Adware.Gexin.6081

Technical information

Malicious functions:

Executes code of the following detected threats:

Adware.Gexin.2.origin

Accesses the ITelephony private interface.

Network activity:

Connects to:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) scs.opensp####.cn:80
TCP(HTTP/1.1) img.newairc####.com:80
TCP(HTTP/1.1) c.d####.mob.com:80
TCP(HTTP/1.1) oss.newairc####.com:80
TCP(HTTP/1.1) api.s####.mob.com:80
TCP(HTTP/1.1) m.d####.mob.com:80
TCP(HTTP/1.1) l####.tbs.qq.com:80
TCP(HTTP/1.1) a####.exc.mob.com:80
TCP(HTTP/1.1) t####.c####.q####.####.com:80
TCP(HTTP/1.1) sdk.o####.p####.####.com:80
TCP(HTTP/1.1) c-h####.g####.com:80
TCP(HTTP/1.1) d####.d####.mob.com:80
TCP(HTTP/1.1) a####.u####.com:80
TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
TCP(HTTP/1.1) h5.newairc####.com:80
TCP(HTTP/1.1) cb.uar.h####.com:80
TCP(TLS/1.0) loc.map.b####.com:443
TCP(TLS/1.0) s####.ml####.cc:443
TCP(TLS/1.0) oss.newairc####.com:443
TCP(TLS/1.0) res####.a####.com:443
TCP(TLS/1.0) na61-####.wagbr####.non####.####.com:443
TCP(TLS/1.0) h5.newairc####.com:443
TCP(TLS/1.0) api.map.b####.com:443
TCP(TLS/1.0) schedul####.yo####.com:443
UDP 1####.168.112.1:137
TCP sdk.o####.t####.####.com:5224
TCP c####.g####.ig####.com:5226

DNS requests:

7j####.c####.z0.####.com
a####.exc.mob.com
a####.u####.com
amap####.cn-hang####.oss####.####.com
api.map.b####.com
api.s####.mob.com
c####.g####.ig####.com
c-h####.g####.com
c.d####.mob.com
cb.uar.h####.com
d####.d####.mob.com
d####.opensp####.cn
h5.newairc####.com
img.newairc####.com
l####.tbs.qq.com
loc.map.b####.com
m.d####.mob.com
oss.newairc####.com
res####.a####.com
rev.uar.h####.com
s####.ml####.cc
scs.opensp####.cn
sdk.c####.ig####.com
sdk.o####.p####.####.com
sdk.o####.t####.####.com
sdk.o####.t####.####.com
sdk.o####.t####.####.net
tj.youza####.com
y####.al####.com

HTTP GET requests:

api.s####.mob.com/date
cb.uar.h####.com/small_img_root/11bd/11bd10bb9c353271af37dd8bb66bf344.jpg
cb.uar.h####.com/small_img_root/246c/246c0140d8a4924151a126e792070e24.jpg
cb.uar.h####.com/small_img_root/26d0/26d0be8c6323dabdd29cb67fdb05df91.jpg
cb.uar.h####.com/small_img_root/29d7/29d7fd42858782a696a06c90860a892c.jpg
cb.uar.h####.com/small_img_root/3814/38143ceaaa0e9111c43792d6c0b9203c.png
cb.uar.h####.com/small_img_root/3a74/3a74bdf083a1e14699ce3816c898c9aa.jpg
cb.uar.h####.com/small_img_root/3c63/3c63c540d9c71c07dcfb4879689d5706.jpg
cb.uar.h####.com/small_img_root/3c82/3c8258400d6393b54248ab5d6dcb0f2f.png
cb.uar.h####.com/small_img_root/464e/464e936e91728a25bf8db372c24dc7bd.png
cb.uar.h####.com/small_img_root/4869/486931fa44fa43e9eba00f6b7b44cfab.jpg
cb.uar.h####.com/small_img_root/6e11/6e110e6a9dff5a4305cc5830b6f79b0d.png
cb.uar.h####.com/small_img_root/78da/78da35a93318dbbc537d08a3068f5a8e.JPG
cb.uar.h####.com/small_img_root/8be1/8be1d8b1c6ea2671930a61069db0972a.jpg
cb.uar.h####.com/small_img_root/9e2a/9e2aa50f48c2329241aec8b09b3b0cdf.png
cb.uar.h####.com/small_img_root/a161/a16167e21747c1b8d9f9f2f3ee68d73c.jpg
cb.uar.h####.com/small_img_root/a5d2/a5d24915aef6784b53dbf957dbef2099.JPG
cb.uar.h####.com/small_img_root/a7c5/a7c517591507bf046d6bfa0d56fb8f68.jpg
cb.uar.h####.com/small_img_root/ad18/ad188e3b0820716fa5e54c440db1d6a0.jpg
cb.uar.h####.com/small_img_root/b611/b611c40815e84e23e158c46d315be106.JPG
cb.uar.h####.com/small_img_root/b6b3/b6b36d5eab336505b02afbe24db93d1f.jpg
cb.uar.h####.com/small_img_root/c12b/c12b32b3b09b1cf3d56dd0f78e5507d7.jpg
cb.uar.h####.com/small_img_root/e2fa/e2fa3fdd929b3665d9c60530f063ee38.jpg
cb.uar.h####.com/small_img_root/e6bb/e6bba0ed420b0809f3ece4f3f65ab684.jpg
cb.uar.h####.com/small_img_root/f547/f547a3a412194d28beabfca23224b6c7.png
cb.uar.h####.com/spider_data/02b2/02b28d2d786fb49d7cc344ce9497dae2.jpg
cb.uar.h####.com/spider_data/0fb8/0fb821e6c30364a82e61890ac40bc406.jpg
cb.uar.h####.com/spider_data/6f10/6f107cfbcd6debfb590369112206ac10.jpg
cb.uar.h####.com/spider_data/7a07/7a07b70d4f9680f720a9a6eb553848eb.jpg
cb.uar.h####.com/spider_data/7c51/7c517ba4af4b5319d000f6d0168f5c87.jpg
cb.uar.h####.com/spider_data/a7c5/a7c517591507bf046d6bfa0d56fb8f68.jpg
cb.uar.h####.com/spider_data/c12b/c12b32b3b09b1cf3d56dd0f78e5507d7.jpg
cb.uar.h####.com/spider_data/e2fa/e2fa3fdd929b3665d9c60530f063ee38.jpg
h5.newairc####.com/api/getArticleAdv?sid=####&cid=####&v=####
h5.newairc####.com/api/getComments?sid=####&rootID=####&sourceType=####&...
img.newairc####.com/zmzx/pic/201811/03/0aa82973-559f-44e5-afda-dc3b7fda1...
m.d####.mob.com/v4/cconf?appkey=####&plat=####&apppkg=####&appver=####&n...
oss.newairc####.com/images/zycf.png
oss.newairc####.com/zmzx/article/201809/13/c4503127.json
oss.newairc####.com/zmzx/article/201810/09/c4728122.json
oss.newairc####.com/zmzx/pic/201608/31/ca738ede-61d4-4eee-b51b-03d6837c9...
oss.newairc####.com/zmzx/pic/201609/02/8c32f865-89fe-4930-9b0b-44a9c327a...
oss.newairc####.com/zmzx/pic/201610/13/0c6f783c-0406-49d7-ada9-489964a2a...
oss.newairc####.com/zmzx/pic/201701/10/03fde875-0a0f-4f1e-b153-2cbfb9f9d...
oss.newairc####.com/zmzx/pic/201702/24/7d8dba7a-e759-44cd-b203-c03604e65...
oss.newairc####.com/zmzx/pic/201703/16/4b8ae872-2e6b-462c-92a4-f6c7c092c...
oss.newairc####.com/zmzx/pic/201711/29/91e99385-f8d6-426d-b366-9f7300f0a...
oss.newairc####.com/zmzx/pic/201712/21/b820ac81-8aae-489f-a7be-e25a7d125...
oss.newairc####.com/zmzx/pic/201801/07/1283c870-9b3e-465c-bf8d-5bfe7c173...
sh.wagbr####.aliyun####.com/sdkcoor/android/x86/libJni_wgs2gcj.so
t####.c####.q####.####.com/tdata_Soq141
t####.c####.q####.####.com/tdata_ntt510

HTTP POST requests:

a####.exc.mob.com/errconf
a####.u####.com/app_logs
api.s####.mob.com/conf5
api.s####.mob.com/conn
api.s####.mob.com/log4
api.s####.mob.com/snsconf
c-h####.g####.com/api.php?format=####&t=####
c.d####.mob.com/v3/cdata
d####.d####.mob.com/dinfo
d####.d####.mob.com/dsign
h5.newairc####.com/api/event
img.newairc####.com/cfg/sdk
l####.tbs.qq.com/ajax?c=####&k=####
l####.tbs.qq.com/ajax?c=####&v=####&k=####
oss.newairc####.com/rcv/aclk?tm=####
oss.newairc####.com/rcv/m?tm=####
scs.opensp####.cn/index.php/clientrequest/clientcollect/isCollect
scs.opensp####.cn/scs?cmd=####&logver=####&size=####
sdk.o####.p####.####.com/api.php?format=####&t=####

File system changes:

Creates the following files:

/data/data/####/-1078244617
/data/data/####/-1312716470
/data/data/####/-1373169023
/data/data/####/-1383940110
/data/data/####/-1384060361
/data/data/####/-1384060385
/data/data/####/-1384060386
/data/data/####/-1384061252
/data/data/####/-302843082
/data/data/####/-378408080
/data/data/####/.imprint
/data/data/####/.jg.ic
/data/data/####/.lock
/data/data/####/.mrecord
/data/data/####/.mrlock
/data/data/####/.statistics
/data/data/####/0a231bd8575dcf72.txt
/data/data/####/0e17e86965ac8dbe5e99566a9c4cf6f7e22d9ad8c7c1268....0.tmp
/data/data/####/11fb822c4cadbba602b67d9cb672138570f0d5bee181b59....0.tmp
/data/data/####/1389023919
/data/data/####/1493034209
/data/data/####/15104469
/data/data/####/1695857311
/data/data/####/1760033dd801ced8b5564a995660940af124fb27716176d....0.tmp
/data/data/####/1d2b904cbeadfb72ed9546111a231c85.0
/data/data/####/2014115882
/data/data/####/2551bfd9c8659de9a58d04a24ac793dd9c5bc03160dde81....0.tmp
/data/data/####/337525857
/data/data/####/386967948
/data/data/####/3a26d26dc35438d6bc000c2f57c8d11dd505cb71a581d93....0.tmp
/data/data/####/4503127_article.js
/data/data/####/46124276
/data/data/####/4728122_article.js
/data/data/####/49
/data/data/####/492054144
/data/data/####/4a517503891035ca27e34ecd127ccab5b4e1a05ae30f3f7....0.tmp
/data/data/####/542197030
/data/data/####/550153d987f66ed77a9033204985c68def0b41d44af35fa....0.tmp
/data/data/####/5825253e6696b366ca6fecee455995862f54c01d3141ee2....0.tmp
/data/data/####/62ca75e4d237e5e8a76f4a85b40ee1d9ba8f96d66753258....0.tmp
/data/data/####/722461671
/data/data/####/790599644
/data/data/####/7e335c2931feeb7779644b55494bf7d1d2fbfebba9758fa....0.tmp
/data/data/####/886a58456cda84976eb083a646cde31e8fec7af8db5acae....0.tmp
/data/data/####/8df29451730150bce39ccb2175e303ab298df306fb29464....0.tmp
/data/data/####/8e344b75d702756d624404876807bc5f5972bf0cfe30a20....0.tmp
/data/data/####/97a3326f3f554e46546345687661bb5b6306de912076909....0.tmp
/data/data/####/9ceeec08475f93cb168250f5684f656069b2b435c39e946....0.tmp
/data/data/####/9d712ac9abc4172b2b0cd8a316567d56204eb7e0b4fb86f....0.tmp
/data/data/####/FZLTXHK-GBK_YS.ttf
/data/data/####/Q0VSVC5SU0EK.txt8fe
/data/data/####/QQ_3x.png
/data/data/####/SGMANAGER_DATA2.tmp
/data/data/####/SG_INNER_DATA
/data/data/####/ThrowalbeLog.db-journal
/data/data/####/amazeui.min.css
/data/data/####/amazeui.min.js
/data/data/####/angular1.4.6.min.js
/data/data/####/appcfgdata.xml
/data/data/####/apprtdata.xml
/data/data/####/article.js
/data/data/####/authStatus_com.founder.jingmen;remote.xml
/data/data/####/b2d1f5aed7ddb04b307a593869257e321e1a7831788467a....0.tmp
/data/data/####/b3ea8d3deef6449ce53724f54b08f8b1d842c6691ae89db....0.tmp
/data/data/####/base.css
/data/data/####/c02f0726bd148361b54f5f637b80221346e60ad621cc66f....0.tmp
/data/data/####/cc.db
/data/data/####/cc.db-journal
/data/data/####/ceb3e102b80c8b8994460d54aad65353db0c2481dd50cfc....0.tmp
/data/data/####/columnId.xml
/data/data/####/com.iflytek.id.xml
/data/data/####/com.iflytek.msc.xml
/data/data/####/com.youzan.mobile.AnalyticsPrefs.xml
/data/data/####/core_info
/data/data/####/daf82006bc7744c3361fb909306f931e902dc095dab4850....0.tmp
/data/data/####/data_0
/data/data/####/data_1
/data/data/####/data_2
/data/data/####/data_3
/data/data/####/db_default_job_manager-journal
/data/data/####/db_founder0-journal
/data/data/####/dc4344988048ff586a
/data/data/####/dc4790fecc777f2ec6
/data/data/####/dc6457b213149f4e01
/data/data/####/dc74e13edc3a6f48cd
/data/data/####/debug.conf
/data/data/####/ef2eed46b066352865067e642a66f437d93367953db5c7f....0.tmp
/data/data/####/events
/data/data/####/events-journal
/data/data/####/exchangeIdentity.json
/data/data/####/exid.dat
/data/data/####/f_000001
/data/data/####/f_000002
/data/data/####/f_000003
/data/data/####/f_000004
/data/data/####/f_000005
/data/data/####/f_000006
/data/data/####/f_000007
/data/data/####/f_000008
/data/data/####/f_000009
/data/data/####/f_00000a
/data/data/####/f_00000b
/data/data/####/f_00000c
/data/data/####/f_00000d
/data/data/####/f_00000e
/data/data/####/f_00000f
/data/data/####/f_000010
/data/data/####/f_000011
/data/data/####/fffba046e79f4314c0dacec72593321365889ace3c45b27....0.tmp
/data/data/####/firll.dat
/data/data/####/fontawesome-webfont.ttf
/data/data/####/gdaemon_20161017
/data/data/####/getui_sp.xml
/data/data/####/great_button.png
/data/data/####/great_cancel_button.png
/data/data/####/gx_sp.xml
/data/data/####/helpMsg.xml
/data/data/####/hmdb
/data/data/####/hmdb-journal
/data/data/####/hst.db
/data/data/####/hst.db-journal
/data/data/####/icon-images.png
/data/data/####/icon_audio_play.png
/data/data/####/icon_file.png
/data/data/####/icon_file_down.png
/data/data/####/icon_meta_voice.png
/data/data/####/icon_praise.png
/data/data/####/icon_praiseStar.png
/data/data/####/icon_selector_normal.png
/data/data/####/icon_selector_press.png
/data/data/####/iflytek_state_com.founder.jingmen.xml
/data/data/####/index
/data/data/####/init.pid
/data/data/####/init_c1.pid
/data/data/####/journal
/data/data/####/journal.tmp
/data/data/####/jquery.min2.2.0.js
/data/data/####/js.combine.min.js
/data/data/####/libcuid.so
/data/data/####/libjiagu834509454.so
/data/data/####/libsgavmpso-5.4.1001.so.tmp.2302
/data/data/####/libsgmainso-5.4.38.so.tmp.2302
/data/data/####/libsgsecuritybodyso-5.4.28.so.tmp.2302
/data/data/####/loading.png
/data/data/####/lock.lock
/data/data/####/loctemp.so
/data/data/####/logdb.db
/data/data/####/logdb.db-journal
/data/data/####/mob_commons_1
/data/data/####/mob_sdk_exception_1
/data/data/####/multidex.version.xml
/data/data/####/mwsdk_analytics.db-journal
/data/data/####/news_detail.html
/data/data/####/persistent_data.xml
/data/data/####/play.png
/data/data/####/pref.xml
/data/data/####/push.pid
/data/data/####/pushext.db-journal
/data/data/####/pushg.db-journal
/data/data/####/pushsdk.db-journal
/data/data/####/reader.db
/data/data/####/reader.db-journal
/data/data/####/run.pid
/data/data/####/sanjiaoxing.png
/data/data/####/sgFile.lock
/data/data/####/shareTimeline_3x.png
/data/data/####/share_sdk_1
/data/data/####/sharesdk.db-journal
/data/data/####/sina_3x.png
/data/data/####/sp.lock
/data/data/####/tbs_download_config.xml
/data/data/####/tbs_download_stat.xml
/data/data/####/tbscoreinstall.txt
/data/data/####/tbslock.txt
/data/data/####/tdata_Soq141
/data/data/####/tdata_Soq141.jar
/data/data/####/tdata_ntt510
/data/data/####/tdata_ntt510.jar
/data/data/####/ua.db
/data/data/####/ua.db-journal
/data/data/####/umeng_general_config.xml
/data/data/####/umeng_it.cache
/data/data/####/video.png
/data/data/####/webview.db-journal
/data/data/####/webviewCookiesChromium.db-journal
/data/data/####/wx_3x.png
/data/media/####/.al
/data/media/####/.artc_lock
/data/media/####/.cuid
/data/media/####/.cuid2
/data/media/####/.dh-journal
/data/media/####/.dhlock
/data/media/####/.di
/data/media/####/.dic_lock
/data/media/####/.duid
/data/media/####/.globalLock
/data/media/####/.iew
/data/media/####/.mps
/data/media/####/.nomedia
/data/media/####/.nulal
/data/media/####/.nulplt
/data/media/####/.pkg_lock
/data/media/####/.plst
/data/media/####/.rcTag
/data/media/####/.rc_lock
/data/media/####/.slw
/data/media/####/002996f13e2bd4110af6fc9f343d7ac1
/data/media/####/00407be1adbdafa0ab57ca0a640ee3d4
/data/media/####/013eedb8683cb7878cb4e7fe0e378189
/data/media/####/0160cf142a849a296468975b8a6f10f7
/data/media/####/0198206f47957d6aa656a715a53d7c76
/data/media/####/029d4b3cb94ae0622a114bdf044d7c62
/data/media/####/0309295cd315e4b50f832e93045aef9a
/data/media/####/033b730352b7c04ed58bcd0042fa5154
/data/media/####/0383e5d1f219683d481cfc8ad08ac215
/data/media/####/039fe8b00ec180215109871b88d7fdef
/data/media/####/03b0214ecfb5c87e3cd276fb06dcd0c4
/data/media/####/03c5120d581a34fbdf908731a42c45e4
/data/media/####/0403a05b61109d5dffcd3ee31d51c8e9
/data/media/####/04751b0bd181e855c77d252a9ac0294d
/data/media/####/0523fa2b78e30d1e941ccf4138fddad2
/data/media/####/05c322291b901df48e8bd20db4ccdc40
/data/media/####/06a3f0b5a1e092685b9ae40b59b8cb14
/data/media/####/06e4c30b775de10afb9b6ec140c0e9c5
/data/media/####/070a7675c2f4d383bdb63a8e3a876b3c
/data/media/####/08a30c094a99ff4343a3fb35e509b852
/data/media/####/091d10943b1ff51b030d2f3ef4ce22c2
/data/media/####/0962483d42219e5e38cec26ac53ae28a
/data/media/####/09776ab2330369462f4552e2ef0c6c50
/data/media/####/09b2eb5fd0e65e40e3d30c0b9b16414e
/data/media/####/0a1030ccc6b9861ab1aa70cdce12028a
/data/media/####/0a6a9e27059c5d9adf37117021cfd7de
/data/media/####/0a772b562a944f06b3dc2490148f7a31
/data/media/####/0ad7a95ad2cfa0471d11f33f326fef98
/data/media/####/0ada9834f49d9fb8576905e682d74e7b
/data/media/####/0bffcf3f990ba28fef5893742ec1bb9f
/data/media/####/0c048b8a8cd130d6a240435da699968a
/data/media/####/0c414dba6afa5aecaf92be47869fe2f8
/data/media/####/0d05231504e2d6e335fab9ce669952cb
/data/media/####/0da84a704e19b8e7f1ed4d0c5b968af9
/data/media/####/0df846f0135bc30cb4e3738a43ddc40b
/data/media/####/0e16370a238d7bf03b1437366932dd2f
/data/media/####/0e6161262a3aea26e552273bdb6a5a32
/data/media/####/0f3a8fbcca5991c9edeb265a0957d8bf
/data/media/####/0fe3fef7a626e012e5f1534005771876
/data/media/####/118f16e26750cb4c03aad66c975a86a2
/data/media/####/12d45de07bf08b0523e4e5c39f30de11
/data/media/####/13018a7c89d66d77e40d62bd11825047
/data/media/####/13346126fbf15172ea1da6db6ca4d38a
/data/media/####/139c6daac6b1c004ad8e83a75dc64344
/data/media/####/13c847877d4a4f81b5cdc1dd3a5b5042
/data/media/####/1402ef8c7535ff67d5c41bff7d07662a
/data/media/####/1418ad84184d163dd59a5dc501a7f6fa
/data/media/####/142dc38005c2fe171cc93cf7fb23fde5
/data/media/####/143a43ecc7187ce49604f4c805bcd649
/data/media/####/147714a0657c13e052649171972ebd58
/data/media/####/1543663aff725340a885ba6a81730b31
/data/media/####/1544224829311.db
/data/media/####/16ba0a80297b7947f72ff1ee0e7d1347
/data/media/####/175ff0f1639c2d00f7d3832151fd5c1e
/data/media/####/17927363605efd0167a7039f55ac692b
/data/media/####/18013cc1f8f78fea9b537189e4ad7618
/data/media/####/1821f0b0fec0c1770530ca5268de3fa1
/data/media/####/187d4e9d9778471933d587eaf52b8ea8
/data/media/####/18c066e464fb675983e512b76e70ac7b
/data/media/####/1a0e46afad7a30b53bd4dfd2b324e16b
/data/media/####/1a83796da1c6d329ca65fc7696c63142
/data/media/####/1b4cb76688f12872f157081b7eff9978
/data/media/####/1c1a03de1783a51e646105bea7650c4d
/data/media/####/1c28256efc1af3af48b8190da506e103
/data/media/####/1c97a3fce2a0a0e53d9242758752e9e6
/data/media/####/1d0e5d9c38b924cd50d24a4bd8b3e23d
/data/media/####/1d89b57148eb6cf616c1bb00f8cd163e
/data/media/####/1ddfc1b5cbda2d3325c079c8d61b7ae7
/data/media/####/1e96e9c0d3b8f9c2e4d8a1bed1474c48
/data/media/####/1eb2887c7539a272ef65c822116251ef
/data/media/####/1f401d5c79642e335be7994d317fbd03
/data/media/####/1f6cb1edb6b1a9c4ef086bcb1f7c4303
/data/media/####/1f77ea8f3553342e1abd027f158d7491
/data/media/####/1fa998db69769972f74e5ba5b0cc6716
/data/media/####/21361e7a39a2a090f556f20e4ef8ba82
/data/media/####/21e4fd4a7ad5a4b63e00d5a3564224b5
/data/media/####/228101919a61d03fc831411a9204f83e
/data/media/####/22915794968be7aab4977fe89e315997
/data/media/####/22b08866e33500c0f28dfbe683565f8d
/data/media/####/236f9a71e205f5e9d92e8dfd2c7405db
/data/media/####/24165d56c4a92ac33c1cef72d6a20d2c
/data/media/####/2473b7fd597ae274f8b123b78d3a5729
/data/media/####/24b228cdca1104c79d1a03dcadc15b7a
/data/media/####/2513db3a88bbbc0e0c1a000525ce8741
/data/media/####/259ebfb6867bb1ed9cab625480b922a1
/data/media/####/266d3e7493891933b128bd87ae30d8e1
/data/media/####/267b4655b199ca7a349b678cc2f46715
/data/media/####/2684cebf1d3fba9b4c8561311e071284
/data/media/####/27aa8836ed09beb8feb9f1506cb6bef5
/data/media/####/2961f6dd14ecbd8666ed097cfd36175e
/data/media/####/2a01f26a5939d30b92d98585c877d034
/data/media/####/2a14ed460cc31e85b135eb3d0c41051c
/data/media/####/2ac7f509456ca0b528442bf73f04fc57
/data/media/####/2b60a5a7152ab14198947844c74cc936
/data/media/####/2c420d9c0d2f365c9fc63105a6c9af6a
/data/media/####/2cb2d5218c12844aee06d3e0c3580f9a
/data/media/####/2d12d0d68819e425729cca160825020e
/data/media/####/2d2fd40f763f1dc91ee000785a30c803
/data/media/####/2d36929020794a9eacb3645037cf20d2
/data/media/####/2dc58d39217d1eb9b97bfa1c0f2f516d
/data/media/####/2f3ec8359196d2dfa6f26cb9afba41c0
/data/media/####/30755c8c774666a8382fa9b2e94b6d0d
/data/media/####/3129a53f3fcd6c8d6e0b63817d9a04c5
/data/media/####/315b912a801248776cd02174ee48999c
/data/media/####/32b52aaabcc17ee3f8af3c3bc085d462
/data/media/####/3387efb53cf86e12d265ed6cff89b14e
/data/media/####/33f08c5126a9415bf772322829bcd88b
/data/media/####/34a459b70a9f68bb27abf36cb684bef6
/data/media/####/35729a598731e1197eb1225900482d77
/data/media/####/3623106bf9a909560672db0de334efaa
/data/media/####/362f2494314ff8437763e2141d21cf96
/data/media/####/36bd660ee5910b94dab2ae5533dfc344
/data/media/####/375b05b383040f3c51d0e0bb44c08111
/data/media/####/3887a4b092f3bb123cd0ed941595b0dc
/data/media/####/39f4ab4bac06a32f523735696e43acc9
/data/media/####/3a41a642f3d57447c4a50536bc02bab7
/data/media/####/3a6d4725f7f63661fed568057412e6e8
/data/media/####/3b4d916e78cb247d517c0bf314ca94a9
/data/media/####/3c7aaba2099d2e36b7f15f14955a8eb9
/data/media/####/3cf362fda3c501d83a1e56ec774b1459
/data/media/####/3d42e183a1aa7d8ecc640b516c837aec
/data/media/####/3e48f7b239ca6995e8f445c76ae6ae30
/data/media/####/3fefcd19f200d55762e327fa7eefda87
/data/media/####/3ff0e827d8f4834ba1b97f2581fcd7fa
/data/media/####/40a7c4fd323053429085873d72fb55bb
/data/media/####/40b9b98abbaa5e2b7f6be9d69d472877
/data/media/####/4186e5882214a1ff4349e0ad89efa479
/data/media/####/439712f10360f2bf3f4d397920008c5f
/data/media/####/43baaa8cf9514c4b02cd3de00604b11f
/data/media/####/43d051672a66fbc6d4f2876020a1a962
/data/media/####/453cd200ee9d3dab4c1cba77e0388da6
/data/media/####/45d02136531d102ba45616c2a7b1273d
/data/media/####/471ab80778293fd8b468fe365f445944
/data/media/####/474eb78bc99c5ffd8d2eaf8d2468bbf3
/data/media/####/4787ac8e1b0cd1b8ff79be0e62305a6e
/data/media/####/47a042688d6cdb5b26d51b1481fa5093
/data/media/####/47a6361b0ab5fdb6358e9a10cb39b750
/data/media/####/47d729ef3bde631fe25a0e373f775a1a
/data/media/####/486010274e34cedad109f00d41735405
/data/media/####/48b6a034756ae3c0e65a954be39f7018
/data/media/####/48d52b42fa29dd4b31a8dd36651604ae
/data/media/####/4936b05ede4d270bad6c82b8e4e6722a
/data/media/####/4956dab4eac1be67beca94fbe419c5e8
/data/media/####/495ba5df261a1468920905e4ba359cc5
/data/media/####/4a2c3189c733071457f56ca8cfdd8284
/data/media/####/4a42de8ac75e7cd2e865439caa3d8b57
/data/media/####/4a47c9febc179b018a6c5a0526584f30
/data/media/####/4b1dcd9cacb861fe6752006ba66fd1b6
/data/media/####/4bbf1199e22ad821f803adedf07fcd11
/data/media/####/4bed836aed827bfde026799a07d3d0c8
/data/media/####/4cb2dd2fe6b63ae9de3e9b1a73c10c72
/data/media/####/4d500643789c0a6a12165facaf4b74f2
/data/media/####/4de6c0ecea5a7b75479c914a71aef0ad
/data/media/####/4e12b35fd9a1d0532dfc816c30917d05
/data/media/####/4ebe0b7487d09371df185f5119e639bd
/data/media/####/4f5d7365d29b6b297923c086fa9fe237
/data/media/####/4f7704e74929e64c05fd7f45f1020ae0
/data/media/####/506d67240dd1f3be1bf152beba5793eb
/data/media/####/50b39d6c57b26ebf95622a69e8d04af8
/data/media/####/531a2c4312a06771c0a7d1daa52510f0
/data/media/####/531fe4836a4e50006fa79a0ddf49b039
/data/media/####/53b4a2114ecde8870417a51b557e694b
/data/media/####/5414f6523a42f2f0cf1204913d6bae60
/data/media/####/54e957084695c632a934a9dca0a3c6a2
/data/media/####/54f655de6e23a9b5d7dba50a61bec504
/data/media/####/55e2614ed1cf3a2c9335614b652b1875
/data/media/####/5652c7a6ae61c45384392fdbc3146985
/data/media/####/56fe44fdc3d4f44a8f954a00f5999055
/data/media/####/57a06847ec22058f39c9bc0cf9e01d49
/data/media/####/57a432762748b6ea06ecb3642081174f
/data/media/####/586cafe4f45718cd2c793e92b6774087
/data/media/####/58c4458e5a3d8aa4bbdfedfd778e7daf
/data/media/####/58f811dbec76a19f727845355af4e510
/data/media/####/596d4a07aa7f15f07c517165d753310a
/data/media/####/5a51b94f11b6cbe4ea2b8081ab999730
/data/media/####/5a9b53e623fd1fef1d7a0ff4e31855d2
/data/media/####/5b140b1f12ab05e77e661829f1e481ec
/data/media/####/5c783bc3c14bfb2a0bcfaa852e6c6e8d
/data/media/####/5cbed655542ee8a9963255f4e98fb639
/data/media/####/5d49d5c207923263b3349ee564c29905
/data/media/####/5d9acc434335a1446d2cf5b5c4ed2c24
/data/media/####/5dc6b2da19dda3b354731f4ebb338f41
/data/media/####/5e052f29c89de1fa8e100586dbe1cf0d
/data/media/####/5e4ae57d6cdce37aa015c68b5e5b1b72
/data/media/####/5e663bc5399fa938b6a0ac29b6c4398c
/data/media/####/5f4b7960802b5a7ed36c7134051b53d6
/data/media/####/5fd8efd536b2f30a943852f2380c7a9d
/data/media/####/5ff69fb76f4f1fbcc82a8341c708c769
/data/media/####/60287d94960e951bdfa8b3008a44c4d9
/data/media/####/60e19078182c936651deab718a03aa6a
/data/media/####/62af002b34cf844ae14a6f6d5dd14d9c
/data/media/####/630dbd47a7c264e7a11b9c0c9fc3ff49
/data/media/####/634c6f79e91c0c69e89fee2673276e24
/data/media/####/63ceb3c919baea334ea85fbec102aede
/data/media/####/644bd0bb6c6317ac811cd184bc0ecd65
/data/media/####/657c76b7d5d74008d260a1feed8752d4
/data/media/####/658b31ba2af4ff74031ac4b4a46cb33d
/data/media/####/65c63fcf564a3ed4cf209ff872d02c99
/data/media/####/65cab53661b5e8e463ec0cc051ce6b6d
/data/media/####/65d28ba880f1fe2a27235401c8534bb5
/data/media/####/6770bb2ac4ca51e06cd5228ce6a1292f
/data/media/####/67e88f5aad2ef3881c9141b0045b7144
/data/media/####/68ff0fc109099f179e29eebcc6df34c1
/data/media/####/6a5fd6b0b2192e25ba37a77669ca8127
/data/media/####/6b0a240382399f5f732553ed2a8da7b5
/data/media/####/6c04558fd8a63a4b8634215ad286bb9c
/data/media/####/6c2282bd0df4352b7592a5c3ff2b4b7a
/data/media/####/6c7383984e074858f70b807c4c8d73b3
/data/media/####/6c781e07db81e299561a677a1de0a56f
/data/media/####/6c8bf70ecc4c7b421b0bd32c3aaa43e9
/data/media/####/6d1113840736885c60567f14206fee28
/data/media/####/6dea6629174f3a7148bdc933cd27457e
/data/media/####/6e18be5da88fc0cb0a936b2b6d97fcbd
/data/media/####/6e49115582f98e7e11e06f9b21203c76
/data/media/####/6ee0a3e0b634d8d2d519c147e8b85370
/data/media/####/6f6a47ca3ec2efae4ae6d0d602756604
/data/media/####/6fba70f759a04025ae829d9db89143f4
/data/media/####/7001257ec8139c3089cb29f5f802a829
/data/media/####/7039a6c4de038d3ccce683e7b57eb319
/data/media/####/7052492b937636a4d98607d598cc72c1
/data/media/####/70f86c5046e822ae97a32579ec9ff16b
/data/media/####/7125295de524b6c80fc6785c15419070
/data/media/####/7138500a94dc68620320f6cbc7abf9ed
/data/media/####/714f4f1584c95d9e3c6f9c3e975062f6
/data/media/####/73b769801e7ceb73074ec9422965d058
/data/media/####/73e6d8184a23541ea41bef25b7d0a4b0
/data/media/####/73f8f90b4628334e9345fe0786dce0fa
/data/media/####/75be3d0b236a5439fe1315f4464d235a
/data/media/####/763b7600a4544b0b6a09f9ff801af3ce
/data/media/####/766ec3061b48e4f8717ebb83d733a30d
/data/media/####/76ac5c8c15daadcdc156f087e56289a7
/data/media/####/774b1d690c6ab394987b034aaca57fc5
/data/media/####/77c40fb6894cbc5579733de3bf705703
/data/media/####/77d1e0058e92b0742e2463a50df62c95
/data/media/####/787ca3057300dba6c01e7ccae2b5e282
/data/media/####/78d4136e27565afc6bd7e481ff2a3e76
/data/media/####/791733f7e6bf24defc08a53ce3a685cf
/data/media/####/79aad9d76129471e90d3303855100a92
/data/media/####/7a5344622938fa3bce8efd60bfe72006
/data/media/####/7aaacf6fc79587cd449e17c9de80a244
/data/media/####/7b611e042f83b1aa03dec56bea297b6c
/data/media/####/7d2c441abcc6efd7d884c24a56ec820d
/data/media/####/7d2f225828ea2af3c6f97845785d2305
/data/media/####/7d6a49ea695d236608efdda11219bd43
/data/media/####/7dd9de89c1b38b9ce8ca4a237c08ba53
/data/media/####/7e05d28eeccf478decd35eab86911550
/data/media/####/7f09a394eac5321b63e0ba900b80ee4e
/data/media/####/7f7f609b4305a46076b9acddf8f2b81b
/data/media/####/7fa30c9fc35c563a6f3d4ca39625b950
/data/media/####/7fa52331c601d5177c294f5b5e3b176b
/data/media/####/8120c7c4ef812ade36078fc936bcab0d
/data/media/####/82992d59125ca6c05cba76a92f38654b
/data/media/####/82bf612982847e060de6b7281bc6854b
/data/media/####/83a7af1701bb0fb7f9064bdc220f616c
/data/media/####/84ddc7ccbbfe90a08de02d23a7d84c17
/data/media/####/84f2320ce0a483f8744a81ceda147620
/data/media/####/854fbbf1d1f3145cf4260cd5a71eeb0a
/data/media/####/8617dc77b1949328d5aa11fbb3f53da6
/data/media/####/8635dd43d77b17ab6ae51135dd6d65a8
/data/media/####/87cbca2f0660a4561df8af651e762c84
/data/media/####/893db78f7a20ceed16b9270df2960e83
/data/media/####/8973adb421e1f835927fc53df6a27811
/data/media/####/8a244c0520f4994402a66f3a5aaaa782
/data/media/####/8a44d2c94021f9a991002b7996b5bdc8
/data/media/####/8a8aa501d3c79c8fc0d38aec0e4fb59e
/data/media/####/8c5e2dd6de6c4f3c51dc551b8bd74689
/data/media/####/8e4ea68df559e4d151b237d83dac3162
/data/media/####/8e62243526df0f4011e31a4c20fdc6e4
/data/media/####/9087fe089d526db1f4f728612e0f9dd1
/data/media/####/90a50e0c95061cda0f1ba30c6c661d4e
/data/media/####/90e2a7a03c7bb52c742c13777297091b
/data/media/####/910f117ff10f9375b67fd01d3fdf5d78
/data/media/####/91ab805ae5d0177ae43a63b9c92adeb1
/data/media/####/91b9b85f81312dbb58b5503f037c866b
/data/media/####/9264ec4b131dfeede457307ce19b172e
/data/media/####/9317643a52fc1f751d6d733afd03cea4
/data/media/####/93dda40a3602c3c8b273ce67fd6abed9
/data/media/####/9448517e4d11e2ac617aeb39caef6d9f
/data/media/####/954e6d05f16f078d349bc4583ca86928
/data/media/####/96309cb760189be0ad4f09cd0be6f507
/data/media/####/975272f08fbd8651eb24928803fe10a2
/data/media/####/978a9ed552a1fc94578ac6e1aa4ee9e0
/data/media/####/97a1374d0dff302c0b496fdd0ec28dd9
/data/media/####/97bc8e2afba9c40a5f5b720487da3ae3
/data/media/####/980d1a77ca9792dca5b49f9fd8f1b96d
/data/media/####/9848ea450b68f69a95bcd4cb5f1796cb
/data/media/####/98e4419f2da295906cc7b7b6ee1429e8
/data/media/####/992a5ed696db84e036306c8d24e793f6
/data/media/####/99cfcc029e8e911ff88e63daa045e184
/data/media/####/9b141fcbf220248071e9c92d84ea3c42
/data/media/####/9bde2758f6b58a92a123f028c9a3f050
/data/media/####/9c0cc0bfea2896d74daa1313a1abfccb
/data/media/####/9c788e6cf410fb3a9e36d622fb0c0434
/data/media/####/9d59b0b5aebbd73e58a161e37abbadd4
/data/media/####/9d7f56899680c2cc9c02dc469f9dd931
/data/media/####/9ddcc0d2fb35a0b8492f4f4e58cc1633
/data/media/####/9ee0f414ec582a57272f32b193438d3b
/data/media/####/9ef455f5e61febd16ad0f169a0f9fc8b
/data/media/####/9ef6eeddcff8b54caa0edd4a4b991d6c
/data/media/####/9f28084121eedc83e23ae1301ad86220
/data/media/####/9fa8438f216d97c9f5e64870bb36c278
/data/media/####/9faede0a593e38c9313e43c192f5ddd8
/data/media/####/9fd759cba9a0dc6027d9bffadc9d5628
/data/media/####/a2c2b8cd17ef7011ea166fa68e3fa5bc
/data/media/####/a37bc4a7ea31f2941d3d3cde348e87b5
/data/media/####/a392b7c224b39d313a2eaeb64c45f742
/data/media/####/a5087428c8b8bcda369f384aff28f582
/data/media/####/a5652997d8e7d48f19c765e5aac8d33a
/data/media/####/a5724cb3f8c41215bfc1e20a9b92a405
/data/media/####/a586fe3faa8d5ce6d465bbf62f65e78d
/data/media/####/a5e71d97756e595dc6fb94cb9f336ef6
/data/media/####/a70f50afdd510aa692800ff390ab2900
/data/media/####/a75981feae02bbaf96d7bd3a7ccbd0d4
/data/media/####/a8391ffbb397d9f16f35731350c87bfd
/data/media/####/a88fcd528ef0ad289e7553698079fe44
/data/media/####/aa8cdb6dae5b09cc2bfea29913cab796
/data/media/####/ab71ac2bf372fd7107234cd0085a8203
/data/media/####/aclkdata.bin
/data/media/####/ad2476abfeb80b2863cab1af42d4209d
/data/media/####/ad365453f15a8aaa6bc688ecf096956e
/data/media/####/ad4431d1590400b1b36be43973013304
/data/media/####/ad690d6009447458ca931b82f9b72fbf
/data/media/####/ad9fab369aae10ed4a2659b599989acb
/data/media/####/adc3c184099a2edf88451dcf86baeabd
/data/media/####/ae3f5d405f5748d62a69c81344056f11
/data/media/####/alsn20170807.db
/data/media/####/alsn20170807.db-journal
/data/media/####/app.db
/data/media/####/b1e1dab9ce6d8497e538f73c2f9a9753
/data/media/####/b27b331218ec0e9b2b72037a69c8f1aa
/data/media/####/b34cff06e2f723e0c6e4a529ee4e7bcf
/data/media/####/b3f82dcb6bed0deb7d2ca742ed5e5c40
/data/media/####/b488e45379a395ce1d87cfed24d88931
/data/media/####/b5935d9c12883d185692d54258fd644c
/data/media/####/b5a252604458c21df298db3e5252ad5e
/data/media/####/b5bb8e81d9cf6b5725dfb07240e58ed7
/data/media/####/b686d7fd6c1e0cba4b9d75eb944745b7
/data/media/####/b799b229da2a9d9b9d176d802759fdf2
/data/media/####/b8c5b0af77fff80880ec1fd7ca9d405c
/data/media/####/b9258d07aa363f533d742300d4879705
/data/media/####/b94348e072da612734b6c8a2886af2f6
/data/media/####/b9506edde762a2adf6b6d76ce43d7177
/data/media/####/b9852aeb99fb217aa60098f0a34f0ad9
/data/media/####/b9b1f1ef64f2ad0319dada857c63a269
/data/media/####/b9b6dbbd2240f43ca227c83b1a554559
/data/media/####/baa4c9030c71d379ec21adfc5755d5c5
/data/media/####/baf02b074126cf0419f2fa7a40f9c0bf
/data/media/####/baf0cebf0bfad4ab8655e27de58e885c
/data/media/####/bc20ae591d593a9889a3e9176e6872e7
/data/media/####/bd5da3b1d0e20ddd3d962181a23a9c53
/data/media/####/bdb7c9b2f281e541ffa67f27f05c8aba
/data/media/####/bec4753efb231edc76e9c40243edfa76
/data/media/####/bedb614fbc3d6f78e62147d8c850b47d
/data/media/####/c017384982628ec668a0e2a30a06eabd
/data/media/####/c06b48f9417133ce9ec669dd1d9d4be9
/data/media/####/c114cd76c6c8139ecb33a0c86c35527b
/data/media/####/c11be659699bc5495061dd03b7775e50
/data/media/####/c17f00dbb67db74209c605b8cadc2a4d
/data/media/####/c181eff46751b675fbc0da7c11d3025d
/data/media/####/c1e463d5b9a52c2d192a84a9b2989304
/data/media/####/c25acfb43f1715f39952d495c782d5c7
/data/media/####/c299995f8b1d2226b34f6b8d68a930bf
/data/media/####/c2dbf0f45ebcc48406914374c09cade0
/data/media/####/c2ef8d8d5630e5831e090a393081043d
/data/media/####/c329b10f1f675e3ae70d8d1c7fe469eb
/data/media/####/c372c7c492d1cbd79726c109b9d09586
/data/media/####/c3a713161186cf9d59c13ef92889d43e
/data/media/####/c3b8cdf250f0de00cabeea9ec0bb5590
/data/media/####/c4d472fa4831dd7a2a7e1972196153dd
/data/media/####/c4d705fefedc0276ba995651e76ab785
/data/media/####/c51b61943ea99043f8b8d7ac3dcfbe2f
/data/media/####/c56a74fce7a9c60d5bedd5f3f4e99a04
/data/media/####/c79f2f924ec79a0d777dce4d7f3b0cc7
/data/media/####/c89ce7576f00c47cc76df1bf7dde4d3b
/data/media/####/c8d7009d064b7a8e4faec80c220706b3
/data/media/####/c9cf56a0ae719f1dcf92a73dce8d8920
/data/media/####/cache_data
/data/media/####/cache_data_tmp
/data/media/####/cbba6399a9cd4288050903ab7152b607
/data/media/####/cbfb9079b47da179b7aead1b75c6a36b
/data/media/####/cc89828c3b13eaf3a2d2eccac5c4c2a6
/data/media/####/cc93f5602494d5cbafd9c2149164f60c
/data/media/####/ccc4518dece1a3ebcf5922fc15eb7d0b
/data/media/####/cecdd77e086a20f44888ad89246fa5bc
/data/media/####/cfe609d9362a87427b9249ce253bff33
/data/media/####/cff8167b08e9710641205279deebd6c0
/data/media/####/com.founder.jingmen.bin
/data/media/####/com.founder.jingmen.db
/data/media/####/com.getui.sdk.deviceId.db
/data/media/####/com.igexin.sdk.deviceId.db
/data/media/####/d0382d584936b79e01ac8dd531f7a0fc
/data/media/####/d0dd749fa08389c369ec82c9d0deb5f5
/data/media/####/d0dddbea581d8c9357c2c06a9744f69a
/data/media/####/d0e314fc11a2fffa8d91ae4f12aadb2e
/data/media/####/d0f3a013aa5b98770be1acc5961cc410
/data/media/####/d148c128e0ad57c34f554da8d9a89e07
/data/media/####/d16eddef163e36e1ee7aecf7dfeb46ee
/data/media/####/d21b8f84471fec925baaa19faa9b30fc
/data/media/####/d32e874416dce18bbaa070423414ebd7
/data/media/####/d548945982cb0e384c1b48529f398010
/data/media/####/d59b2e5995b22787671c1f0cb5bf508c
/data/media/####/d5d906fb39bd38910026e8e704b089c7
/data/media/####/d61cb196efea6a1aa1571b280cfc2e5e
/data/media/####/d7ad84e3977c7e6c565b77ef559c655c
/data/media/####/d850b89b6200c0cf74e657f026637fff
/data/media/####/d88cb75b6f667a9a9c9c7e05a85da145
/data/media/####/dad72122e9fbe2600c51668c11a69f99
/data/media/####/dafce6044157b3d1b0f2cd0cca7afa7b
/data/media/####/dc5cb8f2209b472d613cecfd8f7d2394
/data/media/####/dc9248ac546ca488a2b2d23a39140463
/data/media/####/dcad941ea430291f7d6247babe6efe2c
/data/media/####/dce87d38f68ed7332a26ed7acba16dec
/data/media/####/dd2d388d70ec1fa778eea136a090e8c0
/data/media/####/dd4a4e2290fff638ebe456cb168ee447
/data/media/####/dd629092af4198c75ec06dd770556adb
/data/media/####/dd7893586a493dc3
/data/media/####/debc6256d4d5b0f92732da3b6916fb24
/data/media/####/dfdfba50c0cf0b20cb2bbe7cd1857847
/data/media/####/e00faeb92f438644a8b9df2479004bf7
/data/media/####/e024f6495cb7ca6c25a2d9b315709491
/data/media/####/e044c5abed29b7a00bb72d69159ea6c1
/data/media/####/e0ae7d28bb266596e6eb22937ffb10b5
/data/media/####/e0d6356cbef9182a61b10d218cb2d424
/data/media/####/e11911b038979c1cbfe01f961be92cb3
/data/media/####/e14119558eb093a6281b8026ae91fdbf
/data/media/####/e14b2179ef1a1915bb7586a67a3c985f
/data/media/####/e1a2157e40d8a96a07ea38418748b6ec
/data/media/####/e47a2c21a55befac69580eed2422a433
/data/media/####/e489b70e3a6350350b4388fb0f36962e
/data/media/####/e4ea2ed221f6e71ba2b2ddeb31aa3213
/data/media/####/e5921cfc09e7591532d35e9a7ef0443e
/data/media/####/e7c4d0f174e4b7c86d7fc9abf9d94cdf
/data/media/####/e7de3a995b9ec0cccb4f945ecbaabba6
/data/media/####/e82445b1d76a29bcce15f94aa8441903
/data/media/####/e880671ee1f59dbb888f038f66407189
/data/media/####/e956d5f46829ef71a34a8f38c1984b1d
/data/media/####/e9797d3fd4b2e88842dbab2ab368fb23
/data/media/####/e9ab713c63aab0c9f565b10e548d1b11
/data/media/####/e9edbb696340301c8aa097eaf3147e3a
/data/media/####/eaae0e0e222a7bac122e3f2acf061641
/data/media/####/eb88eb730f333fa574de6294f42ab24f
/data/media/####/ebd26c3885a3adf783f60cd141d855f5
/data/media/####/ec8ecabb0c5362a311f5f289865b0c0e
/data/media/####/ecabafc3d657a6a5ec9ce6836a109027
/data/media/####/ecc09a1ed0246a98f94072e6a52cb8b2
/data/media/####/ed8965a241256f41db5c28be836bdc44
/data/media/####/ed9a363206e2de8646dce93bfb28ec17
/data/media/####/ede585a5e3aa989e9a1812e6f4e662a0
/data/media/####/eea1135bcf9017826f4c7bc436ac3586
/data/media/####/eee4fc594b714531386f985f6a0fa001
/data/media/####/eee882f8bb93bf6adb7be12319c15d32
/data/media/####/ef3ddbfce3ca363a97aefc0701853d5d
/data/media/####/ef6778efaedf68d77be59f0654071f6c
/data/media/####/f0dc74b688bdf833407420ca7abba949
/data/media/####/f0f381b5b81c8455344107c3d13c2330
/data/media/####/f0fe2a7c498060b9408c7dc1f41a9143
/data/media/####/f1a84548376579009d221be88151629b
/data/media/####/f1d07f26d56bb5de084cd90dbec29b36
/data/media/####/f1eb06846289bf9f773f1a86a5a35440
/data/media/####/f21197b2140e71878e89e60806828066
/data/media/####/f211bfef9705d29cb0170ed28974865f
/data/media/####/f23436193dd82bf1f5849120c0c30a5a
/data/media/####/f50310dffc0fa3ee81239de27f8fcbd7
/data/media/####/f53144a5550be72650fc02b175bd93b6
/data/media/####/f5ba10b185ccd84480cbb5f74175a147
/data/media/####/f5f597c7e81fbf76e15dcc6c7a8abda3
/data/media/####/f61f38cdb6c5b08e3a24376e03745862
/data/media/####/f658b4545e17a1a1911bb651d63438b4
/data/media/####/f69750990104aca0b3f4fb360fbbb464
/data/media/####/f78c73e1ae63cc16c2ee494903443d41
/data/media/####/f7b0fb47869336166aec92a45ec0c02a
/data/media/####/f801cd83d1e773c5f1e1e4c6069cd5b6
/data/media/####/f8b759d536aa383e179b8cf0affe073c
/data/media/####/f8f5e3881fe04e9d421835edf34481d8
/data/media/####/fa4721214535f864385758cb137ffc68
/data/media/####/faebd5d4afea6498f433b6e1a65a591c
/data/media/####/fb52f09d106c7e21fe43863234814b4f
/data/media/####/fb7025956e6269c051bdcbaa80b0c332
/data/media/####/fd493cae4d83ff902744f0789854b54b
/data/media/####/fd61cde5fc2134e952766eac18d7deb3
/data/media/####/ff56bc3198d4347293314d80f5d6732a
/data/media/####/hid.dat
/data/media/####/iflyworkdir_test
/data/media/####/journal.tmp
/data/media/####/localTemplate.zip
/data/media/####/postdata.bin
/data/media/####/tdata_Soq141
/data/media/####/tdata_ntt510
/data/media/####/test.log

Miscellaneous:

Executes the following shell scripts:

<Package Folder>/files/dc4344988048ff586a
<Package Folder>/files/dc6457b213149f4e01
<Package Folder>/files/dc74e13edc3a6f48cd
<Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.push.GeTuiPushService 24910 300 0
app_process /system/bin com.android.commands.pm.Pm list packages
chmod 700 <Package Folder>/files/gdaemon_20161017
chmod 755 <Package Folder>/.jiagu/libjiagu834509454.so
getprop ro.build.version.release
getprop ro.product.cpu.abi
grep -E -v root|shell|system
pm list packages
sh
sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.push.GeTuiPushService 24910 300 0
top -d 0 -n 1

Loads the following dynamic libraries:

entryexpro
getuiext2
libjiagu834509454
locSDK7a
msc
neh
sgavmpso-5.4
sgmainso-5.4
sgsecuritybodyso-5.4

Uses the following algorithms to encrypt data:

AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-PKCS7Padding
DESede-ECB-PKCS5Padding
RSA-ECB-NoPadding
RSA-ECB-PKCS1Padding
RSA-NONE-OAEPWithSHA1AndMGF1Padding

Uses the following algorithms to decrypt data:

AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-NoPadding

Uses special library to hide executable bytecode.

Gets information about location.

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Gets information about installed apps.

Gets information about running apps.

Adds tasks to the system scheduler.

Displays its own windows over windows of other apps.

Technologies

Begriffe

Schulung und Training

Mythen

Technical information

Curing recommendations

Free trial