Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.Click.345.origin
Network activity:
Connects to:
- UDP(DNS) 8####.8.4.4:53
- TCP(HTTP/1.1) api.a####.ads####.cn:80
- TCP(HTTP/1.1) yy.xinqi####.com.####.com:80
- TCP(HTTP/1.1) w####.pcon####.com.cn:80
- TCP(HTTP/1.1) d####.cn:80
- TCP(HTTP/1.1) d####.i####.com:80
- TCP(HTTP/1.1) res####.a####.top:80
- TCP(HTTP/1.1) dup.baidust####.com:80
- TCP(HTTP/1.1) 58.2####.198.157:999
- TCP(HTTP/1.1) tpy.dspliul####.com:99
- TCP(HTTP/1.1) 58.2####.92.50:808
- TCP(HTTP/1.1) filt####.a####.top:80
- TCP(HTTP/1.1) w####.c####.com:80
- TCP(HTTP/1.1) api.g####.vip:80
- TCP(HTTP/1.1) js.sun####.com:80
- TCP(HTTP/1.1) t####.a####.top:80
- TCP(HTTP/1.1) k.13hang####.com.####.com:80
- TCP(HTTP/1.1) tc.c####.com:80
- TCP(HTTP/1.1) www-new####.b0.a####.com:80
- TCP(HTTP/1.1) gm.mm####.com:80
- TCP(HTTP/1.1) api.yunco####.com:80
- TCP(HTTP/1.1) ec####.b####.com:80
- TCP(HTTP/1.1) www.c####.com.####.com:80
- TCP(HTTP/1.1) m.wxdu####.com:80
- TCP(HTTP/1.1) c####.zhit####.com:99
- TCP(HTTP/1.1) 47.1####.211.73:80
- TCP(HTTP/1.1) adcha####.bz.m####.com:80
- TCP(HTTP/1.1) v####.weib####.com.####.net:80
- TCP(HTTP/1.1) gd.a.s####.com:80
- TCP(HTTP/1.1) c.c####.com:80
- TCP(HTTP/1.1) z.c####.com:80
- TCP(HTTP/1.1) pos.b####.com:80
- TCP(HTTP/1.1) m####.new####.com:80
- TCP(HTTP/1.1) 58.2####.67.136:99
- TCP(HTTP/1.1) ap####.math####.cn:80
- TCP(HTTP/1.1) 10####.admast####.com:808
- TCP(HTTP/1.1) p####.api.adoc####.com:80
- TCP(HTTP/1.1) s####.jom####.com:80
- TCP(HTTP/1.1) newap####.math####.cn:80
- TCP(HTTP/1.1) pm.cdy####.com:8080
- TCP(HTTP/1.1) pco####.ta####.com:80
- TCP(HTTP/1.1) 47.1####.185.46:80
- TCP(HTTP/1.1) c####.jumen####.com:80
- TCP(HTTP/1.1) m.sun####.com:80
- TCP(HTTP/1.1) i####.wt####.com:80
- TCP(HTTP/1.1) up-ali-####.b0.a####.com:80
- TCP(HTTP/1.1) cc.7####.cn:80
- TCP(HTTP/1.1) 10####.admast####.com:99
- TCP(HTTP/1.1) co####.ssp.adoc####.com:80
- TCP(HTTP/1.1) api.new####.com:80
- TCP(TLS/1.0) pos.b####.com:443
- TCP(TLS/1.0) api.g####.vip:443
- TCP(TLS/1.0) www.m####.com:443
- TCP(TLS/1.0) tj.tianw####.com.####.com:443
- TCP(TLS/1.0) gcc.haowa####.com:443
- TCP(TLS/1.0) ip.ws.1####.net:443
- TCP(TLS/1.0) mg####.pcon####.com.cn:443
- TCP(TLS/1.0) www.googlet####.com:443
- TCP(TLS/1.0) z.c####.com:443
- TCP(TLS/1.0) i####.pcon####.fas####.com:443
- TCP(TLS/1.0) p####.pc####.com.cn:443
- TCP(TLS/1.0) id.d####.com:443
- TCP(TLS/1.0) lhyysdk####.oss-cn-####.aliy####.com:443
- TCP(TLS/1.0) l####.b####.com:443
- TCP(TLS/1.0) it####.a####.com.####.net:443
- TCP(TLS/1.0) d####.i####.com:443
- TCP(TLS/1.0) and####.google####.com:443
- TCP(TLS/1.0) sw4.d####.com:443
- TCP(TLS/1.0) www.pc####.com.####.cn:443
- TCP(TLS/1.0) w.m####.com:443
- TCP(TLS/1.0) hm.b####.com:443
- TCP(TLS/1.0) st####.h####.com:443
- TCP(TLS/1.0) img.pcon####.com.####.cn:443
- TCP(TLS/1.0) gd.a.s####.com:443
- TCP(TLS/1.0) s####.x####.com.cn:443
- TCP(TLS/1.0) u####.v.bs####.cn:443
- TCP(TLS/1.0) 1####.250.179.195:443
- TCP(TLS/1.0) ne####.x####.com.cn:443
- TCP(TLS/1.0) a####.d####.com:443
- TCP(TLS/1.0) api.fou####.com:443
- TCP(TLS/1.0) s1.h####.com:443
- TCP(TLS/1.0) dup.baidust####.com:443
- TCP(TLS/1.0) api.m####.com:443
- TCP(TLS/1.0) s.fou####.com:443
- TCP(TLS/1.0) c.c####.com:443
- TCP(TLS/1.0) c####.x####.com.####.com:443
- TCP(TLS/1.0) gm.mm####.com:443
- TCP(TLS/1.0) pp.c####.com:443
- TCP(TLS/1.0) i####.d####.com:443
- TCP(TLS/1.0) api.bamenzh####.com:443
- TCP(TLS/1.2) 2####.58.208.110:443
- TCP(TLS/1.2) 1####.250.179.195:443
- TCP(TLS/1.2) 1####.217.17.106:443
- UDP 1####.217.17.106:443
DNS requests:
- 1####.zhit####.com
- 10####.admast####.com
- 603.a####.top
- 603.a####.top.####.8
- a####.a####.com
- a####.d####.com
- a####.new####.com
- adcha####.bz.m####.com
- al####.new####.com
- al####.new####.com
- al####.new####.com
- al####.new####.com
- and####.google####.com
- ap####.math####.cn
- api.a####.ads####.cn
- api.bamenzh####.com
- api.fou####.com
- api.g####.vip
- api.m####.com
- api.new####.com
- api.s####.b####.com
- api.yunco####.com
- app.a####.top
- ass####.xca####.com
- c####.jumen####.com
- c####.mm####.com
- c####.x####.com.cn
- c####.zhit####.com
- c.c####.com
- cc.7####.cn
- co####.ssp.adoc####.com
- css.m####.com
- d####.cn
- dup.baidust####.com
- ec####.b####.com
- f####.c####.com
- filt####.a####.top
- gcc.haowa####.com
- h####.m####.com
- hm.b####.com
- i####.d####.com
- i####.pc####.com.cn
- i####.wt####.com
- i####.x####.com.cn
- i.iqt####.com
- i.iqt####.com.####.8
- id.d####.com
- img.d####.com
- img.pc####.com.cn
- img.pcon####.com.cn
- ip.ws.1####.net
- ivy.pcon####.com.cn
- j####.g####.vip
- jr.pc####.com.cn
- js.3con####.com
- js.sun####.com
- js.wt####.com
- k.13hang####.com
- l####.b####.com
- lhyysdk####.oss-cn-####.aliy####.com
- m####.go####.com
- m####.new####.com
- m.sun####.com
- m.wxdu####.com
- mg####.pcon####.com.cn
- ne####.x####.com.cn
- newap####.math####.cn
- p####.api.adoc####.com
- p####.pc####.com.cn
- p####.zhanz####.b####.com
- pco####.c####.com
- pm.cdy####.com
- pos.b####.com
- pp.c####.com
- pv.s####.com
- res####.a####.top
- s####.x####.com.cn
- s.fou####.com
- s1.h####.com
- s11.c####.com
- s13.c####.com
- s23.c####.com
- s3.h####.com
- s4.c####.com
- s5.c####.com
- s95.c####.com
- s96.c####.com
- st####.h####.com
- sw4.d####.com
- t####.a####.top
- tc.c####.com
- tj.tianw####.com
- tjs.sjs.si####.cn
- tp.dhfang####.com
- tp.vinux####.com
- tpy.dspliul####.com
- u####.a####.top
- u####.dspliul####.com
- v1.c####.com
- w####.c####.com
- w####.pc####.com.cn
- w####.pcon####.com.cn
- w.i####.com
- w.m####.com
- wtc.d####.com
- www.c####.com
- www.googlet####.com
- www.m####.com
- www.new####.com
- www.pc####.com.cn
- x####.tod####.cn
- x####.tod####.cn.####.8
- xin.dspliul####.com
- yx.longche####.com
- yy.xinqi####.com
- z11.c####.com
- z13.c####.com
- z2.c####.com
- z3.c####.com
- z4.c####.com
- z5.c####.com
- z6.c####.com
- z9.c####.com
HTTP GET requests:
- 10####.admast####.com:808/1020p/index.html
- 10####.admast####.com:808/1020p/yrc_001pc.js
- 10####.admast####.com:808/ip
- 10####.admast####.com:99/1020yy/index.html
- 10####.admast####.com:99/wap/index.html
- 10####.admast####.com:99/wtsnews/index.html
- 58.2####.67.136:99/newcar/index.html
- 58.2####.67.136:99/wts/index.html?1####
- 58.2####.92.50:808/gh.html
- 58.2####.92.50:808/ghyd.html
- 58.2####.92.50:808/ydc.html
- 58.2####.92.50:808/ydc.html?1####
- 58.2####.92.50:808/ydm.html
- 58.2####.92.50:808/ywm.html
- adcha####.bz.m####.com/direct?cc=####
- ap####.math####.cn/ssp/mgm/task?taskId=####&ip=####
- api.a####.ads####.cn/thirdparty/sapi/callback?cid=####&adspaceid=####&mc...
- api.g####.vip/landing_with_phy.js
- api.new####.com/api/ipapi/getcityinfo/?callback=####&_=####
- c####.jumen####.com/flow_control.php
- c####.jumen####.com/init.php
- c####.jumen####.com/init_wap.php
- c####.zhit####.com:99/pctja.html
- c####.zhit####.com:99/tat/index.html
- c####.zhit####.com:99/wap/index.html
- c.c####.com/core.php?web_id=####&t=####
- c.c####.com/stat.php?id=####
- c.c####.com/stat.php?id=####&web_id=####
- c.c####.com/z_stat.php?id=####
- cc.7####.cn/PClick.aspx?AID=####&KEY=####
- co####.ssp.adoc####.com/api/v2/SDKActiveConfig?version=####&channelCode=...
- co####.ssp.adoc####.com/api/v2/SDKCommonConfig?channelCode=####&version=...
- co####.ssp.adoc####.com/api/v2/mgmConfig?channelCode=####&version=####
- co####.ssp.adoc####.com/api/v2/mgmWebviewRatioConfig?channelCode=####&ve...
- d####.cn/fenpei.html?1####
- d####.cn/fenpei.html?2####
- d####.cn/fenpei.html?3####
- d####.i####.com/iwt/a.gif?url=####&ua=####&uuid=####&sign=####&ts=####
- dup.baidust####.com/js/os.js
- ec####.b####.com/a.js?tu=####&op=####&jk=####&psi=####&word=####&if=####...
- ec####.b####.com/se.jpg?type=####&ver=####&rdm=####
- filt####.a####.top/filter_control_603.json
- gd.a.s####.com/cityjson?ie=####
- gm.mm####.com/9.gif?abc=####&rnd=####
- i####.wt####.com/auto/202002/css20200810/index_red_noflow.css
- i####.wt####.com/js/CommonUtil.mini.js?v=####
- i####.wt####.com/js/geetest3.js
- i####.wt####.com/js/iwt/iwt1.0.1.js
- i####.wt####.com/js/jquery-1.7.2.min.js
- i####.wt####.com/js/jquery.qrcode.min.js
- i####.wt####.com/js/lazyload.js
- i####.wt####.com/js/widgets/adapter-mini.js?20####
- i####.wt####.com/news/css/news_red.css?v=####
- i####.wt####.com/news/image/icon.png
- i####.wt####.com/news/image/tools1.png
- i####.wt####.com/news/image/tools2.png
- i####.wt####.com/news/js/public.js
- i####.wt####.com/top/201812/css/index_red.css?v=####
- i####.wt####.com/top/201812/image/icon.png
- i####.wt####.com/top/201812/image/time.png
- i####.wt####.com/top/201812/js/public.js
- i####.wt####.com/top/202002/css/index_red_noflow.css
- js.sun####.com/sun.js
- js.sun####.com/sun_solid.js
- k.13hang####.com.####.com/h.php?pid=####
- m####.new####.com/js/ina_ad_init.js
- m.sun####.com/mbook_10691/1925_1.html
- m.wxdu####.com/
- p####.api.adoc####.com/ip
- pco####.ta####.com/app.gif?&cna=####
- pm.cdy####.com:8080/css/mbook_alone_res/cy.js
- pm.cdy####.com:8080/css/mbook_alone_res/jquery.min.js
- pm.cdy####.com:8080/css/mbook_alone_res/mob/common.js
- pm.cdy####.com:8080/css/mbook_alone_res/mob/header-back.gif
- pm.cdy####.com:8080/css/mbook_alone_res/mob/header-backhome.gif
- pm.cdy####.com:8080/css/mbook_alone_res/mob/index.js
- pm.cdy####.com:8080/css/mbook_alone_res/mob/read.js
- pm.cdy####.com:8080/css/mbook_alone_res/mob/yuedu.js
- pm.cdy####.com:8080/css/mbook_alone_res/mob/zepto.min.js
- pm.cdy####.com:8080/css/mbook_alone_res/mob_chapter.css
- pos.b####.com/bfp/snippetcacher.php?dpv=####&di=####
- res####.a####.top/LHYY.png
- res####.a####.top/anshuaControl.json
- res####.a####.top/api.json
- res####.a####.top/pingpaiAD.json
- res####.a####.top/sdk13_2.png
- res####.a####.top/sdk16.png
- res####.a####.top/sdk18.png
- res####.a####.top/sdk2.png
- res####.a####.top/sdk24.png
- s####.jom####.com/push.js
- t####.a####.top/anshua.json
- t####.a####.top/req.json
- tc.c####.com/iframeads/mediaads/js/adsfu6.php
- tc.c####.com/js/tcjs.php
- tpy.dspliul####.com:99/ip/index.html
- tpy.dspliul####.com:99/tpy/index.html
- up-ali-####.b0.a####.com/3g/js/bit_province_city_data.js
- up-ali-####.b0.a####.com/bseries/6082/60bd87c463c06_12.jpg!300
- up-ali-####.b0.a####.com/image/auto/160630/lazyload50.jpg
- up-ali-####.b0.a####.com/js/city_substation_data.js
- up-ali-####.b0.a####.com/js/index_bseries_data_cache.js
- up-ali-####.b0.a####.com/js/index_sign_data_cache.js
- v####.weib####.com.####.net/open/api/js/wb.js
- w####.c####.com/abc/xyz/point/index.php
- w####.c####.com/abc/xyz/point/single.php?bid=####
- www-new####.b0.a####.com/ina_product/logo/189/
- www-new####.b0.a####.com/ina_product/logo/267/
- www-new####.b0.a####.com/index1.html
- www-new####.b0.a####.com/index6.html
- www-new####.b0.a####.com/news/detail/storys_155845.html
- www.c####.com.####.com/index/styles/css/basic.css?v=####
- www.c####.com.####.com/index/styles/css/index20180829_2.css
- www.c####.com.####.com/index/styles/css/loginface.css?v=####
- www.c####.com.####.com/index/styles/js/add_new_20160528k.js
- www.c####.com.####.com/index/styles/js/changePic.js
- www.c####.com.####.com/index/styles/js/index.js
- www.c####.com.####.com/index/styles/js/jquery.SuperSlide.js
- www.c####.com.####.com/index/styles/js/jquery.mscroll.js
- www.c####.com.####.com/index/styles/js/jquery_172.js
- www.c####.com.####.com/index/styles/js/marquee.js
- www.c####.com.####.com/main.html
- www.c####.com.####.com/main.html?v=####
- yy.xinqi####.com.####.com/dp.php?m=SjhDQ####
- z.c####.com/stat.htm?id=####&r=####&lg=####&ntime=####&cnzz_eid=####&sho...
- z.c####.com/stat.htm?id=1256135178&r=http://dspcc.cn/fenpei.html?2####&l...
- z.c####.com/stat.htm?id=1256135178&r=http://dspcc.cn/fenpei.html?3####&l...
- z.c####.com/stat.htm?id=1256135229&r=http://dspcc.cn/fenpei.html?3####&l...
- z.c####.com/stat.htm?id=1260193419&r=http://58.218.67.136:99/wts/index.h...
HTTP POST requests:
- api.a####.ads####.cn/thirdparty/sapi/chn
- api.yunco####.com/service/rest
- m.sun####.com/errorpage.php
- newap####.math####.cn/titan/monitor/device_info
- w####.pcon####.com.cn/ip.jsp
File system changes:
Creates the following files:
- /data/data/####/.hptc.cache_om.yincan.first
- /data/data/####/000f92329a545504_0
- /data/data/####/005bb92749461c36_0
- /data/data/####/00bcfc9add306b71_0
- /data/data/####/0291e30db0d1430b_0
- /data/data/####/02d21e0d1dc3a31e_0
- /data/data/####/032ae719ffba63f8_0
- /data/data/####/032ae719ffba63f8_0 (deleted)
- /data/data/####/032ae719ffba63f8_1
- /data/data/####/0345dd391ec44e72_0
- /data/data/####/0345dd391ec44e72_1
- /data/data/####/03994817125967c2_0
- /data/data/####/052da7393728e70c_0
- /data/data/####/052da7393728e70c_1
- /data/data/####/05386d0addb350f1_0
- /data/data/####/05386d0addb350f1_1
- /data/data/####/059ce224b100dcdb_0
- /data/data/####/07eac07917a15439_0
- /data/data/####/07ffa51e39c2eb7b_0
- /data/data/####/0904dd88a702fb1c_0
- /data/data/####/0904dd88a702fb1c_1
- /data/data/####/0b04201a8a2a9000_0
- /data/data/####/0b04201a8a2a9000_1
- /data/data/####/0b1286c1b87ab84c_0
- /data/data/####/0b860f126084d29c_0 (deleted)
- /data/data/####/0bba356f6079005f_0
- /data/data/####/0bbcd42ef76a0911_0 (deleted)
- /data/data/####/0c73a6741abdb558_0
- /data/data/####/0ce79fd62c4c43ce_0
- /data/data/####/0cebd7b13537eeb8_0
- /data/data/####/0d8f251c673e3914_0
- /data/data/####/0e4b563823ed35fb_0
- /data/data/####/0f99484dd932ccb4_0
- /data/data/####/0f99484dd932ccb4_1
- /data/data/####/10665de515086860_0
- /data/data/####/10a1d1deb4cdf7f0_0
- /data/data/####/10a1d1deb4cdf7f0_1
- /data/data/####/10b62b9121ff1ff6_0
- /data/data/####/10f2405d0974a299_0
- /data/data/####/1174c1a38e45c4d6_0
- /data/data/####/1188b4bf8b6129ff_0
- /data/data/####/118dead3e139c249_0
- /data/data/####/118dead3e139c249_1
- /data/data/####/1258fcce9caa929e_0
- /data/data/####/12cf1d6e9eaad25b_0
- /data/data/####/1336cfbcdeab6425_0
- /data/data/####/13_2.dex
- /data/data/####/13_2.dex.flock (deleted)
- /data/data/####/13_2.jar
- /data/data/####/13ad48dd719c7246_0
- /data/data/####/1463224b7ca13478fb230a1e7d3e9faa.db
- /data/data/####/146ad42d00d9a5e1_0
- /data/data/####/14e14d0f70221a7d_0
- /data/data/####/1534297d07aa4150_0
- /data/data/####/1534297d07aa4150_0 (deleted)
- /data/data/####/15e2cabe42a77a8c_0
- /data/data/####/16.dex
- /data/data/####/16.dex.flock (deleted)
- /data/data/####/16.jar
- /data/data/####/1714af51f380b9f7_0
- /data/data/####/17b332079af400e0_0
- /data/data/####/18.dex
- /data/data/####/18.dex.flock (deleted)
- /data/data/####/18.jar
- /data/data/####/185372d89cc5155e_0
- /data/data/####/185372d89cc5155e_1
- /data/data/####/186ec5a00d432bf7_0 (deleted)
- /data/data/####/18d370d2ac0b1e8b_0 (deleted)
- /data/data/####/190ef7d9a8babf1f_0
- /data/data/####/1a27355b2aeffab4_0
- /data/data/####/1aeaba8b3016af71_0
- /data/data/####/1c99c173831505b3_0
- /data/data/####/1c9c4f6c3a9f9b61_0
- /data/data/####/1dc1200143554a66_0
- /data/data/####/1dc1200143554a66_1
- /data/data/####/1dd0a6a823a6e02a_0 (deleted)
- /data/data/####/1ec47313642f2cd8_0
- /data/data/####/1ee21efbb473c60d_0 (deleted)
- /data/data/####/1efe5dcf42ac5511_0
- /data/data/####/2.dex
- /data/data/####/2.dex.flock (deleted)
- /data/data/####/2.jar
- /data/data/####/24.dex
- /data/data/####/24.dex.flock (deleted)
- /data/data/####/24.jar
- /data/data/####/248225e83776c180_0
- /data/data/####/2704aaeef4eeb65c_0
- /data/data/####/272c83c80ac5a438_0
- /data/data/####/27d7b79acba9d88c_0
- /data/data/####/27dac8705e581c47_0
- /data/data/####/27dac8705e581c47_1
- /data/data/####/280edd942332dde2_0
- /data/data/####/280edd942332dde2_1
- /data/data/####/289c742cb05b91e9_0
- /data/data/####/289c742cb05b91e9_1
- /data/data/####/29132d81b4de64ff_0
- /data/data/####/295f05ec7a112ae1_0
- /data/data/####/2b2af5d1bc8d24ae_0
- /data/data/####/2b3566c12ae0a1a2_0
- /data/data/####/2c009e98f573c81e_0
- /data/data/####/2c009e98f573c81e_1
- /data/data/####/2c0c40dc6500ec77_0
- /data/data/####/2c2ec79e71877e90_0
- /data/data/####/2cc89533bd2c22dc_0
- /data/data/####/2cc89533bd2c22dc_1
- /data/data/####/2d166b6eee8a7390_0
- /data/data/####/2d166b6eee8a7390_1
- /data/data/####/2d7f4ca6cb5ae834_0
- /data/data/####/2dcc54f95879f596_0
- /data/data/####/2df26fd8296078c4_0
- /data/data/####/2fc33fe21cdd6ca5_0
- /data/data/####/30150f1e2f789640_0
- /data/data/####/30150f1e2f789640_0 (deleted)
- /data/data/####/30793731c3e41269_0
- /data/data/####/30a06e7987f02341_0
- /data/data/####/30ca67afa67fdd9e_0
- /data/data/####/318833b7c9f316e5_0
- /data/data/####/31e5dad4b74f09a5_0
- /data/data/####/32363b24414e7d62_0 (deleted)
- /data/data/####/3236707ab33bbec7_0
- /data/data/####/3236707ab33bbec7_0 (deleted)
- /data/data/####/32ce07365dba1fa2_0
- /data/data/####/33304ed52f46f24a_0
- /data/data/####/338ceb2f1b2d0db8_0
- /data/data/####/338ceb2f1b2d0db8_1
- /data/data/####/33c488162e6b80fb_0
- /data/data/####/36558aa383c37438_0
- /data/data/####/368329eed6ed9768_0
- /data/data/####/36940879d7b00138_0
- /data/data/####/37d37de2d8976b31_0
- /data/data/####/37d925944b953b4f_0
- /data/data/####/37dbeb8b94c20102_0
- /data/data/####/384038c4b8aa4c99_0
- /data/data/####/390be207301ba836_0
- /data/data/####/390be207301ba836_1
- /data/data/####/39d707d5873472ad_0 (deleted)
- /data/data/####/3b0b080c0cf644c3_0
- /data/data/####/3b0b080c0cf644c3_1
- /data/data/####/3be8da3d1394c8fc_0
- /data/data/####/3be8da3d1394c8fc_0 (deleted)
- /data/data/####/3c2af89b82dc64f0_0
- /data/data/####/3d9d213a0fa06892_0
- /data/data/####/3e00b748f92e87ec_0
- /data/data/####/3e5a4f5d39a413f5_0
- /data/data/####/3e81f42a7c98f247_0
- /data/data/####/3e81f42a7c98f247_0 (deleted)
- /data/data/####/3ea9af8924b74ec5_0
- /data/data/####/3ea9af8924b74ec5_1
- /data/data/####/3ecc060b4f8f2e1d_0
- /data/data/####/40e126d0be410ae4_0
- /data/data/####/40e126d0be410ae4_1
- /data/data/####/4105d5b765c12c0c_0
- /data/data/####/424961eba0ff4faf_0
- /data/data/####/42524ffa0b0cc566_0
- /data/data/####/43188e4c7f5bbfa5_0
- /data/data/####/43aa360455e1dc27_0
- /data/data/####/43c135500a0372f5_0 (deleted)
- /data/data/####/441681f9d08bfcf0_0
- /data/data/####/441681f9d08bfcf0_1
- /data/data/####/458e2fb98a684809_0
- /data/data/####/45e828615aa1026a_0
- /data/data/####/483b434a72669300_0
- /data/data/####/48b2e18dc15bbded_0
- /data/data/####/491fc489ca5c09e2_0
- /data/data/####/491fc489ca5c09e2_1
- /data/data/####/495065d70451e84c_0
- /data/data/####/4a32a8f0f9fe1e06_0
- /data/data/####/4aa200d86c7e98d2_0
- /data/data/####/4b2ec3e245f58a21_0
- /data/data/####/4ba0a4eb5b1710e6_0
- /data/data/####/4bc521bc882557c7_0
- /data/data/####/4beb68fe8c654df3_0
- /data/data/####/4c0965d3eff20517_0
- /data/data/####/4c8a286d6da13b2c_0
- /data/data/####/4cbf5ae1f47a8c8b_0
- /data/data/####/4cd8b6a53da97139_0 (deleted)
- /data/data/####/4d400719b96053a7_0
- /data/data/####/4ed85994efaf55fa_0
- /data/data/####/4fc067fd74b46b2d_0
- /data/data/####/4fe7bd89a01cf83a_0
- /data/data/####/500a1541447b6b6456a0cc20194821af.db
- /data/data/####/50e8def63ad9bed1_0
- /data/data/####/5127fc73890942ea_0 (deleted)
- /data/data/####/517a35ded0489b19_0
- /data/data/####/51830ac17fff9ecc_0
- /data/data/####/51830ac17fff9ecc_1
- /data/data/####/518b440839d4494a_0 (deleted)
- /data/data/####/5204553662c459bb_0
- /data/data/####/53ce5bfbb7ee902a_0
- /data/data/####/53ce5bfbb7ee902a_1
- /data/data/####/54663408912e3595_0
- /data/data/####/54663408912e3595_1
- /data/data/####/5493cbdb2fb10029_0 (deleted)
- /data/data/####/55b747b76523f055_0
- /data/data/####/570ad6b43a1a3e8f_0
- /data/data/####/58837f87a0bc315b_0
- /data/data/####/58837f87a0bc315b_1
- /data/data/####/5883e30fac92bc8a_0
- /data/data/####/5896f9015cdeebcf_0
- /data/data/####/59d103a390634512_0
- /data/data/####/59d103a390634512_1
- /data/data/####/59d5a47e598e177f528cf129f0d8998d.db
- /data/data/####/5a429bef0b3664d2_0
- /data/data/####/5bb7e7fa5c84b6f6_0 (deleted)
- /data/data/####/5bdc79785c518683_0
- /data/data/####/5be75bf740e81a8c_0
- /data/data/####/5d2c9434b77e9222_0
- /data/data/####/5e2924653cf56419_0 (deleted)
- /data/data/####/5ea3a2c1ddfe0dd6_0
- /data/data/####/5ee34b61bf04d841_0
- /data/data/####/5f9072093ac19ce6_0
- /data/data/####/5f936479c56c9171_0
- /data/data/####/6090ad34cc42e35e_0
- /data/data/####/60cfbb47e3efa5e5_0
- /data/data/####/618d3cc62fea04bf_0
- /data/data/####/61c490d6d27b31f6_0
- /data/data/####/61c490d6d27b31f6_1
- /data/data/####/63ab8653c0421470_0 (deleted)
- /data/data/####/63bba00d592bf29a_0 (deleted)
- /data/data/####/6743435fbf21a8a3_0
- /data/data/####/67698c31815792b0_0
- /data/data/####/6817f0df710748ec_0
- /data/data/####/6817f0df710748ec_1
- /data/data/####/68525aca86d6d82f_0
- /data/data/####/69c52c614b354c93_0
- /data/data/####/69eeb0f02de8fb80_0
- /data/data/####/6b1b7859e20c2ee1_0
- /data/data/####/6b1d2f6995eb3670_0
- /data/data/####/6c21fb7e93d42b1a_0
- /data/data/####/6c45c1bee7cb2dc2_0
- /data/data/####/6cc5080bc6efbe55_0 (deleted)
- /data/data/####/6de983c391f93a6b_0
- /data/data/####/6df6c637b6dade71_0 (deleted)
- /data/data/####/6e6cf12f2a74f4cd_0
- /data/data/####/6eb7180358616cc4_0
- /data/data/####/6f17b43836e65254_0
- /data/data/####/7030f053afab2a01_0
- /data/data/####/703827f10f565f0a_0
- /data/data/####/7123828dace3445b_0
- /data/data/####/7123828dace3445b_1
- /data/data/####/72022d3d0dc39944_0 (deleted)
- /data/data/####/721b337ad115eecc_0
- /data/data/####/724103452ee0114d_0
- /data/data/####/724103452ee0114d_0 (deleted)
- /data/data/####/724d91ab091faf7f_0
- /data/data/####/724d91ab091faf7f_1
- /data/data/####/72c84b84eeb443ee_0
- /data/data/####/7317ed7d3aff89e5_0
- /data/data/####/738fd2a611ca33da_0
- /data/data/####/74355ebb0d51094d_0
- /data/data/####/7442072d27aa809a_0
- /data/data/####/74a2e7bbcf90778c_0
- /data/data/####/74bb6f581a904c76_0
- /data/data/####/76ca32cbd151ffea_0 (deleted)
- /data/data/####/76e2218b30ad1d7a_0
- /data/data/####/7700a0b72f008c1a_0
- /data/data/####/7700a0b72f008c1a_1
- /data/data/####/7784a5c5e58e6644_0
- /data/data/####/778fddce23c75ec6_0
- /data/data/####/77d2cef917da2d05_0
- /data/data/####/78dce85cfbe8a8fb_0
- /data/data/####/794d4b637232c524_0
- /data/data/####/794d4b637232c524_1
- /data/data/####/795e003cbebebca6_0 (deleted)
- /data/data/####/7980dd479b946917_0 (deleted)
- /data/data/####/79b3655ce90bfeef_0
- /data/data/####/7b2cd72332043296_0
- /data/data/####/7b4a59be84eaf328_0
- /data/data/####/7b6892e660426cfd_0
- /data/data/####/7b6892e660426cfd_1
- /data/data/####/7b9849bb6e5d4704_0
- /data/data/####/7bf713c1a8bb0f9c_0
- /data/data/####/7c99b6955eb2950a_0
- /data/data/####/7cf726773deb49c6_0
- /data/data/####/7cf726773deb49c6_1
- /data/data/####/7d55f51739534710_0
- /data/data/####/7e3535d82aa5f17d_0
- /data/data/####/7e4d2a4937a371e9_0
- /data/data/####/7f6af636b9e2c447_0 (deleted)
- /data/data/####/80555375ad7a8cee_0
- /data/data/####/805c50dfaeba6e18_0
- /data/data/####/80c6590d33e83345_0
- /data/data/####/80f690d169f3edc2_0
- /data/data/####/815887e26b8c65b6_0
- /data/data/####/81dbdd2088f2597c_0
- /data/data/####/81dbdd2088f2597c_1
- /data/data/####/81e18ba4055143d4_0
- /data/data/####/824a40ef3570fc1d_0
- /data/data/####/835f6e7311eae795_0
- /data/data/####/843c4deab53cfb95_0 (deleted)
- /data/data/####/8497d35c11108a35_0
- /data/data/####/851b8ca8c4cdb47e_0
- /data/data/####/85755035a8603666_0 (deleted)
- /data/data/####/872fa6fd48dc2f73_0 (deleted)
- /data/data/####/88aca9a48bd8b591_0
- /data/data/####/88df6da6a91da455_0
- /data/data/####/89b2598c8f14d892_0
- /data/data/####/89db8239622cf716_0
- /data/data/####/89f2089302c1bbb3_0
- /data/data/####/8a715f802941746e43b3e0f32694c5ae.db
- /data/data/####/8b373bf451ca65ea_0
- /data/data/####/8be546bf03ddce82_0
- /data/data/####/8c26f8cc7f95ebda_0 (deleted)
- /data/data/####/8d425fdad16f6d8c_0
- /data/data/####/8e24387cec515e14_0
- /data/data/####/8f42708e7a037e40_0
- /data/data/####/901e602dbb5fb93d_0
- /data/data/####/91312152ea760f59_0
- /data/data/####/91596e543339ee32_0
- /data/data/####/91664c334471fa99_0
- /data/data/####/923d32ae6c25f2b7_0
- /data/data/####/93318b74c2d4881a_0 (deleted)
- /data/data/####/93bacc92f81bea87_0
- /data/data/####/95055bd1178e7d79_0
- /data/data/####/96395d084dd2f43b_0
- /data/data/####/96f65ed5af8b99cb_0
- /data/data/####/984c804183a2cf79_0 (deleted)
- /data/data/####/985958d976619751_0
- /data/data/####/985958d976619751_1
- /data/data/####/987dc93cb4b37f60_0 (deleted)
- /data/data/####/9a14ae099b14128d_0
- /data/data/####/9a51ae6b891c1205_0 (deleted)
- /data/data/####/9cdf8e397c1dc061_0
- /data/data/####/9cdf8e397c1dc061_1
- /data/data/####/9d841988a1eef0f8_0
- /data/data/####/9e6f81f9ae25250b_0
- /data/data/####/9ef98f07e8de0ef4_0
- /data/data/####/9ef98f07e8de0ef4_1
- /data/data/####/9fad711986569c86_0
- /data/data/####/BmCloudPlugin.apk
- /data/data/####/BmCloudPlugin.dex
- /data/data/####/BmCloudPlugin.dex.flock (deleted)
- /data/data/####/Cookies-journal
- /data/data/####/WebViewChromiumPrefs.xml
- /data/data/####/XkdjsIx132mMcomm.xml
- /data/data/####/XkdjsIx132mMskey1.xml
- /data/data/####/XkdjsIx132mMtasks.xml
- /data/data/####/a1fd7c3272b09c56_0
- /data/data/####/a2231357e2210ec8_0
- /data/data/####/a251035c43506699_0
- /data/data/####/a2b1bf2e2f0b1d2f_0
- /data/data/####/a2b1bf2e2f0b1d2f_1
- /data/data/####/a4413f2aa572ae67_0
- /data/data/####/a4413f2aa572ae67_1
- /data/data/####/a4e24c45beb2f915_0 (deleted)
- /data/data/####/a5dcd5e747e88e99_0
- /data/data/####/a71740b6d5a6c3e5_0
- /data/data/####/a72aa320894adb82_0
- /data/data/####/a74c883bba50190c_0
- /data/data/####/a7680e75c1e6f018_0
- /data/data/####/a8186e638429e6ee_0
- /data/data/####/a8dff506de79b5d9_0
- /data/data/####/a9127089a69efa47_0
- /data/data/####/a92db4966e495667_0
- /data/data/####/a92db4966e495667_1
- /data/data/####/a985ffb4884a75ab_0
- /data/data/####/aa32d8bb5545e99f_0
- /data/data/####/aa42fae6e714f296_0
- /data/data/####/aa99a44c89f61635_0
- /data/data/####/aabd5a60157972d1_0 (deleted)
- /data/data/####/ab3055b27f7bd763_0
- /data/data/####/ab3055b27f7bd763_1
- /data/data/####/ab68f5870a3b4933_0
- /data/data/####/acc53112db29be7d_0
- /data/data/####/ad3a858b48f75566_0 (deleted)
- /data/data/####/ad46526e47a1e850_0
- /data/data/####/ad6ffd6294e6d642_0
- /data/data/####/ae45a635e6975cf7_0 (deleted)
- /data/data/####/aef3e775865d8a62_0
- /data/data/####/aefedb16017ede35_0
- /data/data/####/af7a57e31d5adad5_0
- /data/data/####/af9c79ed563bb54f_0
- /data/data/####/afa84d18baf3c8ec_0
- /data/data/####/ahq_spu_ti.xml
- /data/data/####/b1500ea2356ec553_0
- /data/data/####/b2460a46af4e6b6b_0
- /data/data/####/b3063b2628560e2a_0
- /data/data/####/b3063b2628560e2a_1
- /data/data/####/b3252a85bb63bd34_0
- /data/data/####/b3252a85bb63bd34_1
- /data/data/####/b3daac5c3e05c194_0
- /data/data/####/b4673ccb7ad2c621_0
- /data/data/####/b4debd8bd285807c_0
- /data/data/####/b53813e81ee477a2_0
- /data/data/####/b53bc282f8c092ef_0
- /data/data/####/b5a490ef70c2ecf8_0
- /data/data/####/b5ac80334e6e0b1e_0
- /data/data/####/b6c69ecaec82452b_0
- /data/data/####/b704bc6006131134_0
- /data/data/####/b70f8ea75ad421a9_0
- /data/data/####/b716dea34989f43b_0
- /data/data/####/b728302d25377d74_0
- /data/data/####/b75058728ee5d442_0
- /data/data/####/b75058728ee5d442_1
- /data/data/####/b76ea0fcf5d69277_0
- /data/data/####/b9943ff5a51e1375_0
- /data/data/####/b9aedac8bfc8b8c4_0
- /data/data/####/ba63418b7db3c0eb_0
- /data/data/####/baf01dbfc1d590b6_0
- /data/data/####/baf01dbfc1d590b6_1
- /data/data/####/bb922a25a0c0f936_0
- /data/data/####/bbe4ee5f2ab83dcd_0
- /data/data/####/bbe4ee5f2ab83dcd_1
- /data/data/####/bc1e60581d0f0a2c_0
- /data/data/####/bc518f89125dc8ba_0
- /data/data/####/bc518f89125dc8ba_0 (deleted)
- /data/data/####/bce3070284f2c280_0
- /data/data/####/bce3070284f2c280_1
- /data/data/####/be34ff59610e630b_0
- /data/data/####/be6bc5fcbc5042e1_0
- /data/data/####/be6bc5fcbc5042e1_1
- /data/data/####/be711c17e1099b43_0
- /data/data/####/bf4a3c355fb6b0c6_0
- /data/data/####/bm_sp_file.xml
- /data/data/####/c05507fe881eed5f_0
- /data/data/####/c1231569951d4651_0
- /data/data/####/c2ba1eb6be90470a_0 (deleted)
- /data/data/####/c41204aa7ccdc988_0
- /data/data/####/c58499f2c088385e_0 (deleted)
- /data/data/####/c5aa834dbaa2bd22_0
- /data/data/####/c5c3b27db18763fa_0
- /data/data/####/c5e0a6787ce5b4b3_0
- /data/data/####/c6c71daed30bfb74_0
- /data/data/####/c6c71daed30bfb74_1
- /data/data/####/c76137d46d4ee434_0
- /data/data/####/c7ce1868366f1643_0
- /data/data/####/c82b3d7888ca20ee_0
- /data/data/####/c82b3d7888ca20ee_1
- /data/data/####/c85100dc42345b8d_0
- /data/data/####/c85100dc42345b8d_1
- /data/data/####/c8a965d51ce44823_0
- /data/data/####/c92c9ccc17b14098_0 (deleted)
- /data/data/####/cb4fe77d7f247e2c_0 (deleted)
- /data/data/####/cbab1cab98c08abc_0
- /data/data/####/cbc62e0d0e0c15da_0
- /data/data/####/cc34bd00e13b9c34_0
- /data/data/####/cc34bd00e13b9c34_1
- /data/data/####/cc4909e5d14c84ec_0
- /data/data/####/cc5ecd22d7fb3157_0 (deleted)
- /data/data/####/cc614874e02ce556_0
- /data/data/####/cc7a21d2d186cdf0_0
- /data/data/####/cd6f4a72c3a838a0_0
- /data/data/####/cd6f4a72c3a838a0_1
- /data/data/####/ce0ea3e90d2586bb_0
- /data/data/####/ce4affdb3330f273_0
- /data/data/####/cea5e5357f11f16f_0
- /data/data/####/cea5e5357f11f16f_1
- /data/data/####/cecd9e3c202946ab_0
- /data/data/####/cf3fea772fd2104c_0
- /data/data/####/cf3fea772fd2104c_1
- /data/data/####/cf4a4671ae963703_0
- /data/data/####/com.yincan.first.v2.playerprefs.xml
- /data/data/####/com.yincan.first_preferences.xml
- /data/data/####/countIp.xml
- /data/data/####/d00f600ea0b5f1d6_0
- /data/data/####/d07444cce2869831_0 (deleted)
- /data/data/####/d090a7a4f1dffc7b_0
- /data/data/####/d119490a6becf284_0
- /data/data/####/d119490a6becf284_1
- /data/data/####/d13a08383d5ae40b_0
- /data/data/####/d13f44d3a8c4e7c8_0
- /data/data/####/d13f44d3a8c4e7c8_1
- /data/data/####/d1620f87e72436ef_0
- /data/data/####/d1c4424d5ae58a8d_0
- /data/data/####/d25c838a5f5126bb_0
- /data/data/####/d25ca057fb641f73_0
- /data/data/####/d28833403bca6b75_0
- /data/data/####/d37e7b46a8d18416_0
- /data/data/####/d37e7b46a8d18416_1
- /data/data/####/d4158f5934faeaca_0
- /data/data/####/d4219fff9a178666_0
- /data/data/####/d45421468fcdfcac_0
- /data/data/####/d6abf5061d55d220_0 (deleted)
- /data/data/####/d78d394ec12960d3_0
- /data/data/####/d8da16bd0dbc4967_0
- /data/data/####/d952ff91f27e44a2_0
- /data/data/####/d9faea2b4b928702_0
- /data/data/####/da16f7c07344520b_0
- /data/data/####/da16f7c07344520b_1
- /data/data/####/da66a30dd6c3607a_0
- /data/data/####/db6add0d2eeaaf69_0
- /data/data/####/db6add0d2eeaaf69_1
- /data/data/####/dbf59e42573b233e_0
- /data/data/####/dbf59e42573b233e_1
- /data/data/####/dc2d2289ca0a5e75_0 (deleted)
- /data/data/####/dc9a3e85c8813811_0
- /data/data/####/dc9a3e85c8813811_1
- /data/data/####/dce3e65cb2a3ba0e_0
- /data/data/####/dce3e65cb2a3ba0e_1
- /data/data/####/de8dec3783558442_0
- /data/data/####/df35741f075dd423_0
- /data/data/####/dfc0e0451e68216a_0 (deleted)
- /data/data/####/e08e86d84c7daea2_0
- /data/data/####/e1d1b3ce343e43c8ac97700d4a9f3042.db
- /data/data/####/e2008fa7446304a0_0
- /data/data/####/e27f5cb830028b82_0
- /data/data/####/e415fc8ca91d96d2_0
- /data/data/####/e5a597941d348366_0
- /data/data/####/e6a8401dc1604b64_0
- /data/data/####/e74c1301f27f1aa4_0 (deleted)
- /data/data/####/e7aeec34673c3ecb_0 (deleted)
- /data/data/####/e7c7876741a4d753_0
- /data/data/####/e96178e3c12d3b78_0
- /data/data/####/eac3d6a2c79dd0f1_0
- /data/data/####/eac3d6a2c79dd0f1_1
- /data/data/####/eb596800ad3c046b_0
- /data/data/####/ebbfff48e9efa795_0
- /data/data/####/ec062417d5b9fb5a_0 (deleted)
- /data/data/####/ec7640f5b293af69_0
- /data/data/####/ec86cff9c4303f5c_0
- /data/data/####/ecb6b461f7c9e59c_0
- /data/data/####/eda8abb60a8d2d18_0
- /data/data/####/ee497c9f4f3d9af8_0
- /data/data/####/ee497c9f4f3d9af8_1
- /data/data/####/ee594ee541344bc3_0 (deleted)
- /data/data/####/ef1cd9882710ddff_0
- /data/data/####/ef3c178b16b5d90c_0
- /data/data/####/ef3c178b16b5d90c_1
- /data/data/####/efe0232fcaa5e56d_0
- /data/data/####/efe0232fcaa5e56d_1
- /data/data/####/effd9d2533ca02d2_0
- /data/data/####/efff4a2e5cf1ffa4_0
- /data/data/####/efff4a2e5cf1ffa4_1
- /data/data/####/f1e62cab0da650d4_0
- /data/data/####/f26005bf558319ec_0
- /data/data/####/f30c7de58b03d3ce_0 (deleted)
- /data/data/####/f3b10db176b0debe_0
- /data/data/####/f4183cc9e8a15f96_0
- /data/data/####/f4999df2d80d6f69_0
- /data/data/####/f6cc714743bccfb3_0
- /data/data/####/f71229f082fdd91c_0
- /data/data/####/f797a7225ca77330_0
- /data/data/####/f797a7225ca77330_1
- /data/data/####/f7bbd03c15139a28_0
- /data/data/####/f9271121181fa750_0
- /data/data/####/fb824fae5c0b3267_0
- /data/data/####/fb824fae5c0b3267_1
- /data/data/####/fc1cf3111a0148ad_0
- /data/data/####/fd5e95db3ff9d1d2_0 (deleted)
- /data/data/####/ff92fa8ee764d768_0
- /data/data/####/ffa3015b13d53234_0 (deleted)
- /data/data/####/http_1020p.zhitouip.com_808.localstorage-journal
- /data/data/####/http_1020yy.admasterto.com_99.localstorage-journal
- /data/data/####/http_58.218.92.50_808.localstorage-journal
- /data/data/####/http_www.news18a.com_0.localstorage-journal
- /data/data/####/https_cheku.xcar.com.cn_0.localstorage-journal
- /data/data/####/https_sw4.duoyi.com_0.localstorage-journal
- /data/data/####/index
- /data/data/####/jokeFile.xml
- /data/data/####/metrics_guid
- /data/data/####/proc_auxv
- /data/data/####/spu_gz.xml
- /data/data/####/tempAssets.apk
- /data/data/####/the-real-index
- /data/data/####/umengDB.db
- /data/data/####/umengDB.dex
- /data/data/####/umengDB.dex.flock (deleted)
- /data/data/####/umengDB.jar
- /data/media/####/.jokeID
- /data/media/####/.nomedia
- /data/misc/####/primary.prof
Miscellaneous:
Uses the following algorithms to encrypt data:
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
Uses the following algorithms to decrypt data:
- AES-CBC-NoPadding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- DES
Accesses the ITelephony private interface.
Gets information about location.
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.
