Adware.Adpush.1092

Техническая информация

Вредоносные функции:

Осуществляет доступ к приватному интерфейсу телефонии (ITelephony).

Сетевая активность:

Подключается к:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) js.a####.ir:80
TCP(HTTP/1.1) srv.magneta####.com:80
TCP(HTTP/1.1) www.ik####.com:80
TCP(HTTP/1.1) mediat####.apptor####.com:80
TCP(HTTP/1.1) peyma####.ir:80
TCP(HTTP/1.1) crea####.magneta####.com:80
TCP(HTTP/1.1) api.tap####.ir:80
TCP(HTTP/1.1) s####.apptor####.com:80
TCP(TLS/1.0) ssl.gst####.com:443
TCP(TLS/1.0) api.tap####.ir:443
TCP(TLS/1.0) 2####.58.212.206:443
TCP(TLS/1.0) cafeba####.ir:443
TCP(TLS/1.0) g####.gl:443
TCP(TLS/1.0) www.go####.com:443
TCP(TLS/1.0) cn####.r53b####.xyz:443
TCP(TLS/1.0) srv.magneta####.com:443
TCP(TLS/1.0) app.ad####.com:443
TCP(TLS/1.0) onesi####.com:443
TCP(TLS/1.0) js.a####.ir:443
TCP(TLS/1.0) trust####.en####.ir:443
TCP(TLS/1.0) d####.fl####.com:443
TCP(TLS/1.0) www.go####.nl:443

Запросы DNS:

a####.ir
api.tap####.ir
app.ad####.com
cafeba####.ir
crea####.magneta####.com
d####.fl####.com
g####.gl
js.a####.ir
mediat####.apptor####.com
onesi####.com
p####.tap####.ir
peyma####.ir
s####.apptor####.com
s####.ik####.com
srv.magneta####.com
ssl.gst####.com
sto####.back####.com
trust####.en####.ir
www.go####.com
www.go####.nl
www.gst####.com
www.ik####.com

Запросы HTTP GET:

api.tap####.ir/banners/index.html?id=5a292fb4d005ec0001baf9f6&userId=a75...
api.tap####.ir/banners/index.html?id=5a5bb675600e6d0001c94f42&userId=a75...
crea####.magneta####.com/2018/3/7813169104d64f689657299cf33d656f/NativeA...
crea####.magneta####.com/2018/3/a7844774beb9403fa97ce7e42cfe8790/NativeA...
js.a####.ir/adad-client/js/?device=####&androidid=####&token=####&networ...
js.a####.ir/adview/?digest=####&device=####&androidid=####&token=####&ne...
js.a####.ir/media/ads1712/92df4f4f-1d6c-4677-8ae3-effac547b78f/ar4-3327....
js.a####.ir/media/ads1803/34a21515-2308-46c8-ae84-431078e99988/256-6.png
js.a####.ir/static/images/skip-load.gif
js.a####.ir/static/images/video_mute_button.png
js.a####.ir/static/images/video_skip_button.png
peyma####.ir/download/wisekid.png
peyma####.ir/remote/zarbolmasal/massage_bazaar.txt
peyma####.ir/remote/zarbolmasal/setting_bazaar.txt
srv.magneta####.com/api/magnet/v2/android/impression?Cookie=####&CNT=###...
srv.magneta####.com/shared/shadow.9.png
www.ik####.com/
www.ik####.com/catalog/view/javascript/common.js
www.ik####.com/catalog/view/javascript/jquery/jquery-1.7.1.min.js
www.ik####.com/catalog/view/javascript/jquery/jquery.jcarousel.min.js
www.ik####.com/catalog/view/javascript/jquery/ui/jquery-ui-1.8.16.custom...
www.ik####.com/catalog/view/javascript/jquery/ui/themes/ui-lightness/jqu...
www.ik####.com/catalog/view/theme/default/image/arrow-down.png
www.ik####.com/catalog/view/theme/default/image/background.png
www.ik####.com/catalog/view/theme/default/image/button-next.png
www.ik####.com/catalog/view/theme/default/image/button-previous.png
www.ik####.com/catalog/view/theme/default/image/button-search.png
www.ik####.com/catalog/view/theme/default/image/button.png
www.ik####.com/catalog/view/theme/default/image/menu.png
www.ik####.com/catalog/view/theme/default/stylesheet/carousel.css
www.ik####.com/catalog/view/theme/default/stylesheet/stylesheet-rtl.css
www.ik####.com/image/cache/data/++++/A4-90x130.jpg
www.ik####.com/image/cache/data/++++/A4444444444-90x130.jpg
www.ik####.com/image/cache/data/++++/A555555555-90x130.jpg
www.ik####.com/image/cache/data/+++/1/B4444-90x130.jpg
www.ik####.com/image/cache/data/+++/1/B44444-90x130.jpg
www.ik####.com/image/cache/data/+++/1/D555-90x130.jpg
www.ik####.com/image/cache/data/+++/1/D55555555555555-100x145.jpg
www.ik####.com/image/cache/data/+++/1/D999-90x130.jpg
www.ik####.com/image/cache/data/+++/1/E111111111111111-90x130.jpg
www.ik####.com/image/cache/data/+++/1/G22-90x130.jpg
www.ik####.com/image/cache/data/+++/1/G222222222222222-90x130.jpg
www.ik####.com/image/cache/data/+++/1/M1111111111-90x130.jpg
www.ik####.com/image/cache/data/+++/1/N444444444444-90x130.jpg
www.ik####.com/image/cache/data/+++/1/N4444444444444444-90x130.jpg
www.ik####.com/image/cache/data/+++/1/Q777777777777-90x130.jpg
www.ik####.com/image/cache/data/+++/1/Z111111111-100x145.jpg
www.ik####.com/image/cache/data/+++/1/Z99999-100x145.jpg
www.ik####.com/image/cache/data/+++/B11111111111-90x130.jpg
www.ik####.com/image/cache/data/+++/C7-100x145.jpg
www.ik####.com/image/cache/data/+++/D44444444444-90x130.jpg
www.ik####.com/image/cache/data/+++/D444444444444444-100x145.jpg
www.ik####.com/image/cache/data/+++/D555-90x130.jpg
www.ik####.com/image/cache/data/+++/D5555-90x130.jpg
www.ik####.com/image/cache/data/+++/D66-90x130.jpg
www.ik####.com/image/cache/data/+++/D6666666-90x130.jpg
www.ik####.com/image/cache/data/+++/E000000-90x130.jpg
www.ik####.com/image/cache/data/+++/E55555-100x145.jpg
www.ik####.com/image/cache/data/+++/F55555555555-90x130.jpg
www.ik####.com/image/cache/data/+++/F777777777-100x145.jpg
www.ik####.com/image/cache/data/+++/I6666666666666666-90x130.jpg
www.ik####.com/image/cache/data/+++/J888888888888888888-90x130.jpg
www.ik####.com/image/cache/data/+++/k444444444444-90x130.jpg
www.ik####.com/image/cache/data/+++/k5555-90x130.jpg
www.ik####.com/image/cache/data/+++/k6666666666-90x130.jpg
www.ik####.com/image/cache/data/+++/k666666666666666666666666-90x130.jpg
www.ik####.com/image/cache/data/+++/k7777777-90x130.jpg
www.ik####.com/image/cache/data/+++/o0000000000000000-90x130.jpg
www.ik####.com/image/cache/data/+++/o00000000000000000-90x130.jpg
www.ik####.com/image/cache/data/+++/o000000000000000000-90x130.jpg
www.ik####.com/image/cache/data/+++/o222222-90x130.jpg
www.ik####.com/image/cache/data/+++/o22222222-90x130.jpg
www.ik####.com/image/cache/data/+++/o2222222222222-90x130.jpg
www.ik####.com/image/cache/data/+++/o33-90x130.JPG
www.ik####.com/image/cache/data/+++/o33333333333-90x130.jpg
www.ik####.com/image/cache/data/+++/o333333333333-90x130.jpg
www.ik####.com/image/cache/data/+++/o3333333333333-90x130.jpg
www.ik####.com/image/cache/data/+++/o33333333333333-90x130.jpg
www.ik####.com/image/cache/data/+++/o333333333333333333-90x130.jpg
www.ik####.com/image/cache/data/+++/o333333333333333333333-90x130.jpg
www.ik####.com/image/cache/data/+++/o333333333333333333333333-90x130.jpg
www.ik####.com/image/cache/data/+++/o44444444-90x130.jpg
www.ik####.com/image/cache/data/+++/o444444444-90x130.jpg
www.ik####.com/image/cache/data/+++/o4444444444-90x130.jpg
www.ik####.com/image/cache/data/+++/o4444444444444-90x130.jpg
www.ik####.com/image/cache/data/+++/o44444444444444444-90x130.jpg
www.ik####.com/image/cache/data/+++/o55-90x130.jpg
www.ik####.com/image/cache/data/+++/o5555-90x130.jpg
www.ik####.com/image/cache/data/+++/o55555555-90x130.jpg
www.ik####.com/image/cache/data/+++/o555555555-90x130.jpg
www.ik####.com/image/cache/data/+++/o5555555555-90x130.jpg
www.ik####.com/image/cache/data/+++/o55555555555-90x130.jpg
www.ik####.com/image/cache/data/+++/o555555555555-90x130.jpg
www.ik####.com/image/cache/data/+++/o5555555555555-90x130.jpg
www.ik####.com/image/cache/data/+++/o55555555555555-90x130.jpg
www.ik####.com/image/cache/data/+++/o555555555555555-90x130.jpg
www.ik####.com/image/cache/data/+++/o5555555555555555-90x130.jpg
www.ik####.com/image/cache/data/+++/o55555555555555555-90x130.jpg
www.ik####.com/image/cache/data/+++/o555555555555555555-90x130.jpg
www.ik####.com/image/cache/data/++/k000000-90x130.jpg
www.ik####.com/image/cache/data/++/k777-100x145.jpg
www.ik####.com/image/cache/data/+/4/E99999999999999999999-90x130.jpg
www.ik####.com/image/cache/data/+/4/E999999999999999999999-90x130.jpg
www.ik####.com/image/cache/data/+/4/E9999999999999999999999-90x130.jpg
www.ik####.com/image/cache/data/+/4/E99999999999999999999999-90x130.jpg
www.ik####.com/image/cache/data/+/4/E999999999999999999999999999-90x130....
www.ik####.com/image/cache/data/+1/0444444-90x130.jpg
www.ik####.com/image/cache/data/+1/0999999999999-90x130.jpg
www.ik####.com/image/cache/data/+1/h13333-90x130.jpg
www.ik####.com/image/cache/data/+1/h24444444-90x130.jpg
www.ik####.com/image/cache/data/+1/h299999999999999-90x130.jpg
www.ik####.com/image/cache/data/+1/o44-90x130.jpg
www.ik####.com/image/cache/data/+1/o444444-90x130.jpg
www.ik####.com/image/cache/data/+1/p555555555-90x130.jpg
www.ik####.com/image/cache/data/+1/p5555555555555555-90x130.jpg
www.ik####.com/image/cache/data/+1/s88888888888888888-90x130.jpg
www.ik####.com/image/cache/data/+1/u66-90x130.jpg
www.ik####.com/image/cache/data/+1/v444444444444-90x130.jpg
www.ik####.com/image/cache/data/+1/v6666666666-90x130.jpg
www.ik####.com/image/cache/data/+111/211-90x130.jpg
www.ik####.com/image/cache/data/+111/333333333333-100x145.jpg
www.ik####.com/image/cache/data/+111/3999999-90x130.jpg
www.ik####.com/image/cache/data/- gostaresh/y66665666-90x130.jpg
www.ik####.com/image/cache/data/0-90x130.jpg
www.ik####.com/image/cache/data/0.0-90x130.jpg
www.ik####.com/image/cache/data/0.00-90x130.jpg
www.ik####.com/image/cache/data/000-90x130.jpg
www.ik####.com/image/cache/data/000..-90x130.jpg
www.ik####.com/image/cache/data/0000-90x130.jpg
www.ik####.com/image/cache/data/0000...-90x130.jpg
www.ik####.com/image/cache/data/00000-90x130.jpg
www.ik####.com/image/cache/data/00000...-90x130.jpg
www.ik####.com/image/cache/data/00000.0-90x130.jpg
www.ik####.com/image/cache/data/000000....-90x130.jpg
www.ik####.com/image/cache/data/0000000-90x130.jpg
www.ik####.com/image/cache/data/0000000...-90x130.jpg
www.ik####.com/image/cache/data/00000000....-90x130.jpg
www.ik####.com/image/cache/data/1.-90x130.jpg
www.ik####.com/image/cache/data/21-90x130.jpg
www.ik####.com/image/cache/data/3/012-100x145.jpg
www.ik####.com/image/cache/data/3/12-100x145.jpg
www.ik####.com/image/cache/data/3/88769-90x130.jpg
www.ik####.com/image/cache/data/4/4206-90x130.jpg
www.ik####.com/image/cache/data/4/934---90x130.jpg
www.ik####.com/image/cache/data/5/02-100x145.jpg
www.ik####.com/image/cache/data/8/102842-90x130.jpg
www.ik####.com/image/cache/data/8/33-100x145.jpg
www.ik####.com/image/cache/data/8/87877--100x145.jpg
www.ik####.com/image/cache/data/9-90x130.jpg
www.ik####.com/image/cache/data/9/90305--100x145.jpg
www.ik####.com/image/cache/data/9/90305-100x145.jpg
www.ik####.com/image/cache/data/9/z27-90x130.jpg
www.ik####.com/image/cache/data/94/124-90x130.jpg
www.ik####.com/image/cache/data/A001-90x130.jpg
www.ik####.com/image/cache/data/Arian/10/d/22-90x130.jpg
www.ik####.com/image/cache/data/Arian/10/h/55-100x145.jpg
www.ik####.com/image/cache/data/Arian/11/b/66-90x130.jpg
www.ik####.com/image/cache/data/Arian/11/d/93-100x145.jpg
www.ik####.com/image/cache/data/Arian/11/f/45-90x130.jpg
www.ik####.com/image/cache/data/Arian/11/i/69-100x145.jpg
www.ik####.com/image/cache/data/Arian/12/c/48-90x130.jpg
www.ik####.com/image/cache/data/Arian/12/h/42-90x130.jpg
www.ik####.com/image/cache/data/Arian/13/a/97-100x145.jpg
www.ik####.com/image/cache/data/Arian/13/c/17-90x130.jpg
www.ik####.com/image/cache/data/Arian/13/f/11-90x130.jpg
www.ik####.com/image/cache/data/Arian/13/h/81-100x145.jpg
www.ik####.com/image/cache/data/Arian/13/j/63-90x130.jpg
www.ik####.com/image/cache/data/Arian/14/d/68-90x130.jpg
www.ik####.com/image/cache/data/Arian/14/f/82-90x130.jpg
www.ik####.com/image/cache/data/Arian/14/g/27-90x130.jpg
www.ik####.com/image/cache/data/Arian/14/g/57-90x130.jpg
www.ik####.com/image/cache/data/Arian/14/i/98-90x130.jpg
www.ik####.com/image/cache/data/Arian/14/j/62-90x130.jpg
www.ik####.com/image/cache/data/Arian/16/f/96-100x145.jpg
www.ik####.com/image/cache/data/Arian/16/i/33-90x130.jpg
www.ik####.com/image/cache/data/Arian/17/e/38-90x130.jpg
www.ik####.com/image/cache/data/Arian/2/943-90x130.jpg
www.ik####.com/image/cache/data/Arian/2/949-90x130.jpg
www.ik####.com/image/cache/data/Arian/2/963-90x130.jpg
www.ik####.com/image/cache/data/Arian/20/f/4-90x130.jpg
www.ik####.com/image/cache/data/Arian/20/h/87-90x130.jpg
www.ik####.com/image/cache/data/Arian/20/j/41-90x130.jpg
www.ik####.com/image/cache/data/Arian/20/j/44-90x130.jpg
www.ik####.com/image/cache/data/Arian/21/d/60-90x130.jpg
www.ik####.com/image/cache/data/Arian/21/e/26-90x130.jpg
www.ik####.com/image/cache/data/Arian/21/e/7-90x130.jpg
www.ik####.com/image/cache/data/Arian/21/f/42-90x130.jpg
www.ik####.com/image/cache/data/Arian/21/f/58-90x130.jpg
www.ik####.com/image/cache/data/Arian/21/f/63-90x130.jpg
www.ik####.com/image/cache/data/Arian/21/g/96-90x130.jpg
www.ik####.com/image/cache/data/Arian/21/i/13.-90x130.jpg
www.ik####.com/image/cache/data/Arian/21/i/77-90x130.jpg
www.ik####.com/image/cache/data/Arian/22/a/99-90x130.jpg
www.ik####.com/image/cache/data/Arian/22/b/54-90x130.jpg
www.ik####.com/image/cache/data/Arian/22/b/86-90x130.jpg
www.ik####.com/image/cache/data/Arian/22/e/58-90x130.jpg
www.ik####.com/image/cache/data/Arian/22/j/16-90x130.jpg
www.ik####.com/image/cache/data/Arian/22/j/17.-90x130.jpg
www.ik####.com/image/cache/data/Arian/22/j/26-90x130.jpg
www.ik####.com/image/cache/data/Arian/22/j/77-90x130.jpg
www.ik####.com/image/cache/data/Arian/25/e/37-90x130.jpg
www.ik####.com/image/cache/data/Arian/26/e/19-90x130.jpg
www.ik####.com/image/cache/data/Arian/26/g/38-90x130.jpg
www.ik####.com/image/cache/data/Arian/26/g/55-90x130.jpg
www.ik####.com/image/cache/data/Arian/27/a/26-90x130.jpg
www.ik####.com/image/cache/data/Arian/28/c/34-90x130.jpg
www.ik####.com/image/cache/data/Arian/28/c/56-90x130.jpg
www.ik####.com/image/cache/data/Arian/28/e/24-90x130.jpg
www.ik####.com/image/cache/data/Arian/29/a/63-90x130.jpg
www.ik####.com/image/cache/data/Arian/31/l/2.-90x130.jpg
www.ik####.com/image/cache/data/Arian/4/j/32-90x130.jpg
www.ik####.com/image/cache/data/Arian/5/e/61-90x130.jpg
www.ik####.com/image/cache/data/Arian/6/a/3-90x130.jpg
www.ik####.com/image/cache/data/Arian/6/h/8-90x130.jpg
www.ik####.com/image/cache/data/Arian/7/i/49-100x145.jpg
www.ik####.com/image/cache/data/Arian/7/i/66-90x130.jpg
www.ik####.com/image/cache/data/Arian/7/j/19-100x145.jpg
www.ik####.com/image/cache/data/Arian/8/a/12-90x130.jpg
www.ik####.com/image/cache/data/Arian/8/a/68-100x145.jpg
www.ik####.com/image/cache/data/Arian/8/b/34-100x145.jpg
www.ik####.com/image/cache/data/Arian/8/b/67-90x130.jpg
www.ik####.com/image/cache/data/Arian/8/c/59-90x130.jpg
www.ik####.com/image/cache/data/Arian/8/c/88-100x145.jpg
www.ik####.com/image/cache/data/Arian/8/c/95-100x145.jpg
www.ik####.com/image/cache/data/Arian/8/d/41-100x145.jpg
www.ik####.com/image/cache/data/Arian/8/d/83-90x130.jpg
www.ik####.com/image/cache/data/Arian/8/e/22-100x145.jpg
www.ik####.com/image/cache/data/Arian/8/h/22-100x145.jpg
www.ik####.com/image/cache/data/Arian/8/i/15-90x130.jpg
www.ik####.com/image/cache/data/Arian/9/a/85-90x130.jpg
www.ik####.com/image/cache/data/Arian/9/a/98-90x130.jpg
www.ik####.com/image/cache/data/Arian/9/b/27-90x130.jpg
www.ik####.com/image/cache/data/Arian/9/b/62.-90x130.jpg
www.ik####.com/image/cache/data/Arian/9/f/7-90x130.jpg
www.ik####.com/image/cache/data/Arian/9/h/49-90x130.jpg
www.ik####.com/image/cache/data/b/69139---100x145.jpg
www.ik####.com/image/cache/data/b/77293-90x130.jpg
www.ik####.com/image/cache/data/b/80348-90x130.jpg
www.ik####.com/image/cache/data/hamid/hamid 1/102521-90x130.jpg
www.ik####.com/image/cache/data/iman/b2321-90x130.jpg
www.ik####.com/image/cache/data/iman/b23211-90x130.jpg
www.ik####.com/image/cache/data/iman/b2333211111111110-90x130.jpg
www.ik####.com/image/cache/data/maleki/1/101411.-90x130.jpg
www.ik####.com/image/cache/data/maleki/1/101862-100x145.jpg
www.ik####.com/image/cache/data/maleki/1/101865-100x145.jpg
www.ik####.com/image/cache/data/maleki/1/1311-90x130.jpg
www.ik####.com/image/cache/data/maleki/1/1318-90x130.jpg
www.ik####.com/image/cache/data/maleki/2/101464-100x145.jpg
www.ik####.com/image/cache/data/maleki/2/1360-90x130.jpg
www.ik####.com/image/cache/data/maleki/2/1361-90x130.jpg
www.ik####.com/image/cache/data/maleki/3/101827-100x145.jpg
www.ik####.com/image/cache/data/maleki/3/107918-100x145.jpg
www.ik####.com/image/cache/data/maleki/4/2814.-90x130.jpg
www.ik####.com/image/cache/data/maleki/5/81702-100x145.jpg
www.ik####.com/image/cache/data/maleki/6/70922-90x130.jpg
www.ik####.com/image/cache/data/maleki/7/82795-100x145.jpg
www.ik####.com/image/cache/data/maleki/7/86418-100x145.jpg
www.ik####.com/image/cache/data/maleki/7/88655-90x130.jpg
www.ik####.com/image/cache/data/maleki/7/88657-90x130.jpg
www.ik####.com/image/cache/data/maleki/9/103402-100x145.jpg
www.ik####.com/image/cache/data/maleki/9/105025-100x145.jpg
www.ik####.com/image/cache/data/maleki/9/106106-100x145.jpg
www.ik####.com/image/cache/data/maleki/9/107439-100x145.jpg
www.ik####.com/image/cache/data/sima/1/a158-90x130.jpg
www.ik####.com/image/cache/data/sima/1/a303-90x130.jpg
www.ik####.com/image/cache/data/sima/2/109121-90x130.jpg
www.ik####.com/image/cache/data/sima/7/19-90x130.jpg
www.ik####.com/image/data/3.png
www.ik####.com/index.php?route=####&path=####

Запросы HTTP POST:

mediat####.apptor####.com/api/mediation?action=####
peyma####.ir/remote/stat/stat.php
s####.apptor####.com/api/pb?action=####
srv.magneta####.com/api/magnet/v2/android/InitialConfiguration

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/app_Requests/QueuedRequests.sr
<Package Folder>/cache/####/-16507832501684353496
<Package Folder>/cache/####/-30911816-1879994291
<Package Folder>/cache/####/-30913117-734973009
<Package Folder>/cache/####/-48283506363556889
<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/f_000001
<Package Folder>/cache/####/f_000002
<Package Folder>/cache/####/f_000003
<Package Folder>/cache/####/index
<Package Folder>/cache/Temp-1180313149
<Package Folder>/cache/Temp-133336752
<Package Folder>/cache/Temp-1448718406
<Package Folder>/cache/Temp-340204879
<Package Folder>/cache/Temp-392591693
<Package Folder>/cache/Temp-892744676
<Package Folder>/cache/Temp-969195816
<Package Folder>/cache/Temp1658402505
<Package Folder>/cache/Temp206804750
<Package Folder>/cache/Temp2144518210
<Package Folder>/databases/OneSignal.db-journal
<Package Folder>/databases/mysqlite.db
<Package Folder>/databases/mysqlite.db-journal
<Package Folder>/databases/pref.db
<Package Folder>/databases/pref.db-journal
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/files/.YFlurrySenderIndex.info.AnalyticsData_N...R7_202
<Package Folder>/files/.YFlurrySenderIndex.info.AnalyticsMain
<Package Folder>/files/.yflurrydatasenderblock.6be95150-0b18-4f...9742c0
<Package Folder>/files/.yflurrydatasenderblock.ac376eda-861a-4c...387fea
<Package Folder>/files/.yflurrydatasenderblock.cea83f02-698e-45...69e63d
<Package Folder>/files/.yflurrydatasenderblock.f7c3c089-fc93-4f...52504d
<Package Folder>/files/.yflurryreport.-405c224be72e8642
<Package Folder>/files/com.appbrain.ping
<Package Folder>/no_backup/com.google.android.gms.appid-no-backup
<Package Folder>/shared_prefs/APP_COOKIE.xml
<Package Folder>/shared_prefs/APP_ID_GROUP.xml
<Package Folder>/shared_prefs/FLURRY_SHARED_PREFERENCES.xml
<Package Folder>/shared_prefs/LOCATION_SHARED_PREFS.xml
<Package Folder>/shared_prefs/OneSignal.xml
<Package Folder>/shared_prefs/TARGETED_APPS.xml
<Package Folder>/shared_prefs/TapseelPreferences.xml
<Package Folder>/shared_prefs/UserInfo.xml
<Package Folder>/shared_prefs/ab_mediation_cfg.xml
<Package Folder>/shared_prefs/ab_mediation_evs.xml
<Package Folder>/shared_prefs/ab_pref_int.xml
<Package Folder>/shared_prefs/ab_sdk_pref.xml
<Package Folder>/shared_prefs/adadSharedPreferences.xml
<Package Folder>/shared_prefs/com.google.android.gms.appid.xml
<SD-Card>/Android/####/.nomedia
<SD-Card>/Android/####/bannerConfirmLandscape
<SD-Card>/Android/####/bannerConfirmPortrait
<SD-Card>/Android/####/close
<SD-Card>/Android/####/magnetLogo
<SD-Card>/Android/####/mute
<SD-Card>/Android/####/replay
<SD-Card>/Android/####/shadow.9.png
<SD-Card>/Android/####/sound
<SD-Card>/peymanapp/####/message.xml

Другие:

Загружает динамические библиотеки:

main

Использует следующие алгоритмы для шифрования данных:

AES-CBC-PKCS5PAdding

Использует следующие алгоритмы для расшифровки данных:

AES-CBC-PKCS5PAdding

Осуществляет доступ к информации о геолокации.

Осуществляет доступ к информации о сети.

Осуществляет доступ к информации о телефоне (номер, imei и тд.).

Осуществляет доступ к информации об установленных приложениях.

Добавляет задания в системный планировщик.

Отрисовывает собственные окна поверх других приложений.

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней