Техническая информация
Вредоносные функции:
Отправляет СМС-сообщения:
- 18658196531: ####A
- 12114516416: ####A
Сетевая активность:
Подключается к:
- s####.####.com
- h####.####.com
- s####.####.cn
- r####.####.com
- y####.####.com
- b####.####.cn
- t####.####.cn
- st####.####.com
- m####.####.com
Запросы HTTP GET:
- st####.####.com/group16/M00/17/35/tz0M9Vg_yFMAAAAAAABcCh2J8PQ388.jpg
- m####.####.com/mlive-h5/static/images/room/icon-time2.png
- st####.####.com/group16/M00/83/61/tz0M9VIpeZsAAAAAAAA8TG-TSOw524.png
- t####.####.cn/mobile/g/img/uc/logo_4.3.8.png
- t####.####.cn/play?uc_param_str=####&ch=####&ch2=####&id=####&src_id=####&video_type=####&channel=####&title=####&play_url=####&play_mode=####&hls_url...
- st####.####.com/group16/M00/83/5F/tz0M9VIpeM4AAAAAAABWXTQPUjA633.png
- st####.####.com/group16/M00/83/5F/tz0M9VIpeNkAAAAAAABRXhJzG9g469.png
- s####.####.com/versioncheck.aspx?
- t####.####.cn/mobile/4.5.8/index.html?uc_param_str=####
- st####.####.com/group16/M00/9C/78/tz0M9VI-xFYAAAAAAAAxskhL85w449.png
- y####.####.com/j.gif?act=####&eventid=####&class1=####&class2=####&bak1=####&bak2=####&bak3=####&parm1=####&parm2=####&uid=####&time=####&ui=####&user...
- st####.####.com/group16/M00/83/5F/tz0M9VIpeMQAAAAAAAAvISsCyEw885.png
- t####.####.cn/mobile/??mobile/####&855####
- m####.####.com/mlive-h5/static/js/index/MliveStorage.js
- r####.####.com/pay/auth/js/auth.js
- s####.####.com/getconfig.aspx?
- m####.####.com/mlive-h5/static/images/room/poster.jpg
- m####.####.com/mlive-h5/static/js/room/index.js?v=####
- s####.####.cn/GetFeeData.aspx?iswifi=####
- t####.####.cn/c/mobile/4.5.8/footer/img/footer-logo.png
- st####.####.com/group16/M00/83/5F/tz0M9VIpeKQAAAAAAABECA_afAc406.png
- st####.####.com/group16/M00/D5/AF/tz0M9VcY14IAAAAAAAA9UH-7OOQ419.png
- st####.####.com/group16/M00/83/60/tz0M9VIpeO8AAAAAAABg6CnsAqg504.png
- m####.####.com/mlive-h5/29883991/?agent=####
- m####.####.com/mlive-h5/static/images/room/icon-gift.png
- r####.####.com/js/commons/webpcucount.js
- st####.####.com/group16/M00/81/A3/tz0M9VIoKDIAAAAAAAA-S2jvcok941.png
- m####.####.com/mlive-h5/static/images/room/45x45dp.png
- s####.####.cn/getconfig.aspx?
- st####.####.com/group16/M00/83/60/tz0M9VIpeVMAAAAAAAAzckBbhdQ541.png
- st####.####.com/group16/M00/83/60/tz0M9VIpeQwAAAAAAABJBHt1RDI990.png
- m####.####.com/mlive-h5/static/images/room/flow-light.png
- st####.####.com/group16/M00/609/20170124_1352085967586.jpg
- t####.####.cn/event?v=####&uuid=####&nv=####&br=####&brv=####&sid=####&cd=####&tz=####&rs=####&ht=####&app=####&appve=####&ts_id=####&category=####&ac...
- t####.####.cn/js/c.click.event.page-view.error.query.scroll.night.timespent.orientation.performance.send-uae-bench.js?t=####
- st####.####.com/group16/M00/B3/94/tz0M9VRq8kAAAAAAAAA9RVlLdtY974.png
- st####.####.com/group16/M00/8B/9C/tz0M9VIwFk0AAAAAAABHOyP2XHs196.png
- m####.####.com/mlive-h5/static/js/commons/hiido.js
- st####.####.com/group16/M00/1D/59/tz0M9VhevKAAAAAAAABiXjL3o5I879.jpg
- st####.####.com/group16/M00/0A/C9/tz0M9Vf8wpUAAAAAAAA45FSb1wY810.png
- t####.####.cn/mobile/4.5.8/main.js?19hup####
- st####.####.com/group16/M00/EA/45/tz0M9Vd6cOwAAAAAAABXVkMd4d0408.jpg
- m####.####.com/mlive-h5/static/js/jquery/jquery.url.min.js
- st####.####.com/group16/M00/83/60/tz0M9VIpeVoAAAAAAABIp2yCmQM600.png
- s####.####.cn/versioncheck.aspx?
- t####.####.cn/click?v=####&uuid=####&nv=####&br=####&brv=####&sid=####&cd=####&tz=####&rs=####&ht=####&app=####&appve=####&uc_param_str=####&ch=####&c...
- t####.####.cn/event?v=####&uuid=####&nv=####&br=####&brv=####&sid=####&cd=####&tz=####&rs=####&ht=####&app=####&appve=####&category=####&action=####&v...
- m####.####.com/mlive-h5/static/js/jquery/jquery.cookie.min.js
- m####.####.com/mlive-h5/static/images/room/icon_hua.png
- st####.####.com/group16/M00/83/61/tz0M9VIpeY0AAAAAAABGWg6rHdY159.png
- m####.####.com/mlive-h5/static/js/jquery/jquery-2.1.4.min.js
- st####.####.com/group16/M00/B3/94/tz0M9VRq8i8AAAAAAAA89RHTdV4979.png
- st####.####.com/group16/M00/6411/20170218_0038141039170.png
- m####.####.com/mlive-h5/static/images/room/icon-follow2.png
- st####.####.com/group16/M00/E0/9A/d7wtWVgWb5EAAAAAAABQDBlvC2c278.jpg
- t####.####.cn/pageview?v=####&uuid=####&nv=####&br=####&brv=####&sid=####&cd=####&tz=####&rs=####&ht=####&app=####&appve=####&url=####&route=####&page...
- m####.####.com/mlive-h5/static/css/room/index.css?v=####
- m####.####.com/mlive-h5/static/js/room/room-subscribe.js
- st####.####.com/group16/M00/E0/A9/tz0M9VdMK3sAAAAAAAAO8nz2Sec142.png
- t####.####.cn/c/mobile/4.5.8/video-multi-list/img/gray-arrow.png
- st####.####.com/group16/M00/9C/78/tz0M9VI-xBUAAAAAAAAkxHNQmUA516.png
- st####.####.com/group16/M00/83/60/tz0M9VIpeX4AAAAAAABDIBkBLeo620.png
- m####.####.com/mlive-h5/static/images/room/follow.png
- t####.####.cn/mobile/subject/detail/1.0.0?tag=####&callback=####
- st####.####.com/group16/M00/B3/94/tz0M9VRq8kwAAAAAAAA9-ipu9v0150.png
- t####.####.cn/mobile/??lazyimg####&855####
- st####.####.com/group16/M00/B3/94/tz0M9VRq8fIAAAAAAAA6uzCs8mY881.png
- t####.####.cn/event?v=####&uuid=####&nv=####&br=####&brv=####&sid=####&cd=####&tz=####&rs=####&ht=####&app=####&appve=####&category=####&action=####&l...
- st####.####.com/group16/M00/83/61/tz0M9VIpeaMAAAAAAABAnwPwh6M378.png
- st####.####.com/group16/M00/6691/20170218_0035272479969.png
- st####.####.com/group16/M00/A4/E9/tz0M9VZFxtkAAAAAAAAYVnvgQTA065.png
- m####.####.com/mlive-h5/static/images/room/contribution-title.png
- b####.####.cn/c?uc_param_str=####&path=####&v=####&uuid=####&nv=####&br=####&brv=####&sid=####&cd=####&tz=####&rs=####&ht=####&app=####&appve=####&dns...
- m####.####.com/mlive-h5/static/js/room/svc_tunnel.js?v=####
- s####.####.com/GetFeeData.aspx?iswifi=####
- st####.####.com/group16/M00/3429/20170108_1826107128581.jpg
- st####.####.com/group16/M00/570/20170218_0034511761201.png
- st####.####.com/group16/M00/A9/89/tz0M9VZVgVQAAAAAAABhGHa0wDE601.png
- t####.####.cn/mobile/4.5.8/img/video-img-default.png
- st####.####.com/group16/M00/83/5F/tz0M9VIpeIIAAAAAAABP6XcEneQ214.png
- st####.####.com/group16/M00/8E/FE/tz0M9VMwDekAAAAAAAA7E1vdejc853.png
- st####.####.com/group16/M00/81/A4/tz0M9VIoKFAAAAAAAABSqRIaSFc641.png
- h####.####.com/hiido_internal.js
- m####.####.com/mlive-h5/static/js/room/room-viewhist.js
- y####.####.com/j.gif?act=####&ht=####&siteid=####&speid=####&ui=####&sc=####&cl=####&pcmb=####&os=####&bs=####&mb=####&se=####&wd=####&rfh=####&rf=###...
- m####.####.com/mlive-h5/static/js/room/room.js?v=####
- st####.####.com/group16/M00/83/61/tz0M9VIpeZQAAAAAAABPd1r8juA997.png
- m####.####.com/mlive-h5/78769680/?agent=####
- t####.####.cn/mobile/??undersc####&855####
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/cache/webviewCacheChromium/f_00000e
- /data/data/####/cache/webviewCacheChromium/f_00000d
- /data/data/####/cache/webviewCacheChromium/f_00000f
- /data/data/####/cache/webviewCacheChromium/f_000016
- /data/data/####/cache/webviewCacheChromium/f_000018
- /data/data/####/cache/webviewCacheChromium/f_000019
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/f_000015
- /data/data/####/cache/webviewCacheChromium/f_000012
- /data/data/####/cache/webviewCacheChromium/f_000013
- /data/data/####/cache/webviewCacheChromium/f_000010
- /data/data/####/cache/webviewCacheChromium/f_000011
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/shared_prefs/uw.xml
- /data/data/####/shared_prefs/ui.xml
- /data/data/####/cache/webviewCacheChromium/f_00001f
- /data/data/####/cache/webviewCacheChromium/f_00001d
- /data/data/####/cache/webviewCacheChromium/f_00001e
- /data/data/####/cache/webviewCacheChromium/f_00001b
- /data/data/####/cache/webviewCacheChromium/f_00001c
- /data/data/####/cache/webviewCacheChromium/f_00001a
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/databases/webview.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000017
- /data/data/####/cache/webviewCacheChromium/f_000014
- /data/data/####/shared_prefs/ui.xml.bak
- /data/data/####/shared_prefs/uw.xml.bak
- /data/data/####/cache/webviewCacheChromium/index
Другие:
Может автоматически отправлять СМС-сообщения.
