Library
My library

+ Add to library

Profile

Adware.Gexin.21649

Added to the Dr.Web virus database: 2021-10-05

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Adware.Gexin.2.origin
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(HTTP/1.1) a####.u####.com.####.com:80
  • TCP(HTTP/1.1) exa####.com:80
  • TCP(HTTP/1.1) and####.b####.qq.com:80
  • TCP(HTTP/1.1) sdk.o####.p####.####.com:80
  • TCP(HTTP/1.1) cdn-sdk####.g####.com.####.com:80
  • TCP(HTTP/1.1) c-h####.g####.com:80
  • TCP(HTTP/1.1) d####.c####.l####.####.com:80
  • TCP(HTTP/1.1) consume####.f####.myqc####.####.com:80
  • TCP(TLS/1.0) cons####.f####.com:443
  • TCP(TLS/1.0) schedul####.yo####.com:443
  • TCP(TLS/1.0) api.map.b####.com:443
  • TCP(TLS/1.0) md####.google####.com:443
  • TCP(TLS/1.0) www.google####.com:443
  • TCP(TLS/1.2) 1####.177.14.94:443
  • UDP md####.google####.com:443
  • TCP cm-1####.g####.com:5225
  • TCP sdk.o####.t####.####.net:5224
DNS requests:
  • a####.u####.com
  • and####.b####.qq.com
  • api.map.b####.com
  • c-h####.g####.com
  • cdn-sdk####.g####.com
  • cm-1####.g####.com
  • cons####.f####.com
  • consume####.f####.myqc####.com
  • exa####.com
  • hivecon####.f####.myqc####.com
  • md####.google####.com
  • sdk-ope####.g####.com
  • sdk.c####.g####.com
  • sdk.o####.p####.####.com
  • sdk.o####.t####.####.com
  • sdk.o####.t####.####.com
  • sdk.o####.t####.####.com
  • sdk.o####.t####.####.net
  • tj.youza####.com
  • www.google####.com
HTTP GET requests:
  • cdn-sdk####.g####.com.####.com/tdata_CoH340
  • cdn-sdk####.g####.com.####.com/tdata_EDB102
  • cdn-sdk####.g####.com.####.com/tdata_GKM601
  • cdn-sdk####.g####.com.####.com/tdata_jFf739
  • cdn-sdk####.g####.com.####.com/tdata_pKX830
  • cons####.f####.com:443/v1/ad/OpeningAdInfo/get?adPlatform=####&adCategor...
  • cons####.f####.com:443/v1/home?picSize=####
  • cons####.f####.com:443/v1/things/hasNew?lastTime=####
  • cons####.f####.com:443/v1/version/getNewVersion?
  • consume####.f####.myqc####.####.com/android/patch/patchConfig.text
  • consume####.f####.myqc####.####.com/index/myExpress@2.png
  • consume####.f####.myqc####.####.com/index/nearBox@21.png
  • consume####.f####.myqc####.####.com/index/scanExpress@2.png
  • consume####.f####.myqc####.####.com/index/selfPost@2.png
  • consume####.f####.myqc####.####.com/mall/202109/hd1o99sxr3a1632993995795...
  • consume####.f####.myqc####.####.com/mall/202109/qoqaj4dxvr1632993988659....
  • consume####.f####.myqc####.####.com/mall/202109/z69sbb1lxt1632993992584....
  • d####.c####.l####.####.com/config/hzv9.conf
  • exa####.com/api/
  • sdk.o####.p####.####.com/api/addr.htm
HTTP HEAD requests:
  • consume####.f####.myqc####.####.com/android/patch/patchConfig.text
  • exa####.com/api/
HTTP POST requests:
  • a####.u####.com.####.com/app_logs
  • and####.b####.qq.com/rqd/async?aid=####
  • api.map.b####.com:443/sdkcs/verify
  • c-h####.g####.com/api.php?format=####&t=####
  • schedul####.yo####.com:443/v3/log
  • sdk.o####.p####.####.com/api.php?format=####&t=####
  • sdk.o####.p####.####.com/api.php?format=####&t=####&d=####&k=####
File system changes:
Creates the following files:
  • /data/data/####/.imprint
  • /data/data/####/.jg.ic
  • /data/data/####/002996f13e2bd4110af6fc9f343d7ac1
  • /data/data/####/014b4b931451e7067759e458b4de8375
  • /data/data/####/014ccac5c2c2ac21c61c2ef3606f9721
  • /data/data/####/0160cf142a849a296468975b8a6f10f7
  • /data/data/####/029d4b3cb94ae0622a114bdf044d7c62
  • /data/data/####/03b0214ecfb5c87e3cd276fb06dcd0c4
  • /data/data/####/0403a05b61109d5dffcd3ee31d51c8e9
  • /data/data/####/04751b0bd181e855c77d252a9ac0294d
  • /data/data/####/05510a1784b695b8e1d7fe87fad9b219
  • /data/data/####/0682641aa9d4de2620b0a836427ea18b
  • /data/data/####/06a3f0b5a1e092685b9ae40b59b8cb14
  • /data/data/####/06e4c30b775de10afb9b6ec140c0e9c5
  • /data/data/####/07aff0118e9fcd6d2a98287292463c75a73e68ab1336fe8....0.tmp
  • /data/data/####/0962483d42219e5e38cec26ac53ae28a
  • /data/data/####/0a1030ccc6b9861ab1aa70cdce12028a
  • /data/data/####/0a6a9e27059c5d9adf37117021cfd7de
  • /data/data/####/0b459dc9e49165ab9116060076392e00
  • /data/data/####/0bffcf3f990ba28fef5893742ec1bb9f
  • /data/data/####/0c048b8a8cd130d6a240435da699968a
  • /data/data/####/0c414dba6afa5aecaf92be47869fe2f8
  • /data/data/####/0d05231504e2d6e335fab9ce669952cb
  • /data/data/####/0da84a704e19b8e7f1ed4d0c5b968af9
  • /data/data/####/0e6161262a3aea26e552273bdb6a5a32
  • /data/data/####/0f3a8fbcca5991c9edeb265a0957d8bf
  • /data/data/####/1004
  • /data/data/####/10433433975f9607a4c14bb54d397373
  • /data/data/####/1082a81b48bc
  • /data/data/####/120ccf012c12da038c82686699bec38a
  • /data/data/####/13018a7c89d66d77e40d62bd11825047
  • /data/data/####/13346126fbf15172ea1da6db6ca4d38a
  • /data/data/####/13c847877d4a4f81b5cdc1dd3a5b5042
  • /data/data/####/1402ef8c7535ff67d5c41bff7d07662a
  • /data/data/####/1418ad84184d163dd59a5dc501a7f6fa
  • /data/data/####/147714a0657c13e052649171972ebd58
  • /data/data/####/1821f0b0fec0c1770530ca5268de3fa1
  • /data/data/####/187d4e9d9778471933d587eaf52b8ea8
  • /data/data/####/1890bb1606b4eee744497ba2ac294258
  • /data/data/####/18c066e464fb675983e512b76e70ac7b
  • /data/data/####/1a0e46afad7a30b53bd4dfd2b324e16b
  • /data/data/####/1a83796da1c6d329ca65fc7696c63142
  • /data/data/####/1b4cb76688f12872f157081b7eff9978
  • /data/data/####/1c97a3fce2a0a0e53d9242758752e9e6
  • /data/data/####/1d0e5d9c38b924cd50d24a4bd8b3e23d
  • /data/data/####/1d1f471c22ca01597758d14c5bcf47c0
  • /data/data/####/1ddfc1b5cbda2d3325c079c8d61b7ae7
  • /data/data/####/1e96e9c0d3b8f9c2e4d8a1bed1474c48
  • /data/data/####/1eb2887c7539a272ef65c822116251ef
  • /data/data/####/1f401d5c79642e335be7994d317fbd03
  • /data/data/####/1f6cb1edb6b1a9c4ef086bcb1f7c4303
  • /data/data/####/1f727590c89728ff68784e772c4b9f94
  • /data/data/####/1f77ea8f3553342e1abd027f158d7491
  • /data/data/####/205575991ec537dd1b72a644975b5aa2
  • /data/data/####/21361e7a39a2a090f556f20e4ef8ba82
  • /data/data/####/21d3292bbb96f4a46c84b23279833795
  • /data/data/####/21e4fd4a7ad5a4b63e00d5a3564224b5
  • /data/data/####/236f9a71e205f5e9d92e8dfd2c7405db
  • /data/data/####/24165d56c4a92ac33c1cef72d6a20d2c
  • /data/data/####/2473b7fd597ae274f8b123b78d3a5729
  • /data/data/####/2513db3a88bbbc0e0c1a000525ce8741
  • /data/data/####/2540f94507b46d348b84a810a77804b6
  • /data/data/####/259ebfb6867bb1ed9cab625480b922a1
  • /data/data/####/267b4655b199ca7a349b678cc2f46715
  • /data/data/####/2961f6dd14ecbd8666ed097cfd36175e
  • /data/data/####/2a01f26a5939d30b92d98585c877d034
  • /data/data/####/2a14ed460cc31e85b135eb3d0c41051c
  • /data/data/####/2b60a5a7152ab14198947844c74cc936
  • /data/data/####/2c420d9c0d2f365c9fc63105a6c9af6a
  • /data/data/####/2d12d0d68819e425729cca160825020e
  • /data/data/####/2d36929020794a9eacb3645037cf20d2
  • /data/data/####/2dc58d39217d1eb9b97bfa1c0f2f516d
  • /data/data/####/30755c8c774666a8382fa9b2e94b6d0d
  • /data/data/####/315b912a801248776cd02174ee48999c
  • /data/data/####/32b52aaabcc17ee3f8af3c3bc085d462
  • /data/data/####/3329af0a1bc87ae2e30a1dd29979dac4
  • /data/data/####/3387efb53cf86e12d265ed6cff89b14e
  • /data/data/####/33f08c5126a9415bf772322829bcd88b
  • /data/data/####/35729a598731e1197eb1225900482d77
  • /data/data/####/3623106bf9a909560672db0de334efaa
  • /data/data/####/362f2494314ff8437763e2141d21cf96
  • /data/data/####/36bd660ee5910b94dab2ae5533dfc344
  • /data/data/####/375b05b383040f3c51d0e0bb44c08111
  • /data/data/####/3887a4b092f3bb123cd0ed941595b0dc
  • /data/data/####/3a0c6f2c417a89594476d52ffae4b39db26bf53ed6d2bba....0.tmp
  • /data/data/####/3a41a642f3d57447c4a50536bc02bab7
  • /data/data/####/3b4d916e78cb247d517c0bf314ca94a9
  • /data/data/####/3c11e02f9aa6da01e22d45128f457c17
  • /data/data/####/3cf362fda3c501d83a1e56ec774b1459
  • /data/data/####/3e32e1408b50adc62df70eeb5e773856
  • /data/data/####/3e48f7b239ca6995e8f445c76ae6ae30
  • /data/data/####/3ff0e827d8f4834ba1b97f2581fcd7fa
  • /data/data/####/40a7c4fd323053429085873d72fb55bb
  • /data/data/####/40b9b98abbaa5e2b7f6be9d69d472877
  • /data/data/####/4186e5882214a1ff4349e0ad89efa479
  • /data/data/####/434245b9e84181ab07dfa808858f213e
  • /data/data/####/439712f10360f2bf3f4d397920008c5f
  • /data/data/####/43baaa8cf9514c4b02cd3de00604b11f
  • /data/data/####/43d051672a66fbc6d4f2876020a1a962
  • /data/data/####/44235b2edb3cacee246c4e64e5222cef
  • /data/data/####/453cd200ee9d3dab4c1cba77e0388da6
  • /data/data/####/474eb78bc99c5ffd8d2eaf8d2468bbf3
  • /data/data/####/4787ac8e1b0cd1b8ff79be0e62305a6e
  • /data/data/####/47a042688d6cdb5b26d51b1481fa5093
  • /data/data/####/47d729ef3bde631fe25a0e373f775a1a
  • /data/data/####/48d52b42fa29dd4b31a8dd36651604ae
  • /data/data/####/4936b05ede4d270bad6c82b8e4e6722a
  • /data/data/####/4956dab4eac1be67beca94fbe419c5e8
  • /data/data/####/495ba5df261a1468920905e4ba359cc5
  • /data/data/####/4a2c3189c733071457f56ca8cfdd8284
  • /data/data/####/4a42de8ac75e7cd2e865439caa3d8b57
  • /data/data/####/4b0626e2e091a9a1ccb0873a69312794
  • /data/data/####/4b1dcd9cacb861fe6752006ba66fd1b6
  • /data/data/####/4bbf1199e22ad821f803adedf07fcd11
  • /data/data/####/4bed836aed827bfde026799a07d3d0c8
  • /data/data/####/4c97566b74b545f128250784d102d1c4
  • /data/data/####/4cb2dd2fe6b63ae9de3e9b1a73c10c72
  • /data/data/####/4cee5ae3ba5159b196ba45212cca1d8f
  • /data/data/####/4d500643789c0a6a12165facaf4b74f2
  • /data/data/####/4de6c0ecea5a7b75479c914a71aef0ad
  • /data/data/####/4ebe0b7487d09371df185f5119e639bd
  • /data/data/####/4f5d7365d29b6b297923c086fa9fe237
  • /data/data/####/4f7704e74929e64c05fd7f45f1020ae0
  • /data/data/####/5008285c97e9758756d17a08109d1a26
  • /data/data/####/50b39d6c57b26ebf95622a69e8d04af8
  • /data/data/####/531a2c4312a06771c0a7d1daa52510f0
  • /data/data/####/534b77b149d58b735c854c1fad4d818c
  • /data/data/####/53b4a2114ecde8870417a51b557e694b
  • /data/data/####/5414f6523a42f2f0cf1204913d6bae60
  • /data/data/####/54a486082ac1828ae879cb891712c09b
  • /data/data/####/54e957084695c632a934a9dca0a3c6a2
  • /data/data/####/5652c7a6ae61c45384392fdbc3146985
  • /data/data/####/56fe44fdc3d4f44a8f954a00f5999055
  • /data/data/####/57a432762748b6ea06ecb3642081174f
  • /data/data/####/586cafe4f45718cd2c793e92b6774087
  • /data/data/####/58c4458e5a3d8aa4bbdfedfd778e7daf
  • /data/data/####/58f811dbec76a19f727845355af4e510
  • /data/data/####/596d4a07aa7f15f07c517165d753310a
  • /data/data/####/5b140b1f12ab05e77e661829f1e481ec
  • /data/data/####/5c783bc3c14bfb2a0bcfaa852e6c6e8d
  • /data/data/####/5cbed655542ee8a9963255f4e98fb639
  • /data/data/####/5d49d5c207923263b3349ee564c29905
  • /data/data/####/5d9acc434335a1446d2cf5b5c4ed2c24
  • /data/data/####/5dc6b2da19dda3b354731f4ebb338f41
  • /data/data/####/5f4b7960802b5a7ed36c7134051b53d6
  • /data/data/####/5ff69fb76f4f1fbcc82a8341c708c769
  • /data/data/####/60287d94960e951bdfa8b3008a44c4d9
  • /data/data/####/60e19078182c936651deab718a03aa6a
  • /data/data/####/630dbd47a7c264e7a11b9c0c9fc3ff49
  • /data/data/####/634c6f79e91c0c69e89fee2673276e24
  • /data/data/####/63ceb3c919baea334ea85fbec102aede
  • /data/data/####/658b31ba2af4ff74031ac4b4a46cb33d
  • /data/data/####/65c63fcf564a3ed4cf209ff872d02c99
  • /data/data/####/65cab53661b5e8e463ec0cc051ce6b6d
  • /data/data/####/6770bb2ac4ca51e06cd5228ce6a1292f
  • /data/data/####/67e88f5aad2ef3881c9141b0045b7144
  • /data/data/####/68caff8e48ecbf566f6e1f9a7af5e499
  • /data/data/####/6b0a240382399f5f732553ed2a8da7b5
  • /data/data/####/6c04558fd8a63a4b8634215ad286bb9c
  • /data/data/####/6c2282bd0df4352b7592a5c3ff2b4b7a
  • /data/data/####/6c7383984e074858f70b807c4c8d73b3
  • /data/data/####/6c781e07db81e299561a677a1de0a56f
  • /data/data/####/6d07ee8a6c9b1654623a6bc99016fe77
  • /data/data/####/6d1113840736885c60567f14206fee28
  • /data/data/####/6dea6629174f3a7148bdc933cd27457e
  • /data/data/####/6e18be5da88fc0cb0a936b2b6d97fcbd
  • /data/data/####/6fba70f759a04025ae829d9db89143f4
  • /data/data/####/6fe44cf21a974d7207075f0373909cf1
  • /data/data/####/7001257ec8139c3089cb29f5f802a829
  • /data/data/####/7052492b937636a4d98607d598cc72c1
  • /data/data/####/7125295de524b6c80fc6785c15419070
  • /data/data/####/7138500a94dc68620320f6cbc7abf9ed
  • /data/data/####/73b769801e7ceb73074ec9422965d058
  • /data/data/####/743dae4665e6e0eb5914405d31acd40d811d7d7d8095ce2....0.tmp
  • /data/data/####/747af76717713ff81e8ab18e01d611c9
  • /data/data/####/763b7600a4544b0b6a09f9ff801af3ce
  • /data/data/####/766ec3061b48e4f8717ebb83d733a30d
  • /data/data/####/76ac5c8c15daadcdc156f087e56289a7
  • /data/data/####/774b1d690c6ab394987b034aaca57fc5
  • /data/data/####/77c40fb6894cbc5579733de3bf705703
  • /data/data/####/78d4136e27565afc6bd7e481ff2a3e76
  • /data/data/####/791733f7e6bf24defc08a53ce3a685cf
  • /data/data/####/79aad9d76129471e90d3303855100a92
  • /data/data/####/79f3f20e2c4b806f7332361bdd74dbd4
  • /data/data/####/7d1a2e07f5e27aaa6d0bc72495d7fff6
  • /data/data/####/7d6a49ea695d236608efdda11219bd43
  • /data/data/####/7dd9de89c1b38b9ce8ca4a237c08ba53
  • /data/data/####/7e05d28eeccf478decd35eab86911550
  • /data/data/####/7f16dad35017e945b755cf62b8998024
  • /data/data/####/7f7f609b4305a46076b9acddf8f2b81b
  • /data/data/####/8144fc089b1b095114ef2df602c596eb
  • /data/data/####/82992d59125ca6c05cba76a92f38654b
  • /data/data/####/82bf612982847e060de6b7281bc6854b
  • /data/data/####/82ded134e79fea133e2e3a50e2258eb7
  • /data/data/####/84d58a188d69f4f47f56441007928d2994793a310d6d0bb....0.tmp
  • /data/data/####/854fbbf1d1f3145cf4260cd5a71eeb0a
  • /data/data/####/87cbca2f0660a4561df8af651e762c84
  • /data/data/####/87e0f2bfec142d79a595b39f02e84fb6
  • /data/data/####/893db78f7a20ceed16b9270df2960e83
  • /data/data/####/8973adb421e1f835927fc53df6a27811
  • /data/data/####/8a8aa501d3c79c8fc0d38aec0e4fb59e
  • /data/data/####/8c5e2dd6de6c4f3c51dc551b8bd74689
  • /data/data/####/8e4ea68df559e4d151b237d83dac3162
  • /data/data/####/90a50e0c95061cda0f1ba30c6c661d4e
  • /data/data/####/90e2a7a03c7bb52c742c13777297091b
  • /data/data/####/910f117ff10f9375b67fd01d3fdf5d78
  • /data/data/####/91ab805ae5d0177ae43a63b9c92adeb1
  • /data/data/####/921fe71519d493c7cc960bae739708ed
  • /data/data/####/9264ec4b131dfeede457307ce19b172e
  • /data/data/####/927096d313b16ebc367d3bd00ae2849b191f2b52c14257d....0.tmp
  • /data/data/####/92e5020a37c860d659c8e29f6e630b5f
  • /data/data/####/9317643a52fc1f751d6d733afd03cea4
  • /data/data/####/9448517e4d11e2ac617aeb39caef6d9f
  • /data/data/####/954e6d05f16f078d349bc4583ca86928
  • /data/data/####/9621a394e26521794893834435c2c2f8
  • /data/data/####/97a1374d0dff302c0b496fdd0ec28dd9
  • /data/data/####/980d1a77ca9792dca5b49f9fd8f1b96d
  • /data/data/####/9848ea450b68f69a95bcd4cb5f1796cb
  • /data/data/####/989e3276ec1c8ba12b59dc29a3607c21
  • /data/data/####/98e4419f2da295906cc7b7b6ee1429e8
  • /data/data/####/992a5ed696db84e036306c8d24e793f6
  • /data/data/####/99cfcc029e8e911ff88e63daa045e184
  • /data/data/####/9b141fcbf220248071e9c92d84ea3c42
  • /data/data/####/9ddcc0d2fb35a0b8492f4f4e58cc1633
  • /data/data/####/9ef455f5e61febd16ad0f169a0f9fc8b
  • /data/data/####/9f28084121eedc83e23ae1301ad86220
  • /data/data/####/HiveConsumer.db-journal
  • /data/data/####/a23bbc828b54a55fc2520ee676f67c42
  • /data/data/####/a37bc4a7ea31f2941d3d3cde348e87b5
  • /data/data/####/a392b7c224b39d313a2eaeb64c45f742
  • /data/data/####/a5087428c8b8bcda369f384aff28f582
  • /data/data/####/a5652997d8e7d48f19c765e5aac8d33a
  • /data/data/####/a5724cb3f8c41215bfc1e20a9b92a405
  • /data/data/####/a586fe3faa8d5ce6d465bbf62f65e78d
  • /data/data/####/a5aeab47bbc5ff9a400596be83c800bc
  • /data/data/####/ad690d6009447458ca931b82f9b72fbf
  • /data/data/####/ad9fab369aae10ed4a2659b599989acb
  • /data/data/####/adc3c184099a2edf88451dcf86baeabd
  • /data/data/####/ae3f5d405f5748d62a69c81344056f11
  • /data/data/####/authStatus_com.fcbox.hiveconsumer.xml
  • /data/data/####/authStatus_com.fcbox.hiveconsumer;pushservice.xml
  • /data/data/####/b1e1dab9ce6d8497e538f73c2f9a9753
  • /data/data/####/b27b331218ec0e9b2b72037a69c8f1aa
  • /data/data/####/b3f82dcb6bed0deb7d2ca742ed5e5c40
  • /data/data/####/b488e45379a395ce1d87cfed24d88931
  • /data/data/####/b5935d9c12883d185692d54258fd644c
  • /data/data/####/b5a252604458c21df298db3e5252ad5e
  • /data/data/####/b5bb8e81d9cf6b5725dfb07240e58ed7
  • /data/data/####/b686d7fd6c1e0cba4b9d75eb944745b7
  • /data/data/####/b8c5b0af77fff80880ec1fd7ca9d405c
  • /data/data/####/b94348e072da612734b6c8a2886af2f6
  • /data/data/####/b9506edde762a2adf6b6d76ce43d7177
  • /data/data/####/b9b6dbbd2240f43ca227c83b1a554559
  • /data/data/####/baa4c9030c71d379ec21adfc5755d5c5
  • /data/data/####/baf02b074126cf0419f2fa7a40f9c0bf
  • /data/data/####/bc20ae591d593a9889a3e9176e6872e7
  • /data/data/####/bccd006b8c86802d92f20559b8f9b7d5
  • /data/data/####/bd5da3b1d0e20ddd3d962181a23a9c53
  • /data/data/####/bdb7c9b2f281e541ffa67f27f05c8aba
  • /data/data/####/bdfcd2b38721af82519bb9de32ce7999
  • /data/data/####/bugly_db_-journal
  • /data/data/####/c06b48f9417133ce9ec669dd1d9d4be9
  • /data/data/####/c114cd76c6c8139ecb33a0c86c35527b
  • /data/data/####/c17f00dbb67db74209c605b8cadc2a4d
  • /data/data/####/c1e463d5b9a52c2d192a84a9b2989304
  • /data/data/####/c25acfb43f1715f39952d495c782d5c7
  • /data/data/####/c299995f8b1d2226b34f6b8d68a930bf
  • /data/data/####/c3a713161186cf9d59c13ef92889d43e
  • /data/data/####/c4d705fefedc0276ba995651e76ab785
  • /data/data/####/c66dae34f78f9265a97f1a099a4ae171
  • /data/data/####/c79f2f924ec79a0d777dce4d7f3b0cc7
  • /data/data/####/c891a38f866c4fc537ccd008c47b719e
  • /data/data/####/c89ce7576f00c47cc76df1bf7dde4d3b
  • /data/data/####/c8b8d419685713c1a5e03349fbbeffa3
  • /data/data/####/c8d7009d064b7a8e4faec80c220706b3
  • /data/data/####/cache_data_tmp
  • /data/data/####/cbfb9079b47da179b7aead1b75c6a36b
  • /data/data/####/cc.db
  • /data/data/####/cc.db-journal
  • /data/data/####/cc93f5602494d5cbafd9c2149164f60c
  • /data/data/####/cdd48c565a764d961e4cf6ec32c7a241
  • /data/data/####/cecdd77e086a20f44888ad89246fa5bc
  • /data/data/####/cff8167b08e9710641205279deebd6c0
  • /data/data/####/classes.dex
  • /data/data/####/classes.oat
  • /data/data/####/classes2.dex
  • /data/data/####/classes3.dex
  • /data/data/####/com.youzan.mobile.AnalyticsPrefs.xml
  • /data/data/####/com.youzan.mobile.AnalyticsPrefs.xml.bak
  • /data/data/####/crashrecord.xml
  • /data/data/####/d0e314fc11a2fffa8d91ae4f12aadb2e
  • /data/data/####/d0f3a013aa5b98770be1acc5961cc410
  • /data/data/####/d148c128e0ad57c34f554da8d9a89e07
  • /data/data/####/d16eddef163e36e1ee7aecf7dfeb46ee
  • /data/data/####/d53a600fd122f5d6996fed02cfd892e1
  • /data/data/####/d548945982cb0e384c1b48529f398010
  • /data/data/####/d5539b454bd248855d527f9ce5137648
  • /data/data/####/d59b2e5995b22787671c1f0cb5bf508c
  • /data/data/####/d5d906fb39bd38910026e8e704b089c7
  • /data/data/####/d61cb196efea6a1aa1571b280cfc2e5e
  • /data/data/####/d7ad84e3977c7e6c565b77ef559c655c
  • /data/data/####/d88cb75b6f667a9a9c9c7e05a85da145
  • /data/data/####/d910a4db40821d7c00a1cc3091afca18
  • /data/data/####/da0523f355075fffff862c4fa2bc8045
  • /data/data/####/db43e6b0f0ad6cf128aa8abc242f3c9a
  • /data/data/####/db_default_job_manager-journal
  • /data/data/####/dc9248ac546ca488a2b2d23a39140463
  • /data/data/####/dce87d38f68ed7332a26ed7acba16dec
  • /data/data/####/dd629092af4198c75ec06dd770556adb
  • /data/data/####/de91c497cdfa261868bcc712f065defb
  • /data/data/####/def170c5997285ab8536ff62b96c79e4
  • /data/data/####/dfdfba50c0cf0b20cb2bbe7cd1857847
  • /data/data/####/e00faeb92f438644a8b9df2479004bf7
  • /data/data/####/e024f6495cb7ca6c25a2d9b315709491
  • /data/data/####/e0ae7d28bb266596e6eb22937ffb10b5
  • /data/data/####/e0d6356cbef9182a61b10d218cb2d424
  • /data/data/####/e128765b5ed4b21b3cca340454c90eaa
  • /data/data/####/e14119558eb093a6281b8026ae91fdbf
  • /data/data/####/e1a2157e40d8a96a07ea38418748b6ec
  • /data/data/####/e47a2c21a55befac69580eed2422a433
  • /data/data/####/e489b70e3a6350350b4388fb0f36962e
  • /data/data/####/e4ea2ed221f6e71ba2b2ddeb31aa3213
  • /data/data/####/e64d6019124045fd2d0a3578432a92f3
  • /data/data/####/e7de3a995b9ec0cccb4f945ecbaabba6
  • /data/data/####/e9797d3fd4b2e88842dbab2ab368fb23
  • /data/data/####/ea549f0a4f1ca4be46cdbcb73377a1ee
  • /data/data/####/eaf316f15e8b347c3b35e129e5be3d98
  • /data/data/####/eb88eb730f333fa574de6294f42ab24f
  • /data/data/####/ec8ecabb0c5362a311f5f289865b0c0e
  • /data/data/####/ecabafc3d657a6a5ec9ce6836a109027
  • /data/data/####/ed9a363206e2de8646dce93bfb28ec17
  • /data/data/####/ed9b8145e67a337066aef0c43863c1c9
  • /data/data/####/eee4fc594b714531386f985f6a0fa001
  • /data/data/####/eee882f8bb93bf6adb7be12319c15d32
  • /data/data/####/ef6778efaedf68d77be59f0654071f6c
  • /data/data/####/events
  • /data/data/####/events-journal
  • /data/data/####/exchangeIdentity.json
  • /data/data/####/exid.dat
  • /data/data/####/f0f381b5b81c8455344107c3d13c2330
  • /data/data/####/f1a84548376579009d221be88151629b
  • /data/data/####/f1d07f26d56bb5de084cd90dbec29b36
  • /data/data/####/f1eb06846289bf9f773f1a86a5a35440
  • /data/data/####/f3898103efaabfd688c89169e1723dd0
  • /data/data/####/f50310dffc0fa3ee81239de27f8fcbd7
  • /data/data/####/f53144a5550be72650fc02b175bd93b6
  • /data/data/####/f56f67da38def7cf15e125f8f23f0c3b
  • /data/data/####/f5ba10b185ccd84480cbb5f74175a147
  • /data/data/####/f5f597c7e81fbf76e15dcc6c7a8abda3
  • /data/data/####/f658b4545e17a1a1911bb651d63438b4
  • /data/data/####/f78c73e1ae63cc16c2ee494903443d41
  • /data/data/####/f7b0fb47869336166aec92a45ec0c02a
  • /data/data/####/f7ea64e74668edb57d2bf7b7a439ecdce9540d8e4511f83....0.tmp
  • /data/data/####/f801cd83d1e773c5f1e1e4c6069cd5b6
  • /data/data/####/fa4721214535f864385758cb137ffc68
  • /data/data/####/faebd5d4afea6498f433b6e1a65a591c
  • /data/data/####/fb7025956e6269c051bdcbaa80b0c332
  • /data/data/####/fd1905a615dd774ed8e9754df2eed6138bae7cb5d214124....0.tmp
  • /data/data/####/fd61cde5fc2134e952766eac18d7deb3
  • /data/data/####/ff56bc3198d4347293314d80f5d6732a
  • /data/data/####/getui_sp.xml
  • /data/data/####/gkt-journal
  • /data/data/####/gx_sp.xml
  • /data/data/####/hiveconsumer_app.xml
  • /data/data/####/init.pid
  • /data/data/####/init_c1.pid
  • /data/data/####/jg_so_upgrade_setting.xml
  • /data/data/####/jg_so_upgrade_setting.xml.bak
  • /data/data/####/journal.tmp
  • /data/data/####/libcuid.so
  • /data/data/####/libjiagu.so
  • /data/data/####/local_crash_lock
  • /data/data/####/local_crash_lock (deleted)
  • /data/data/####/mac.xml
  • /data/data/####/native_record_lock
  • /data/data/####/native_record_lock (deleted)
  • /data/data/####/proc_auxv
  • /data/data/####/push.pid
  • /data/data/####/pushext.db-journal
  • /data/data/####/pushg.db-journal
  • /data/data/####/pushk.db-journal
  • /data/data/####/pushsdk.db-journal
  • /data/data/####/run.pid
  • /data/data/####/security_info
  • /data/data/####/tdata_CoH340
  • /data/data/####/tdata_CoH340.dex
  • /data/data/####/tdata_CoH340.dex.flock (deleted)
  • /data/data/####/tdata_CoH340.jar
  • /data/data/####/tdata_GKM601
  • /data/data/####/tdata_GKM601.dex
  • /data/data/####/tdata_GKM601.dex.flock (deleted)
  • /data/data/####/tdata_GKM601.jar
  • /data/data/####/tdata_jFf739
  • /data/data/####/tdata_jFf739.dex
  • /data/data/####/tdata_jFf739.dex.flock (deleted)
  • /data/data/####/tdata_jFf739.jar
  • /data/data/####/tdata_pKX830
  • /data/data/####/tdata_pKX830.dex
  • /data/data/####/tdata_pKX830.dex.flock (deleted)
  • /data/data/####/tdata_pKX830.jar
  • /data/data/####/tinkerConfig.text
  • /data/data/####/tinkerConfig.text.lmf
  • /data/data/####/tinkerConfig.text.tmp
  • /data/data/####/ua.db
  • /data/data/####/ua.db-journal
  • /data/data/####/umeng_general_config.xml
  • /data/data/####/umeng_general_config.xml.bak
  • /data/data/####/umeng_it.cache
  • /data/data/####/zlc_season_rxdownload_download.db-journal
  • /data/media/####/.cuid2
  • /data/media/####/002996f13e2bd4110af6fc9f343d7ac1
  • /data/media/####/014b4b931451e7067759e458b4de8375
  • /data/media/####/014ccac5c2c2ac21c61c2ef3606f9721
  • /data/media/####/0160cf142a849a296468975b8a6f10f7
  • /data/media/####/029d4b3cb94ae0622a114bdf044d7c62
  • /data/media/####/03b0214ecfb5c87e3cd276fb06dcd0c4
  • /data/media/####/0403a05b61109d5dffcd3ee31d51c8e9
  • /data/media/####/04751b0bd181e855c77d252a9ac0294d
  • /data/media/####/05510a1784b695b8e1d7fe87fad9b219
  • /data/media/####/0682641aa9d4de2620b0a836427ea18b
  • /data/media/####/06a3f0b5a1e092685b9ae40b59b8cb14
  • /data/media/####/06e4c30b775de10afb9b6ec140c0e9c5
  • /data/media/####/0962483d42219e5e38cec26ac53ae28a
  • /data/media/####/0a1030ccc6b9861ab1aa70cdce12028a
  • /data/media/####/0a6a9e27059c5d9adf37117021cfd7de
  • /data/media/####/0b459dc9e49165ab9116060076392e00
  • /data/media/####/0bffcf3f990ba28fef5893742ec1bb9f
  • /data/media/####/0c048b8a8cd130d6a240435da699968a
  • /data/media/####/0c414dba6afa5aecaf92be47869fe2f8
  • /data/media/####/0d05231504e2d6e335fab9ce669952cb
  • /data/media/####/0da84a704e19b8e7f1ed4d0c5b968af9
  • /data/media/####/0e6161262a3aea26e552273bdb6a5a32
  • /data/media/####/0f3a8fbcca5991c9edeb265a0957d8bf
  • /data/media/####/10433433975f9607a4c14bb54d397373
  • /data/media/####/120ccf012c12da038c82686699bec38a
  • /data/media/####/13018a7c89d66d77e40d62bd11825047
  • /data/media/####/13346126fbf15172ea1da6db6ca4d38a
  • /data/media/####/13c847877d4a4f81b5cdc1dd3a5b5042
  • /data/media/####/1402ef8c7535ff67d5c41bff7d07662a
  • /data/media/####/1418ad84184d163dd59a5dc501a7f6fa
  • /data/media/####/147714a0657c13e052649171972ebd58
  • /data/media/####/1821f0b0fec0c1770530ca5268de3fa1
  • /data/media/####/187d4e9d9778471933d587eaf52b8ea8
  • /data/media/####/1890bb1606b4eee744497ba2ac294258
  • /data/media/####/18c066e464fb675983e512b76e70ac7b
  • /data/media/####/1a0e46afad7a30b53bd4dfd2b324e16b
  • /data/media/####/1a83796da1c6d329ca65fc7696c63142
  • /data/media/####/1b4cb76688f12872f157081b7eff9978
  • /data/media/####/1c97a3fce2a0a0e53d9242758752e9e6
  • /data/media/####/1d0e5d9c38b924cd50d24a4bd8b3e23d
  • /data/media/####/1d1f471c22ca01597758d14c5bcf47c0
  • /data/media/####/1ddfc1b5cbda2d3325c079c8d61b7ae7
  • /data/media/####/1e96e9c0d3b8f9c2e4d8a1bed1474c48
  • /data/media/####/1eb2887c7539a272ef65c822116251ef
  • /data/media/####/1f401d5c79642e335be7994d317fbd03
  • /data/media/####/1f6cb1edb6b1a9c4ef086bcb1f7c4303
  • /data/media/####/1f727590c89728ff68784e772c4b9f94
  • /data/media/####/1f77ea8f3553342e1abd027f158d7491
  • /data/media/####/205575991ec537dd1b72a644975b5aa2
  • /data/media/####/21361e7a39a2a090f556f20e4ef8ba82
  • /data/media/####/21d3292bbb96f4a46c84b23279833795
  • /data/media/####/21e4fd4a7ad5a4b63e00d5a3564224b5
  • /data/media/####/236f9a71e205f5e9d92e8dfd2c7405db
  • /data/media/####/24165d56c4a92ac33c1cef72d6a20d2c
  • /data/media/####/2473b7fd597ae274f8b123b78d3a5729
  • /data/media/####/2513db3a88bbbc0e0c1a000525ce8741
  • /data/media/####/2540f94507b46d348b84a810a77804b6
  • /data/media/####/259ebfb6867bb1ed9cab625480b922a1
  • /data/media/####/267b4655b199ca7a349b678cc2f46715
  • /data/media/####/2961f6dd14ecbd8666ed097cfd36175e
  • /data/media/####/2a01f26a5939d30b92d98585c877d034
  • /data/media/####/2a14ed460cc31e85b135eb3d0c41051c
  • /data/media/####/2b60a5a7152ab14198947844c74cc936
  • /data/media/####/2c420d9c0d2f365c9fc63105a6c9af6a
  • /data/media/####/2d12d0d68819e425729cca160825020e
  • /data/media/####/2d36929020794a9eacb3645037cf20d2
  • /data/media/####/2dc58d39217d1eb9b97bfa1c0f2f516d
  • /data/media/####/30755c8c774666a8382fa9b2e94b6d0d
  • /data/media/####/315b912a801248776cd02174ee48999c
  • /data/media/####/32b52aaabcc17ee3f8af3c3bc085d462
  • /data/media/####/3329af0a1bc87ae2e30a1dd29979dac4
  • /data/media/####/3387efb53cf86e12d265ed6cff89b14e
  • /data/media/####/33f08c5126a9415bf772322829bcd88b
  • /data/media/####/35729a598731e1197eb1225900482d77
  • /data/media/####/3623106bf9a909560672db0de334efaa
  • /data/media/####/362f2494314ff8437763e2141d21cf96
  • /data/media/####/36bd660ee5910b94dab2ae5533dfc344
  • /data/media/####/375b05b383040f3c51d0e0bb44c08111
  • /data/media/####/3887a4b092f3bb123cd0ed941595b0dc
  • /data/media/####/3a41a642f3d57447c4a50536bc02bab7
  • /data/media/####/3b4d916e78cb247d517c0bf314ca94a9
  • /data/media/####/3c11e02f9aa6da01e22d45128f457c17
  • /data/media/####/3cf362fda3c501d83a1e56ec774b1459
  • /data/media/####/3e32e1408b50adc62df70eeb5e773856
  • /data/media/####/3e48f7b239ca6995e8f445c76ae6ae30
  • /data/media/####/3ff0e827d8f4834ba1b97f2581fcd7fa
  • /data/media/####/40a7c4fd323053429085873d72fb55bb
  • /data/media/####/40b9b98abbaa5e2b7f6be9d69d472877
  • /data/media/####/4186e5882214a1ff4349e0ad89efa479
  • /data/media/####/434245b9e84181ab07dfa808858f213e
  • /data/media/####/439712f10360f2bf3f4d397920008c5f
  • /data/media/####/43baaa8cf9514c4b02cd3de00604b11f
  • /data/media/####/43d051672a66fbc6d4f2876020a1a962
  • /data/media/####/44235b2edb3cacee246c4e64e5222cef
  • /data/media/####/453cd200ee9d3dab4c1cba77e0388da6
  • /data/media/####/474eb78bc99c5ffd8d2eaf8d2468bbf3
  • /data/media/####/4787ac8e1b0cd1b8ff79be0e62305a6e
  • /data/media/####/47a042688d6cdb5b26d51b1481fa5093
  • /data/media/####/47d729ef3bde631fe25a0e373f775a1a
  • /data/media/####/48d52b42fa29dd4b31a8dd36651604ae
  • /data/media/####/4936b05ede4d270bad6c82b8e4e6722a
  • /data/media/####/4956dab4eac1be67beca94fbe419c5e8
  • /data/media/####/495ba5df261a1468920905e4ba359cc5
  • /data/media/####/4a2c3189c733071457f56ca8cfdd8284
  • /data/media/####/4a42de8ac75e7cd2e865439caa3d8b57
  • /data/media/####/4b0626e2e091a9a1ccb0873a69312794
  • /data/media/####/4b1dcd9cacb861fe6752006ba66fd1b6
  • /data/media/####/4bbf1199e22ad821f803adedf07fcd11
  • /data/media/####/4bed836aed827bfde026799a07d3d0c8
  • /data/media/####/4c97566b74b545f128250784d102d1c4
  • /data/media/####/4cb2dd2fe6b63ae9de3e9b1a73c10c72
  • /data/media/####/4cee5ae3ba5159b196ba45212cca1d8f
  • /data/media/####/4d500643789c0a6a12165facaf4b74f2
  • /data/media/####/4de6c0ecea5a7b75479c914a71aef0ad
  • /data/media/####/4ebe0b7487d09371df185f5119e639bd
  • /data/media/####/4f5d7365d29b6b297923c086fa9fe237
  • /data/media/####/4f7704e74929e64c05fd7f45f1020ae0
  • /data/media/####/5008285c97e9758756d17a08109d1a26
  • /data/media/####/50b39d6c57b26ebf95622a69e8d04af8
  • /data/media/####/531a2c4312a06771c0a7d1daa52510f0
  • /data/media/####/534b77b149d58b735c854c1fad4d818c
  • /data/media/####/53b4a2114ecde8870417a51b557e694b
  • /data/media/####/5414f6523a42f2f0cf1204913d6bae60
  • /data/media/####/54a486082ac1828ae879cb891712c09b
  • /data/media/####/54e957084695c632a934a9dca0a3c6a2
  • /data/media/####/5652c7a6ae61c45384392fdbc3146985
  • /data/media/####/56fe44fdc3d4f44a8f954a00f5999055
  • /data/media/####/57a432762748b6ea06ecb3642081174f
  • /data/media/####/586cafe4f45718cd2c793e92b6774087
  • /data/media/####/58c4458e5a3d8aa4bbdfedfd778e7daf
  • /data/media/####/58f811dbec76a19f727845355af4e510
  • /data/media/####/596d4a07aa7f15f07c517165d753310a
  • /data/media/####/5b140b1f12ab05e77e661829f1e481ec
  • /data/media/####/5c783bc3c14bfb2a0bcfaa852e6c6e8d
  • /data/media/####/5cbed655542ee8a9963255f4e98fb639
  • /data/media/####/5d49d5c207923263b3349ee564c29905
  • /data/media/####/5d9acc434335a1446d2cf5b5c4ed2c24
  • /data/media/####/5dc6b2da19dda3b354731f4ebb338f41
  • /data/media/####/5f4b7960802b5a7ed36c7134051b53d6
  • /data/media/####/5ff69fb76f4f1fbcc82a8341c708c769
  • /data/media/####/60287d94960e951bdfa8b3008a44c4d9
  • /data/media/####/60e19078182c936651deab718a03aa6a
  • /data/media/####/630dbd47a7c264e7a11b9c0c9fc3ff49
  • /data/media/####/634c6f79e91c0c69e89fee2673276e24
  • /data/media/####/63ceb3c919baea334ea85fbec102aede
  • /data/media/####/658b31ba2af4ff74031ac4b4a46cb33d
  • /data/media/####/65c63fcf564a3ed4cf209ff872d02c99
  • /data/media/####/65cab53661b5e8e463ec0cc051ce6b6d
  • /data/media/####/6770bb2ac4ca51e06cd5228ce6a1292f
  • /data/media/####/67e88f5aad2ef3881c9141b0045b7144
  • /data/media/####/68caff8e48ecbf566f6e1f9a7af5e499
  • /data/media/####/6b0a240382399f5f732553ed2a8da7b5
  • /data/media/####/6c04558fd8a63a4b8634215ad286bb9c
  • /data/media/####/6c2282bd0df4352b7592a5c3ff2b4b7a
  • /data/media/####/6c7383984e074858f70b807c4c8d73b3
  • /data/media/####/6c781e07db81e299561a677a1de0a56f
  • /data/media/####/6d07ee8a6c9b1654623a6bc99016fe77
  • /data/media/####/6d1113840736885c60567f14206fee28
  • /data/media/####/6dea6629174f3a7148bdc933cd27457e
  • /data/media/####/6e18be5da88fc0cb0a936b2b6d97fcbd
  • /data/media/####/6fba70f759a04025ae829d9db89143f4
  • /data/media/####/6fe44cf21a974d7207075f0373909cf1
  • /data/media/####/7001257ec8139c3089cb29f5f802a829
  • /data/media/####/7052492b937636a4d98607d598cc72c1
  • /data/media/####/7125295de524b6c80fc6785c15419070
  • /data/media/####/7138500a94dc68620320f6cbc7abf9ed
  • /data/media/####/73b769801e7ceb73074ec9422965d058
  • /data/media/####/747af76717713ff81e8ab18e01d611c9
  • /data/media/####/763b7600a4544b0b6a09f9ff801af3ce
  • /data/media/####/766ec3061b48e4f8717ebb83d733a30d
  • /data/media/####/76ac5c8c15daadcdc156f087e56289a7
  • /data/media/####/774b1d690c6ab394987b034aaca57fc5
  • /data/media/####/77c40fb6894cbc5579733de3bf705703
  • /data/media/####/78d4136e27565afc6bd7e481ff2a3e76
  • /data/media/####/791733f7e6bf24defc08a53ce3a685cf
  • /data/media/####/79aad9d76129471e90d3303855100a92
  • /data/media/####/79f3f20e2c4b806f7332361bdd74dbd4
  • /data/media/####/7d1a2e07f5e27aaa6d0bc72495d7fff6
  • /data/media/####/7d6a49ea695d236608efdda11219bd43
  • /data/media/####/7dd9de89c1b38b9ce8ca4a237c08ba53
  • /data/media/####/7e05d28eeccf478decd35eab86911550
  • /data/media/####/7f16dad35017e945b755cf62b8998024
  • /data/media/####/7f7f609b4305a46076b9acddf8f2b81b
  • /data/media/####/8144fc089b1b095114ef2df602c596eb
  • /data/media/####/82992d59125ca6c05cba76a92f38654b
  • /data/media/####/82bf612982847e060de6b7281bc6854b
  • /data/media/####/82ded134e79fea133e2e3a50e2258eb7
  • /data/media/####/854fbbf1d1f3145cf4260cd5a71eeb0a
  • /data/media/####/87cbca2f0660a4561df8af651e762c84
  • /data/media/####/87e0f2bfec142d79a595b39f02e84fb6
  • /data/media/####/893db78f7a20ceed16b9270df2960e83
  • /data/media/####/8973adb421e1f835927fc53df6a27811
  • /data/media/####/8a8aa501d3c79c8fc0d38aec0e4fb59e
  • /data/media/####/8c5e2dd6de6c4f3c51dc551b8bd74689
  • /data/media/####/8e4ea68df559e4d151b237d83dac3162
  • /data/media/####/90a50e0c95061cda0f1ba30c6c661d4e
  • /data/media/####/90e2a7a03c7bb52c742c13777297091b
  • /data/media/####/910f117ff10f9375b67fd01d3fdf5d78
  • /data/media/####/91ab805ae5d0177ae43a63b9c92adeb1
  • /data/media/####/921fe71519d493c7cc960bae739708ed
  • /data/media/####/9264ec4b131dfeede457307ce19b172e
  • /data/media/####/92e5020a37c860d659c8e29f6e630b5f
  • /data/media/####/9317643a52fc1f751d6d733afd03cea4
  • /data/media/####/9448517e4d11e2ac617aeb39caef6d9f
  • /data/media/####/954e6d05f16f078d349bc4583ca86928
  • /data/media/####/9621a394e26521794893834435c2c2f8
  • /data/media/####/97a1374d0dff302c0b496fdd0ec28dd9
  • /data/media/####/980d1a77ca9792dca5b49f9fd8f1b96d
  • /data/media/####/9848ea450b68f69a95bcd4cb5f1796cb
  • /data/media/####/989e3276ec1c8ba12b59dc29a3607c21
  • /data/media/####/98e4419f2da295906cc7b7b6ee1429e8
  • /data/media/####/992a5ed696db84e036306c8d24e793f6
  • /data/media/####/99cfcc029e8e911ff88e63daa045e184
  • /data/media/####/9b141fcbf220248071e9c92d84ea3c42
  • /data/media/####/9ddcc0d2fb35a0b8492f4f4e58cc1633
  • /data/media/####/9ef455f5e61febd16ad0f169a0f9fc8b
  • /data/media/####/9f28084121eedc83e23ae1301ad86220
  • /data/media/####/a23bbc828b54a55fc2520ee676f67c42
  • /data/media/####/a37bc4a7ea31f2941d3d3cde348e87b5
  • /data/media/####/a392b7c224b39d313a2eaeb64c45f742
  • /data/media/####/a5087428c8b8bcda369f384aff28f582
  • /data/media/####/a5652997d8e7d48f19c765e5aac8d33a
  • /data/media/####/a5724cb3f8c41215bfc1e20a9b92a405
  • /data/media/####/a586fe3faa8d5ce6d465bbf62f65e78d
  • /data/media/####/a5aeab47bbc5ff9a400596be83c800bc
  • /data/media/####/ad690d6009447458ca931b82f9b72fbf
  • /data/media/####/ad9fab369aae10ed4a2659b599989acb
  • /data/media/####/adc3c184099a2edf88451dcf86baeabd
  • /data/media/####/ae3f5d405f5748d62a69c81344056f11
  • /data/media/####/app.db
  • /data/media/####/b1e1dab9ce6d8497e538f73c2f9a9753
  • /data/media/####/b27b331218ec0e9b2b72037a69c8f1aa
  • /data/media/####/b3f82dcb6bed0deb7d2ca742ed5e5c40
  • /data/media/####/b488e45379a395ce1d87cfed24d88931
  • /data/media/####/b5935d9c12883d185692d54258fd644c
  • /data/media/####/b5a252604458c21df298db3e5252ad5e
  • /data/media/####/b5bb8e81d9cf6b5725dfb07240e58ed7
  • /data/media/####/b686d7fd6c1e0cba4b9d75eb944745b7
  • /data/media/####/b8c5b0af77fff80880ec1fd7ca9d405c
  • /data/media/####/b94348e072da612734b6c8a2886af2f6
  • /data/media/####/b9506edde762a2adf6b6d76ce43d7177
  • /data/media/####/b9b6dbbd2240f43ca227c83b1a554559
  • /data/media/####/baa4c9030c71d379ec21adfc5755d5c5
  • /data/media/####/baf02b074126cf0419f2fa7a40f9c0bf
  • /data/media/####/bc20ae591d593a9889a3e9176e6872e7
  • /data/media/####/bccd006b8c86802d92f20559b8f9b7d5
  • /data/media/####/bd5da3b1d0e20ddd3d962181a23a9c53
  • /data/media/####/bdb7c9b2f281e541ffa67f27f05c8aba
  • /data/media/####/bdfcd2b38721af82519bb9de32ce7999
  • /data/media/####/c06b48f9417133ce9ec669dd1d9d4be9
  • /data/media/####/c114cd76c6c8139ecb33a0c86c35527b
  • /data/media/####/c17f00dbb67db74209c605b8cadc2a4d
  • /data/media/####/c1e463d5b9a52c2d192a84a9b2989304
  • /data/media/####/c25acfb43f1715f39952d495c782d5c7
  • /data/media/####/c299995f8b1d2226b34f6b8d68a930bf
  • /data/media/####/c3a713161186cf9d59c13ef92889d43e
  • /data/media/####/c4d705fefedc0276ba995651e76ab785
  • /data/media/####/c66dae34f78f9265a97f1a099a4ae171
  • /data/media/####/c79f2f924ec79a0d777dce4d7f3b0cc7
  • /data/media/####/c891a38f866c4fc537ccd008c47b719e
  • /data/media/####/c89ce7576f00c47cc76df1bf7dde4d3b
  • /data/media/####/c8b8d419685713c1a5e03349fbbeffa3
  • /data/media/####/c8d7009d064b7a8e4faec80c220706b3
  • /data/media/####/cache_data
  • /data/media/####/cache_data_tmp
  • /data/media/####/cbfb9079b47da179b7aead1b75c6a36b
  • /data/media/####/cc93f5602494d5cbafd9c2149164f60c
  • /data/media/####/cdd48c565a764d961e4cf6ec32c7a241
  • /data/media/####/cecdd77e086a20f44888ad89246fa5bc
  • /data/media/####/cff8167b08e9710641205279deebd6c0
  • /data/media/####/com.fcbox.hiveconsumer.bin
  • /data/media/####/com.fcbox.hiveconsumer.db
  • /data/media/####/com.getui.sdk.deviceId.db
  • /data/media/####/com.igexin.sdk.deviceId.db
  • /data/media/####/d0e314fc11a2fffa8d91ae4f12aadb2e
  • /data/media/####/d0f3a013aa5b98770be1acc5961cc410
  • /data/media/####/d148c128e0ad57c34f554da8d9a89e07
  • /data/media/####/d16eddef163e36e1ee7aecf7dfeb46ee
  • /data/media/####/d53a600fd122f5d6996fed02cfd892e1
  • /data/media/####/d548945982cb0e384c1b48529f398010
  • /data/media/####/d5539b454bd248855d527f9ce5137648
  • /data/media/####/d59b2e5995b22787671c1f0cb5bf508c
  • /data/media/####/d5d906fb39bd38910026e8e704b089c7
  • /data/media/####/d61cb196efea6a1aa1571b280cfc2e5e
  • /data/media/####/d7ad84e3977c7e6c565b77ef559c655c
  • /data/media/####/d88cb75b6f667a9a9c9c7e05a85da145
  • /data/media/####/d910a4db40821d7c00a1cc3091afca18
  • /data/media/####/da0523f355075fffff862c4fa2bc8045
  • /data/media/####/db43e6b0f0ad6cf128aa8abc242f3c9a
  • /data/media/####/dc9248ac546ca488a2b2d23a39140463
  • /data/media/####/dce87d38f68ed7332a26ed7acba16dec
  • /data/media/####/dd629092af4198c75ec06dd770556adb
  • /data/media/####/de91c497cdfa261868bcc712f065defb
  • /data/media/####/def170c5997285ab8536ff62b96c79e4
  • /data/media/####/dfdfba50c0cf0b20cb2bbe7cd1857847
  • /data/media/####/e00faeb92f438644a8b9df2479004bf7
  • /data/media/####/e024f6495cb7ca6c25a2d9b315709491
  • /data/media/####/e0ae7d28bb266596e6eb22937ffb10b5
  • /data/media/####/e0d6356cbef9182a61b10d218cb2d424
  • /data/media/####/e128765b5ed4b21b3cca340454c90eaa
  • /data/media/####/e14119558eb093a6281b8026ae91fdbf
  • /data/media/####/e1a2157e40d8a96a07ea38418748b6ec
  • /data/media/####/e47a2c21a55befac69580eed2422a433
  • /data/media/####/e489b70e3a6350350b4388fb0f36962e
  • /data/media/####/e4ea2ed221f6e71ba2b2ddeb31aa3213
  • /data/media/####/e64d6019124045fd2d0a3578432a92f3
  • /data/media/####/e7de3a995b9ec0cccb4f945ecbaabba6
  • /data/media/####/e9797d3fd4b2e88842dbab2ab368fb23
  • /data/media/####/ea549f0a4f1ca4be46cdbcb73377a1ee
  • /data/media/####/eaf316f15e8b347c3b35e129e5be3d98
  • /data/media/####/eb88eb730f333fa574de6294f42ab24f
  • /data/media/####/ec8ecabb0c5362a311f5f289865b0c0e
  • /data/media/####/ecabafc3d657a6a5ec9ce6836a109027
  • /data/media/####/ed9a363206e2de8646dce93bfb28ec17
  • /data/media/####/ed9b8145e67a337066aef0c43863c1c9
  • /data/media/####/eee4fc594b714531386f985f6a0fa001
  • /data/media/####/eee882f8bb93bf6adb7be12319c15d32
  • /data/media/####/ef6778efaedf68d77be59f0654071f6c
  • /data/media/####/f0f381b5b81c8455344107c3d13c2330
  • /data/media/####/f1a84548376579009d221be88151629b
  • /data/media/####/f1d07f26d56bb5de084cd90dbec29b36
  • /data/media/####/f1eb06846289bf9f773f1a86a5a35440
  • /data/media/####/f3898103efaabfd688c89169e1723dd0
  • /data/media/####/f50310dffc0fa3ee81239de27f8fcbd7
  • /data/media/####/f53144a5550be72650fc02b175bd93b6
  • /data/media/####/f56f67da38def7cf15e125f8f23f0c3b
  • /data/media/####/f5ba10b185ccd84480cbb5f74175a147
  • /data/media/####/f5f597c7e81fbf76e15dcc6c7a8abda3
  • /data/media/####/f658b4545e17a1a1911bb651d63438b4
  • /data/media/####/f78c73e1ae63cc16c2ee494903443d41
  • /data/media/####/f7b0fb47869336166aec92a45ec0c02a
  • /data/media/####/f801cd83d1e773c5f1e1e4c6069cd5b6
  • /data/media/####/fa4721214535f864385758cb137ffc68
  • /data/media/####/faebd5d4afea6498f433b6e1a65a591c
  • /data/media/####/fb7025956e6269c051bdcbaa80b0c332
  • /data/media/####/fd61cde5fc2134e952766eac18d7deb3
  • /data/media/####/ff56bc3198d4347293314d80f5d6732a
  • /data/media/####/gkt
  • /data/media/####/gkt-journal
  • /data/media/####/gktper
  • /data/media/####/tdata_CoH340
  • /data/media/####/tdata_GKM601
  • /data/media/####/tdata_jFf739
  • /data/media/####/tdata_pKX830
  • /data/media/####/test.log
  • /data/misc/####/primary.prof
Miscellaneous:
Executes the following shell scripts:
  • /system/bin/cat /proc/cpuinfo
  • /system/bin/sh -c type su
  • chmod 755 /data/user/0/<Package>/.jiagu/libjiagu.so
  • getprop
  • mount
  • sh
Uses the following algorithms to encrypt data:
  • AES-CBC-PKCS5Padding
  • AES-CBC-PKCS7Padding
  • AES-CFB-NoPadding
  • AES-ECB-PKCS5Padding
  • AES-GCM-NoPadding
  • RSA-ECB-PKCS1Padding
  • RSA-NONE-OAEPWithSHA1AndMGF1Padding
Uses the following algorithms to decrypt data:
  • AES-CBC-PKCS5Padding
  • AES-CBC-PKCS7Padding
  • AES-ECB-PKCS5Padding
  • AES-GCM-NoPadding
Uses special library to hide executable bytecode.
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Gets information about installed apps.
Displays its own windows over windows of other apps.

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android