Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Adware.Dowgin.14.origin
Сетевая активность:
Подключается к:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) w####.q####.dn.####.com:80
- TCP(HTTP/1.1) d2.ireader####.com:80
- TCP(HTTP/1.1) a####.you####.com:80
- TCP(HTTP/1.1) d1.ireader####.com:80
- TCP(TLS/1.0) www.ireader####.com:443
Запросы DNS:
- a####.you####.com
- d1.ireader####.com
- d2.ireader####.com
- fb.u####.com
- t####.qin####.com
- www.ireader####.com
Запросы HTTP GET:
- a####.you####.com/sx/GetConfigInfo.aspx?ver=####&passID=####&ver=####&cl...
- d1.ireader####.com/GoodBooks/Books/cover/2011-06-22/3962f8aa-65e3-403e-a...
- d1.ireader####.com/GoodBooks/Books/cover/2014-12-25/4dcb1c58-25ea-4cf0-8...
- d1.ireader####.com/GoodBooks/Books/cover/2014-12-25/c0c061d8-3f26-417b-9...
- d1.ireader####.com/GoodBooks/Books/cover/2015-03-10/aa167414-fd3a-41da-9...
- d1.ireader####.com/GoodBooks/Books/cover/2015-03-19/1937d9e3-8a29-4d79-b...
- d1.ireader####.com/GoodBooks/Books/cover/2015-03-19/968f6a07-a52b-4af0-8...
- d1.ireader####.com/GoodBooks/Books/cover/2015-03-23/06db3619-40c7-4b15-9...
- d1.ireader####.com/GoodBooks/Books/cover/2015-03-23/bd4fee55-f0a2-4558-9...
- d1.ireader####.com/GoodBooks/Books/cover/2015-03-25/561e8c0d-8160-49ad-9...
- d1.ireader####.com/GoodBooks/Books/cover/2015-05-11/37a27099-f9f5-47c3-b...
- d1.ireader####.com/GoodBooks/Books/cover/2015-05-13/f4c26c55-213b-4866-9...
- d1.ireader####.com/GoodBooks/Books/cover/2015-05-21/3153ad5b-df2b-4e2c-8...
- d1.ireader####.com/GoodBooks/Books/cover/2015-06-29/a1cf9831-e030-4f7f-b...
- d1.ireader####.com/GoodBooks/Books/cover/2015-07-02/b41420dc-ed33-40c5-9...
- d1.ireader####.com/GoodBooks/Books/cover/2015-07-10/57d51bb1-d440-41cc-8...
- d1.ireader####.com/GoodBooks/Books/cover/2015-07-10/6db5a926-3c36-465e-a...
- d1.ireader####.com/GoodBooks/Books/cover/2015-07-10/85f205bf-7ced-4d5e-8...
- d1.ireader####.com/GoodBooks/Books/cover/2015-08-05/f53843a9-4e97-4e4a-a...
- d1.ireader####.com/GoodBooks/Books/cover/2015-08-31/e6435969-8683-4eb7-b...
- d1.ireader####.com/GoodBooks/Books/cover/2015-10-12/1e54ecec-af2b-4af7-b...
- d1.ireader####.com/GoodBooks/Books/cover/2015-10-13/9fd297a3-395b-4c1b-b...
- d1.ireader####.com/GoodBooks/Books/cover/2015-10-14/376a00a2-bac9-4783-8...
- d1.ireader####.com/GoodBooks/Books/cover/2015-10-14/e8916b37-c125-4b66-a...
- d1.ireader####.com/GoodBooks/Books/cover/2015-10-14/e9c07995-3725-42a4-b...
- d1.ireader####.com/GoodBooks/Books/cover/2015-11-13/805476db-35a2-48d7-b...
- d1.ireader####.com/GoodBooks/Books/cover/2015-12-08/0ea9510a-5f05-401b-8...
- d1.ireader####.com/GoodBooks/Books/cover/2015-12-15/a7968e50-13d2-4d0f-b...
- d1.ireader####.com/GoodBooks/Books/cover/2016-03-01/0fb96329-5ee7-4353-8...
- d1.ireader####.com/GoodBooks/Books/cover/2016-03-24/789b9526-11b0-4f65-a...
- d1.ireader####.com/GoodBooks/Books/cover/2016-05-25/ee676d47-b4dc-4fcf-a...
- d1.ireader####.com/GoodBooks/Books/cover/2016-06-06/d3c27ebd-21fa-4078-b...
- d1.ireader####.com/GoodBooks/Books/cover/2016-07-01/9e79be7d-68a9-4685-b...
- d1.ireader####.com/GoodBooks/Books/cover/2016-10-12/97385ed6-ce93-4407-9...
- d1.ireader####.com/GoodBooks/Books/cover/2016-11-02/69a01218-ef5b-4c0b-9...
- d1.ireader####.com/GoodBooks/Books/cover/2016-11-05/f4127627-5227-4e6b-8...
- d1.ireader####.com/GoodBooks/Books/cover/2017-02-03/43b3b5b7-caee-458e-b...
- d1.ireader####.com/GoodBooks/Books/cover/2017-06-08/c0c3ddac-4af9-45b5-b...
- d1.ireader####.com/GoodBooks/Books/cover/2017-06-23/847eb419-4a4f-4432-a...
- d1.ireader####.com/GoodBooks/Books/cover/2017-07-21/a18f2a4d-4bfb-4ce5-a...
- d1.ireader####.com/GoodBooks/Books/cover/2017-08-18/51642350-d17b-4982-9...
- d1.ireader####.com/GoodBooks/Books/cover/2017-08-18/d5266c77-c7d2-49da-8...
- d1.ireader####.com/GoodBooks/Books/cover/2017-10-12/01548f83-4367-41a0-8...
- d1.ireader####.com/GoodBooks/Books/cover/2017-10-26/2aa23973-4986-48fc-8...
- d1.ireader####.com/GoodBooks/Books/cover/2017-10-28/6421b468-8699-49e3-b...
- d1.ireader####.com/GoodBooks/Books/cover/2017-11-03/721569ce-c10a-4cd8-9...
- d1.ireader####.com/GoodBooks/Books/cover/2017-11-04/1e809148-672a-4592-a...
- d1.ireader####.com/GoodBooks/Books/cover/2017-11-04/c4ce4bb3-9e64-4b61-9...
- d1.ireader####.com/GoodBooks/Books/cover/2017-11-07/b54a07a3-4c8f-4dc9-b...
- d1.ireader####.com/GoodBooks/Books/cover/2017-11-28/a3548f3b-4d47-4f2d-b...
- d1.ireader####.com/GoodBooks/Books/cover/2017-12-07/3b33cb0d-b178-4e11-b...
- d1.ireader####.com/GoodBooks/Books/cover/2017-12-26/807adf2d-f6c9-4ed0-8...
- d1.ireader####.com/GoodBooks/Books/cover/2018-01-05/fdd0f5f0-a031-44c6-9...
- d1.ireader####.com/GoodBooks/Books/cover/2018-01-08/da8de92a-e8ad-44b6-b...
- d1.ireader####.com/GoodBooks/Books/cover/2018-01-16/79fdee2d-d8fc-4049-9...
- d1.ireader####.com/GoodBooks/Books/cover/2018-01-17/487f8723-f60d-4bf2-9...
- d1.ireader####.com/GoodBooks/Books/cover/2018-02-08/e659e7b7-38a3-420e-9...
- d1.ireader####.com/GoodBooks/Books/cover/2018-03-02/46597726-f84f-4eed-8...
- d1.ireader####.com/GoodBooks/Books/cover/2018-04-03/1e36dff6-6636-4cce-8...
- d1.ireader####.com/GoodBooks/Books/cover/2018-04-03/44c732c4-a62e-445b-a...
- d1.ireader####.com/GoodBooks/Books/cover/2018-04-09/52b82c40-59f4-471d-a...
- d1.ireader####.com/GoodBooks/images/RankImg/23bd1bc9-0e01-4c92-8a45-628a...
- d1.ireader####.com/GoodBooks/images/RankImg/2bcb71bc-1763-47a0-a518-4a18...
- d1.ireader####.com/GoodBooks/images/RankImg/5dc91728-903c-4ebf-85cd-ee78...
- d1.ireader####.com/GoodBooks/images/c100/f103.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f104.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f105.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f109.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f111.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f112.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f113.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f115.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f117.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f119.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f126.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f127.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f128.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f129.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f143.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f144.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f147.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f148.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f149.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f150.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f152.png?id=####
- d2.ireader####.com/GoodBooks/Books/cover/2011-06-22/3962f8aa-65e3-403e-a...
- d2.ireader####.com/GoodBooks/Books/cover/2015-01-14/f795629b-7331-4047-b...
- d2.ireader####.com/GoodBooks/Books/cover/2015-01-28/20ddefb7-2166-4d43-b...
- d2.ireader####.com/GoodBooks/Books/cover/2015-01-28/a7911529-7d23-497b-8...
- d2.ireader####.com/GoodBooks/Books/cover/2015-03-10/a2f711ff-aae6-455e-b...
- d2.ireader####.com/GoodBooks/Books/cover/2015-03-19/1937d9e3-8a29-4d79-b...
- d2.ireader####.com/GoodBooks/Books/cover/2015-03-23/ad735699-7b3e-4e59-8...
- d2.ireader####.com/GoodBooks/Books/cover/2015-03-25/46ada586-e5d4-461e-9...
- d2.ireader####.com/GoodBooks/Books/cover/2015-03-25/6c3dbb81-041a-455d-b...
- d2.ireader####.com/GoodBooks/Books/cover/2015-05-05/2a53d9a5-de5e-46d1-b...
- d2.ireader####.com/GoodBooks/Books/cover/2015-05-11/37a27099-f9f5-47c3-b...
- d2.ireader####.com/GoodBooks/Books/cover/2015-08-14/829ebb0c-f41e-436a-a...
- d2.ireader####.com/GoodBooks/Books/cover/2015-08-27/22342ad5-0cad-4ed3-b...
- d2.ireader####.com/GoodBooks/Books/cover/2015-10-12/86283fe2-83b8-498e-b...
- d2.ireader####.com/GoodBooks/Books/cover/2015-10-13/058ea9de-ee3a-4451-b...
- d2.ireader####.com/GoodBooks/Books/cover/2015-10-13/24f48f3c-47bc-45d3-a...
- d2.ireader####.com/GoodBooks/Books/cover/2015-10-13/9c55324e-0050-45f7-8...
- d2.ireader####.com/GoodBooks/Books/cover/2015-10-14/a1f2c72f-1388-4058-a...
- d2.ireader####.com/GoodBooks/Books/cover/2015-10-14/e8916b37-c125-4b66-a...
- d2.ireader####.com/GoodBooks/Books/cover/2015-11-06/1feed99c-8d64-4ecb-9...
- d2.ireader####.com/GoodBooks/Books/cover/2015-12-03/3bf728d6-6e75-45bd-8...
- d2.ireader####.com/GoodBooks/Books/cover/2015-12-08/0ea9510a-5f05-401b-8...
- d2.ireader####.com/GoodBooks/Books/cover/2016-02-24/c6bba5ca-aaae-4c55-9...
- d2.ireader####.com/GoodBooks/Books/cover/2016-03-24/789b9526-11b0-4f65-a...
- d2.ireader####.com/GoodBooks/Books/cover/2016-03-30/d3e490ea-25a3-4cab-b...
- d2.ireader####.com/GoodBooks/Books/cover/2016-05-23/51097195-f060-4900-9...
- d2.ireader####.com/GoodBooks/Books/cover/2016-06-02/15519595-aa49-497f-b...
- d2.ireader####.com/GoodBooks/Books/cover/2016-06-02/5670705e-902e-4211-8...
- d2.ireader####.com/GoodBooks/Books/cover/2016-06-08/f87131be-321d-4123-9...
- d2.ireader####.com/GoodBooks/Books/cover/2016-07-23/f94855e4-90e4-4da8-9...
- d2.ireader####.com/GoodBooks/Books/cover/2016-07-25/e0d6d171-f6c7-4daa-8...
- d2.ireader####.com/GoodBooks/Books/cover/2016-08-09/d09967e9-8c42-4b9a-b...
- d2.ireader####.com/GoodBooks/Books/cover/2016-08-11/8119ce88-0fa4-4e1d-a...
- d2.ireader####.com/GoodBooks/Books/cover/2016-09-28/749bf485-61c4-47a4-8...
- d2.ireader####.com/GoodBooks/Books/cover/2017-03-17/321a9053-d719-43c3-b...
- d2.ireader####.com/GoodBooks/Books/cover/2017-06-26/fa29f2b2-0bf4-417c-9...
- d2.ireader####.com/GoodBooks/Books/cover/2017-06-27/2ec4660e-f0c8-43c7-a...
- d2.ireader####.com/GoodBooks/Books/cover/2017-07-17/894bb53b-27d6-4d79-8...
- d2.ireader####.com/GoodBooks/Books/cover/2017-08-18/51642350-d17b-4982-9...
- d2.ireader####.com/GoodBooks/Books/cover/2017-08-26/ccce2b40-2d78-49a6-b...
- d2.ireader####.com/GoodBooks/Books/cover/2017-09-05/de7de369-6fb3-45dc-8...
- d2.ireader####.com/GoodBooks/Books/cover/2017-09-21/842aa63c-6b24-4965-a...
- d2.ireader####.com/GoodBooks/Books/cover/2017-11-10/bc105632-b091-4493-8...
- d2.ireader####.com/GoodBooks/Books/cover/2017-11-28/a3548f3b-4d47-4f2d-b...
- d2.ireader####.com/GoodBooks/Books/cover/2017-12-12/65cb7847-3707-4dcf-8...
- d2.ireader####.com/GoodBooks/Books/cover/2017-12-26/807adf2d-f6c9-4ed0-8...
- d2.ireader####.com/GoodBooks/Books/cover/2017-12-30/9ca1bcc6-a4ec-4696-a...
- d2.ireader####.com/GoodBooks/Books/cover/2018-03-02/0984fba5-7bf1-498e-b...
- d2.ireader####.com/GoodBooks/Books/cover/2018-03-02/fe10a9d0-ed17-41d3-a...
- d2.ireader####.com/GoodBooks/Books/cover/2018-04-03/b2c3bbfd-5e5d-4c66-8...
- d2.ireader####.com/GoodBooks/Books/cover/2018-04-03/c08f2c09-9c84-4eb7-8...
- d2.ireader####.com/GoodBooks/Books/cover/2018-04-03/e11fee0a-4f3f-414b-8...
- d2.ireader####.com/GoodBooks/Books/cover/2018-04-03/ee5aa2fc-1cd5-45bd-8...
- d2.ireader####.com/GoodBooks/Books/cover/2018-04-11/b3ab7d01-ad29-48ff-b...
- d2.ireader####.com/GoodBooks/images/c100/f101.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f106.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f107.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f108.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f110.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f114.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f118.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f120.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f121.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f122.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f123.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f124.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f125.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f142.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f145.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f146.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f151.png?id=####
- w####.q####.dn.####.com/sxsplash20160727_579817d469bca.jpg
- w####.q####.dn.####.com/sxsplash20160727_579817da499fb.jpg
- w####.q####.dn.####.com/sxsplash20160727_579817de0f457.jpg
- w####.q####.dn.####.com/sxsplash20160727_579817e1da72a.jpg
- w####.q####.dn.####.com/sxsplash20160727_57981808344f4.jpg
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/.jg.ic
- /data/data/####/662fa771c1abbc317c412408fe3e2cf8x.jar
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/aireader_v2-journal
- /data/data/####/com_ireader_city_you_qi.xml
- /data/data/####/ireader.db-journal
- /data/data/####/libjiagu-1378460838.so
- /data/data/####/multidex.version.xml
- /data/data/####/umeng_feedback_conversations.xml
- /data/data/####/umeng_feedback_user_info.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_message_state.xml
- /data/data/####/webview.db-journal
- /data/data/####/www.ireadercity.com.443
- /data/data/####/zd60388cb.xml
- /data/media/####/.did
- /data/media/####/0012bf86fc3048d5bffbd5a1261aab8fjpgx.tmp
- /data/media/####/001df85f91094d5b9e78b06713053f19jpgx.tmp
- /data/media/####/00385be69d4b4fb2a9c4cf4256820600jpgx.tmp
- /data/media/####/006009d120bb420cace032d0669d7521jpgx.tmp
- /data/media/####/006085961c2741e4ad3043ec291fe321jpgx.tmp
- /data/media/####/00733476caef407ba2100591df791490jpgx.tmp
- /data/media/####/0083cf6782714392aba4044afa5eb893jpgx.tmp
- /data/media/####/008f39854dbc436c95188799e80dc83cjpgx.tmp
- /data/media/####/00aa259815fd4b5981f9963b5aeffca6jpgx.tmp
- /data/media/####/00bda842fa154bab9e490741d0c9c19fjpgx.tmp
- /data/media/####/00ce088c07274a0dbbdcc9371f501e4cjpgx.tmp
- /data/media/####/00d2d8835c6f4dc08e6c01cc618d637cjpgx.tmp
- /data/media/####/00f9290fd49b45f4af2be4db9e92f35ejpgx.tmp
- /data/media/####/00f996a3153149de94c6800debdb55cfjpgx.tmp
- /data/media/####/00fb1bdd86e74377915cb0f9735c1917jpgx.tmp
- /data/media/####/0105b69c566b403787f4b441c09220abjpgx.tmp
- /data/media/####/010975edf8a34831873028cc63aafdc2jpgx.tmp
- /data/media/####/01c67a84ec764324871caeba6c06f34ejpgx.tmp
- /data/media/####/01fc15ab92644d9a8efb2f6f543c7732jpgx.tmp
- /data/media/####/0231028e094e485389788f587c8ebacfjpgx.tmp
- /data/media/####/0231aa96a6704261bac33646268ad230jpgx.tmp
- /data/media/####/02783fac9047450bb8c1e6a76448e951jpgx.tmp
- /data/media/####/03147777831247fcbac7985ca19ff3b7jpgx.tmp
- /data/media/####/040e1237e7344675bc5e3c2ea0c69f4djpgx.tmp
- /data/media/####/06c99003c87f4e358b956ff456c74f57jpgx.tmp
- /data/media/####/0902054760264585a2394d5246553849jpgx.tmp
- /data/media/####/0a49ebf5cb82479b974bf1ccf165549djpgx.tmp
- /data/media/####/0d39c13720374be881b6748b0c50f0c7jpgx.tmp
- /data/media/####/0ef25b260cb5431990150aabe140d991jpgx.tmp
- /data/media/####/0f3bff171b46408aa4acbb8367803520jpgx.tmp
- /data/media/####/0faef66f561848d1bd1e283260815be7jpgx.tmp
- /data/media/####/18105590628443d59c30318c7eb57f85jpgx.tmp
- /data/media/####/1907cd8faf124825a7d69905af2fa474jpgx.tmp
- /data/media/####/1c0551d4b6734924a01db897e21bcbf1jpgx_bak
- /data/media/####/1cde8e016beb4ecbb068e0faf533e6ebjpgx.tmp
- /data/media/####/2171402840a94489931b7b230fa7ba2cjpgx.tmp
- /data/media/####/2542a1226f874e12acda362d56491e2djpgx.tmp
- /data/media/####/26f1e781262a471aa4bd793e6edfe5b2jpgx.tmp
- /data/media/####/28396d5a9cb04bb28cd45c6299cdeb4ajpgx.tmp
- /data/media/####/29feb78bc3a144caa3a7adae6b45effajpgx.tmp
- /data/media/####/2b2bc73ad2ce41e89a51d158f3d734f9jpgx.tmp
- /data/media/####/3407a9d3026643649da9950b8805affejpgx.tmp
- /data/media/####/3778f1aedf844239af7141ad496de300jpgx.tmp
- /data/media/####/3a9155dff5d34e5a8f1b2385d1ce7d24jpgx.tmp
- /data/media/####/3c0a2f716e6548c19a30ad3d2783b666jpgx.tmp
- /data/media/####/40d70a2475434795bbd3b0d62355397ejpgx.tmp
- /data/media/####/4a288aac6ce647e7a95b0b63d353dfe6jpgx.tmp
- /data/media/####/4a64c69c9ca444e9ad748e247ac893f8jpgx.tmp
- /data/media/####/4d478890c89d4381936f45cad11b6f90jpgx.tmp
- /data/media/####/521f78f2cdac4899a81aebaa7aade602jpgx.tmp
- /data/media/####/56665e7d8ba94d0f83eb2cf54711795bjpgx.tmp
- /data/media/####/56c593021fd242ebabb9315162c3d243jpgx.tmp
- /data/media/####/5dedbcaa1a884bcc8370a10d38f75f4bjpgx.tmp
- /data/media/####/66b7ce4aca7942e897bc74cd75f82f42jpgx.tmp
- /data/media/####/6a0bd1a10a624cec946f54a3bfe563f6jpgx.tmp
- /data/media/####/6d182a48a0f24735b8b961cb5a6e8eb7jpgx.tmp
- /data/media/####/6eeac4d41f1a4cb4854d53642ae69bd7jpgx.tmp
- /data/media/####/6fe664d5e9ac4a70af54353dacac55bcjpgx.tmp
- /data/media/####/7438fe9636594d9181472b6ff7b54486jpgx.tmp
- /data/media/####/744e634b119e4de08f4a9cc2250f110bjpgx.tmp
- /data/media/####/799ca031709146938d24ca36bb14b194jpgx.tmp
- /data/media/####/7ba3d8f6a8504743bc3c487f363bd046jpgx.tmp
- /data/media/####/81afa8789543424cbb564cdc157767b4jpgx.tmp
- /data/media/####/836300d7195f4d2ab38d80ed32b2ffbajpgx.tmp
- /data/media/####/86b6e9bff20f4b9cb397cb4f806d1c37jpgx.tmp
- /data/media/####/8a11f14cdc874d0a8ec780d493798d90jpgx.tmp
- /data/media/####/8bf4237b877149c7843f482a95f294eejpgx.tmp
- /data/media/####/8cb91b5622614ba9989c9f8cbf5d0a15jpgx.tmp
- /data/media/####/8d3e402f42c64d2fb900db85e701290ejpgx.tmp
- /data/media/####/8ef689ac2acd41dcaa014131fd8b694bjpgx.tmp
- /data/media/####/936a3b64bd644a39a70105731cabf340jpgx.tmp
- /data/media/####/99a8f2c83efc45dd807d7fe0075a14a8jpgx.tmp
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/a0b600f6929b4bdf95512fd429e75fe3jpgx.tmp
- /data/media/####/a89c16aeae414998b92b6e74c4eaebc3jpgx.tmp
- /data/media/####/a91f30508a35451f8646e82f1dca0578jpgx.tmp
- /data/media/####/aa1603ace49a41689c6296cccdcf39cajpgx.tmp
- /data/media/####/adv_self_config.dat
- /data/media/####/b3527bcbef064170a0763fd662ebb363jpgx.tmp
- /data/media/####/b495e9b231134ebfbd0d9a95a6a10200jpgx.tmp
- /data/media/####/b495e9b231134ebfbd0d9a95a6a10200jpgx_bak
- /data/media/####/b52846a409bd4158bbcecc7cac455d0fjpgx.tmp
- /data/media/####/b74da5b9150e4b3085e91581b36a49ebjpgx.tmp
- /data/media/####/b878a37bde974fc18a1ff308276f1f30jpgx.tmp
- /data/media/####/bc342a8f343b484c8d37175edadf5b29jpgx.tmp
- /data/media/####/book_list_C103_free_1.dat
- /data/media/####/book_list_C103_new_1.dat
- /data/media/####/c33b7659d144403baf67cacdad8a1fd7jpgx.tmp
- /data/media/####/c50d48d3038a43f9ba3a8a70ca52ca2ajpgx.tmp
- /data/media/####/c65a5490ce364977abeeddb7a35bdb91jpgx.tmp
- /data/media/####/c95319de5aac49f1ba7874cfee9a5dbcjpgx.tmp
- /data/media/####/ca84bbe39a4745babc4ed227265450fejpgx.tmp
- /data/media/####/category_101.jpgx.tmp
- /data/media/####/category_103.jpgx.tmp
- /data/media/####/category_104.jpgx.tmp
- /data/media/####/category_105.jpgx.tmp
- /data/media/####/category_106.jpgx.tmp
- /data/media/####/category_107.jpgx.tmp
- /data/media/####/category_108.jpgx.tmp
- /data/media/####/category_109.jpgx.tmp
- /data/media/####/category_110.jpgx.tmp
- /data/media/####/category_111.jpgx.tmp
- /data/media/####/category_112.jpgx.tmp
- /data/media/####/category_113.jpgx.tmp
- /data/media/####/category_114.jpgx.tmp
- /data/media/####/category_115.jpgx.tmp
- /data/media/####/category_117.jpgx.tmp
- /data/media/####/category_118.jpgx.tmp
- /data/media/####/category_119.jpgx.tmp
- /data/media/####/category_120.jpgx.tmp
- /data/media/####/category_121.jpgx.tmp
- /data/media/####/category_122.jpgx.tmp
- /data/media/####/category_123.jpgx.tmp
- /data/media/####/category_124.jpgx.tmp
- /data/media/####/category_125.jpgx.tmp
- /data/media/####/category_126.jpgx.tmp
- /data/media/####/category_127.jpgx.tmp
- /data/media/####/category_128.jpgx.tmp
- /data/media/####/category_129.jpgx.tmp
- /data/media/####/cf9e9b35576546e097a3a445f8f32759jpgx.tmp
- /data/media/####/cf9e9b35576546e097a3a445f8f32759jpgx_bak
- /data/media/####/cfg_rank.data
- /data/media/####/config.data
- /data/media/####/d0d719a89ebf45d587d263d7949ab753jpgx.tmp
- /data/media/####/d274ac52bd3f4365a89b42c02188f5bbjpgx.tmp
- /data/media/####/d2d995edddff44449cdd746671d511d6jpgx.tmp
- /data/media/####/d4236aaf9a764d92b1e66f3088e0f9f6jpgx.tmp
- /data/media/####/d729d80c438749e1b730f2d874c404adjpgx.tmp
- /data/media/####/d82f6c2e0b2b4ff4aaeefb2877d95783jpgx.tmp
- /data/media/####/d8526c51949c4cc7af86efc066774f5cjpgx.tmp
- /data/media/####/d8f4c58154ce4100a2b43d2f05304ef9jpgx
- /data/media/####/d8f4c58154ce4100a2b43d2f05304ef9jpgx.tmp
- /data/media/####/daaf755b0c524e81bb42cc0174dc8c9ejpgx.tmp
- /data/media/####/dbaa84d7fa154569816370589d9309ccjpgx.tmp
- /data/media/####/e6da65e1ef024b47a7786d7ee12a485bjpgx.tmp
- /data/media/####/e9962c5807c84e8591a677e492c1092bjpgx.tmp
- /data/media/####/eb4a4a0355e04ff2a03e1c52c91f6850jpgx.tmp
- /data/media/####/ee8c71388c834217beb200b8faf55880jpgx.tmp
- /data/media/####/ef15fb7a87944a27b9f9387120cb1455jpgx.tmp
- /data/media/####/f46f983b2e9244cf952213f4fa21afa9jpgx.tmp
- /data/media/####/fd065c1ba03d417da1290928657327cfjpgx.tmp
- /data/media/####/free.jpgx.tmp
- /data/media/####/home_infos_1.dat
- /data/media/####/home_infos_2.dat
- /data/media/####/import.dat
- /data/media/####/new.jpgx.tmp
- /data/media/####/realfree.jpgx.tmp
- /data/media/####/releated_list_0012bf86fc3048d5bffbd5a1261aab8f.dat
- /data/media/####/releated_list_00ce088c07274a0dbbdcc9371f501e4c.dat
- /data/media/####/releated_list_1c0551d4b6734924a01db897e21bcbf1.dat
- /data/media/####/releated_list_3407a9d3026643649da9950b8805affe.dat
- /data/media/####/releated_list_99a8f2c83efc45dd807d7fe0075a14a8.dat
- /data/media/####/releated_list_b495e9b231134ebfbd0d9a95a6a10200.dat
- /data/media/####/sxsplash20160727_579817d469bca.jpgx_bak
- /data/media/####/sxsplash20160727_579817da499fb.jpgx_bak
- /data/media/####/sxsplash20160727_579817de0f457.jpgx_bak
- /data/media/####/sxsplash20160727_579817e1da72a.jpgx_bak
- /data/media/####/sxsplash20160727_57981808344f4.jpgx_bak
Другие:
Запускает следующие shell-скрипты:
- chmod 755 <Package Folder>/.jiagu/libjiagu-1378460838.so
Загружает динамические библиотеки:
- libjiagu-1378460838
- smssdk
Использует следующие алгоритмы для шифрования данных:
- AES-CBC-PKCS5Padding
- DES
Использует специальную библиотеку для скрытия исполняемого байткода.
Осуществляет доступ к информации о сети.
Осуществляет доступ к информации о телефоне (номер, imei и тд.).
Осуществляет доступ к информации о зарегистрированных на устройстве аккаунтах (Google, Facebook и тд.).
Отрисовывает собственные окна поверх других приложений.
