Android.Packed.54983

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.DownLoader.968.origin

Network activity:

Connects to:

UDP(DNS) 8####.8.4.4:53
TCP(HTTP/1.1) 35.1####.235.102:80
TCP(HTTP/1.1) etl.mym####.com:80
TCP(HTTP/1.1) pop.onlinem####.com:80
TCP(HTTP/1.1) cdn-sto####.unit####.uni####.####.net:80
TCP(HTTP/1.1) cdn-cre####.unit####.uni####.####.net:80
TCP(HTTP/1.1) api.videob####.vi####.com:80
TCP(HTTP/1.1) whatapp####.fv####.net:80
TCP(HTTP/1.1) d1c485n####.cloudf####.net:80
TCP(HTTP/1.1) and####.b####.qq.com:80
TCP(HTTP/1.1) api-r####.teenpat####.com:80
UDP(NTP) p####.ntp.org:123
TCP(TLS/1.0) net.ray####.com:443
TCP(TLS/1.0) p####.google####.com:443
TCP(TLS/1.0) 1####.250.179.202:443
TCP(TLS/1.0) pop.onlinem####.com:443
TCP(TLS/1.0) d3epst7####.cloudf####.net:443
TCP(TLS/1.0) m-video####.ssl.n####.com:443
TCP(TLS/1.0) sdk.adti####.com:443
TCP(TLS/1.0) au####.unit####.uni####.com:443
TCP(TLS/1.0) con####.you####.com:443
TCP(TLS/1.0) firebas####.google####.com:443
TCP(TLS/1.0) unit####.edges####.net:443
TCP(TLS/1.0) h####.b####.com:443
TCP(TLS/1.0) analy####.ray####.com:443
TCP(TLS/1.0) ads-gam####.ads.prd.####.com:443
TCP(TLS/1.0) mp3.z####.vn:443
TCP(TLS/1.0) s.o####.in:443
TCP(TLS/1.0) mt####.ray####.com:443
TCP(TLS/1.0) auc####.unit####.uni####.com:443
TCP(TLS/1.0) hot.onlinem####.com:443
TCP(TLS/1.0) cdn-adn####.ray####.com:443
TCP(TLS/1.0) placem####.ta####.com:443
TCP(TLS/1.0) zal####.com:443
TCP(TLS/1.0) cdn.o####.in:443
TCP(TLS/1.0) con####.ta####.com:443
TCP(TLS/1.0) etl.n####.com:443
TCP(TLS/1.0) app-mea####.com:443
TCP(TLS/1.0) api.face####.com:443
TCP(TLS/1.0) hot.cf.fv####.net:443
TCP(TLS/1.0) config-####.traffic####.net:443
TCP(TLS/1.0) d1c7eqt####.cloudf####.net:443
TCP(TLS/1.0) p####.ray####.com:443
TCP(TLS/1.0) fk-set####.ray####.com:443
TCP(TLS/1.0) 1####.217.17.74:443
TCP(TLS/1.0) convers####.appsf####.com:443
TCP(TLS/1.0) httpk####.unit####.uni####.com:443
TCP(TLS/1.0) gc####.appsf####.com:443
TCP(TLS/1.0) hy####.ray####.com:443
TCP(TLS/1.0) m.you####.com:443
TCP(TLS/1.2) 1####.250.179.195:443
TCP(TLS/1.2) 1####.217.17.74:443
TCP(TLS/1.2) 1####.250.179.142:443
UDP 2####.255.255.250:1900
UDP hub####.n####.com:8000
UDP 1####.0.37.254:3027
UDP hu####.wap.n####.com:8000
UDP 3####.98.93.220:8000

DNS requests:

analy####.ray####.com
and####.b####.qq.com
api-r####.teenpat####.com
api.videob####.vi####.com
app-mea####.com
au####.unit####.uni####.com
auc####.unit####.uni####.com
cdn-adn####.ray####.com
cdn-adn####.ray####.com
cdn-cre####.unit####.uni####.com
cdn-sto####.unit####.uni####.com
cdn.o####.in
co####.in####.com
co####.unit####.uni####.com
con####.ta####.com
con####.you####.com
convers####.appsf####.com
d1c485n####.cloudf####.net
d1c7eqt####.cloudf####.net
d26bc9z####.cloudf####.net
d3epst7####.cloudf####.net
etl.mym####.com
etl.n####.com
firebas####.google####.com
flowcon####.d####.n####.com
g####.face####.com
gc####.appsf####.com
h####.b####.com
hot.cf.fv####.net
hot.onlinem####.com
httpk####.unit####.uni####.com
hu####.wap.n####.com
hub####.n####.com
hy####.ray####.com
laun####.appsf####.com
m####.go####.com
m-video####.ssl.n####.com
m.you####.com
mp3.z####.vn
mt####.ray####.com
net.ray####.com
p####.google####.com
p####.ntp.org
p####.ray####.com
placem####.ta####.com
pop.onlinem####.com
publish####.unit####.uni####.com
s.o####.in
sdk.adti####.com
set####.ray####.com
sett####.crashly####.com
sett####.crashly####.com.####.8
web####.unit####.uni####.com
whatapp####.fv####.net
zal####.com

HTTP GET requests:

api-r####.teenpat####.com/upgrade_archive?archive=####&version=####&nonc...
api.videob####.vi####.com/api/advert/v1/event/show/report?advert_id=####...
api.videob####.vi####.com/api/config/v1/config/common_store/get?config_t...
api.videob####.vi####.com/api/home/v3/tab/banner_slide/get?advert_pos_id...
api.videob####.vi####.com/api/home/v3/tab/feed/get?advert_pos_id=####&fe...
api.videob####.vi####.com/charts/navigator?id=####&nonce=####&ts=####&si...
api.videob####.vi####.com/in/api/advert/v1/advert/position/get?get_slave...
api.videob####.vi####.com/in/api/advert/v1/sdk/conf/videobuddy/get?nonce...
api.videob####.vi####.com/in/api/home/v3/recommend/ctr_bucket/content/ho...
api.videob####.vi####.com/in/api/subscribe/v1/user/subscribe_info/get?no...
api.videob####.vi####.com/in/charts/me_navigator?nonce=####&ts=####&sign...
api.videob####.vi####.com/in/feedback?nonce=####&ts=####&sign=####
api.videob####.vi####.com/in/global_config?nonce=####&ts=####&sign=####
api.videob####.vi####.com/in/ip?nonce=####&ts=####&sign=####
api.videob####.vi####.com/in/sign/v2/newbie_reward?nonce=####&ts=####&si...
api.videob####.vi####.com/in/sisyphus/lockscreens?nonce=####&ts=####&sig...
api.videob####.vi####.com/in/sisyphus/persistent/message?cursor=####&non...
api.videob####.vi####.com/in/sisyphus/push/local?nonce=####&ts=####&sign...
api.videob####.vi####.com/in/tag/app/vb/position/grids/me_sudoku?nonce=#...
api.videob####.vi####.com/in/tag/v3/config?nonce=####&ts=####&sign=####
api.videob####.vi####.com/in/upgrade?nonce=####&ts=####&sign=####
api.videob####.vi####.com/in/upgrade_archive?archive=####&version=####&n...
api.videob####.vi####.com/in/vcoin/v1/coin/history/change?nonce=####&ts=...
cdn-cre####.unit####.uni####.####.net/assets/5ed9316d0b61457ba821462a/6f...
cdn-cre####.unit####.uni####.####.net/assets/5ed9316ed6d21b5a06065afb/VP...
cdn-sto####.unit####.uni####.####.net/store-icons/06f46d6b-1496-4e0d-8d2...
d1c485n####.cloudf####.net/0cbb4f72fabf7ac8d8dfcf8b90ac977e?width=####&h...
d1c485n####.cloudf####.net/3596552d1f82806d349fff292275302f?width=####&h...
d1c485n####.cloudf####.net/99b554ee04a277f1fa06a9e6218e1cc5?width=####&h...
d1c485n####.cloudf####.net/badbed1dc9328ca8cd583b2e8044c88e?width=####&h...
d1c485n####.cloudf####.net/eece9d4c17deeda19c53f7c35d732093?width=####&h...
pop.onlinem####.com/videobuddy/1568713855-11239be9cd83a-navbarnav_seach_...
pop.onlinem####.com/videobuddy/1569399961-3e3b64ef24f15-1569318908-16ae0...
pop.onlinem####.com/videobuddy/1573543648-ebaa263cfe2a2-111_w341_h192.jpg
pop.onlinem####.com/videobuddy/1574168809-b2dce8e6dba4a-1570780508-f66b5...
whatapp####.fv####.net/Z7R6aVObz7s.jpg
whatapp####.fv####.net/jYsOHfV4MlQ.jpg
whatapp####.fv####.net/kZ_f6tOrrlU.jpg
whatapp####.fv####.net/rzxVPDRKZIM.jpg

HTTP POST requests:

and####.b####.qq.com/rqd/async?aid=####
api-r####.teenpat####.com/api/game_christis/app/create
api-r####.teenpat####.com/web-server/api/user/v1/tpvb/cashlist?nonce=###...
api.videob####.vi####.com/in/api/heartbeat/v1/report?nonce=####&ts=####&...
api.videob####.vi####.com/in/api/subscribe/v1/user/channel/unsubscribe_a...
api.videob####.vi####.com/in/bunshin/add?nonce=####&ts=####&sign=####
api.videob####.vi####.com/in/christis/app/authorize
api.videob####.vi####.com/in/vcoin/reachout?nonce=####&ts=####&sign=####
api.videob####.vi####.com/in/vcoin/v1/coin/task/do?nonce=####&ts=####&si...
api.videob####.vi####.com/in/vcoin/v1/task/info/batch?nonce=####&ts=####...
etl.mym####.com/api/event_report/v1/app_store/event/pass_back?nonce=####...
etl.mym####.com/api/event_report/v1/vidhunter/event/report?nonce=####&ts...

File system changes:

Creates the following files:

/data/data/####/.confd
/data/data/####/.confd-journal
/data/data/####/.mainiconfig
/data/data/####/.mtj_timestamp
/data/data/####/.
/data/data/####/.
/data/data/####/. (deleted)
/data/data/####/. .flock (deleted)
/data/data/####/.
/data/data/####/.
/data/data/####/.
/data/data/####/. .flock (deleted)
/data/data/####/.
/data/data/####/. .flock (deleted)
/data/data/####/.
/data/data/####/. (deleted)
/data/data/####/. .flock (deleted)
/data/data/####/01ead38ac.0945b.json
/data/data/####/020bc7490.f0d87.json
/data/data/####/0264bb39f.9d46b.json
/data/data/####/0275e94c-56a7-410f-bd1a-fc7483f7d14a.7871f.json
/data/data/####/0275e94c-56a7-410f-bd1a-fc7483f7d14a.cea68.png
/data/data/####/028cc1947.4b923.json
/data/data/####/02a560067.d01fa.json
/data/data/####/02c5417e-9d5c-4113-86c7-fd1c9c51bc5d.2adc1.png
/data/data/####/02ea9f25-81b0-4050-b4f6-6536bb72c1bc.afd76.mp3
/data/data/####/0341413e3.19a7c.json
/data/data/####/03955609e.e91e9.json
/data/data/####/04879551-e7dd-4aac-90fb-6cecd0b25256.62c54.png
/data/data/####/04a0c5bfa.fdb5a.json
/data/data/####/04ae72d10.e89f9.json
/data/data/####/04d1cf3b2.e06da.json
/data/data/####/04ec9e50a.859c5.json
/data/data/####/04fd6ace6.57042.json
/data/data/####/05cf6ff91.a466f.json
/data/data/####/05d58b741.d6a7b.json
/data/data/####/0619f72d-e1a3-406a-9854-741aa9dc6627.28d38.json
/data/data/####/075f63224.420d0.json
/data/data/####/079499991.84d8b.json
/data/data/####/07b0aa938.909a3.json
/data/data/####/07ce7530a.ad304.json
/data/data/####/07dac9516.39758.json
/data/data/####/07f8da5af.92952.json
/data/data/####/08018726a.9e73d.json
/data/data/####/08abc41f0.54acb.json
/data/data/####/09628766d.bdee1.json
/data/data/####/09c61596f.8b914.json
/data/data/####/09ef6f144.a0e70.json
/data/data/####/0a15b3dc0.88597.json
/data/data/####/0a5cba09d.c0627.json
/data/data/####/0a64c51ce.8856e.json
/data/data/####/0b4d24fbc.14834.json
/data/data/####/0c6ae65b0.7bdf2.json
/data/data/####/0c7ac9737.0bdce.json
/data/data/####/0c81b73b7.0961f.json
/data/data/####/0d5255670.dc2b0.json
/data/data/####/0d669730c.8ea40.json
/data/data/####/0e37da2c5.d42c4.json
/data/data/####/0f03874e0.4954a.json
/data/data/####/0f58a5380.150ab.json
/data/data/####/0f930e21-bd4f-4b02-9fec-2a189d1ab070.6474a.png
/data/data/####/0feed5f2b.bc95a.json
/data/data/####/1002
/data/data/####/1004
/data/data/####/114690b0-df4e-4f89-a0ea-af477c75ee9c.6f995.png
/data/data/####/11e86418-8f2f-4007-ae4e-bb7b84f2d96b.72350.jpg
/data/data/####/1210653279597358023
/data/data/####/12bb49f8-6d69-45c6-a07c-0750910e7c21.1b18e.mp3
/data/data/####/140032base.dex
/data/data/####/14450c660.98174.png
/data/data/####/14b42e74-c9d7-452d-9de1-ab0a7caa43db.5821c.png
/data/data/####/14ed4c8f8.c09d7.png
/data/data/####/167d6d055.3be4c.png
/data/data/####/16ab0808f.23428.png
/data/data/####/16d37d612.6f53b.png
/data/data/####/16ea25850.2c2cc.png
/data/data/####/170720898.28459.png
/data/data/####/17da510f-287c-4133-be65-928901641c7d.5dd7d.png
/data/data/####/1910b00e-88ff-4b5a-ba6c-0ff61a4d7e11.4dbdf.jpg
/data/data/####/1986f58fd.2aee1.png
/data/data/####/19d229ea-230e-4dda-bb2a-1f615a2887a7.729bc.mp3
/data/data/####/19ed8f9e8887d762b79f7ac6f6a271e66f1590185ecdb79....0.tmp
/data/data/####/1ad8086a-6f81-4ff5-9b4d-38c26718f41b.cdee4.png
/data/data/####/1b23910dd.26807.png
/data/data/####/1ba0436a8.fa1f2.png
/data/data/####/1cba70726.eb43c.png
/data/data/####/1d69573be.93d2b.png
/data/data/####/1d879626b.13deb.png
/data/data/####/1e370019-1203-4a66-8f6e-75edd1f923a2.eb20a.png
/data/data/####/1fcfd7c5-0d51-47ff-b669-779d3da45a45.483cc.png
/data/data/####/201e7d9e-ef25-4294-9b16-70931a208e56.18d2b.png
/data/data/####/203fc8f4-7940-4323-937a-18f589ccb66c.7b67a.json
/data/data/####/211f7b0436502b1044ed84d4a4b5f1bd1c453a0bcd44854...6e48.0
/data/data/####/26208a68-f86a-41e2-9fd6-023baee55ae7.e41d7.png
/data/data/####/26556fa2-fc7e-46f8-a731-bac21c650162.1983f.png
/data/data/####/26da02f8-479d-4f76-bf59-caec9490d65b.c185a.jpg
/data/data/####/2874f8dd-416c-4440-81b7-555975426e93.20630.json
/data/data/####/28a467c8-ef5a-470d-97b5-dd93e74a438c.fcad7.mp3
/data/data/####/29bcf66f-919c-44a0-8d7b-54d74ecb1d0e.fa9fe.png
/data/data/####/2a398cec919c1bed93675075e406413c915b180afda2f32....0.tmp
/data/data/####/2b17b391-d343-4b92-8d4d-a7cd9767edd6.58b31.png
/data/data/####/2bc5bb9b-9471-4cd1-ae0f-c032f02e64c5.f4208.mp3
/data/data/####/2c28fd0a-ed65-4171-a7f1-e82c2216c85b.ba4ef.png
/data/data/####/2cf927b4-8fa0-419d-8e3d-974f4d513ff3.2aafb.manifest
/data/data/####/2de79321-2180-4eca-ad4a-f795de35de62.a3fe4.png
/data/data/####/2ee4dfd8-c071-4706-9703-a50aa285ca96.adaa4.mp3
/data/data/####/33678ac9-6eec-441b-9f7b-f5738c03bdac.5bdc1.png
/data/data/####/34c0e86e-46dd-48b8-af26-a466234d7ef6.42c90.mp3
/data/data/####/3748dcf6-adde-437c-b18a-218d7da59fc3.e0983.json
/data/data/####/39_xl_auth_token.json
/data/data/####/3a48db00-7713-4a7f-8b73-c9aea4505145.aecab.json
/data/data/####/3b215049-8831-4326-afde-57b75b27689b.cc15d.jpg
/data/data/####/3b607e055fcd2a7806d195ebeb6d83a744a6814d4f566ae...5766.0
/data/data/####/3c379282-d196-47bc-bf9d-d39ab856b5a2.82512.png
/data/data/####/3eea60f3-341c-4abe-adfd-6ed3c6329f45.4e896.mp3
/data/data/####/3f349dc4-e034-47c5-8203-a556c2c79fe4.0bc24.png
/data/data/####/40dabea8-628c-4c4c-8a5a-1740cee381da.6903e.png
/data/data/####/4462e0ea-89ba-475b-a65f-1b5bf675f3ad.1f141.png
/data/data/####/46e2b975-f68c-475c-a88b-c91c18967d3a.d8c28.mp3
/data/data/####/485f40df-fa95-40ca-b9d8-a1e0d7e16674.574ec.mp3
/data/data/####/499ed5e2-33a2-4d61-b878-7d5bbf4120e9.d6bfb.json
/data/data/####/4acd1bec-343d-4ae0-b722-0e420ce4d866.4b2ce.png
/data/data/####/508a1555e2b4790013aa56639896aa42165375c78432567...09ea.0
/data/data/####/50aaf6c62bb4278f_0 (deleted)
/data/data/####/532d848c-b2d6-479d-b481-4a42899a5a4d.b5552.mp3
/data/data/####/537a1d6e-cfc4-4ac8-b132-f7e222f1dce8.1ecb5.manifest
/data/data/####/53c330bc-b113-4db4-b0ce-69eabcd8bf5e.5dfab.png
/data/data/####/54537ca8-9a5d-4d21-bee2-748fd0e1ab95.14c1e.png
/data/data/####/54eaf3af236210d2ca7f10816068a03798a443fcd58da8e....0.tmp
/data/data/####/5665b7d9-d51f-4138-aff1-5249b52254f0.435a5.png
/data/data/####/5a29260c-f50f-4658-976d-51d3c1a8cc64.a7f73.png
/data/data/####/5a566d85-aef2-4d42-a49f-0daa911599ac.23e70.png
/data/data/####/5d4fab9e-776e-4de8-8b05-0aaffc3e508d.d2f0a.mp3
/data/data/####/5d7db27c-22d5-4f32-a977-0ec80e823d9b.dd0c2.png
/data/data/####/5fe89738-fd7b-470e-90ac-d09eda9c67b2.233c5.png
/data/data/####/602a7a18-6390-42cf-8d54-c8f9d76ceb44.28c63.png
/data/data/####/6047e616825a38f436da915f57cd673a5ffd126e195a139...04b5.0
/data/data/####/60F11E0A039E-0001-0E51-AA2D3CFF36FEBeginSession.cls_temp
/data/data/####/60F11E0A039E-0001-0E51-AA2D3CFF36FEBeginSession.json
/data/data/####/60F11E0A039E-0001-0E51-AA2D3CFF36FESessionApp.cls_temp
/data/data/####/60F11E0A039E-0001-0E51-AA2D3CFF36FESessionApp.json
/data/data/####/60F11E0A039E-0001-0E51-AA2D3CFF36FESessionCrash.cls_temp
/data/data/####/60F11E0A039E-0001-0E51-AA2D3CFF36FESessionDevice.cls_temp
/data/data/####/60F11E0A039E-0001-0E51-AA2D3CFF36FESessionDevice.json
/data/data/####/60F11E0A039E-0001-0E51-AA2D3CFF36FESessionOS.cls_temp
/data/data/####/60F11E0A039E-0001-0E51-AA2D3CFF36FESessionOS.json
/data/data/####/60F11E0A039E-0001-0E51-AA2D3CFF36FESessionUser.cls_temp
/data/data/####/60F11E0A039E-0001-0E51-AA2D3CFF36FEkeys.meta
/data/data/####/60F11E190358-0002-0E51-AA2D3CFF36FEBeginSession.cls_temp
/data/data/####/60F11E190358-0002-0E51-AA2D3CFF36FEBeginSession.json
/data/data/####/60F11E190358-0002-0E51-AA2D3CFF36FESessionApp.cls_temp
/data/data/####/60F11E190358-0002-0E51-AA2D3CFF36FESessionApp.json
/data/data/####/60F11E190358-0002-0E51-AA2D3CFF36FESessionCrash.cls_temp
/data/data/####/60F11E190358-0002-0E51-AA2D3CFF36FESessionDevice.cls_temp
/data/data/####/60F11E190358-0002-0E51-AA2D3CFF36FESessionDevice.json
/data/data/####/60F11E190358-0002-0E51-AA2D3CFF36FESessionOS.cls_temp
/data/data/####/60F11E190358-0002-0E51-AA2D3CFF36FESessionOS.json
/data/data/####/60F11E190358-0002-0E51-AA2D3CFF36FESessionUser.cls
/data/data/####/60F11E1A0280-0003-0E51-AA2D3CFF36FEBeginSession.cls
/data/data/####/60F11E1A0280-0003-0E51-AA2D3CFF36FEBeginSession.json
/data/data/####/60F11E1A0280-0003-0E51-AA2D3CFF36FESessionApp.cls
/data/data/####/60F11E1A0280-0003-0E51-AA2D3CFF36FESessionApp.json
/data/data/####/60F11E1A0280-0003-0E51-AA2D3CFF36FESessionDevice.cls
/data/data/####/60F11E1A0280-0003-0E51-AA2D3CFF36FESessionDevice.json
/data/data/####/60F11E1A0280-0003-0E51-AA2D3CFF36FESessionOS.cls
/data/data/####/60F11E1A0280-0003-0E51-AA2D3CFF36FESessionOS.json
/data/data/####/60F11E2C0008-0001-1128-AA2D3CFF36FEBeginSession.cls_temp
/data/data/####/60F11E2C0008-0001-1128-AA2D3CFF36FEBeginSession.json
/data/data/####/60F11E2C0008-0001-1128-AA2D3CFF36FESessionApp.cls_temp
/data/data/####/60F11E2C0008-0001-1128-AA2D3CFF36FESessionApp.json
/data/data/####/60F11E2C0008-0001-1128-AA2D3CFF36FESessionCrash.cls
/data/data/####/60F11E2C0008-0001-1128-AA2D3CFF36FESessionDevice.cls_temp
/data/data/####/60F11E2C0008-0001-1128-AA2D3CFF36FESessionDevice.json
/data/data/####/60F11E2C0008-0001-1128-AA2D3CFF36FESessionOS.cls_temp
/data/data/####/60F11E2C0008-0001-1128-AA2D3CFF36FESessionOS.json
/data/data/####/60F11E2C0008-0001-1128-AA2D3CFF36FESessionUser.cls
/data/data/####/60F11E2C0008-0001-1128-AA2D3CFF36FEkeys.meta
/data/data/####/60F11E38028A-0002-1128-AA2D3CFF36FEBeginSession.cls
/data/data/####/60F11E38028A-0002-1128-AA2D3CFF36FEBeginSession.json
/data/data/####/60F11E38028A-0002-1128-AA2D3CFF36FESessionApp.cls
/data/data/####/60F11E38028A-0002-1128-AA2D3CFF36FESessionApp.json
/data/data/####/60F11E38028A-0002-1128-AA2D3CFF36FESessionDevice.cls_temp
/data/data/####/60F11E38028A-0002-1128-AA2D3CFF36FESessionDevice.json
/data/data/####/60F11E38028A-0002-1128-AA2D3CFF36FESessionOS.cls
/data/data/####/60F11E38028A-0002-1128-AA2D3CFF36FESessionOS.json
/data/data/####/60e375061951199ac443ef813a5f760fad1943302ef8734....0.tmp
/data/data/####/6125eed3-2033-4789-9a48-50e4366b6aef.e61c3.png
/data/data/####/617323dd-11f4-4dd3-8eec-0caf6b3b45b9.6d707.png
/data/data/####/619f4fce-3993-46f8-862b-fc74d7022ecd.17f4d.png
/data/data/####/63541507-a5ed-4e49-8e06-ee0dbf045b41.42c90.mp3
/data/data/####/63d805e3-04c8-4a58-bf07-b26b2256b45d.ac560.mp3
/data/data/####/6499b3ba-8183-48a0-a7df-c8c63a0c4cec.f2629.json
/data/data/####/65_xl_auth_token.json
/data/data/####/698156b8-4641-4c1e-b440-ddf8d152274d.c32b1.json
/data/data/####/69bdf2e4-8107-4c33-858d-8a2b7ab465bc.6aa1e.png
/data/data/####/6b439c92-ff59-4bec-a0f2-af121d38bcfe.a0818.json
/data/data/####/6e056173-d285-473c-b206-40a7fff5386e.6d3cf.png
/data/data/####/6f801092-0c37-4f30-89ef-c8d960825b36.85108.json
/data/data/####/70802d16-7b81-4ca2-bc84-3c6ca2887024.4ca09.png
/data/data/####/708b1f66-c63a-4134-a555-2dcf00f7f5a8.a3ebc.png
/data/data/####/760ddd57-922e-4e3a-a4df-b4afd358048d.b6d95.mp3
/data/data/####/771584af-ccd2-4a45-8d54-9931e9d6d4e6.c0189.json
/data/data/####/78570e5b-ee59-4778-bbcf-bb0b5121d48a.69d3d.mp3
/data/data/####/79034135-27b7-4c7d-846b-58da0a87924f.ea213.json
/data/data/####/7a32ffe84cc3c670b5740f8665745fbbbcfdbf512aacff4....0.tmp
/data/data/####/7be859a4a03f9636cba3829ed0adcb5f0d4674a1285b878....0.tmp
/data/data/####/7c17a53e-fea6-4c9a-a18f-f8d3f0ca2e68.152b3.png
/data/data/####/7e66ca3b2d35e7281f5122def9e1c7e115abd25fa0c5868...ddd2.0
/data/data/####/7fa6a6dc-870d-47a7-ad1c-eb9df19a6fe1.3ceb8.png
/data/data/####/822fd8d8-a745-40a9-98e9-6bcf828c2fce.a308d.mp3
/data/data/####/82af15cf-fd9e-491c-9809-e77975e2e25c.a1ee0.png
/data/data/####/877141b3af79a47bb810ebab76a130fc21caf443ad198e2....0.tmp
/data/data/####/886b4646-5bcf-4030-90e8-ba24bf71509b.5e55a.json
/data/data/####/8a693b5d-dd65-4854-b106-d4d0c64d70de.127ad.png
/data/data/####/8c53e8ac-3dfc-4dfb-86b4-dc189ff072a1.de48f.png
/data/data/####/8ee5d8a6-ca0c-4ac4-9119-9f4ecfb9cf01.b0190.png
/data/data/####/8efbc90d2bc0ffa890ea9ba554fe91984308cf767e70f66...70b7.0
/data/data/####/9042c1c1e3c9dea68f74a232e979686c72e954b829f683a....0.tmp
/data/data/####/9068fae9-f26d-435c-8cd3-37424a86f79d.85d1d.png
/data/data/####/9087b9be8e1ea71d15d882f0dbd05e83cd2cb7ba3f49785....0.tmp
/data/data/####/917aaf5c-4f75-4608-ab51-db479f26f1e5.3909d.png
/data/data/####/92231632-be7c-4118-a3a5-3c823bf8d113.d178c.png
/data/data/####/954fbf57-fba3-4cfa-ba60-0fa99b16d84d.aba81.png
/data/data/####/9b2bc99b-523f-4157-9a42-f2bfae396ee9.317f9.png
/data/data/####/9yu2b.html-header
/data/data/####/9yu3b.html-header
/data/data/####/9yubd.html-header
/data/data/####/9yv2f.html-header
/data/data/####/9ywfp.html-header
/data/data/####/9ywg1.html-header
/data/data/####/9ywow.html-header
/data/data/####/9yxdr.html-header
/data/data/####/9yxfg.html-header
/data/data/####/9yyyx.html-header
/data/data/####/9yze3.html-header
/data/data/####/9yzpq.html-header
/data/data/####/9z02d.html-header
/data/data/####/9z0ay.html-header
/data/data/####/AdTimingCrashSP.xml
/data/data/####/AppEventsLogger.persistedevents
/data/data/####/ArchiveManifest.json
/data/data/####/Cookies-journal
/data/data/####/DownloadManager.xml
/data/data/####/FirebaseAppHeartBeat.xml
/data/data/####/FirebaseAppHeartBeat.xml.bak
/data/data/####/Identify.txt
/data/data/####/PersistedInstallation.W0RFRkFVTFRd+MTo4MTc0MTc0...x.json
/data/data/####/PersistedInstallation293509901tmp
/data/data/####/SP_HOMEPAGE_NEW.xml
/data/data/####/SP_HOMEPAGE_NEW.xml.bak
/data/data/####/TwitterAdvertisingInfoPreferences.xml
/data/data/####/UnityAdsStorage-private-data.json
/data/data/####/UnityAdsStorage-public-data.json
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/__Baidu_Stat_SDK_SendRem.xml
/data/data/####/__Baidu_Stat_SDK_SendRem.xml.bak
/data/data/####/__local_ap_info_cache.json
/data/data/####/__local_last_session.json
/data/data/####/__local_stat_cache.json
/data/data/####/__send_data_1626414603904
/data/data/####/__send_data_1626414644968
/data/data/####/a3dd779f-07f3-4298-b059-208d40cf37e1.c69eb.mp3
/data/data/####/a5f45b3231e59dcc9ad8cb96864801c7fea6c7cbb33cc63....0.tmp
/data/data/####/aa63c43f3bcb60f46e1dd25c37c2027e67f261e2a88ae55....0.tmp
/data/data/####/ac155a57-555a-4593-a8b3-710a1dfe27da.497ed.mp3
/data/data/####/account.xml
/data/data/####/acd0ae91-ac36-4c44-be62-e5ccb6b0b8a0.4a82e.jpg
/data/data/####/ad_configure
/data/data/####/ad_sp_for_vb.xml
/data/data/####/adtimingDB.db
/data/data/####/adtimingDB.db-journal
/data/data/####/ae0563c1fec07df66e887de62a891583ceaf771384a0446...719c.0
/data/data/####/analytics.db (deleted)
/data/data/####/analytics.db-journal
/data/data/####/app-downloader.db-journal
/data/data/####/app_package_info_cache.xml
/data/data/####/app_package_info_cache.xml.bak
/data/data/####/appsflyer-data.xml
/data/data/####/appsflyer-data.xml.bak
/data/data/####/ascs.xml
/data/data/####/b075459c-eaa4-4c34-bb9c-748a04551713.d7343.png
/data/data/####/b2687ac4-099e-403c-a192-ff477686f4f5.2bf0b.plist
/data/data/####/b2c8ed08b32a2536b1ae8ff049dade013c69c631dbdb8c4....0.tmp
/data/data/####/b67d6c0f-6432-4d58-b830-40fff6e81025.46ebd.mp3
/data/data/####/ba3b0a8d-a8f5-4316-bca5-e189b6908c5e.7d3ac.png
/data/data/####/baidu_mtj_sdk_record.xml
/data/data/####/baidu_mtj_sdk_record.xml.bak
/data/data/####/basic_main_sp.xml
/data/data/####/basic_main_sp.xml.bak
/data/data/####/bb07fcec-4a2f-4ffa-9903-5adace3306d3.13151.png
/data/data/####/bb179713-33ae-4d21-a4ee-9f2e1ee27db5.54bc4.png
/data/data/####/bc2ebfba-9646-4d32-b5d7-a04170403ca3.65f6a.png
/data/data/####/bc5352d0-cdd8-4eb3-b0f8-6355583c0b3b.48fc6.jpg
/data/data/####/bfd438fd-b06a-479a-9445-285e9a960aa0.7f682.jpg
/data/data/####/bugly_db_-journal
/data/data/####/c00ed700-058f-4daa-ae67-67c4c60b8440.5127a.png
/data/data/####/c38887e4-b325-44a6-86dc-5fcacacf18ad.adb2c.png
/data/data/####/c3ee1d46-d191-4e00-aa8a-2184fd216510.49ce2.mp3
/data/data/####/c4776f61fa990d46422475a86fd94eb3ae350781989e482....0.tmp
/data/data/####/c557e4d4964dfe503f1b5bd625d8990d1cdc85fe1483cfe....0.tmp
/data/data/####/c63d2744-501e-47ac-b112-33137f15d650.4d805.png
/data/data/####/c6ea90cf-cf0c-41b2-9ccc-2850abf1953d.b73c9.mp3
/data/data/####/c7420389-ee17-42cd-883b-13dc65ca1ffa.379d7.png
/data/data/####/c87e8b73-b9b3-4484-b452-fd4d3ee52358.782a1.png
/data/data/####/c98271e0-3264-4556-8978-fc585253c719.e950a.json
/data/data/####/ca69186f-8254-4fef-b660-91add42d3e51.3c02c.json
/data/data/####/caa4d912-31f5-4629-b6d1-c02329abd3d8.8cff0.manifest
/data/data/####/cecdee0c-25ad-46e3-abe1-d13014507de2.1967d.jpg
/data/data/####/cfca9eab-9eb0-4ef0-ba93-8c472b9a497c.edae4.png
/data/data/####/cocos2d-js-min.7450c.js
/data/data/####/com.crashlytics.prefs.xml
/data/data/####/com.crashlytics.prefs.xml.bak
/data/data/####/com.crashlytics.sdk.android;answers;settings.xml
/data/data/####/com.facebook.internal.preferences.APP_GATEKEEPERS.xml
/data/data/####/com.facebook.internal.preferences.APP_SETTINGS.xml
/data/data/####/com.facebook.sdk.USER_SETTINGS.xml
/data/data/####/com.facebook.sdk.appEventPreferences.xml
/data/data/####/com.facebook.sdk.attributionTracking.xml
/data/data/####/com.google.android.datatransport.events-journal
/data/data/####/com.google.android.gms.appid-no-backup
/data/data/####/com.google.android.gms.appid.xml
/data/data/####/com.google.android.gms.measurement.prefs.xml
/data/data/####/com.google.android.gms.measurement.prefs.xml.bak
/data/data/####/com.google.android.gms.measurement.prefs.xml.bak (deleted)
/data/data/####/com.im.keyValueStore.aes_key_store.xml
/data/data/####/com.im.keyValueStore.aes_key_store.xml.bak
/data/data/####/com.im.keyValueStore.app_bundle_store.xml
/data/data/####/com.im.keyValueStore.batch_processing_info.xml
/data/data/####/com.im.keyValueStore.coppa_store.xml
/data/data/####/com.im.keyValueStore.sdk_version_store.xml
/data/data/####/com.im.keyValueStore.sdk_version_store.xml.bak
/data/data/####/com.im_9.0.9.db
/data/data/####/com.im_9.0.9.db-journal
/data/data/####/com.vid007.archive.dlso.json
/data/data/####/com.vid007.archive.vodso.json
/data/data/####/com.vid007.videobuddy.BETA_VALUES.xml
/data/data/####/com.vid007.videobuddy_preferences.xml
/data/data/####/com.vid007.videobuddy_preferences.xml.bak
/data/data/####/com.vid007.videobuddy_preferences.xml.bak (deleted)
/data/data/####/config.00d09.json
/data/data/####/config.21db7.json
/data/data/####/config.381e9.json
/data/data/####/config.4a2ea.json
/data/data/####/config.9d6ab.json
/data/data/####/config.a6b80.json
/data/data/####/config.a8ffb.json
/data/data/####/config.adeb3.json
/data/data/####/config.b51b5.json
/data/data/####/config.bf3b8.json
/data/data/####/config.d6017.json
/data/data/####/config.fbb78.json
/data/data/####/crash_marker
/data/data/####/crashrecord.xml
/data/data/####/cv.xml
/data/data/####/d0a82d39-bede-46c4-b698-c81ff0dedfff.841f5.png
/data/data/####/d2ee9188-8770-411c-98cb-80097456b076.15a77.png
/data/data/####/d35f1190-49b0-48ea-823e-46eaae06260a.648ed.png
/data/data/####/d3c70804-3137-4878-a02c-37fab56dcd94.e3c15.json
/data/data/####/d6d3ca85-4681-47c1-b5dd-d036a9d39ea2.d55c2.png
/data/data/####/d6facc8f-bd72-47d0-8b28-3de13b1aef3b.ea569.manifest
/data/data/####/d71a6f813813153e99857d9b650c1dcedda3470b5439fde....0.tmp
/data/data/####/d7cfde0a-96a1-4e5f-a1b8-45d96fdf87fd.31beb.png
/data/data/####/d9dc8a59-b795-4811-bfb6-cc9e9331df40.eee4a.mp3
/data/data/####/da1d6279d62ebb3b12c8ea934f89361c122dd42ad04f294....0.tmp
/data/data/####/dc349841-7341-4107-a584-de4e7a553c69.0aa18.mp3
/data/data/####/ddb9e0f3-0940-4301-b37e-c57ce1238167.fccbe.pem
/data/data/####/de59e908-7d01-4f96-ba0d-b7fb2bfc4762.9ff38.png
/data/data/####/default_global_config1.json
/data/data/####/default_me_entry_config.json
/data/data/####/downloading_bt_play_info.xml
/data/data/####/downloadlib_update_setting.xml
/data/data/####/downloadlib_update_setting.xml.bak
/data/data/####/dsbridge.7f039.js
/data/data/####/dsbridge.ca40c.js
/data/data/####/e093b382-94ca-4850-a940-5ef0752978c3.a782a.mp3
/data/data/####/e0feb36c-bb39-4226-b46c-dd00f0a96e99.cdaf1.jpg
/data/data/####/e1ce8fb8-8205-4424-a286-3f9b1f063bac.a230a.png
/data/data/####/e2c2fde2-fe6d-407e-ae4c-17100f4a450a.a0ca3.png
/data/data/####/e3249747-fbcf-4991-91b9-8cf61b30d7f8.3976d.png
/data/data/####/e63eb009-b359-4cdd-866e-8718ec7bcbeb.6988a.manifest
/data/data/####/e6643f4e-3b49-4676-9ce0-e6bd3e3f575d.e2b29.png
/data/data/####/e761236a-d130-4951-94ea-db9077ba3285.04575.mp3
/data/data/####/e7869ae2-1fae-4ccf-984e-cfb009c5aba8.d8850.png
/data/data/####/e7fecb3f-52af-4512-a327-5a1b128def48.673bd.mp3
/data/data/####/ebeaa627-41de-4df6-8457-1aaf9abb6743.b92be.png
/data/data/####/ec49d881-73fa-4417-a044-f67b0d5973cc.3ee4d.mp3
/data/data/####/eca5d2f2-8ef6-41c2-bbe6-f9c79d09c432.380a4.json
/data/data/####/ed118042-620f-44c5-87ac-ad2b6903c4dc.6ae2b.png
/data/data/####/events2-journal
/data/data/####/exc_log.xml
/data/data/####/f1113fc0-b1ca-4f65-bc6b-7cb9d908cc2f.cc498.json
/data/data/####/f2b65244-227a-4fd6-ae00-f5fc7e844724.bf915.png
/data/data/####/f474ce74-a2c1-4463-adb3-083a508ccaa5.3ebe0.json
/data/data/####/f63c2f9a-7761-47cc-a819-79108787bc20.75496.png
/data/data/####/f68d6689-4413-4813-95fa-4fd45d85d440.fe51c.png
/data/data/####/f821e264-ef52-4a72-9463-19c080440c27.c7d3a.png
/data/data/####/favicon.8de18.ico
/data/data/####/fe16e791-50bc-4cfd-a582-2ab15a66accb.bca1c.png
/data/data/####/fe60c853-9c71-4cf5-a353-e64be41de10e.93a89.jpeg
/data/data/####/fea3f3b63f70adeaf4b57d5ccd9140a079ff4cbb48c2f1b...cd78.0
/data/data/####/fiverocks.xml
/data/data/####/follow_manger.xml
/data/data/####/folow_tabs
/data/data/####/game_launch.825ca.js
/data/data/####/game_settings.d472d.js
/data/data/####/generatefid.lock
/data/data/####/google_app_measurement_local.db
/data/data/####/google_app_measurement_local.db-journal
/data/data/####/home_page_feed_page_json_data
/data/data/####/home_tab_preferences.xml
/data/data/####/home_tab_preferences.xml.bak
/data/data/####/homepage_banner_response_6126952dfb35fe8b741998a749116587
/data/data/####/homepage_response_6126952dfb35fe8b741998a749116587
/data/data/####/homepage_response_67acc31afca48a18c2cadc61bc4e68e8
/data/data/####/https_m-videobuddy.ssl.n0909.com_0.localstorage-journal
/data/data/####/hubble_sdk_setting.xml
/data/data/####/inVbMain.11f37.js
/data/data/####/index
/data/data/####/index-copy-to-clipboard.185bd.js
/data/data/####/index-vbdetail.html
/data/data/####/index.00d09.js
/data/data/####/index.21db7.js
/data/data/####/index.381e9.js
/data/data/####/index.4a2ea.js
/data/data/####/index.9d6ab.js
/data/data/####/index.a6b80.js
/data/data/####/index.a8ffb.js
/data/data/####/index.adeb3.js
/data/data/####/index.b51b5.js
/data/data/####/index.bf3b8.js
/data/data/####/index.d6017.js
/data/data/####/index.fbb78.js
/data/data/####/index.html
/data/data/####/indicator_d
/data/data/####/indicator_d-c
/data/data/####/indicator_p
/data/data/####/indicator_p-c
/data/data/####/initialization_marker
/data/data/####/install_archive.txt
/data/data/####/ixadmix.xml
/data/data/####/journal
/data/data/####/libaplayer_android_1.2.2.351.so
/data/data/####/libcuid.so
/data/data/####/libxl_stat.so
/data/data/####/libxl_thunder_sdk.so
/data/data/####/loading-icon.21135.png
/data/data/####/loading.e568e.png
/data/data/####/local_crash_lock
/data/data/####/lock_screen.json
/data/data/####/lock_screen.xml
/data/data/####/main.c1779.js
/data/data/####/manifest-so.md5
/data/data/####/map_record.txt
/data/data/####/me_grid_entry_config.json
/data/data/####/metrics_guid
/data/data/####/mintegral.msdk.db-journal
/data/data/####/mintegral.xml
/data/data/####/mintegral.xml.bak (deleted)
/data/data/####/native_record_lock
/data/data/####/native_record_lock (deleted)
/data/data/####/newTreasure.html
/data/data/####/newTreasure.html-header
/data/data/####/new_niudanji.html
/data/data/####/new_niudanji.html (deleted)
/data/data/####/new_niudanji.html-header
/data/data/####/new_niudanji.html-header (deleted)
/data/data/####/out_app_ad.xml
/data/data/####/permanent_notification.xml
/data/data/####/permission_report.xml
/data/data/####/proc_auxv
/data/data/####/reg_record.txt
/data/data/####/rqd_record.eup
/data/data/####/sa_1e6db9a1-70ca-4ab9-bf45-3d12897b1ba8_1626414618322.tap
/data/data/####/sa_529aad42-432f-4e42-a7bf-788e63f1676b_1626414611921.tap
/data/data/####/sa_657d62f8-aa93-46d3-9dd7-01ed576dccb2_1626414653519.tap
/data/data/####/sa_bb0bb42e-abb9-47b8-9726-5b8fdbb20486_1626414607552.tap
/data/data/####/sa_d0514ac0-d83d-4f0c-8b6f-35a37daa66d1_1626414674616.tap
/data/data/####/search_v_coin.xml
/data/data/####/security_info
/data/data/####/seq_id
/data/data/####/session_analytics.tap
/data/data/####/session_analytics.tap (deleted)
/data/data/####/session_analytics.tap.tmp
/data/data/####/setting.cfg
/data/data/####/settings.00243.js
/data/data/####/settings.xml
/data/data/####/settings.xml.bak
/data/data/####/share_date.xml
/data/data/####/share_date.xml.bak
/data/data/####/sp_ad_configure.xml
/data/data/####/sp_ad_configure.xml.bak
/data/data/####/sp_push.xml
/data/data/####/splash.85cfd.png
/data/data/####/splash.d6f1b.gif
/data/data/####/statstorage_v5.xml
/data/data/####/style-desktop.81ede.css
/data/data/####/style-mobile.b1d7c.css
/data/data/####/sudoku.html
/data/data/####/sudoku.html-header
/data/data/####/sudoku_2.html
/data/data/####/sudoku_2.html-header
/data/data/####/temp-index
/data/data/####/the-real-index
/data/data/####/thunder_tasks.db-journal
/data/data/####/time_call_show_sp.xml
/data/data/####/tjcPrefrences.xml
/data/data/####/tjcPrefrences.xml.bak
/data/data/####/tomb.zip (deleted)
/data/data/####/tomb_1626414630523.txt
/data/data/####/tp-game-environments.a9d8c.js
/data/data/####/tp-game-package-info.json
/data/data/####/tp-game-settings.9d9f5.js
/data/data/####/tpboss.platform.vb1.json
/data/data/####/tqwj_mh.xml
/data/data/####/tqwj_res.xml
/data/data/####/unityads-installinfo.xml
/data/data/####/v_coin_count_down.xml
/data/data/####/v_coin_sign_in.xml
/data/data/####/v_coin_sign_in.xml.bak (deleted)
/data/data/####/xl-acc-device-id.xml
/data/media/####/-604496702
/data/media/####/.0c30da06-5133-42e1-8fde-2f8caa4ed42b.txt
/data/media/####/.90b7918b-bcfc-476a-8eb2-689104de10c8.txt
/data/media/####/.DS_Store
/data/media/####/.nomedia
/data/media/####/003.gif
/data/media/####/0ff6999695ae59e5b99ce91ad75a1193.png
/data/media/####/1330dd8f7c1d0ba8dbd7a0c1b965653f.png
/data/media/####/1393253046.tmp
/data/media/####/1507968075.tmp
/data/media/####/1c3cc7328fa21c892253fa07acdd3794.zip
/data/media/####/23960b284d8ae7eb73bde0f1dd9e889d.png
/data/media/####/315aea1b405f01a8d4eef3c4a03f9569.zip
/data/media/####/3388639e4f330a650e2bb73a7e26ccae.html
/data/media/####/33fe8b804ec4a325d3734d8bb7e93edd.zip
/data/media/####/374efab0168316634a3f684550fcac0b.jpg
/data/media/####/3921c9c3717d8349154fe5bd506fd58a.jpg
/data/media/####/3f3228cb0d28c9cce1b994afc2ba5fe4.vbdl
/data/media/####/3like.v7.html
/data/media/####/40c0608749e0823b5f9f37a40c501fff.jpg
/data/media/####/51fd2a8be82a4caebb1c71c0e41940be.jpg
/data/media/####/5830e32315279947f6b8fe8b330692b2.jpg
/data/media/####/5e2df0d7758fa9a6349a4f482c361a45.jpg
/data/media/####/5f61a0323a1d9a8b99822f02fe3a1c2e.jpg
/data/media/####/60d499397832cb9615dc8ec3e11b5598.png
/data/media/####/635c4db0547b5e8f87bc7b8378f8bd90.png
/data/media/####/66691078.tmp
/data/media/####/67fa3949b41ddbfb90108bf6e33aeee9.jpg
/data/media/####/6b8ab6d1615073b2354cfcb7181a836c.zip
/data/media/####/6d4c7b066a696c1eac359cdd07dbdd83.jpg
/data/media/####/70ac7ede56289f1bab786d1dc5574ee1.jpg
/data/media/####/71412639ecffbcaae693c92a824aa16d.jpg
/data/media/####/7a8c49ba189b0cedb48bcc2bf444d742.png
/data/media/####/7cae13591700e63bc685af988a3cea0d.vbdl
/data/media/####/7dfed86c042b0f5c8d3ba0dffbd646fa.jpg
/data/media/####/7fdac1d4490ca0ab8301aaf57af5d272.jpg
/data/media/####/825d6d4e8b46ae46848a498459fbd484.png
/data/media/####/87f3a32cb7b4d777bdbfe77e10429b4a.png
/data/media/####/8a4ecf2029755d9e5fd99352a1ef98c2.jpg
/data/media/####/8d6bfefd8b2e7bcfa163101e9eb6f135.png
/data/media/####/8e751c5ed5ecf96366dde83ab1963f5d.jpg
/data/media/####/DynamicLoader.js
/data/media/####/EC_TUIA_v1.js
/data/media/####/UnityAdsCache-4f90e16d6f99fb1cb0f0339dea30f855...8.webm
/data/media/####/UnityAdsCache-cce484d236b034bb7dd3462d916c71c6...f5.jpg
/data/media/####/UnityAdsCache-e7980bb91dc9b06ead5ed26179f49d6e...1d.jpg
/data/media/####/UnityAdsTest.txt
/data/media/####/UnityAdsTest.txt (deleted)
/data/media/####/UnityAdsWebApp.html
/data/media/####/UpgradeInfo
/data/media/####/VideoBuddy_140032.apk
/data/media/####/VideoBuddy_140032.temp
/data/media/####/a5bad9b5cdec46f2b75aee985924e213.jpg
/data/media/####/a63e81b71e264caf15e93058570edc48.vbdl
/data/media/####/a982ac8d45840633dd151df78246e208.vbdl
/data/media/####/ab90295219044391f86b73e1a3747b35.jpeg
/data/media/####/afd1707ad76c449f9c1ce4de75dac80e.zip
/data/media/####/b8303a686f5ce4fd737a8d3d059693de.jpg
/data/media/####/b89087d5c651a17f99c5e5074861a3a0
/data/media/####/btn_close.png
/data/media/####/c4d5fe4a105d90259fe6ac9b71b3c860.jpg
/data/media/####/c81a0110e55427c3b71ea80dfcfbb551.jpg
/data/media/####/cd9360532b3c62e1a0e84019952d23e0
/data/media/####/cf1d024e55e898631fc7e78a55bedb9c.jpg
/data/media/####/circle.png
/data/media/####/close_v2.png
/data/media/####/com.vid007.archive.dlso-15000-7f52dec70a7f7dcc...6b.zip
/data/media/####/com.vid007.archive.vodso-18000-96ad1acddd536d8...04.zip
/data/media/####/common.min.js
/data/media/####/confirmDialog.html
/data/media/####/confirmDialog.js
/data/media/####/d170636d66264fc5eedb5a19bc28835c.jpg
/data/media/####/d34ecfba52a259a9edecb9d340afa6e8.png
/data/media/####/d4a05405cb3a2878f748d415184f0e25.jpg
/data/media/####/d5476fc101653909f6f989da35a2d1c5.jpg
/data/media/####/da5245c4c7a44cb88638a64f6d6ef368.jpg
/data/media/####/downloads.db
/data/media/####/downloads.db-journal
/data/media/####/downloads_extra.db
/data/media/####/downloads_extra.db-journal
/data/media/####/e32213ef1c5b145e958c60d1260cf4e4.jpg
/data/media/####/e34775cfc7de49c5490ad7392ed0cbc7.vbdl
/data/media/####/e98f1da021034b236be9aaf9677d7b55.jpeg
/data/media/####/endv4.css
/data/media/####/endv4.css.map
/data/media/####/endv4.js
/data/media/####/f084100e574d03acc05c74e4926a03b2.jpg
/data/media/####/f0f4551d79a5b5b64b2c15f161b8a3f5.jpg
/data/media/####/f53e81d2a8f55668f42d171ccb668dce.vbdl
/data/media/####/f9afdc641f0d4841e467feca09a0b738.jpg
/data/media/####/gift-love.gif
/data/media/####/hwdevice.txt
/data/media/####/icon-download.png
/data/media/####/icon-gdt.png
/data/media/####/icon-mtg.png
/data/media/####/icon-privacy-black.png
/data/media/####/icon-right-arrow.png
/data/media/####/icon_close.png
/data/media/####/icon_mtg.png
/data/media/####/loading.gif
/data/media/####/logo-black.png
/data/media/####/logo-gray.png
/data/media/####/m.bundle.js
/data/media/####/m_en_WS_ZvdoMg6dm_an_ty.html
/data/media/####/mini.html
/data/media/####/more_offer_v4.js
/data/media/####/mtg_offline_package.js
/data/media/####/mw_config.js
/data/media/####/om_js_content.txt
/data/media/####/package_loading.js
/data/media/####/permanent_notification.json
/data/media/####/privacy-shadow.png
/data/media/####/privacy.png
/data/media/####/rv_bg_0.jpg
/data/media/####/rv_bg_1.jpg
/data/media/####/rv_bg_2.jpg
/data/media/####/sound_off_v2.png
/data/media/####/sound_open_v2.png
/data/media/####/star-gray.png
/data/media/####/star-yellow.png
/data/media/####/star.png
/data/media/####/star1.png
/data/media/####/subscripts.png
/data/media/####/tpboss.platform.vb1-42000-3020000-vbrelease-f3...63.zip
/data/media/####/tpl4.html
/data/media/####/tpl4.js
/data/media/####/user-gray.png
/data/media/####/webAudioCheck.js
/data/misc/####/primary.prof

Miscellaneous:

Executes the following shell scripts:

cat /sys/class/net/wlan0/address
df
getprop
getprop ro.build.display.id
getprop ro.build.version.emui
getprop ro.build.version.opporom
getprop ro.miui.ui.version.name
getprop ro.smartisan.version
getprop ro.vivo.os.version
logcat -d -v threadtime -s dalvikvm art zygote zygote64 OpenGLRenderer Bugly-libunwind:S
logcat -t 1000 -v threadtime Bugly-libunwind:S
ls -l /system/bin/su
ps
sh

Uses the following algorithms to encrypt data:

AES
AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-PKCS5Padding
AES-GCM-NoPadding
RSA-ECB-PKCS1Padding
RSA-ECB-nopadding

Uses the following algorithms to decrypt data:

AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-NoPadding
AES-ECB-PKCS5Padding
AES-GCM-NoPadding

Accesses the ITelephony private interface.

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Gets information about installed apps.

Adds tasks to the system scheduler.

Displays its own windows over windows of other apps.

Intercepts notifications.

Requests the system alert window permission.

Technologies

Terminology

Training and education

Myths

Technical information

Curing recommendations

Free trial