
  • cm.adske####.com
  • cm.g.doublec####.net
  • cm.idealm####.io
  • cm.lentain####.com
  • cm.m####.com
  • confi####.ray####.com
  • cpi-of####.com
  • creativ####.com
  • cse.go####.com
  • d####.dd7####.com
  • d####.qi1####.com
  • d0####.98####.com
  • datasta####.zhuifen####.top
  • dis.cr####.com
  • dsp.adke####.com
  • dy.kr.wildpet####.info
  • e####.f####.top
  • e1.em####.com
  • en.f####.top
  • er####.u####.com
  • eus.rubicon####.com
  • eye.recap####.xyz
  • f####.google####.com
  • f####.gst####.com
  • faceboo####.cn
  • fm.c####.com
  • fo####.site
  • food####.space
  • fortun####.ho####.com
  • g####.face####.com
  • g####.j####.xyz
  • gc4####.9####.com
  • gn####.f####.top
  • gold####.world
  • googl####.g.doublec####.net
  • h####.b####.com
  • h####.bi####.com
  • h5ng####.ly####.com
  • hao####.site
  • hlg.ca####.com
  • hlg.ca####.com.####.8
  • houfan####.cn
  • hw.b####.com
  • hw9####.new####.com
  • i####.cn####.com
  • i####.yle.fi
  • i.c####.ca
  • ib.a####.com
  • id5-####.com
  • im####.cdn.yle.fi
  • im####.tab####.com
  • im####.wsj.net
  • jsc.adske####.com
  • jsc.m####.com
  • k####.xyz
  • l####.b####.com
  • lo####.applove####.com
  • lo####.suibyu####.com
  • log.koapk####.com
  • lp.cooktra####.com
  • m####.ad####.org
  • m####.npr.org
  • mc.ya####.ru
  • ne####.s####.com
  • net.ray####.com
  • new.beauty####.net
  • p####.pay####.com
  • p####.rubicon####.com
  • p####.w####.com
  • p####.w####.com
  • p3.img.cct####.com
  • pag####.googles####.com
  • par####.googlea####.com
  • pic.ne####.org
  • prelo####.hishen####.com
  • prelo####.u####.com
  • pv.s####.com
  • q####.qi1####.com
  • qu####.site
  • res.wildpet####.info
  • rtb-c####.smartad####.com
  • rtb.mfad####.com
  • s####.adske####.co.uk
  • s####.b####.com
  • s####.m####.com
  • s####.mybest####.com
  • s####.tab####.com
  • s.c.ap####.net
  • s2.reuters####.net
  • s3.reuters####.net
  • s4.c####.com
  • s4.reuters####.net
  • s9.c####.com
  • sb.scoreca####.com
  • sconten####.xx.f####.net
  • sdk.jedi####.net
  • sdk.wildpet####.info
  • secure-####.rubicon####.com
  • securep####.g.doublec####.net
  • sele####.offerst####.net
  • serv####.adske####.com
  • serv####.m####.com
  • sett####.crashly####.com
  • sim####.pubm####.com
  • smartse####.me
  • ss0.bdst####.com
  • ss1.bdst####.com
  • ss2.bdst####.com
  • ss3.bdst####.com
  • st####.ctv####.ca
  • syn####.tab####.com
  • t####.knight####.com
  • t####.mialltr####.com
  • t####.omob####.com
  • tpc.googles####.com
  • trac####.yoh####.com
  • trc-ev####.tab####.com
  • trc.tab####.com
  • trkson####.com
  • u####.u####.com
  • v1.c####.com
  • vice-we####.v####.com
  • w####.go2c####.org
  • wcf.seven####.com
  • www.cl1236####.com
  • www.d####.xyz
  • www.dutch####.nl
  • www.free####.com
  • www.go####.com
  • www.google-####.com
  • www.googlet####.com
  • www.googlet####.com
  • www.gst####.com
  • www.n####.cn
  • www.qq####.ltd
  • www.recap####.net
  • www.science####.org
  • www.story####.net
  • www.travelc####.com
  • x####.g####.com
  • x####.g####.com
  • x####.me####.com
  • x.bidsw####.net
  • y####.fi
  • y####.k8####.com
  • yh####.zhuifen####.top
  • yun.b####.com
  • z12.c####.com
  • z5.c####.com
  • z6.c####.com
HTTP GET requests:
  • 5.z####.top/thirdsdk/flowcashpack/11/m06151734.jar
  • 5.z####.top/thirdsdk/flowcashpack/18/news-100-202011241528d.jar
  • 5.z####.top/thirdsdk/flowcashpack/20/al-100-202009231448d.jar
  • 5.z####.top/thirdsdk/flowcashpack/3/offer-134-202009161648d.jar
  • 5.z####.top/thirdsdk/flowcashpack/49/h07281410.jar
  • 5.z####.top/thirdsdk/flowcashpack/52/um08041214.jar
  • ac23f54####.cdscd####.com/ph20_01.ttf
  • ac23f54####.cdscd####.com/ph2_01.ttf
  • ac23f54####.cdscd####.com/ph5_01.ttf
  • ac23f54####.cdscd####.com/ph7_01.ttf
  • actwebm####.g2####.com/sl?id=####&pid=####&sub1=####
  • api.applove####.com/api/v3/cache/get?osv=####&srnc=####&token=####&ds=##...
  • api.applove####.com/api/v3/search/get?osv=####&token=####&pm=####&os=###...
  • api.applove####.com/api/v3/template/get?slot_id=####&update_time=####&us...
  • c####.howdo####.net/aff_track?offer_id=####&affiliate_id=####&aff_sub2=#...
  • c####.vortexm####.mobi/click?offer_id=####&affiliate_id=####&sub_id=####...
  • cdn.tab####.com/libtrc/cashbox-network/loader.js
  • cdn.tab####.com/libtrc/dashuye-goldgame/loader.js
  • cdn.tab####.com/libtrc/snaggletooth-beautygame/loader.js
  • cdn.tab####.com/libtrc/tami-haokanm/loader.js
  • cl-5307####.g####.co/p1_04.ttf
  • d####.dd7####.com/upload/hw/D10049dex20190529.jar
  • d####.dd7####.com/upload/hw/c1005dex20190527.jar
  • d####.dd7####.com/upload/hw/h5dj202003243.jar
  • d####.dd7####.com/upload/hw/h5rq20191022.jar
  • d####.dd7####.com/upload/hw/kklz02dex20200414.jar
  • d####.dd7####.com/upload/hw/lsdk20200506.jar
  • d####.dd7####.com/upload/hw/nsdk20200428.jar
  • d####.dd7####.com/upload/hw/qcdex20200316.jar
  • d####.dd7####.com/upload/hw1/CJAR20190515.jar
  • d####.dd7####.com/upload/plog/game1212.jar
  • d####.dd7####.com/upload/plog/kk20201106.jar
  • d####.dd7####.com/upload/plog/mobdex20201017.jar
  • d####.dd7####.com/upload/plog/ps20201208.jar
  • d####.dd7####.com/upload/plog/sds20201013.jar
  • fo####.site/upload/sdk_thridLib-release-unsigned-20201212-new.apk
  • gc4####.9####.com/zsyunsxda
  • gd.a.s####.com/cityjson?ie=####
  • gn####.f####.top:8080/qsad/api/getAd/rbafBKyHWgTmZaEaAqfGsw==
  • gold####.world/
  • gold####.world/body/31.txt
  • gold####.world/common/img/320x50_News_mobile_header.jpg
  • gold####.world/detail.html?id=####
  • gold####.world/detail_files/font_1549371_dwwmcfmccpv.css
  • gold####.world/detail_files/main.css
  • gold####.world/favicon.ico
  • gold####.world/img/breakingNewsMobileHeader.png
  • gold####.world/img/breakingnewsmobileTag.png
  • gold####.world/index_files/mobile.css
  • gold####.world/index_files/mobile_common.css
  • gold####.world/plugins/slick.css
  • h####.b####.com/hw/xpw/hw_irn20200926_qs004.js?key=####
  • h####.b####.com/hw/xpw/hw_irn20201020_qs005.js?key=####
  • h####.b####.com/hw/xpw/hw_irn20201023_qs001.js?key=####
  • h####.b####.com/hw/xpw/hw_irn20201026_qs006.js?key=####
  • h####.b####.com/hw/xpw/hw_irn20201026_qs007.js?key=####
  • h####.b####.com/hw/xpw/hw_irn20201029_qs002.js?key=####
  • h####.b####.com/hw/xpw/hw_irn20201113_qs008.js?key=####
  • h####.b####.com/hw/xpw/hw_irn20201130_qs009.js?key=####
  • h5ng####.ly####.com/swift-ninja/?channelid=####
  • h5ng####.ly####.com/wp-content/themes/sokidaTheme/css/mobile.css?v=####
  • h5ng####.ly####.com/wp-content/themes/sokidaTheme/css/public/bootstrap.m...
  • h5ng####.ly####.com/wp-content/themes/sokidaTheme/css/public/font-awesom...
  • h5ng####.ly####.com/wp-content/themes/sokidaTheme/css/public/reset.css
  • h5ng####.ly####.com/wp-content/themes/sokidaTheme/css/theme.css?v=####
  • h5ng####.ly####.com/wp-content/themes/sokidaTheme/fonts/fontawesome-webf...
  • h5ng####.ly####.com/wp-content/themes/sokidaTheme/images/top.png
  • h5ng####.ly####.com/wp-content/themes/sokidaTheme/js/CustomAds.js
  • h5ng####.ly####.com/wp-content/themes/sokidaTheme/js/public/bootstrap.mi...
  • h5ng####.ly####.com/wp-content/themes/sokidaTheme/js/public/jquery-1.11....
  • h5ng####.ly####.com/wp-content/themes/sokidaTheme/js/public/swiper/swipe...
  • h5ng####.ly####.com/wp-content/themes/sokidaTheme/js/shejiwo.js?v=####
  • h5ng####.ly####.com/wp-content/uploads/2020/02/118-physical-driving1-300...
  • h5ng####.ly####.com/wp-content/uploads/2020/02/188-penguin-wars1-300x300...
  • h5ng####.ly####.com/wp-content/uploads/2020/02/18Ninja-jumps-up1-300x300...
  • h5ng####.ly####.com/wp-content/uploads/2020/02/298-super-puffer-fish1-30...
  • h5ng####.ly####.com/wp-content/uploads/2020/02/48-Frog-spit1-300x300-1.jpg
  • h5ng####.ly####.com/wp-content/uploads/2020/02/56-Masked-hunter1-300x300...
  • h5ng####.ly####.com/wp-content/uploads/2020/02/6Simple-snake1-300x300-1....
  • h5ng####.ly####.com/wp-content/uploads/2020/06/icon_20200619105434.png
  • h5ng####.ly####.com/wp-content/uploads/2020/06/微信图片_20200618094705.png
  • h5ng####.ly####.com/wp-includes/js/wp-embed.min.js?ver=####
  • k####.xyz/favicon.ico
  • k####.xyz/g/33eb5f42-43df-49be-8a0a-65bc78fdf1c1
  • lo####.applove####.com/android/v1/impression?slot=####&doimp=####&pkg=##...
  • lo####.suibyu####.com/android/v1/impression?slot=####&doimp=####&pkg=###...
  • ne####.s####.com:6262/sdk-logs/sdk-logs-control/logs/control?appId=####&...
  • ne####.s####.com:8033/ana/get-ana-status?app_id=####&task_id=####&imsi_i...
  • new.beauty####.net/news.html
  • p####.pay####.com/s-r/292/5ee718ce1512e
  • prelo####.hishen####.com.####.com/project_preloaded/a5551a3fbc574012bac2...
  • q####.qi1####.com:14302/config?appChannel=####&appKey=####&uid=####&sdkV...
  • qu####.site/favicon.ico
  • qu####.site/index.html
  • qu####.site/project_preloaded/714a9a8c139346a4be321e0a8333d217.so
  • qu####.site/project_preloaded/b518394b98d240c3b63b491446cb148b.so
  • res.wildpet####.info/modules/SmartSearch.zip
  • res.wildpet####.info/modules/hfumobi28.zip
  • res.wildpet####.info/modules/q201030.zip
  • s####.b####.com/redirect?s=####&at=####&rt=####&s1=####
  • s4####.cloudi####.com.####.net/image/upload/w_165,h_93,c_fill,g_faces,f_...
  • s4####.cloudi####.com.####.net/image/upload/w_369,h_207,c_fill,g_faces,f...
  • sele####.offerst####.net/index.php?ios_idfa=####&google_aid=####&aff_sub...
  • ssl.c####.com.####.net/photoworkspace/contentimg/2019/12/19/201912191101...
  • t####.knight####.com/click?id=####&aff=####&gaid=####&android_id=####&pk...
  • t####.mialltr####.com/aff_c?s=####&aff_sub=####&source=####&app_name=###...
  • t####.omob####.com/trace?aff=####&ost=####&click_id=####&gaid=####&aff_s...
  • w####.go2c####.org/aff_c?offer_id=####&aff_id=####&aff_sub=####&source=#...
  • w####.go2c####.org/favicon.ico
  • www.go####.com/ads/measurement/l?ebcid=####
  • www.n####.cn.####.com/photo/titlepic/112641/1126414248_1598408278932_tit...
  • www.n####.cn.####.com/photo/titlepic/112661/1126616696_1602767308437_tit...
  • www.n####.cn.####.com/photo/titlepic/112662/1126620874_1602845392136_tit...
  • www.n####.cn.####.com/photo/titlepic/112662/1126621334_1602856136259_tit...
  • www.n####.cn.####.com/photo/titlepic/112662/1126621335_1602856186376_tit...
  • www.npr.org.####.net/assets/img/2016/07/14/gettyimages-466730764_sq-a6cf...
  • www.npr.org.####.net/assets/img/2018/09/23/gettyimages-1036646794_sq-29d...
  • www.npr.org.####.net/assets/img/2018/10/05/restoration-process1_sq-f482a...
  • www.npr.org.####.net/assets/img/2020/10/13/gettyimages-1229035976_sq-ab8...
  • www.npr.org.####.net/assets/img/2020/10/21/ap_20288535726551_sq-6b618f28...
  • www.npr.org.####.net/assets/img/2020/10/22/dsc00263_wide-f8a7f9c599fc1d6...
  • x####.g####.com:8808/a/e?a=####
  • y####.k8####.com/hwyw/deahexwot.zip
  • y####.k8####.com/hwyw/styaoduyar.zip
  • y####.k8####.com/zhuti/HdayEUnz844.zip
  • y####.k8####.com/zhuti/TurxyDrzt1299.zip
  • y####.k8####.com/zhuti/TwyosdjwjXzt1016.zip
  • y####.k8####.com/zhuti/VQs8jWvXgl1116.zip
  • y####.k8####.com/zhuti/YDosdmwee910.zip
  • z.c####.com/stat.htm?id=####&cnzz_eid=####
HTTP POST requests:
  • 4.z####.top:9001/logreport
  • api.bi####.com/un
  • api.dc.tkcre####.com/v1/sdklog
  • c####.6k####.com:10238/2ejolc/
  • c####.6k####.com:10238/dts57h/
  • c####.6k####.com:10238/z2s8gh/
  • c####.s9####.com:10238/2ejolc/
  • c####.s9####.com:10278/42elke/
  • c####.s9####.com:10278/jn9zpb/
  • d####.qi1####.com:14302/sdk_login?t=####
  • d0####.98####.com:10091/wisdom/marking
  • dy.kr.wildpet####.info/dykr/sync?appid=####&aid=####
  • dy.kr.wildpet####.info/dykr/update?appid=####&aid=####
  • en.f####.top:8080/qsad/api/c/c
  • hw9####.new####.com/api/activite
  • hw9####.new####.com/api/back
  • hw9####.new####.com/api/offer
  • hw9####.new####.com/api/small
  • hw9####.new####.com/api/tbdynamic
  • hw9####.new####.com/apidata/showeb
  • lo####.applove####.com/android/v2/click_redirect
  • log.koapk####.com/pgm/sr/gm/gy
  • prelo####.u####.com:5500/api-log-server/thirdPlugin/save
  • prelo####.u####.com:5500/api-plugin-jar/newUser
  • prelo####.u####.com:5500/api-plugin-jar/selfUpdate/jars
  • prelo####.u####.com:5500/api-plugin-jar/thirdPlugin/jars
  • sdk.jedi####.net:9001/api/v1/cm.cb
  • sdk.jedi####.net:9001/api/v1/cm.reqCfg
  • sdk.jedi####.net:9001/api/v1/cm.reqOff
  • sdk.jedi####.net:9001/api/v1/cm.reqUp
  • sdk.wildpet####.info/SmartSearch/get
  • www.d####.xyz/Orders/getlive?channel=####&Slevi=####&anmac=####&anosv=##...
  • www.d####.xyz/Orders/getliveshua?channel=####&Slevi=####&anid=####&anmac...
  • www.d####.xyz/Orders/pigchannel?channel=####&nochannel=####
  • www.d####.xyz/Orders/setpnum?pnum=####&channel=####
  • x####.g####.com:8808/a/f
  • x####.me####.com:10238/czwwwkpmfl/
  • x####.me####.com:10238/phvttztyax/
  • x####.me####.com:10248/iysyxb/
  • x####.me####.com:10248/ng1fxo/
  • x####.me####.com:10248/pauumd/
File system changes:
Creates the following files:
  • /data/data/####/-1311064180
  • /data/data/####/-191752581
  • /data/data/####/-194541891
  • /data/data/####/-1978667536
  • /data/data/####/-400496221
  • /data/data/####/.2969407120.apk
  • /data/data/####/.2969407120.dex
  • /data/data/####/.2969407120.dex.flock (deleted)
  • /data/data/####/.3477600307.apk
  • /data/data/####/.3477600307.dex
  • /data/data/####/.3477600307.dex.flock (deleted)
  • /data/data/####/.dnw
  • /data/data/####/.dz
  • /data/data/####/.gjuwpnpjlgwszw
  • /data/data/####/.imprint
  • /data/data/####/.mf
  • /data/data/####/.qhce
  • /data/data/####/.t
  • /data/data/####/008b6cabe346bd36_0
  • /data/data/####/010A49A6E8E3C69CFE25DABA89EDAB8E
  • /data/data/####/0118f8b5854ead9f_0
  • /data/data/####/01219ef88656ced2_0
  • /data/data/####/01220bd728d78136_0
  • /data/data/####/01619d1aa6931f33_0
  • /data/data/####/02182b36c01052d7_0
  • /data/data/####/024560b9a29d816a_0
  • /data/data/####/025912ed03c031d3_0
  • /data/data/####/025912ed03c031d3_1
  • /data/data/####/02cbe6ee08032bd6_0
  • /data/data/####/02cbe6ee08032bd6_1
  • /data/data/####/02db50466a476126_0
  • /data/data/####/03e43ad1522445c1_0
  • /data/data/####/04726dea91a91120_0
  • /data/data/####/055945fd2afdf2f9_0
  • /data/data/####/0583b02d1bf76819_0
  • /data/data/####/05ce3e16d5c605cb_0
  • /data/data/####/0631cdc54910f607_0
  • /data/data/####/063dbe97022eba51_0
  • /data/data/####/0671734e91205c2d_0
  • /data/data/####/067adaaa71a803df_0 (deleted)
  • /data/data/####/06a36b34d09d11ea9799506b4b12c76007de31e5c0f9f59...10.dex
  • /data/data/####/06a36b34d09d11ea9799506b4b12c76007de31e5c0f9f59...10.jar
  • /data/data/####/06a36b34d09d11ea9799506b4b12c76007de31e5c0f9f59...leted)
  • /data/data/####/06a36b34d09d11ea9799506b4b12c76007de31e5c0f9f59...rcache
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760368a5bca290ca8a...1d.dex
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760368a5bca290ca8a...1d.jar
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760368a5bca290ca8a...leted)
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760368a5bca290ca8a...rcache
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760a481e950172de8d...fe.dex
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760a481e950172de8d...leted)
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760a481e950172de8d...rcache
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760afb3893166466d2...62.dex
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760afb3893166466d2...62.jar
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760afb3893166466d2...leted)
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760afb3893166466d2...rcache
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760b90b04be5561ceb...48.dex
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760b90b04be5561ceb...48.jar
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760b90b04be5561ceb...leted)
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760decc828a4d17546...56.dex
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760decc828a4d17546...56.jar
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760decc828a4d17546...leted)
  • /data/data/####/06a36b34d09d11ea9799506b4b12c760decc828a4d17546...rcache
  • /data/data/####/07b646d133c1e77d_0
  • /data/data/####/07fd36e1552138a2_0
  • /data/data/####/08084665f22a2954_0
  • /data/data/####/09671a88266ae9b2_0
  • /data/data/####/0b897d43b337beba_0
  • /data/data/####/0caa2e90cc8e53f8_0
  • /data/data/####/0d1a52825e38fc25_0
  • /data/data/####/0da8d1e9c94d21f9_0
  • /data/data/####/0e659ac7dabde55b_0
  • /data/data/####/0ebea34308e001e4_0
  • /data/data/####/0fd1ef3c5f93a9c9_0
  • /data/data/####/1.dex (deleted)
  • /data/data/####/1.dex.flock (deleted)
  • /data/data/####/1.jar
  • /data/data/####/105d36453dd9d5c5_0
  • /data/data/####/105d36453dd9d5c5_1
  • /data/data/####/10e03e484a6c0dd7_0
  • /data/data/####/115013685
  • /data/data/####/11b6135c2e0d5693_0 (deleted)
  • /data/data/####/1213675322
  • /data/data/####/133a0e35f6f4bed3_0
  • /data/data/####/13cb4d290ceb4106_0 (deleted)
  • /data/data/####/1489eeba36cafab8_0
  • /data/data/####/1502509754
  • /data/data/####/164fde6a872a0847_0
  • /data/data/####/1887112625
  • /data/data/####/18c45fd1e3121148_0
  • /data/data/####/19854f40cba07be9_0
  • /data/data/####/1D302D3E6464EA39840D761291936A8C
  • /data/data/####/1FB529D5B86CB576CE98288F77DE7CFE
  • /data/data/####/1FB529D5B86CB576CE98288F77DE7CFE.dex
  • /data/data/####/1FB529D5B86CB576CE98288F77DE7CFE.dex.flock (deleted)
  • /data/data/####/1FB529D5B86CB576CE98288F77DE7CFE.temp
  • /data/data/####/1FB529D5B86CB576CE98288F77DE7CFE.zip
  • /data/data/####/1dfe43aeb0a76edd_0
  • /data/data/####/1e631053670ac74c_0
  • /data/data/####/1f16014fded26d0c_0
  • /data/data/####/1fa79d1f0aaf589d_0
  • /data/data/####/1fcdae2207490875_0
  • /data/data/####/2020_12_14readzibao.xml
  • /data/data/####/2020_12_14shuareadszibao.xml
  • /data/data/####/2020_12_14zibao.xml
  • /data/data/####/2023480747
  • /data/data/####/2066615d57d7ae8c_0
  • /data/data/####/20cc0adcb4fde892_0
  • /data/data/####/20f4f32d8d91cabf_0
  • /data/data/####/2145369031
  • /data/data/####/21b8960f6ae8b001_0
  • /data/data/####/2381b15657184e08_0
  • /data/data/####/242CB7B15C8571D4EA3D3E825CCE2CC5
  • /data/data/####/242CB7B15C8571D4EA3D3E825CCE2CC5.dex
  • /data/data/####/242CB7B15C8571D4EA3D3E825CCE2CC5.dex.flock (deleted)
  • /data/data/####/242CB7B15C8571D4EA3D3E825CCE2CC5.temp
  • /data/data/####/242CB7B15C8571D4EA3D3E825CCE2CC5.zip
  • /data/data/####/2530eede38649027_0
  • /data/data/####/257e99050a6fdc82_0
  • /data/data/####/257e99050a6fdc82_1
  • /data/data/####/2606db45f253030f_0
  • /data/data/####/26350036cfb9b394_0
  • /data/data/####/272de581f7f65804_0
  • /data/data/####/272de581f7f65804_1
  • /data/data/####/273511acf38e385d_0 (deleted)
  • /data/data/####/27d1452b669d05d4_0
  • /data/data/####/28144830f312be76_0
  • /data/data/####/28144830f312be76_1
  • /data/data/####/291c11b376fafd87_0 (deleted)
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2D7A36961E40EF39519F07AA1FA38A5D.dex
  • /data/data/####/2D7A36961E40EF39519F07AA1FA38A5D.dex.flock (deleted)
  • /data/data/####/2D7A36961E40EF39519F07AA1FA38A5D.temp
  • /data/data/####/2D7A36961E40EF39519F07AA1FA38A5D.zip
  • /data/data/####/2a72082156e5090a_0
  • /data/data/####/2a72082156e5090a_1
  • /data/data/####/2a8dd2c214a3e7b0_0
  • /data/data/####/2a9d061b4348e653_0
  • /data/data/####/2bd98315624ef1f8_0
  • /data/data/####/2bfff63e8ad9dede_0
  • /data/data/####/2ce098ef600aae77_0
  • /data/data/####/2cf0d440adb5a0bb_0
  • /data/data/####/2d42c6a1a4702c27_0 (deleted)
  • /data/data/####/2dcfe8200d3df994_0
  • /data/data/####/2f2d399ae59c6ef7_0
  • /data/data/####/2f339529d41b9132_0
  • /data/data/####/300e5e0ba47b365f_0
  • /data/data/####/3105e08cfc1afa3a_0
  • /data/data/####/31cca5b3824d9520_0
  • /data/data/####/3246f512d77dd265_0
  • /data/data/####/3272154788ea4156_0
  • /data/data/####/3283e5c01ea5f8f3_0 (deleted)
  • /data/data/####/3327275
  • /data/data/####/335e5d46ecc2b0fc_0
  • /data/data/####/337e954528a92aec_0
  • /data/data/####/3765e51353a05fe5_0 (deleted)
  • /data/data/####/3929949f07d1e9e7_0
  • /data/data/####/3a42764ced02d1eb_0
  • /data/data/####/3ad9e5b66ce7f137_0
  • /data/data/####/3b0a2173fffdb342_0
  • /data/data/####/3bf82e77ee438f3d_0
  • /data/data/####/3cf3f866282ef5d3_0
  • /data/data/####/3e18ab83f89a066e_0
  • /data/data/####/3e34be3d0c619b20_0 (deleted)
  • /data/data/####/3f3464d652f29101_0
  • /data/data/####/3fff1d9cb8683d70_0 (deleted)
  • /data/data/####/404aef909a94465a_0
  • /data/data/####/404aef909a94465a_1
  • /data/data/####/404ef322750dd6bd_0
  • /data/data/####/405f206486cdebb5_0
  • /data/data/####/40e620c7ae468cee_0
  • /data/data/####/41354f78fd5d024a_0
  • /data/data/####/4498cba2a6e95f2b_0
  • /data/data/####/4498cba2a6e95f2b_1
  • /data/data/####/457ae0f034cdfb21_0
  • /data/data/####/46ec6595805093a2_0 (deleted)
  • /data/data/####/490978cc67516bcf_0 (deleted)
  • /data/data/####/490ce219194f51d3_0
  • /data/data/####/49f413a563004dd5_0
  • /data/data/####/4a0fe19c43685b22_0
  • /data/data/####/4a53aa83842367b1_0
  • /data/data/####/4ac257281dba3f20_0
  • /data/data/####/4ac93175981dc9e1_0
  • /data/data/####/4c37d896bdf575d6_0
  • /data/data/####/4c919065809a593b_0
  • /data/data/####/4c919065809a593b_1
  • /data/data/####/4d02f5cc0b6c0fd1_0 (deleted)
  • /data/data/####/4e331adc299bd332_0
  • /data/data/####/4e447b756ab71562_0
  • /data/data/####/4eccceb72e18d6fd_0
  • /data/data/####/4eccceb72e18d6fd_1
  • /data/data/####/4f3d1ebe13d61222_0
  • /data/data/####/4fa680656d73e056_0
  • /data/data/####/50332de0c2804e43_0
  • /data/data/####/50332de0c2804e43_1
  • /data/data/####/506eac33183cd022_0 (deleted)
  • /data/data/####/5156c9840f740aaa_0
  • /data/data/####/5173154740570244_0
  • /data/data/####/519698444
  • /data/data/####/51d887180507a945_0
  • /data/data/####/526e3246e14984bb_0
  • /data/data/####/52df76b30711c1cd_0
  • /data/data/####/5312523eee9462f9_0
  • /data/data/####/532f35cb65867c8e_0
  • /data/data/####/54d2c79efdaa6091_0
  • /data/data/####/555532f5f3704d12_0
  • /data/data/####/556772daaee17a26_0
  • /data/data/####/56996b2aa0b5f037_0
  • /data/data/####/579f9b339b6651af_0
  • /data/data/####/581fb5c5d8a34982_0
  • /data/data/####/5835a5258b37fef7_0
  • /data/data/####/5835a5258b37fef7_1
  • /data/data/####/5a59db8069930c54_0
  • /data/data/####/5aba19e97d9510bd_0 (deleted)
  • /data/data/####/5c9e659ec6a11a75_0
  • /data/data/####/5d5b68560355e39f_0
  • /data/data/####/5d5b68560355e39f_1
  • /data/data/####/5d738c803f2a61ef_0
  • /data/data/####/5e3fed3fc3a4bf9a_0
  • /data/data/####/5f8b1e2cd952792e_0
  • /data/data/####/60c65754b855e958_0
  • /data/data/####/62e73d2ac96c2baa_0 (deleted)
  • /data/data/####/6342d0610af80df61be9346badebbf04.d
  • /data/data/####/63fa7437bc147a82_0
  • /data/data/####/6468ccc2bc9c56ca_0
  • /data/data/####/64e42f5f3eb18cf1_0
  • /data/data/####/6508d0254ee2006b_0
  • /data/data/####/661424280c32e33a_0
  • /data/data/####/661424280c32e33a_1
  • /data/data/####/6616f972f9884e301cd740268cfdf343
  • /data/data/####/66f00cd704d83443_0
  • /data/data/####/678ec9df5debfe5c_0
  • /data/data/####/68783520b98f98e8_0
  • /data/data/####/69a02f17416e51c1_0
  • /data/data/####/6a1e54099c819823_0
  • /data/data/####/6ac07edb89908e8c_0
  • /data/data/####/6b45d560645d5a7b_0
  • /data/data/####/6d04b520efbd2dce_0
  • /data/data/####/6d4447e3c17e9c60_0
  • /data/data/####/6f19d660497b0619_0
  • /data/data/####/6f2d45f554b21203_0
  • /data/data/####/6f67dfcbe35a6c35_0 (deleted)
  • /data/data/####/70c9784469fda3cd_0
  • /data/data/####/70c9784469fda3cd_1
  • /data/data/####/719cd5005f60b437_0
  • /data/data/####/721a84425ee75c0f_0
  • /data/data/####/735e0911ab158d7f_0
  • /data/data/####/735e0911ab158d7f_1
  • /data/data/####/74be228fdf811f29_0
  • /data/data/####/74d4957d4265a069_0
  • /data/data/####/76dd8263c92f7c5f_0
  • /data/data/####/76e7e7e1ba62acf0_0 (deleted)
  • /data/data/####/77133459b2600199_0
  • /data/data/####/77f1605dfaed3c5f_0
  • /data/data/####/781ea185fee7d931_0
  • /data/data/####/785565f312740902_0 (deleted)
  • /data/data/####/78c5b427d0a64f75_0 (deleted)
  • /data/data/####/79ea9f4d6ce5befd_0
  • /data/data/####/7c14391470e65830_0
  • /data/data/####/7c1554a5ee5fe940_0
  • /data/data/####/7c1554a5ee5fe940_1
  • /data/data/####/7c6bf41552584779_0
  • /data/data/####/7ca93d765615192b_0
  • /data/data/####/7cfba443c7065e4f87058f05b248403d.d
  • /data/data/####/7d24e1b65182f6a6_0
  • /data/data/####/7d79e67c0161f9af_0 (deleted)
  • /data/data/####/7ece11cfc83f02ec_0
  • /data/data/####/7f1fd2e2b65144b0_0
  • /data/data/####/80d2b996abf3b600_0 (deleted)
  • /data/data/####/81b5422582c9f0b0_0
  • /data/data/####/836241ddd71ba8de_0 (deleted)
  • /data/data/####/8389c2d26456be73_0
  • /data/data/####/8389c2d26456be73_1
  • /data/data/####/84c3a34ad710bcb2_0
  • /data/data/####/84c3a34ad710bcb2_1
  • /data/data/####/84c87cd87d2f69ea_0
  • /data/data/####/84dd8e574f10f7ce_0
  • /data/data/####/85ba96c4ffcfac89_0
  • /data/data/####/87c9baa3678aa7ec_0
  • /data/data/####/87ee09ffbeb0667d_0
  • /data/data/####/891b9cf3f154b840_0 (deleted)
  • /data/data/####/892398f112146cc1_0
  • /data/data/####/89cab6e27dd3e5b7_0 (deleted)
  • /data/data/####/8C8F552939218D4D55F5ACC7505AE2C6.xml
  • /data/data/####/8a16b4531af114da_0
  • /data/data/####/8a1eaa7bb8b227f8_0
  • /data/data/####/8adfa3da83fe8900_0
  • /data/data/####/8b4219bc5600655c_0
  • /data/data/####/8bfd8fc27cc80fae_0
  • /data/data/####/8edb1505a24269b8_0
  • /data/data/####/8eecb15b0b733112_0
  • /data/data/####/90bd8dc510a1d90d_0
  • /data/data/####/9145E4178974FEAFB084264767F30932.xml
  • /data/data/####/91fa8fc089789f3b_0
  • /data/data/####/92ad9a19cea8c996_0
  • /data/data/####/9366314883b7806f_0
  • /data/data/####/93a98e8c1440f39b_0
  • /data/data/####/93a98e8c1440f39b_1
  • /data/data/####/952c4d6ebbb4a0bf_0
  • /data/data/####/957875737104b96e_0
  • /data/data/####/961ca1a44e270ac1_0
  • /data/data/####/975dd1287e43da2e_0
  • /data/data/####/97f136c59b5ec8a1_0 (deleted)
  • /data/data/####/983a4d8614cc646f_0
  • /data/data/####/9897b64f8e6f8ac0_0
  • /data/data/####/98FDECB17B837318717C64311D2C05D8.dex
  • /data/data/####/98FDECB17B837318717C64311D2C05D8.dex.flock (deleted)
  • /data/data/####/98FDECB17B837318717C64311D2C05D8.jar
  • /data/data/####/98FDECB17B837318717C64311D2C05D8.temp
  • /data/data/####/98a3e5c0af9ab5c5_0 (deleted)
  • /data/data/####/990ff6cc49ceb0e2_0
  • /data/data/####/99778d24d36510e5_0
  • /data/data/####/99ab4fe376ac6b9a_0
  • /data/data/####/9B29C2F5242C6A564DFEF1DF4F020D57
  • /data/data/####/9B29C2F5242C6A564DFEF1DF4F020D57.dex
  • /data/data/####/9B29C2F5242C6A564DFEF1DF4F020D57.dex.flock (deleted)
  • /data/data/####/9B29C2F5242C6A564DFEF1DF4F020D57.jar
  • /data/data/####/9B29C2F5242C6A564DFEF1DF4F020D57.temp
  • /data/data/####/9ad98944b8d39f26_0
  • /data/data/####/9d81665675f63b2c_0
  • /data/data/####/9e76e6b839c48105_0
  • /data/data/####/9e876e14f49dacd6067994dabd62ddae.xml
  • /data/data/####/9f6493937585bc71_0
  • /data/data/####/9f6493937585bc71_1
  • /data/data/####/9fabf7025ae7f82a_0
  • /data/data/####/A814D93D5762AA7AA3C1A62684F1FCEC
  • /data/data/####/A814D93D5762AA7AA3C1A62684F1FCEC.dex
  • /data/data/####/A814D93D5762AA7AA3C1A62684F1FCEC.dex.flock (deleted)
  • /data/data/####/A814D93D5762AA7AA3C1A62684F1FCEC.temp
  • /data/data/####/A814D93D5762AA7AA3C1A62684F1FCEC.zip
  • /data/data/####/AppEventsLogger.persistedevents
  • /data/data/####/C09F1B56FD073DF016AAA116DD228675
  • /data/data/####/C09F1B56FD073DF016AAA116DD228675.dex
  • /data/data/####/C09F1B56FD073DF016AAA116DD228675.dex.flock (deleted)
  • /data/data/####/C09F1B56FD073DF016AAA116DD228675.temp
  • /data/data/####/C09F1B56FD073DF016AAA116DD228675.zip
  • /data/data/####/Cookies-journal
  • /data/data/####/DATA_DETECTION_ADDRESS_1
  • /data/data/####/E06C26E43D34FF4E65342B47801CDA0B
  • /data/data/####/E796DC7A583043BFD4849DB0067F31E4.xml
  • /data/data/####/MobikokCommonConfig.xml
  • /data/data/####/MobikokDeviceConfig.xml
  • /data/data/####/REPLEHDP0DP0MOC.anrtmp
  • /data/data/####/REPLEHDP0DP0MOC.bati
  • /data/data/####/REPLEHDP0DP0MOC.end
  • /data/data/####/REPLEHDP0DP0MOC.hdr
  • /data/data/####/REPLEHDP0DP0MOC.meminfo
  • /data/data/####/REPLEHDP0DP0MOC.pid
  • /data/data/####/REPLEHDP0DP0MOC.ps
  • /data/data/####/REPLEHDP0DP0MOC.st
  • /data/data/####/REPLEHDP0DP0MOC.start
  • /data/data/####/REPLEHDP0DP0MOC.status
  • /data/data/####/REPLEHDP0DP0MOC.sts
  • /data/data/####/REPLEHDP0DP0MOC.time
  • /data/data/####/REPLEHDP0DP0MOC.uptime
  • /data/data/####/RQsWhYx.dex
  • /data/data/####/RQsWhYx.dex.flock (deleted)
  • /data/data/####/RQsWhYx.jar
  • /data/data/####/SmartSearch.dex
  • /data/data/####/SmartSearch.dex (deleted)
  • /data/data/####/SmartSearch.dex.flock (deleted)
  • /data/data/####/SmartSearch.zip
  • /data/data/####/UM_PROBE_DATA.xml
  • /data/data/####/VpsSDK.dex
  • /data/data/####/VpsSDK.dex.flock (deleted)
  • /data/data/####/VpsSDK.jar
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/ZyM2cqJMkLw.xml
  • /data/data/####/a115fc956fa27455_0
  • /data/data/####/a18809468600b2b9_0
  • /data/data/####/a3a8cf82a31113ef_0 (deleted)
  • /data/data/####/a3f72ec2733674bd_0 (deleted)
  • /data/data/####/a5519b0f595e696c_0
  • /data/data/####/a63f09ebd2f5a918_0
  • /data/data/####/a7204b3466960030_0
  • /data/data/####/a74618b23cccccc3_0 (deleted)
  • /data/data/####/a76e7e5f70270b03_0
  • /data/data/####/a9324d52758036ad_0
  • /data/data/####/a9945607a1254f95_0
  • /data/data/####/a9f5fa4410af069b_0
  • /data/data/####/ab4fcf5b53376e22_0 (deleted)
  • /data/data/####/abddf30d7c4bceb6_0
  • /data/data/####/ac9e51e319948bdc_0
  • /data/data/####/ac9e51e319948bdc_1
  • /data/data/####/aca5da9f80ad4f89_0
  • /data/data/####/aca5da9f80ad4f89_1
  • /data/data/####/ae4077fb90b76d34_0
  • /data/data/####/ae9987aeaab9b92d_0
  • /data/data/####/af9f660d68c3a687_0
  • /data/data/####/afae218fd8a46e49_0
  • /data/data/####/alcccu
  • /data/data/####/anl.db
  • /data/data/####/anl.db-journal
  • /data/data/####/anl.db-shm (deleted)
  • /data/data/####/anl.db-wal
  • /data/data/####/anl.db-wal (deleted)
  • /data/data/####/app@classes0.dex
  • /data/data/####/app_db-journal
  • /data/data/####/audience_network.dex
  • /data/data/####/audience_network.dex.flock (deleted)
  • /data/data/####/b1a2faf170507972_0
  • /data/data/####/b362c55c3b1f0ec7_0 (deleted)
  • /data/data/####/b3656918ba6ce057_0
  • /data/data/####/b3c33942d7dd25cd_0
  • /data/data/####/b3dcb8233d99bf08_0
  • /data/data/####/b4956d918d7163ce_0
  • /data/data/####/b62c4002cdefd35d_0
  • /data/data/####/b62c4002cdefd35d_1
  • /data/data/####/b69b6e717b340d9a_0
  • /data/data/####/b7a9947b47843370_0
  • /data/data/####/b8b06cc1b78e2c71_0 (deleted)
  • /data/data/####/ba2beab91ffa7fb3_0
  • /data/data/####/ba4e0492a94fdfc7_0
  • /data/data/####/ba4e0492a94fdfc7_1
  • /data/data/####/bad56febee3e2ea1_0
  • /data/data/####/base.apk
  • /data/data/####/base.dex (deleted)
  • /data/data/####/base.dex.flock (deleted)
  • /data/data/####/bb2d1abb4a66846e_0
  • /data/data/####/bc2509cae86b8366_0 (deleted)
  • /data/data/####/bc4be9b258ffe0ea_0
  • /data/data/####/bc62ac2cea71632a_0 (deleted)
  • /data/data/####/bca905cfe9e7b06c_0 (deleted)
  • /data/data/####/bd30c51bf1de6f3a_0
  • /data/data/####/be7a62c0319a795e_0
  • /data/data/####/bf13b743b02c4daf_0
  • /data/data/####/bi_1l1li1l1i1li1.xml
  • /data/data/####/bi_1l1li1l1i1li1.xml.bak
  • /data/data/####/c0143a17142dd543_0
  • /data/data/####/c0c6d173f96295c4_0 (deleted)
  • /data/data/####/c14ab210ffd01c0d_0
  • /data/data/####/c14d2ea416cc4f8ae8e1dc95eaa2afe7.xml
  • /data/data/####/c14d2ea416cc4f8ae8e1dc95eaa2afe7.xml.bak (deleted)
  • /data/data/####/c1qa2sw3de4frf5tg6yhju78ik9olp0.xml
  • /data/data/####/c1qa2sw3de4frf5tg6yhju78ik9olp0.xml.bak
  • /data/data/####/c2148a18625992a6_0
  • /data/data/####/c50ddd074bfe7842_0
  • /data/data/####/c575a1b9969f521a_0
  • /data/data/####/c5a9ac48f55358b6_0
  • /data/data/####/c67f126d2aa86022_0
  • /data/data/####/c6a163c6d49f1271_0
  • /data/data/####/c6e12bb344cdccc6_0 (deleted)
  • /data/data/####/c7c90d0061680d04_0
  • /data/data/####/c8970e0bf20aadb6_0
  • /data/data/####/c8c68d58fb8eafc3_0
  • /data/data/####/c97b5c0bb5b1b6ea_0 (deleted)
  • /data/data/####/c9a855910ba711c2_0
  • /data/data/####/cb3e7cfb5b588fa3_0
  • /data/data/####/cba09b86f45f887d_0 (deleted)
  • /data/data/####/cc04126c0cc669b3_0
  • /data/data/####/cca5dd43144343ae_0 (deleted)
  • /data/data/####/cca7dc7b0a813cc7_0
  • /data/data/####/cd302e8a92b7252a_0
  • /data/data/####/cdea6e6429f6bde3_0
  • /data/data/####/cdea6e6429f6bde3_1
  • /data/data/####/cdt.wa
  • /data/data/####/cea77fdfb5a3b33e_0
  • /data/data/####/cea77fdfb5a3b33e_1
  • /data/data/####/cf5409623d094260_0
  • /data/data/####/ci_v1v2v3.so
  • /data/data/####/classes.dex
  • /data/data/####/classes.dex (deleted)
  • /data/data/####/classes.dex.flock (deleted)
  • /data/data/####/com.bb.c2.vv.new.の.apktemp
  • /data/data/####/com.bb.c2.vv.new.の.dex
  • /data/data/####/com.bb.c2.vv.new.の.dex.flock (deleted)
  • /data/data/####/com.facebook.internal.MODEL_STORE.xml
  • /data/data/####/com.facebook.internal.preferences.APP_GATEKEEPERS.xml
  • /data/data/####/com.facebook.internal.preferences.APP_SETTINGS.xml
  • /data/data/####/com.facebook.sdk.USER_SETTINGS.xml
  • /data/data/####/com.facebook.sdk.appEventPreferences.xml
  • /data/data/####/com.facebook.sdk.attributionTracking.xml
  • /data/data/####/com.pd.pdhelper_ct_default.xml
  • /data/data/####/com.pd.pdhelper_ct_default.xml.bak (deleted)
  • /data/data/####/com.pd.pdhelper_preferences.xml
  • /data/data/####/com.pd.pdhelper_preferences.xml.bak
  • /data/data/####/com.pd.pdhelperye_after_install_pkg.xml
  • /data/data/####/combbjazzkitov.
  • /data/data/####/combbjazzkitov.dex
  • /data/data/####/combbjazzkitov.dex.flock (deleted)
  • /data/data/####/core_asdjfadsfjsaio.so
  • /data/data/####/cr.wa
  • /data/data/####/cum.lock
  • /data/data/####/cv.xml
  • /data/data/####/cy
  • /data/data/####/d029f0a8fc726de4_0
  • /data/data/####/d0320a13ee07e897_0
  • /data/data/####/d1f2406f2c3a3556_0
  • /data/data/####/d30195763956822f_0
  • /data/data/####/d3d495f7d3e145af_0
  • /data/data/####/d41d8cd98f00b204e9800998ecf8427e.xml
  • /data/data/####/d4870fbb88217b37_0
  • /data/data/####/d4870fbb88217b37_1
  • /data/data/####/d5a380ff8fb418e4_0
  • /data/data/####/d6300a2e7cf8a08d_0
  • /data/data/####/d6b667cc1bec3ea1_0
  • /data/data/####/d7e758c0ac222bad_0
  • /data/data/####/d89a38916117f570_0 (deleted)
  • /data/data/####/d8ab24d53acbfd76_0
  • /data/data/####/d8c23e320bd599c4_0 (deleted)
  • /data/data/####/d8f32e5341e29be1_0
  • /data/data/####/d8f32e5341e29be1_1
  • /data/data/####/data.dex
  • /data/data/####/data.dex.flock (deleted)
  • /data/data/####/data.jar
  • /data/data/####/db2eb155b1e100c0_0
  • /data/data/####/db2eb155b1e100c0_1
  • /data/data/####/dcd49107547537e2_0
  • /data/data/####/dcd49107547537e2_1
  • /data/data/####/dder4dsw.xml
  • /data/data/####/dder4dsw.xml.bak
  • /data/data/####/dder4dsw.xml.bak (deleted)
  • /data/data/####/ddfbe98140f689d9_0
  • /data/data/####/dee0c0c6c913bedb_0
  • /data/data/####/dee0c0c6c913bedb_1
  • /data/data/####/delayed_transmission_flag_new.xml
  • /data/data/####/dt.wa
  • /data/data/####/dw3e34ewd.xml
  • /data/data/####/dw3e34ewd.xml.bak
  • /data/data/####/dw3e34ewd.xml.bak (deleted)
  • /data/data/####/dy_live.xml
  • /data/data/####/e07b02b2cb723967_0 (deleted)
  • /data/data/####/e0b6e72253c06ed1_0
  • /data/data/####/e0b6e72253c06ed1_1
  • /data/data/####/e13142331ee57ad5_0
  • /data/data/####/e1842cc7adaf4000_0 (deleted)
  • /data/data/####/e1d74398a8f21e84_0
  • /data/data/####/e1d934206ca42628_0
  • /data/data/####/e1efc1fe73e44c6b_0
  • /data/data/####/e34f187a228945b2_0
  • /data/data/####/e49480a0883e9105_0 (deleted)
  • /data/data/####/e547effc90490aee_0
  • /data/data/####/e5e811c788c01f18_0
  • /data/data/####/e723f6add279f309_0
  • /data/data/####/e7ba586059e297cb_0
  • /data/data/####/e7d7a53f89ed875e_0
  • /data/data/####/e7d7a53f89ed875e_1
  • /data/data/####/e81f3194fa2dedb7_0
  • /data/data/####/e858a7a9c40d2a21_0
  • /data/data/####/e88a9037ee68dc06_0
  • /data/data/####/e8ed91474bbc30e1_0
  • /data/data/####/e9044f739aecc6d3_0
  • /data/data/####/e906f15b20a8f97f_0
  • /data/data/####/e966912d5f776613_0
  • /data/data/####/e9732d1043cf2300_0
  • /data/data/####/eHhkX3Nw.xml
  • /data/data/####/ea4d69f78c7d85a9_0 (deleted)
  • /data/data/####/ea69ffacc186e4a0_0
  • /data/data/####/eac27dd8f78fd5c9_0
  • /data/data/####/ead2dee4a9edcad1_0
  • /data/data/####/ead2dee4a9edcad1_1
  • /data/data/####/eb0567356aad7d30_0
  • /data/data/####/eb0d591d5da1df37_0
  • /data/data/####/ece2dec664bc4dc7_0
  • /data/data/####/ece2dec664bc4dc7_1
  • /data/data/####/ed1d599df4890523_0
  • /data/data/####/ed81de8773caa419_0
  • /data/data/####/eeda537854398566_0 (deleted)
  • /data/data/####/ef29fae6783fbbed_0
  • /data/data/####/ef29fae6783fbbed_1
  • /data/data/####/efcf64e09f6a1b91_0
  • /data/data/####/eff08aa33094b4c9_0
  • /data/data/####/exc_log.xml
  • /data/data/####/exchangeIdentity.json
  • /data/data/####/exid.dat
  • /data/data/####/f03dc7c050015c3e_0 (deleted)
  • /data/data/####/f12fe77b5eeeb63c_0
  • /data/data/####/f26e7d9ef91f3d16_0
  • /data/data/####/f3036c3e2925ac4f_0
  • /data/data/####/f36845cd2c6b4ef3_0
  • /data/data/####/f36845cd2c6b4ef3_1
  • /data/data/####/f4121191e857f7b5_0
  • /data/data/####/f470cf637d1ff103_0 (deleted)
  • /data/data/####/f4bd5a2bbde31b1c255e3ec022e40c94
  • /data/data/####/f6018bbcdde1c45e_0 (deleted)
  • /data/data/####/f6e0babe0ff77a67_0 (deleted)
  • /data/data/####/f76a862ee5bdc313_0
  • /data/data/####/f788e231ebdedd86_0
  • /data/data/####/f9912256f4333017_0
  • /data/data/####/f9e969a5e3c194d7_0
  • /data/data/####/fae88ec8ad20d251_0
  • /data/data/####/faf63f48cb4748df_0
  • /data/data/####/fb91a1ddbaef84f9_0
  • /data/data/####/fc1d9163c1fa4a57_0
  • /data/data/####/fc3f0bc685e2eac5_0
  • /data/data/####/fc9512212f45ae9f_0
  • /data/data/####/fd4990958d5cf0b0_0
  • /data/data/####/fd4eb852f4c01748_0 (deleted)
  • /data/data/####/fd4r4e23ad.data-journal
  • /data/data/####/fde4sr.data-journal
  • /data/data/####/fe0908fe3df6fbb9_0 (deleted)
  • /data/data/####/ffc0f530fd4d0dc7_0 (deleted)
  • /data/data/####/fl32
  • /data/data/####/fwj8i3dd.data-journal
  • /data/data/####/g5dtf4rd.xml
  • /data/data/####/g5dtf4rd.xml.bak
  • /data/data/####/g5dtf4rd.xml.bak (deleted)
  • /data/data/####/gameid
  • /data/data/####/gameid.zip
  • /data/data/####/godzilla.db
  • /data/data/####/godzilla.db-journal
  • /data/data/####/godzilla.xml
  • /data/data/####/godzilla.xml.bak
  • /data/data/####/godzilla_update.xml
  • /data/data/####/hfumobi28.zip
  • /data/data/####/http_game.jkfa.xyz_0.localstorage-journal
  • /data/data/####/http_goldgame.world_0.localstorage-journal
  • /data/data/####/http_haokanm.site_0.localstorage-journal
  • /data/data/####/http_k71.xyz_0.localstorage-journal
  • /data/data/####/https_facebookgame.cn_0.localstorage-journal
  • /data/data/####/https_foodmake.space_0.localstorage-journal
  • /data/data/####/https_quewei.site_0.localstorage-journal
  • /data/data/####/https_www.google.com_0.localstorage-journal
  • /data/data/####/i==1.2.0&&1.1.3.4_1607934897599_envelope.log
  • /data/data/####/iavi.txt.xml
  • /data/data/####/index
  • /data/data/####/info.xml
  • /data/data/####/lani.png
  • /data/data/####/libnav-6mdw2z.so
  • /data/data/####/libzvje.so
  • /data/data/####/libzvje.so-32
  • /data/data/####/libzvje.so-64
  • /data/data/####/libzxvps_32.so
  • /data/data/####/libzxvps_64.so
  • /data/data/####/lob.xml
  • /data/data/####/lob.xml.bak
  • /data/data/####/m2020070821.apk
  • /data/data/####/m2020070821.dex
  • /data/data/####/m2020070821.dex.flock (deleted)
  • /data/data/####/metrics_guid
  • /data/data/####/mintegral.msdk.and.db-journal
  • /data/data/####/mintegral.xml
  • /data/data/####/mintegral.xml.bak
  • /data/data/####/mobclick_agent_user_com.pd.pdhelper.xml
  • /data/data/####/mosla_update.xml
  • /data/data/####/mp1.tmp
  • /data/data/####/mph2.tmp
  • /data/data/####/mph20.tmp
  • /data/data/####/mph5.tmp
  • /data/data/####/mph7.tmp
  • /data/data/####/om_js_content.txt
  • /data/data/####/os
  • /data/data/####/pflgrhsd.dex (deleted)
  • /data/data/####/pflgrhsd.dex.flock (deleted)
  • /data/data/####/pflgrhsd.jar
  • /data/data/####/pid.txt
  • /data/data/####/pl_config.xml
  • /data/data/####/pref_bl
  • /data/data/####/proc_auxv
  • /data/data/####/proxy.db
  • /data/data/####/proxy.db-journal
  • /data/data/####/pv.wa
  • /data/data/####/q201030.zip
  • /data/data/####/readzibao.xml
  • /data/data/####/real.dex
  • /data/data/####/real.dex.flock (deleted)
  • /data/data/####/real.jar
  • /data/data/####/s2020070821.apk
  • /data/data/####/s2020070821.dex
  • /data/data/####/s2020070821.dex.flock (deleted)
  • /data/data/####/share_date.xml
  • /data/data/####/share_date.xml.bak
  • /data/data/####/simple-main-msg.dat
  • /data/data/####/simple-main-req.dat
  • /data/data/####/sp1.dex
  • /data/data/####/sp1.dex.flock (deleted)
  • /data/data/####/sp1.jar
  • /data/data/####/spUtils.xml
  • /data/data/####/sp_aaxcx.xml
  • /data/data/####/sp_aaxcx.xml.bak
  • /data/data/####/sp_awhiuf.xml
  • /data/data/####/sp_awhiuf.xml.bak
  • /data/data/####/sp_eskrrb.xml
  • /data/data/####/sp_qwejrioqwjroierj.xml
  • /data/data/####/sp_qyejw.xml
  • /data/data/####/sp_qyejw.xml.bak
  • /data/data/####/sph2.dex
  • /data/data/####/sph2.dex.flock (deleted)
  • /data/data/####/sph2.jar
  • /data/data/####/sph20.dex
  • /data/data/####/sph20.dex.flock (deleted)
  • /data/data/####/sph20.jar
  • /data/data/####/sph5.dex
  • /data/data/####/sph5.dex.flock (deleted)
  • /data/data/####/sph5.jar
  • /data/data/####/sph7.dex
  • /data/data/####/sph7.dex.flock (deleted)
  • /data/data/####/sph7.jar
  • /data/data/####/ssk_config.xml
  • /data/data/####/t==9.1.0&&1.1.3.4_1607934896411_envelope.log
  • /data/data/####/temp.zip (deleted)
  • /data/data/####/the-real-index
  • /data/data/####/ua.db
  • /data/data/####/ua.db-journal
  • /data/data/####/um_pri.xml
  • /data/data/####/um_session_id.xml
  • /data/data/####/umeng_common_config.xml
  • /data/data/####/umeng_common_location.xml
  • /data/data/####/umeng_general_config.xml
  • /data/data/####/umeng_general_config.xml.bak
  • /data/data/####/umeng_it.cache
  • /data/data/####/umeng_sp_oaid.xml
  • /data/data/####/umeng_sp_zdata.xml
  • /data/data/####/umeng_zcfg_flag
  • /data/data/####/umeng_zero_cache.db
  • /data/data/####/umeng_zero_cache.db-journal
  • /data/data/####/unique
  • /data/data/####/unknown.xml
  • /data/data/####/unknown.xml.bak (deleted)
  • /data/data/####/urlSetting.xml
  • /data/data/####/ver
  • /data/data/####/ver.ini.xml
  • /data/data/####/vmm.xml
  • /data/data/####/yd_config_c.xml
  • /data/data/####/yzr.xml
  • /data/data/####/z==1.2.0&&1.1.3.4_1607934888838_envelope.log
  • /data/misc/####/primary.prof
Miscellaneous:
Executes the following shell scripts:
  • /system/bin/cat /proc/cpuinfo
  • /system/bin/cat /proc/version
  • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
  • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/.ybhbn/pflgrhsd.jar --oat-fd=206 --oat-location=/data/user/0/<Package>/.ybhbn/pflgrhsd.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_cachedata/naac/1FB529D5B86CB576CE98288F77DE7CFE.zip --oat-fd=162 --oat-location=/data/user/0/<Package>/files/1FB529D5B86CB576CE98288F77DE7CFE.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_cachedata/naac/242CB7B15C8571D4EA3D3E825CCE2CC5.zip --oat-fd=264 --oat-location=/data/user/0/<Package>/files/242CB7B15C8571D4EA3D3E825CCE2CC5.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_cachedata/naac/2D7A36961E40EF39519F07AA1FA38A5D.zip --oat-fd=162 --oat-location=/data/user/0/<Package>/files/2D7A36961E40EF39519F07AA1FA38A5D.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_cachedata/naac/A814D93D5762AA7AA3C1A62684F1FCEC.zip --oat-fd=265 --oat-location=/data/user/0/<Package>/files/A814D93D5762AA7AA3C1A62684F1FCEC.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_cachedata/naac/C09F1B56FD073DF016AAA116DD228675.zip --oat-fd=230 --oat-location=/data/user/0/<Package>/files/C09F1B56FD073DF016AAA116DD228675.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_df_file/.2969407120.apk --oat-fd=358 --oat-location=/data/user/0/<Package>/code_cache/.2969407120.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_df_file/.3477600307.apk --oat-fd=316 --oat-location=/data/user/0/<Package>/code_cache/.3477600307.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_xddd/p1/sp1.jar --oat-fd=363 --oat-location=/data/user/0/<Package>/app_xddd/p1/sp1.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_xddd/ph2/sph2.jar --oat-fd=313 --oat-location=/data/user/0/<Package>/app_xddd/ph2/sph2.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_xddd/ph20/sph20.jar --oat-fd=340 --oat-location=/data/user/0/<Package>/app_xddd/ph20/sph20.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_xddd/ph5/sph5.jar --oat-fd=318 --oat-location=/data/user/0/<Package>/app_xddd/ph5/sph5.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_xddd/ph7/sph7.jar --oat-fd=302 --oat-location=/data/user/0/<Package>/app_xddd/ph7/sph7.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/159220316063479695-1485755281/1.jar --oat-fd=203 --oat-location=/data/user/0/<Package>/cache/159220316063479695-1485755281/1.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/xevst/<Package>/nyn/98FDECB17B837318717C64311D2C05D8.jar --oat-fd=167 --oat-location=/data/user/0/<Package>/files/98FDECB17B837318717C64311D2C05D8.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/xevst/<Package>/nyn/9B29C2F5242C6A564DFEF1DF4F020D57.jar --oat-fd=87 --oat-location=/data/user/0/<Package>/files/9B29C2F5242C6A564DFEF1DF4F020D57.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/.2969407120.apk --oat-fd=54 --oat-location=/data/user/0/<Package>/code_cache/.2969407120.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/06a36b34d09d11ea9799506b4b12c76007de31e5c0f9f5960ec5277cb2551e10.jar --oat-fd=89 --oat-location=/data/user/0/<Package>/app_shellObj/06a36b34d09d11ea9799506b4b12c76007de31e5c0f9f5960ec5277cb2551e10.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/06a36b34d09d11ea9799506b4b12c760368a5bca290ca8ab169ed613ae1ee21d.jar --oat-fd=231 --oat-location=/data/user/0/<Package>/app_shellObj/06a36b34d09d11ea9799506b4b12c760368a5bca290ca8ab169ed613ae1ee21d.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/06a36b34d09d11ea9799506b4b12c760a481e950172de8dc7a4b968fc9c9eefe.jar --oat-fd=170 --oat-location=/data/user/0/<Package>/app_shellObj/06a36b34d09d11ea9799506b4b12c760a481e950172de8dc7a4b968fc9c9eefe.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/06a36b34d09d11ea9799506b4b12c760afb3893166466d260fd2065ba6660662.jar --oat-fd=194 --oat-location=/data/user/0/<Package>/app_shellObj/06a36b34d09d11ea9799506b4b12c760afb3893166466d260fd2065ba6660662.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/06a36b34d09d11ea9799506b4b12c760b90b04be5561cebe4056f9d38caa3948.jar --oat-fd=207 --oat-location=/data/user/0/<Package>/app_shellObj/06a36b34d09d11ea9799506b4b12c760b90b04be5561cebe4056f9d38caa3948.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/06a36b34d09d11ea9799506b4b12c760decc828a4d17546c50433d1e5eca7a56.jar --oat-fd=48 --oat-location=/data/user/0/<Package>/app_shellObj/06a36b34d09d11ea9799506b4b12c760decc828a4d17546c50433d1e5eca7a56.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/<Package>-simple-main/SmartSearch/SmartSearch.dex --oat-fd=335 --oat-location=/data/user/0/<Package>/files/<Package>-simple-main/SmartSearch/ota/SmartSearch.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/<Package>-simple-main/hfumobi28/classes.dex --oat-fd=364 --oat-location=/data/user/0/<Package>/files/<Package>-simple-main/hfumobi28/ota/classes.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/<Package>-simple-main/q201030/classes.dex --oat-fd=328 --oat-location=/data/user/0/<Package>/files/<Package>-simple-main/q201030/ota/classes.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/<Package>0<Package>/combbjazzkitov. --oat-fd=156 --oat-location=/data/user/0/<Package>/files/<Package>0<Package>/<Package>/1607934890283/combbjazzkitov.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/<Package>0<Package>/combbjazzkitov. --oat-fd=174 --oat-location=/data/user/0/<Package>/files/<Package>0<Package>/<Package>/1607934893272/combbjazzkitov.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/audience_network.dex --oat-fd=89 --oat-location=/data/user/0/<Package>/app_optimized/audience_network.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/audience_network.dex --oat-fd=91 --oat-location=/data/user/0/<Package>/app_optimized/audience_network.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/b075612a53f3e4825d30736bde034894/VpsSDK.jar --oat-fd=331 --oat-location=/data/user/0/<Package>/app_dex/VpsSDK.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/com.bb.c2.vv.new. .apk --oat-fd=94 --oat-location=/data/user/0/<Package>/cache/<Package>/com.bb.c2.vv.new. .dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/data.jar --oat-fd=301 --oat-location=/data/user/0/<Package>/files/data.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/m2020070821.apk --oat-fd=314 --oat-location=/data/user/0/<Package>/app_dex/m2020070821.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/real.jar --oat-fd=291 --oat-location=/data/user/0/<Package>/real.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/s2020070821.apk --oat-fd=314 --oat-location=/data/user/0/<Package>/app_dex/s2020070821.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/oat/arm/3484/base.apk --oat-fd=94 --oat-location=/data/user/0/<Package>/oat/arm/3484/base.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=<Package Folder>/extfiles/RQsWhYx.jar --oat-fd=175 --oat-location=<Package Folder>/extfiles/RQsWhYx.dex --compiler-filter=speed
  • app_process /system/bin com.android.commands.pm.Pm list package -3
  • cat /proc/version
  • cat /sys/class/net/wlan0/address
  • getprop
  • getprop ro.board.platform
  • getprop ro.bootimage.build.date.utc
  • getprop ro.build.description
  • getprop ro.build.fingerprint
  • getprop ro.build.product
  • getprop ro.build.version.all_codenames
  • getprop ro.product.cpu.abi
  • getprop ro.sf.lcd_density
  • getprop ro.yunos.build.version
  • ls /
  • ls /sys/class/thermal
  • ps
  • sh
  • sh -c type su
Loads the following dynamic libraries:
  • alcccu
Uses the following algorithms to encrypt data:
  • AES
  • AES-CBC-PKCS5Padding
  • AES-CBC-PKCS7Padding
  • AES-ECB-PKCS5Padding
  • DES
  • DES-CBC-PKCS5Padding
  • RSA-None-PKCS1Padding
Uses the following algorithms to decrypt data:
  • AES
  • AES-CBC-PKCS5Padding
  • AES-CBC-PKCS7Padding
  • AES-ECB-PKCS5Padding
  • DES
  • DES-CBC-PKCS5Padding
  • RSA-None-PKCS1Padding
  • desede-CBC-PKCS5Padding
Accesses the ITelephony private interface.
Gets information about location.
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Gets information about installed apps.
Adds tasks to the system scheduler.
Displays its own windows over windows of other apps.

Curing recommendations

Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android

Free trial

14 days

Download now
Get it on Google Play