Защити созданное

Другие наши ресурсы

  • free.drweb.kz — бесплатные утилиты, плагины, информеры
  • av-desk.com — интернет-сервис для поставщиков услуг Dr.Web AV-Desk
  • curenet.drweb.kz — сетевая лечащая утилита Dr.Web CureNet!
Закрыть

Библиотека
Моя библиотека

Чтобы добавить ресурс в библиотеку, войдите в аккаунт.

+ Добавить в библиотеку

Ресурсов: -

Последний: -

Моя библиотека

Поиск
Поиск

Поиск

Поддержка
Круглосуточная поддержка | Правила обращения

Напишите

Запрос через форму

Позвоните

Глобальная поддержка:
+7 (495) 789-45-86

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -
Создать новый запрос Частые вопросы

Позвоните

Глобальная поддержка:
+7 (495) 789-45-86

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

KZ

RU CN DE EN ES FR IT JP KZ UZ PL BY
Закрыть
Сервисы
Сканеры
Dr.Web vxCube
Демо
Экспертиза ВКИ
Вирусная библиотека
База знаний

Технологии

Термины

Обучение и просвещение

Мифы

Новости

Android.DownLoader.4733

Добавлен в вирусную базу Dr.Web: 2019-10-26

Описание добавлено:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.DownLoader.906.origin
  • Android.Triada.482.origin
  • Android.Triada.483.origin
Downloads the following detected threats from the Internet:
  • Android.DownLoader.363.origin
  • Android.DownLoader.906.origin
  • Android.DownLoader.909.origin
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(HTTP/1.1) v.adma####.com.cn:80
  • TCP(HTTP/1.1) c.c####.com:80
  • TCP(HTTP/1.1) 1####.131.85.27:99
  • TCP(HTTP/1.1) gd.a.s####.com:80
  • TCP(HTTP/1.1) res####.a####.top:80
  • TCP(HTTP/1.1) api.97####.com:8280
  • TCP(HTTP/1.1) dup.baidust####.com:80
  • TCP(HTTP/1.1) 14.17.1####.130:80
  • TCP(HTTP/1.1) adv.patrick####.com.cn:80
  • TCP(HTTP/1.1) pos.b####.com:80
  • TCP(HTTP/1.1) 1.abc1####.net:80
  • TCP(HTTP/1.1) d.bjsd####.com:80
  • TCP(HTTP/1.1) ym####.89####.com:34656
  • TCP(HTTP/1.1) api.free####.xin:80
  • TCP(HTTP/1.1) a####.d####.com:80
  • TCP(HTTP/1.1) cu.c####.cn:80
  • TCP(HTTP/1.1) tfs.alipayo####.com:80
  • TCP(HTTP/1.1) cdn.clou####.xyz:80
  • TCP(HTTP/1.1) d####.a####.com:8080
  • TCP(HTTP/1.1) pco####.ta####.com:80
  • TCP(HTTP/1.1) 614.a####.top:80
  • TCP(HTTP/1.1) ia.c####.cn:80
  • TCP(HTTP/1.1) s.zhito####.com:808
  • TCP(HTTP/1.1) z####.heyc####.net:80
  • TCP(HTTP/1.1) j####.o####.com:13967
  • TCP(HTTP/1.1) www.h####.com:8092
  • TCP(HTTP/1.1) a####.a####.com:8280
  • TCP(HTTP/1.1) api.yunco####.com:80
  • TCP(HTTP/1.1) l.bjsd####.com:80
  • TCP(HTTP/1.1) hd.a####.com:80
  • TCP(HTTP/1.1) gm.mm####.com:80
  • TCP(HTTP/1.1) y####.b####.com:12583
  • TCP(HTTP/1.1) api.lubang####.com:80
  • TCP(HTTP/1.1) z.c####.com:80
  • TCP(HTTP/1.1) b####.serving####.com:80
  • TCP(HTTP/1.1) api####.tiantia####.com:80
  • TCP(HTTP/1.1) d####.dd7####.com:80
  • TCP(HTTP/1.1) a3####.fj####.cn:80
  • TCP(HTTP/1.1) api.s####.xin:80
  • TCP(HTTP/1.1) 47.1####.59.53:900
  • TCP(HTTP/1.1) s.zhito####.com:807
  • TCP(HTTP/1.1) p####.sho####.com:80
  • TCP(HTTP/1.1) dex.oss-ap-####.aliy####.com:80
  • TCP(HTTP/1.1) 1####.114.206.247:8000
  • TCP(HTTP/1.1) php.sho####.com:80
  • TCP(HTTP/1.1) i####.j####.com:80
  • TCP(HTTP/1.1) 1####.215.187.132:80
  • TCP(HTTP/1.1) gt####.gim####.com:80
  • TCP(HTTP/1.1) d2.y####.com.####.com:80
  • TCP(HTTP/1.1) q####.0####.com:13967
  • TCP(HTTP/1.1) e4####.0r####.com:10293
  • TCP(TLS/1.0) jrtd####.jd.com:443
  • TCP(TLS/1.0) o####.ssd.i####.####.com:443
  • TCP(TLS/1.0) s.do####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) gm.mm####.com:443
  • TCP(TLS/1.0) pos.b####.com:443
  • TCP(TLS/1.0) a####.d####.com:443
  • TCP(TLS/1.0) z.c####.com:443
  • TCP(TLS/1.0) w####.jd.com:443
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.0) wl.jd.com.####.com:443
  • TCP(TLS/1.0) ur####.jd.com:443
  • TCP(TLS/1.0) p####.m.jd.com:443
  • TCP(TLS/1.0) m####.m.jd.com:443
  • TCP(TLS/1.0) api.g####.vip:443
  • TCP(TLS/1.0) ti####.b####.com:443
  • TCP(TLS/1.0) wtc.d####.com:443
  • TCP(TLS/1.0) dualsta####.wagbr####.ali####.####.com:443
  • TCP(TLS/1.0) it####.a####.com.####.net:443
  • TCP(TLS/1.0) 1####.217.168.238:443
  • TCP(TLS/1.0) ip.goq####.com:443
  • TCP(TLS/1.0) x5.g####.tv:16006
  • TCP(TLS/1.0) i####.j####.com:443
  • TCP(TLS/1.0) c.c####.com:443
  • TCP(TLS/1.0) hm.b####.com:443
  • TCP(TLS/1.0) sw3.d####.com:443
  • TCP(TLS/1.0) 1####.217.17.42:443
  • TCP(TLS/1.0) dup.baidust####.com:443
  • TCP(TLS/1.0) u.j####.com:443
  • TCP(TLS/1.0) www.h####.com:443
  • TCP(TLS/1.0) 5.d.g####.tv:16006
  • TCP(TLS/1.0) i####.d####.com:443
  • TCP(TLS/1.2) 1####.217.168.238:443
  • TCP(TLS/1.2) 1####.217.168.202:443
  • TCP(TLS/1.2) 1####.217.20.106:443
DNS requests:
  • 1.abc1####.net
  • 5.d.g####.tv
  • 614.a####.top
  • a####.a####.com
  • a####.a####.com
  • a####.d####.com
  • a####.m.jd.com
  • a.bjsd####.com
  • a3####.fj####.cn
  • adv-u####.t####.u####.net
  • adv.99y####.com
  • adv.google####.com.cn
  • adv.patrick####.com.cn
  • and####.google####.com
  • api####.tiantia####.com
  • api.23####.com
  • api.93####.com
  • api.97####.com
  • api.free####.xin
  • api.g####.vip
  • api.lubang####.com
  • api.s####.xin
  • api.yunco####.com
  • b####.jd.com
  • b####.serving####.com
  • c####.mm####.com
  • c.c####.com
  • cdn.clou####.xyz
  • cu.c####.cn
  • d####.a####.com
  • d####.dd7####.com
  • d.bjsd####.com
  • d2.y####.com
  • dex.oss-ap-####.aliy####.com
  • dup.baidust####.com
  • e4####.0r####.com
  • filt####.a####.top
  • gt####.gim####.com
  • h5s####.m.jd.com
  • hm.b####.com
  • i####.360bu####.com
  • i####.d####.com
  • ia.c####.cn
  • img.d####.com
  • instant####.google####.com
  • ip.goq####.com
  • ip.zhito####.com
  • it####.a####.com
  • j####.o####.com
  • jrtd####.jd.com
  • l.bjsd####.com
  • m####.go####.com
  • m####.m.jd.com
  • m.360bu####.com
  • o6####.ns####.cn
  • p####.m.jd.com
  • p####.sho####.com
  • pco####.c####.com
  • php.sho####.com
  • plb####.u####.com
  • pos.b####.com
  • pp.m####.com
  • pv.s####.com
  • q####.0####.com
  • res####.a####.top
  • s.do####.com
  • s.zhito####.com
  • s19.c####.com
  • s4.c####.com
  • s5.c####.com
  • sn####.kv####.com
  • sto####.360bu####.com
  • sw3.d####.com
  • tfs.alipayo####.com
  • ti####.b####.com
  • u####.a####.top
  • u####.u####.com
  • u.j####.com
  • ur####.jd.com
  • v.adma####.com.cn
  • v.bjsd####.com
  • v1.c####.com
  • w####.jd.com
  • w####.jd.com
  • wq.360bu####.com
  • wtc.d####.com
  • www.google-####.com
  • www.h####.com
  • x5.g####.tv
  • y####.b####.com
  • ym####.89####.com
  • z####.heyc####.net
  • z12.c####.com
  • z3.c####.com
  • z6.c####.com
  • z8.c####.com
  • z9.c####.com
  • zc####.mj####.cn
HTTP GET requests:
  • 1.abc1####.net/favicon.ico
  • 1.abc1####.net/t/404.html
  • 614.a####.top/controlup614.json
  • 614.a####.top/new_channl_614.json
  • a####.d####.com/rewrite?fromid=####
  • a3####.fj####.cn/c/asovnrud.zip
  • a3####.fj####.cn/tp/xzxhbtzl.png
  • a3####.fj####.cn/two/qwertyuior.zip
  • a3####.fj####.cn/u/qwertyuioa.jar
  • b####.serving####.com/serving/adServer.bs?cn=####&c=####&mc=####&pli=###...
  • c.c####.com/core.php?web_id=####&t=####
  • c.c####.com/stat.php?id=####
  • cdn.clou####.xyz/jar/365admob.jar
  • cdn.clou####.xyz/jar/ad367.jar
  • cdn.clou####.xyz/jar/adm0816.jar
  • cdn.clou####.xyz/jar/miqiu0925.jar
  • cdn.clou####.xyz/jar/olo0613.jar
  • cdn.clou####.xyz/jar/olochaping0513.jar
  • cdn.clou####.xyz/jar/san404_0924.jar
  • cdn.clou####.xyz/jar/sm1023.jar
  • cdn.clou####.xyz/jar/wals0923.jar
  • cu.c####.cn/v1.0/pages?ao=####&pid=####&aid=####&keyword=####&model=####...
  • d####.a####.com:8080/DongFengSys/bitauto_pv1.jsp?url=####&canshu=####&re...
  • d####.dd7####.com//upload/sdk2/cjmob20190726.jar
  • d####.dd7####.com//upload/sdk2/modex20191025.jar
  • d####.dd7####.com//upload/sdk2/olo20191010.jar
  • d####.dd7####.com//upload/sdk2/sdk330dex20191009.jar
  • d####.dd7####.com/upload/plog/mfgz.jar
  • d####.dd7####.com/upload/sdk2/JAR31dex20190530.jar
  • d####.dd7####.com/upload/sdk2/rq02dex20190829.jar
  • d####.dd7####.com/upload/sdk3/infodex20190809.jar
  • d####.dd7####.com/upload/sdk3/kzd20190809.jar
  • d2.y####.com.####.com/sg-chuanyang/67dc278a-fe49-418a-bc7e-93acfdac6204....
  • d2.y####.com.####.com/sg-chuanyang/d55be81f-2606-4d09-a9f5-9497823be077....
  • dex.oss-ap-####.aliy####.com/dex/20190409/testlhyy.jar?81####
  • dex.oss-ap-####.aliy####.com/dex/20190708/testkd.jar?62####
  • dup.baidust####.com/js/dm.js
  • gd.a.s####.com/cityjson?ie=####
  • gm.mm####.com/9.gif?abc=####&rnd=####
  • gt####.gim####.com/s?sy=####&ax=####&ch=####&p=####&pl=####&c=####&or=##...
  • hd.a####.com/android/adv/qsz/advsdk/release/advsdk-release.enc
  • i####.j####.com/babel/jfs/t1/54724/10/13930/6599/5dad1d66E836ff5cf/5aee8...
  • i####.j####.com/babel/jfs/t1/58450/6/13884/7550/5dad1d6bE5b11a2d1/05ba38...
  • i####.j####.com/babel/jfs/t1/84583/2/14011/6370/5dad1d70E4a2e8c29/072508...
  • i####.j####.com/babel/jfs/t1/98521/24/442/6062/5dad1d73E52c58372/de02c25...
  • ia.c####.cn/sy17/pc2756/mt102886778/ip95.211.190.199/ti1572047180/dv8661...
  • ia.c####.cn/sy17/pc2756/mt102886792/ip95.211.190.199/ti1572047180/dv8661...
  • pco####.ta####.com/app.gif?&cna=####
  • pos.b####.com/bfp/snippetcacher.php?dpv=####&di=####
  • pos.b####.com/uclm?conwid=####&conhei=####&rtbid=####&rdid=####&dc=####&...
  • pos.b####.com/uclm?psi=####&di=####&dri=####&dis=####&dai=####&ps=####&e...
  • res####.a####.top/LHYY.png
  • res####.a####.top/filter_control_614.json
  • res####.a####.top/sdk15.png
  • res####.a####.top/sdk18.png
  • res####.a####.top/sdk21.png
  • res####.a####.top/sdk23_1.png
  • res####.a####.top/sdk24.png
  • res####.a####.top/sdk5_2.png
  • res####.a####.top/sdk6_15.png
  • res####.a####.top/sdk9.png
  • s.zhito####.com:807/528/30.html?2####
  • s.zhito####.com:807/528/jd0622.html
  • s.zhito####.com:807/528/wang/yiche450/430.html
  • s.zhito####.com:808/0622/index.html
  • s.zhito####.com:808/0622/yrc_001mobile.js
  • s.zhito####.com:808/716/sw.html
  • s.zhito####.com:808/favicon.ico
  • tfs.alipayo####.com/L1/71/100/and/alipay_2088621115427102_55.apk
  • v.adma####.com.cn/i/a133878,b3751583,c151,i0,m202,8a2,8b1,0iPUB_AO201909...
  • v.adma####.com.cn/i/a133878,b3751584,c151,i0,m202,8a2,8b1,0iPUB_AO201909...
  • www.h####.com:8092/c.php?id=####
  • www.h####.com:8092/favicon.ico
  • z.c####.com/stat.htm?id=####&cnzz_eid=####
  • z.c####.com/stat.htm?id=####&r=####&lg=####&ntime=####&cnzz_eid=####&sho...
HTTP POST requests:
  • a####.a####.com:8280/cpd/data
  • adv.patrick####.com.cn/adv/dayActive
  • adv.patrick####.com.cn/adv/getTask
  • adv.patrick####.com.cn/adv/pluginFeedback
  • adv.patrick####.com.cn/adv/pluginReq
  • api####.tiantia####.com/ads
  • api.97####.com:8280/ad/data
  • api.97####.com:8280/ad/data/wup
  • api.97####.com:8280/core/hb
  • api.97####.com:8280/core/info
  • api.97####.com:8280/core/report
  • api.free####.xin/log/if0
  • api.free####.xin/log/p02
  • api.lubang####.com/domain.php
  • api.lubang####.com/srp.php
  • api.s####.xin/log/if0
  • api.yunco####.com/service/rest
  • d.bjsd####.com/index.php?r=####
  • e4####.0r####.com:10293/widlth/
  • j####.o####.com:13967/d0oer/
  • j####.o####.com:13967/nheae/
  • l.bjsd####.com/index.php?r=####
  • p####.sho####.com/index.php?r=####
  • php.sho####.com/index.php?r=####
  • q####.0####.com:13967/x5qn0/
  • y####.b####.com:12583/r2bfp/
  • ym####.89####.com:34656/aowbg/
  • ym####.89####.com:34656/ixowf/
  • ym####.89####.com:34656/ntmjv/
  • ym####.89####.com:34656/qdkle/
  • ym####.89####.com:34656/rqiea/
  • z####.heyc####.net/getlist
  • z####.heyc####.net/xlogin
File system changes:
Creates the following files:
  • /data/data/####/.DEVICES
  • /data/data/####/.__mob_ad_data.xml
  • /data/data/####/.droidPrefCommon.xml
  • /data/data/####/.droidPrefCommon.xml.bak
  • /data/data/####/.haxu
  • /data/data/####/.imprint
  • /data/data/####/.qckx
  • /data/data/####/.usdis
  • /data/data/####/032ae719ffba63f8_0
  • /data/data/####/032ae719ffba63f8_1
  • /data/data/####/0434138c9a95c909_0 (deleted)
  • /data/data/####/04ea8b152a4f4cfc_0
  • /data/data/####/06227b4680e4024f_0
  • /data/data/####/07685157761e9578_0
  • /data/data/####/086059d420279bdd_0
  • /data/data/####/086f30fa2db0f046_0
  • /data/data/####/086f30fa2db0f046_1
  • /data/data/####/087fccd09717e2fa_0
  • /data/data/####/08b440cfda7d273b_0
  • /data/data/####/0EE9BC6365C88E5D5786D355D7363ED4.temp
  • /data/data/####/0a5b42032bf56e4c_0
  • /data/data/####/0b7a64ad718ef582_0
  • /data/data/####/0e9b92484d89b2f6_0
  • /data/data/####/0ec5d0c036cbf3ea_0
  • /data/data/####/0edaf24e50da3ee4_0
  • /data/data/####/0ff7f1c80cbf417c064de25d33615050.db
  • /data/data/####/13a17bfa8cc4673d_0
  • /data/data/####/15.dex
  • /data/data/####/15.dex.flock (deleted)
  • /data/data/####/15.jar
  • /data/data/####/155f34845f137135_0
  • /data/data/####/16f9bc34f62e552c_0
  • /data/data/####/17e6bcc783d81422_0
  • /data/data/####/17ebe76178a6d66e_0
  • /data/data/####/18.dex
  • /data/data/####/18.dex.flock (deleted)
  • /data/data/####/18.jar
  • /data/data/####/18e93c2b3ffdc7a0_0
  • /data/data/####/1a20be47f3944083_0
  • /data/data/####/1c41f9d59a936fd0_0
  • /data/data/####/1c41f9d59a936fd0_1
  • /data/data/####/1db120221b3bd39d_0
  • /data/data/####/1deed7936f7b7aa8_0
  • /data/data/####/1e2562b977b1bc8c_0
  • /data/data/####/1e2562b977b1bc8c_1
  • /data/data/####/1e996837ebbaf84d_0
  • /data/data/####/1e996837ebbaf84d_1
  • /data/data/####/1e99c1536694963f_0
  • /data/data/####/1feaee0f17c2dac7_0
  • /data/data/####/1s.dex
  • /data/data/####/1s.dex.flock (deleted)
  • /data/data/####/1s.jar
  • /data/data/####/21.dex
  • /data/data/####/21.dex.flock (deleted)
  • /data/data/####/21.jar
  • /data/data/####/2104c79e809e0e75_0
  • /data/data/####/23_1.dex
  • /data/data/####/23_1.dex.flock (deleted)
  • /data/data/####/23_1.jar
  • /data/data/####/24.dex
  • /data/data/####/24.dex.flock (deleted)
  • /data/data/####/24.jar
  • /data/data/####/2401391c20f43864_0
  • /data/data/####/2401391c20f43864_1
  • /data/data/####/2614e23a7ee07e96_0
  • /data/data/####/26a30d33508fec2d_0
  • /data/data/####/26b5a2082a41d99c_0
  • /data/data/####/2793d92e875dc209_0 (deleted)
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2944bb758dd291d7_0
  • /data/data/####/2ad0a9b7cee9a483_0
  • /data/data/####/2c649830da04d7ad_0
  • /data/data/####/2dac7798ab420e78_0
  • /data/data/####/2e3aee0f5b16d070_0
  • /data/data/####/2fa4c93bec7a5e71_0
  • /data/data/####/30a5e59f173ef36e_0
  • /data/data/####/316fdb564b40eb53_0
  • /data/data/####/33cb8ddd98102a68_0
  • /data/data/####/33fd792d52c67842_0
  • /data/data/####/3be8da3d1394c8fc_0
  • /data/data/####/3be8da3d1394c8fc_1
  • /data/data/####/3c783fabdc6f8519_0
  • /data/data/####/3cf2c4a97d6bcb01_0
  • /data/data/####/3cf2c4a97d6bcb01_1
  • /data/data/####/3fe23ca058718181_0 (deleted)
  • /data/data/####/400fe73a9d960cdc_0
  • /data/data/####/41764778fcfb143e_0
  • /data/data/####/429cb91b4e9f8fba_0
  • /data/data/####/439e7b2e61f2e13c_0
  • /data/data/####/43aff93315659f36_0
  • /data/data/####/44367F39739CCD6BBF960E91E7DB78B2.xml
  • /data/data/####/44d02c9a65731369_0
  • /data/data/####/44ded89f884d07f5_0
  • /data/data/####/44ded89f884d07f5_0 (deleted)
  • /data/data/####/45d474c3f6a3f067_0
  • /data/data/####/486B25490C21EB084435CD967B985F09
  • /data/data/####/48b577e64581f7e1_0
  • /data/data/####/491e9ad3aa42ef42_0
  • /data/data/####/4B8DB6B83129A65A2EF4DCFC1393C3B0.xml
  • /data/data/####/4C43C0BBBA1469EC97154789EBDC335D
  • /data/data/####/4C43C0BBBA1469EC97154789EBDC335D.dex
  • /data/data/####/4C43C0BBBA1469EC97154789EBDC335D.dex.flock (deleted)
  • /data/data/####/4C43C0BBBA1469EC97154789EBDC335D.temp
  • /data/data/####/4C43C0BBBA1469EC97154789EBDC335D.zip
  • /data/data/####/4a57884958c8f779_0
  • /data/data/####/4a57884958c8f779_1
  • /data/data/####/4b0ff78b3db187ca_0
  • /data/data/####/4c0172d230107c74_0
  • /data/data/####/4d3a7c4dc93f49ab_0
  • /data/data/####/4f338ac4d39567ed_0
  • /data/data/####/4f338ac4d39567ed_1
  • /data/data/####/4fe7bd89a01cf83a_0
  • /data/data/####/510277e5fc514552_0
  • /data/data/####/5137669917adf721_0
  • /data/data/####/5137669917adf721_1
  • /data/data/####/52e0f34c3458f6d1_0
  • /data/data/####/54a7bea15c0bb386_0
  • /data/data/####/551d37db6570e4c4_0
  • /data/data/####/556ea2a5968c6e3d_0
  • /data/data/####/558d3127c585045b_0
  • /data/data/####/55f3ddc27e68ffa2_0
  • /data/data/####/5730d4a2ed80e567_0
  • /data/data/####/57e4f7dc4142c9ac_0
  • /data/data/####/58d041286cafe5cd_0
  • /data/data/####/59d103a390634512_0
  • /data/data/####/59d103a390634512_1
  • /data/data/####/5_2.dex
  • /data/data/####/5_2.dex.flock (deleted)
  • /data/data/####/5_2.jar
  • /data/data/####/5a16146e02c8fdd1_0
  • /data/data/####/5a2de3af7854ec5a_0
  • /data/data/####/5d58bcda667657f3_0
  • /data/data/####/5e43e309e6af847c_0
  • /data/data/####/5e43e309e6af847c_1
  • /data/data/####/61c490d6d27b31f6_0
  • /data/data/####/61c490d6d27b31f6_1
  • /data/data/####/61f43d1e6ab67548_0 (deleted)
  • /data/data/####/6433ba80bdca5b9d_0
  • /data/data/####/64edfd4792e0695e_0
  • /data/data/####/66bbbd84c8638cc5_0
  • /data/data/####/66e7ca36c277c4d1_0
  • /data/data/####/6744cd2b5c4e0dea_0
  • /data/data/####/67a44b9824c66d30_0
  • /data/data/####/680271378278caf4_0 (deleted)
  • /data/data/####/6804c0bb0b5e17b0_0
  • /data/data/####/6804c0bb0b5e17b0_1
  • /data/data/####/697081318645ef5e_0
  • /data/data/####/6_15.dex (deleted)
  • /data/data/####/6_15.dex.flock (deleted)
  • /data/data/####/6_15.jar
  • /data/data/####/6d541f7c1cab0ede_0
  • /data/data/####/6f5373cb021f6a6d_0
  • /data/data/####/704aa451a45021a7_0
  • /data/data/####/70c1d51663b60f5e_0
  • /data/data/####/717ef3657a45ad89_0
  • /data/data/####/717ef3657a45ad89_1
  • /data/data/####/76a12070ce601320_0
  • /data/data/####/76ee0b7645a9463f_0
  • /data/data/####/76ee0b7645a9463f_1
  • /data/data/####/77a16fdc45772d22_0
  • /data/data/####/7976652885f3c199_0
  • /data/data/####/79e3310c8268f424_0
  • /data/data/####/7b2cd72332043296_0
  • /data/data/####/7c4487eb98e1e2f3_0
  • /data/data/####/7c939cce956f3b29_0
  • /data/data/####/7d8f5e5658bf1000_0
  • /data/data/####/7eaf7f45866e778f_0
  • /data/data/####/7ee95a1a89cf8475_0
  • /data/data/####/80cb346fe3580cb8_0
  • /data/data/####/815887e26b8c65b6_0
  • /data/data/####/829c73833d85f9d8_0
  • /data/data/####/833b14f80f4f34fd_0
  • /data/data/####/8562f65a62d35558_0
  • /data/data/####/8562f65a62d35558_1
  • /data/data/####/87eea3ad77d40036_0
  • /data/data/####/88cfa9f91441c3bb_0
  • /data/data/####/8EAD111D030291821E19A80E344C340A.xml
  • /data/data/####/8b46aadf9556bc9a_0
  • /data/data/####/8bd1a15b1f6ed993_0 (deleted)
  • /data/data/####/8c61a5f95baa5a57_0
  • /data/data/####/8d292fd5c0f97c7b_0
  • /data/data/####/8e2cc375a3eb0625_0
  • /data/data/####/8e8479455987ed96_0
  • /data/data/####/8f31e579e2b0d950_0
  • /data/data/####/8f31e579e2b0d950_0 (deleted)
  • /data/data/####/9.dex (deleted)
  • /data/data/####/9.dex.flock (deleted)
  • /data/data/####/9.jar
  • /data/data/####/9151ed3031ed7037_0
  • /data/data/####/9196763a51613372_0
  • /data/data/####/9196763a51613372_1
  • /data/data/####/921e390f15b03729_0
  • /data/data/####/92e3db511ae5538c_0
  • /data/data/####/9440a5a1a0d7cfbf_0
  • /data/data/####/9698f87278fcabe2_0
  • /data/data/####/9698f87278fcabe2_0 (deleted)
  • /data/data/####/972200a9aa424572_0
  • /data/data/####/972200a9aa424572_1
  • /data/data/####/97DF4C95B9CCB7B35E85338FEDB0C9B8 (deleted)
  • /data/data/####/97DF4C95B9CCB7B35E85338FEDB0C9B8.dex
  • /data/data/####/97DF4C95B9CCB7B35E85338FEDB0C9B8.dex.flock (deleted)
  • /data/data/####/97DF4C95B9CCB7B35E85338FEDB0C9B8.jar
  • /data/data/####/97DF4C95B9CCB7B35E85338FEDB0C9B8.temp
  • /data/data/####/985958d976619751_0
  • /data/data/####/985958d976619751_1
  • /data/data/####/98718389b6635dde_0
  • /data/data/####/9c69586bfe89a368_0
  • /data/data/####/9c69586bfe89a368_1
  • /data/data/####/9c90db0eb09c94a7_0
  • /data/data/####/9cdf8e397c1dc061_0
  • /data/data/####/9cdf8e397c1dc061_1
  • /data/data/####/9d1693c6e97c2575_0
  • /data/data/####/9db5cfb500a1b71e_0
  • /data/data/####/9e7295600f52437a_0
  • /data/data/####/9ed6cd4360ebb3c6_0
  • /data/data/####/Alvin2.xml
  • /data/data/####/ContextData.xml
  • /data/data/####/Cookies-journal
  • /data/data/####/D2306CD31F0788B00AF7898632C56C15
  • /data/data/####/D2306CD31F0788B00AF7898632C56C15.dex
  • /data/data/####/D2306CD31F0788B00AF7898632C56C15.dex.flock (deleted)
  • /data/data/####/D2306CD31F0788B00AF7898632C56C15.jar
  • /data/data/####/D2306CD31F0788B00AF7898632C56C15.temp
  • /data/data/####/Databases.db-journal
  • /data/data/####/F340BC0945F5D76F2C470A090C6F7639
  • /data/data/####/FAD73B8F04F4676D7F34017BC8A8B4CA.temp
  • /data/data/####/QuotaManager-journal
  • /data/data/####/UM_PROBE_DATA.xml
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/_p.xml
  • /data/data/####/_pn
  • /data/data/####/_sh.xml
  • /data/data/####/_shn
  • /data/data/####/a24087054e9f93ff_0
  • /data/data/####/a80d6374381e50aacea2b33c6901b212.db
  • /data/data/####/ad62defb184850b4_0
  • /data/data/####/ad62defb184850b4_1
  • /data/data/####/ahq_spu_ti.xml
  • /data/data/####/al_lcom.qlz.ulg.xml
  • /data/data/####/al_lcom.qlz.ulg.xml.bak
  • /data/data/####/appuserid.xml
  • /data/data/####/b124c1bd8df6728a_0
  • /data/data/####/b3f2a0d87516e622_0
  • /data/data/####/b5e077d1bae86968_0
  • /data/data/####/b66d50283ceea97f_0
  • /data/data/####/b704bc6006131134_0
  • /data/data/####/b7b365be0be15e07_0
  • /data/data/####/b8c823cacab55df7_0 (deleted)
  • /data/data/####/baf01dbfc1d590b6_0
  • /data/data/####/baf01dbfc1d590b6_1
  • /data/data/####/bb2b6ba90e5745a4_0
  • /data/data/####/bb2b6ba90e5745a4_1
  • /data/data/####/be44a1680353185a_0
  • /data/data/####/be5c384c7606bde9_0
  • /data/data/####/bf60d27e21bd1b77_0
  • /data/data/####/c090bce63592e9f9_0
  • /data/data/####/c090bce63592e9f9_0 (deleted)
  • /data/data/####/c1b7cdb64a3c44c7_0
  • /data/data/####/c245484f7f8728e6_0
  • /data/data/####/c38266b33467a544_0
  • /data/data/####/c3c0211f7b4c9ffe_0 (deleted)
  • /data/data/####/c3e3243e9163cf55_0
  • /data/data/####/c4a60172f27beae6_0
  • /data/data/####/c587b25e3c546ed5_0
  • /data/data/####/c587b25e3c546ed5_1
  • /data/data/####/c7ce1868366f1643_0
  • /data/data/####/c8d7ea01b94ece12_0
  • /data/data/####/c9227e0618f034d7a742c4eb482ba306.dex
  • /data/data/####/c9227e0618f034d7a742c4eb482ba306.dex.flock (deleted)
  • /data/data/####/cbdeb819af343b8c_0
  • /data/data/####/cd8bdfd230d84ed7_0
  • /data/data/####/cec722cb32e4402e_0
  • /data/data/####/cec722cb32e4402e_1
  • /data/data/####/cecd9e3c202946ab_0
  • /data/data/####/cecd9e3c202946ab_1
  • /data/data/####/cf077afbb952ec19_0
  • /data/data/####/com.abc.download.xml
  • /data/data/####/com.abc.download_preferences.xml
  • /data/data/####/com_collections_cache_sdk_db_name.db
  • /data/data/####/com_collections_cache_sdk_db_name.db-journal
  • /data/data/####/comqskyyekxqlby.nw.xml
  • /data/data/####/comxcxid.xml
  • /data/data/####/countIp.xml
  • /data/data/####/d0e9700dc1fc15e1_0
  • /data/data/####/d15965f24161a73f_0
  • /data/data/####/d4ec5e4f88214a48_0
  • /data/data/####/d610f1c85c12d6d3_0
  • /data/data/####/dW1weF9pbnRlcm5hbF8xNTcyMDQ3MTM2MDEw;
  • /data/data/####/dW1weF9pbnRlcm5hbF8xNTcyMDQ3MTMzMTAz;
  • /data/data/####/da16f7c07344520b_0
  • /data/data/####/da16f7c07344520b_1
  • /data/data/####/dce626bfcff5ded0_0
  • /data/data/####/ddfsfwo.data-journal
  • /data/data/####/de7a02e384bd2b0c_0
  • /data/data/####/downUmeng.dex
  • /data/data/####/downUmeng.dex.flock (deleted)
  • /data/data/####/downUmeng.jar
  • /data/data/####/download.db
  • /data/data/####/download.db-journal
  • /data/data/####/dpi
  • /data/data/####/dynamic_bundle_data.xml
  • /data/data/####/e160eb8ac01f05f1_0
  • /data/data/####/e31ed47e98d9e743_0 (deleted)
  • /data/data/####/e40abd7e95af7a7d_0
  • /data/data/####/e7b7757407075848_0
  • /data/data/####/e7b7757407075848_1
  • /data/data/####/e914b324a708bf1b_0
  • /data/data/####/ea99ad38f632fd40_0
  • /data/data/####/eeaa9072e9e90779_0
  • /data/data/####/eeaa9072e9e90779_1
  • /data/data/####/eec11a207ffbe249_0
  • /data/data/####/eec11a207ffbe249_1
  • /data/data/####/efff4a2e5cf1ffa4_0
  • /data/data/####/efff4a2e5cf1ffa4_1
  • /data/data/####/exchangeIdentity.json
  • /data/data/####/exid.dat
  • /data/data/####/f055a623f8dfd329_0
  • /data/data/####/f233b552e4e91a1a_0
  • /data/data/####/f42853dd18208233_0
  • /data/data/####/f4fe460a6e3004c9_0
  • /data/data/####/f5b663fe702b18e4812733bfd1703dd9.apk
  • /data/data/####/f5f4e89d22aba6dd_0
  • /data/data/####/f63868c1dbdafef0_0
  • /data/data/####/f9f77c2a65303ecc_0
  • /data/data/####/fb03cddb7a62015f_0 (deleted)
  • /data/data/####/fb0bd373d203a5ca_0
  • /data/data/####/fcvgeefrf.data-journal
  • /data/data/####/fdeeddsdf.xml
  • /data/data/####/fdeeddsdf.xml.bak
  • /data/data/####/fdfbe6775aa12dee_0
  • /data/data/####/ff23da88244e214a_0
  • /data/data/####/ff696e24312bc165_0
  • /data/data/####/ff696e24312bc165_0 (deleted)
  • /data/data/####/ff92fa8ee764d768_0
  • /data/data/####/gameid
  • /data/data/####/gameid.zip
  • /data/data/####/gsdwwsweq.data-journal
  • /data/data/####/hawszfwdsds.xml
  • /data/data/####/hawszfwdsds.xml.bak
  • /data/data/####/hawszfwdsds.xml.bak (deleted)
  • /data/data/####/hhq_spu_ti.xml
  • /data/data/####/hid.db
  • /data/data/####/http_s.zhitoudsp.com_808.localstorage (deleted)
  • /data/data/####/http_s.zhitoudsp.com_808.localstorage-journal
  • /data/data/####/https_pro.m.jd.com_0.localstorage-journal
  • /data/data/####/https_sw3.duoyi.com_0.localstorage-journal
  • /data/data/####/hxdata.xml
  • /data/data/####/i==1.2.0&&1.0.7_1572047133136_envelope.log
  • /data/data/####/if.xml
  • /data/data/####/index
  • /data/data/####/info.xml
  • /data/data/####/iowaswse.xml
  • /data/data/####/iowaswse.xml.bak
  • /data/data/####/js_ad_bundle_data.xml
  • /data/data/####/kwssheq.data-journal
  • /data/data/####/libydyvjt.so
  • /data/data/####/libydyvjt.so-32
  • /data/data/####/libydyvjt.so-64
  • /data/data/####/metrics_guid
  • /data/data/####/mfvbxhmx.dex (deleted)
  • /data/data/####/mfvbxhmx.dex.flock (deleted)
  • /data/data/####/mfvbxhmx.jar
  • /data/data/####/proc_auxv
  • /data/data/####/sesvwta.xml
  • /data/data/####/sfwwWQsewq.data-journal
  • /data/data/####/skydriveInfo_v2.0-journal
  • /data/data/####/swWsewdQe.xml
  • /data/data/####/swWsewdQe.xml.bak
  • /data/data/####/test391.jar.dex
  • /data/data/####/test391.jar.dex.flock (deleted)
  • /data/data/####/test391.jar.zip
  • /data/data/####/test391.jar.zip.json
  • /data/data/####/testkd.jar.dex
  • /data/data/####/testkd.jar.dex.flock (deleted)
  • /data/data/####/testkd.jar.zip
  • /data/data/####/testkd.jar.zip.json
  • /data/data/####/testlhyy.jar.dex
  • /data/data/####/testlhyy.jar.dex.flock (deleted)
  • /data/data/####/testlhyy.jar.zip
  • /data/data/####/testlhyy.jar.zip.json
  • /data/data/####/the-real-index
  • /data/data/####/tjmisc.png
  • /data/data/####/um_pri.xml
  • /data/data/####/umdat.xml
  • /data/data/####/umeng_common_config.xml
  • /data/data/####/umeng_common_location.xml
  • /data/data/####/umeng_down_.db24.db
  • /data/data/####/umeng_down_15.db
  • /data/data/####/umeng_down_18.db
  • /data/data/####/umeng_down_21.db
  • /data/data/####/umeng_down_23_1.db
  • /data/data/####/umeng_down_5_2.db
  • /data/data/####/umeng_down_6_15.db
  • /data/data/####/umeng_down_9.db
  • /data/data/####/umeng_general_config.xml
  • /data/data/####/umeng_it.cache
  • /data/data/####/vbhu.xml
  • /data/data/####/vbhu.xml.bak
  • /data/data/####/vnfl.xml
  • /data/data/####/vv.xml
  • /data/data/####/x1x1zead.xml
  • /data/data/####/x1x1zead.xml.bak
  • /data/data/####/yd_config_c.xml
  • /data/misc/####/primary.prof
Miscellaneous:
Executes the following shell scripts:
  • /system/bin/cat /proc/cpuinfo
  • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
  • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/.oijab/mfvbxhmx.jar --oat-fd=108 --oat-location=/data/user/0/<Package>/.oijab/mfvbxhmx.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_cachedata/ffe/4C43C0BBBA1469EC97154789EBDC335D.zip --oat-fd=108 --oat-location=/data/user/0/<Package>/files/4C43C0BBBA1469EC97154789EBDC335D.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_js_adplugin/test391.jar.zip --oat-fd=60 --oat-location=/data/user/0/<Package>/app_opt/test391.jar.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_js_adplugin/testkd.jar.zip --oat-fd=111 --oat-location=/data/user/0/<Package>/app_opt/testkd.jar.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_js_adplugin/testlhyy.jar.zip --oat-fd=53 --oat-location=/data/user/0/<Package>/app_opt/testlhyy.jar.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/1s.jar --oat-fd=153 --oat-location=/data/user/0/<Package>/app_dex/1s.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/1s.jar --oat-fd=58 --oat-location=/data/user/0/<Package>/app_dex/1s.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/advDB/c9227e0618f034d7a742c4eb482ba306.db --oat-fd=173 --oat-location=/data/user/0/<Package>/cache/advDB/c9227e0618f034d7a742c4eb482ba306.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/cacheUmeng/oatCache/downUmeng.jar --oat-fd=118 --oat-location=/data/user/0/<Package>/cache/cacheUmeng/oatCache/downUmeng/downUmeng.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/hgap/<Package>/dbu/97DF4C95B9CCB7B35E85338FEDB0C9B8.jar --oat-fd=68 --oat-location=/data/user/0/<Package>/files/97DF4C95B9CCB7B35E85338FEDB0C9B8.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/hgap/<Package>/dbu/D2306CD31F0788B00AF7898632C56C15.jar --oat-fd=59 --oat-location=/data/user/0/<Package>/files/D2306CD31F0788B00AF7898632C56C15.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/15.jar --oat-fd=153 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/15.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/18.jar --oat-fd=166 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/18.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/21.jar --oat-fd=144 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/21.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/23_1.jar --oat-fd=175 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/23_1.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/24.jar --oat-fd=175 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/24.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/5_2.jar --oat-fd=151 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/5_2.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/6_15.jar --oat-fd=153 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/6_15.dex --compiler-filter=speed
  • /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/9.jar --oat-fd=153 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/9.dex --compiler-filter=speed
  • /system/bin/sh
  • cat /proc/cpuinfo
  • cat /sys/class/android_usb/android0/idProduct
  • cat /sys/class/android_usb/android0/idVendor
  • cat /sys/class/net/wlan0/address
  • getprop
  • ls -l /dev
  • ls -l /dev/__properties__
  • ls -l /dev/block
  • ls -l /dev/block/pci
  • ls -l /dev/block/pci/pci0000:00
  • ls -l /dev/block/pci/pci0000:00/0000:00:01.1
  • ls -l /dev/block/pci/pci0000:00/0000:00:01.1/by-num
  • ls -l /dev/block/vold
  • ls -l /dev/bus
  • ls -l /dev/bus/usb
  • ls -l /dev/bus/usb/001
  • ls -l /dev/com.android.settings
  • ls -l /dev/com.android.settings.daemon
  • ls -l /dev/cpuctl
  • ls -l /dev/cpuset
  • ls -l /dev/cpuset/background
  • ls -l /dev/cpuset/foreground
  • ls -l /dev/cpuset/foreground/boost
  • ls -l /dev/cpuset/system-background
  • ls -l /dev/cpuset/top-app
  • ls -l /dev/fscklogs
  • ls -l /dev/graphics
  • ls -l /dev/input
  • ls -l /dev/memcg
  • ls -l /dev/memcg/apps
  • ls -l /dev/pts
  • ls -l /dev/snd
  • ls -l /dev/socket
  • ls -l /dev/stune
  • ls -l /dev/stune/background
  • ls -l /dev/stune/foreground
  • ls -l /dev/stune/top-app
  • ls /
  • ls /sys/class/thermal
  • ps
Uses the following algorithms to encrypt data:
  • AES-CBC-PKCS5Padding
  • AES-CBC-PKCS7Padding
  • AES-ECB-PKCS5Padding
  • DES
  • DES-CBC-PKCS5Padding
  • DES-ECB-PKCS5Padding
  • RSA-ECB-PKCS1Padding
  • RSA-None-PKCS1Padding
Uses the following algorithms to decrypt data:
  • AES-CBC-NoPadding
  • AES-CBC-PKCS5Padding
  • AES-CBC-PKCS7Padding
  • AES-ECB-PKCS5Padding
  • ARCFOUR
  • DES
  • DES-CBC-PKCS5Padding
  • DES-ECB-PKCS5Padding
  • RSA-ECB-PKCS1Padding
  • RSA-None-PKCS1Padding
Accesses the ITelephony private interface.
Gets information about location.
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Gets information about installed apps.
Gets information about running apps.
Adds tasks to the system scheduler.
Displays its own windows over windows of other apps.
Gets information about incoming/outgoing calls.

Рекомендации по лечению

Android

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке

Скачать с сайта
Скачать с Google Play