Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.DownLoader.683.origin
Осуществляет доступ к приватному интерфейсу телефонии (ITelephony).
Сетевая активность:
Подключается к:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) pic####.fe####.tv:80
- TCP(HTTP/1.1) 42.1####.252.29:80
- TCP(HTTP/1.1) tfs.alipayo####.com:80
- TCP(HTTP/1.1) ub####.baidust####.com:80
- TCP(HTTP/1.1) img.fe####.tv:80
- TCP(HTTP/1.1) d.alpha-b####.com:80
- TCP(HTTP/1.1) 1####.55.105.191:80
- TCP(HTTP/1.1) s6.ps####.com.####.com:80
- TCP(HTTP/1.1) st####.fe####.tv:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) 2####.107.1.1:80
- TCP(HTTP/1.1) si####.jom####.com:80
- TCP(HTTP/1.1) 47.92.1####.96:80
- TCP(HTTP/1.1) wn.pos.b####.com:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) 1####.62.17.34:80
- TCP(HTTP/1.1) s.tou####.com:80
- TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
- TCP(HTTP/1.1) wap.n.sh####.com:80
- TCP(HTTP/1.1) 42.1####.60.125:80
- TCP(HTTP/1.1) mo####.b####.com:80
- TCP(HTTP/1.1) 2####.181.105.241:80
- TCP(HTTP/1.1) cdn.img.h####.####.com:80
- TCP(TLS/1.0) pe.winin####.top:443
- TCP(TLS/1.0) mobads-####.b####.com:443
- TCP(TLS/1.0) c####.baidust####.com:443
- TCP(TLS/1.0) 2####.107.1.97:443
- TCP(TLS/1.0) cdn.app.pin####.top:443
- TCP c####.g####.ig####.com:5225
- TCP sdk.o####.t####.####.com:5224
- TCP ope####.3g.qq.com:443
Запросы DNS:
- a####.man.aliy####.com
- a####.u####.com
- c####.baidust####.com
- c####.g####.ig####.com
- c.sz.gt.####.com
- cdn.app.pin####.top
- cdn.img.h####.top
- d.alpha-b####.com
- f10.b####.com
- f11.b####.com
- img.fe####.tv
- m.b####.com
- mo####.b####.com
- mobads-####.b####.com
- ope####.3g.qq.com
- pe.winin####.top
- pic####.fe####.tv
- s.tou####.com
- s6.ps####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- st####.fe####.tv
- t11.b####.com
- tfs.alipayo####.com
- ub####.baidust####.com
- wn.pos.b####.com
Запросы HTTP GET:
- cdn.img.h####.####.com/upload/201806/12/img/20180612151346798.png
- d.alpha-b####.com/jcYK/
- img.fe####.tv/46xceltjhtnvu3f2/thumbnail/0053.jpg@!small-img
- img.fe####.tv/62qpaxrvj9i0prew/thumbnail/0014.jpg
- img.fe####.tv/doz76ay2l300a776/thumbnail/0122.jpg
- img.fe####.tv/doz76ay2l300a776/thumbnail/0122.jpg@!small-img
- img.fe####.tv/ef0npy6qeaidgbmh/thumbnail/0071.jpg
- img.fe####.tv/ehhoxkoygbi8ttwg/thumbnail/0040.jpg@!small-img
- img.fe####.tv/ft89lecvpezqcnyp/thumbnail/0025.jpg
- img.fe####.tv/gdsd1dia989o3z5p/thumbnail/0078.jpg@!small-img
- img.fe####.tv/liccwquhy2pccgm0/thumbnail/0003.jpg@!small-img
- img.fe####.tv/live/ar/alalei.zip
- img.fe####.tv/live/ar/boximiya.zip
- img.fe####.tv/live/ar/buluofengqing.zip
- img.fe####.tv/live/ar/daimengtutu.zip
- img.fe####.tv/live/ar/gongzhujiadao.zip
- img.fe####.tv/live/ar/hongdiefadai.zip
- img.fe####.tv/live/ar/huahuanxiannv.zip
- img.fe####.tv/live/ar/huajia.zip
- img.fe####.tv/live/ar/kaihua.zip
- img.fe####.tv/live/ar/kongjieyouhuo.zip
- img.fe####.tv/live/ar/lingdangmaoer.zip
- img.fe####.tv/live/ar/mengmengxiaolu.zip
- img.fe####.tv/live/ar/moshubang.zip
- img.fe####.tv/live/ar/shenmimiansha.zip
- img.fe####.tv/live/ar/wangshalimao.zip
- img.fe####.tv/live/ar/xiarishatan.zip
- img.fe####.tv/live/ar/xueba.zip
- img.fe####.tv/live/xiu/action/10001.zip
- img.fe####.tv/live/xiu/action/10002.zip
- img.fe####.tv/live/xiu/action/10003.zip
- img.fe####.tv/live/xiu/action/10012.zip
- img.fe####.tv/live/xiu/action/10013.zip
- img.fe####.tv/live/xiu/action/10014.zip
- img.fe####.tv/live/xiu/action/10015.zip
- img.fe####.tv/live/xiu/action/10016.zip
- img.fe####.tv/live/xiu/action/10017.zip
- img.fe####.tv/live/xiu/action/10018.zip
- img.fe####.tv/live/xiu/action/10019.zip
- img.fe####.tv/live/xiu/action/10020.zip
- img.fe####.tv/live/xiu/action/10021.zip
- img.fe####.tv/live/xiu/action/10022.zip
- img.fe####.tv/live/xiu/action/10023.zip
- img.fe####.tv/live/xiu/action/10024.zip
- img.fe####.tv/live/xiu/action/10025.zip
- img.fe####.tv/live/xiu/action/10026.zip
- img.fe####.tv/live/xiu/action/10027.zip
- img.fe####.tv/live/xiu/action/10028.zip
- img.fe####.tv/live/xiu/action/10029.zip
- img.fe####.tv/live/xiu/action/10031.zip
- img.fe####.tv/live/xiu/action/10032.zip
- img.fe####.tv/live/xiu/action/10033.zip
- img.fe####.tv/live/xiu/action/10034.zip
- img.fe####.tv/live/xiu/action/10035.zip
- img.fe####.tv/live/xiu/action/10036.zip
- img.fe####.tv/live/xiu/action/10037.zip
- img.fe####.tv/live/xiu/action/10038.zip
- img.fe####.tv/live/xiu/action/10039.zip
- img.fe####.tv/live/xiu/action/10040.zip
- img.fe####.tv/live/xiu/action/10041.zip
- img.fe####.tv/live/xiu/action/10042.zip
- img.fe####.tv/live/xiu/action/10043.zip
- img.fe####.tv/live/xiu/action/10045.zip
- img.fe####.tv/live/xiu/action/10046.zip
- img.fe####.tv/live/xiu/action/10048.zip
- img.fe####.tv/live/xiu/action/10049.zip
- img.fe####.tv/live/xiu/action/10050.zip
- img.fe####.tv/live/xiu/action/11000.zip
- img.fe####.tv/live/xiu/action/11001.zip
- img.fe####.tv/live/xiu/action/11002.zip
- img.fe####.tv/live/xiu/action/11003.zip
- img.fe####.tv/live/xiu/action/11004.zip
- img.fe####.tv/live/xiu/action/11005.zip
- img.fe####.tv/live/xiu/action/11006.zip
- img.fe####.tv/live/xiu/action/11008.zip
- img.fe####.tv/live/xiu/action/11009.zip
- img.fe####.tv/live/xiu/action/11010.zip
- img.fe####.tv/live/xiu/action/11011.zip
- img.fe####.tv/live/xiu/action/11012.zip
- img.fe####.tv/live/xiu/action/11013.zip
- img.fe####.tv/live/xiu/action/11014.zip
- img.fe####.tv/live/xiu/action/11015.zip
- img.fe####.tv/live/xiu/action/11016.zip
- img.fe####.tv/live/xiu/action/11017.zip
- img.fe####.tv/live/xiu/action/11019.zip
- img.fe####.tv/live/xiu/action/11020.zip
- img.fe####.tv/live/xiu/action/11021.zip
- img.fe####.tv/live/xiu/action/11022.zip
- img.fe####.tv/live/xiu/dress/21000.zip
- img.fe####.tv/live/xiu/dress/21001.zip
- img.fe####.tv/live/xiu/dress/21003.zip
- img.fe####.tv/live/xiu/dress/21004.zip
- img.fe####.tv/live/xiu/dress/21005.zip
- img.fe####.tv/live/xiu/dress/21006.zip
- img.fe####.tv/live/xiu/dress/21007.zip
- img.fe####.tv/live/xiu/dress/21100.zip
- img.fe####.tv/live/xiu/dress/21101.zip
- img.fe####.tv/live/xiu/dress/21103.zip
- img.fe####.tv/live/xiu/dress/21104.zip
- img.fe####.tv/live/xiu/dress/21105.zip
- img.fe####.tv/live/xiu/dress/21106.zip
- img.fe####.tv/live/xiu/dress/21107.zip
- img.fe####.tv/live/xiu/dress/21200.zip
- img.fe####.tv/live/xiu/dress/21201.zip
- img.fe####.tv/live/xiu/dress/21203.zip
- img.fe####.tv/live/xiu/dress/21204.zip
- img.fe####.tv/live/xiu/dress/21205.zip
- img.fe####.tv/live/xiu/dress/21206.zip
- img.fe####.tv/live/xiu/dress/21207.zip
- img.fe####.tv/live/xiu/dress/21300.zip
- img.fe####.tv/live/xiu/dress/21301.zip
- img.fe####.tv/live/xiu/dress/21303.zip
- img.fe####.tv/live/xiu/dress/21304.zip
- img.fe####.tv/live/xiu/dress/21305.zip
- img.fe####.tv/live/xiu/dress/21306.zip
- img.fe####.tv/live/xiu/dress/21307.zip
- img.fe####.tv/live/xiu/dress/21400.zip
- img.fe####.tv/live/xiu/dress/21401.zip
- img.fe####.tv/live/xiu/dress/21403.zip
- img.fe####.tv/live/xiu/dress/21404.zip
- img.fe####.tv/live/xiu/dress/21405.zip
- img.fe####.tv/live/xiu/dress/21406.zip
- img.fe####.tv/live/xiu/dress/21407.zip
- img.fe####.tv/live/xiu/dress/21500.zip
- img.fe####.tv/live/xiu/dress/21501.zip
- img.fe####.tv/live/xiu/dress/21503.zip
- img.fe####.tv/live/xiu/dress/21504.zip
- img.fe####.tv/live/xiu/dress/21505.zip
- img.fe####.tv/live/xiu/dress/21506.zip
- img.fe####.tv/live/xiu/dress/21507.zip
- img.fe####.tv/live/xiu/dress/21600.zip
- img.fe####.tv/live/xiu/dress/21601.zip
- img.fe####.tv/live/xiu/dress/21603.zip
- img.fe####.tv/live/xiu/dress/21604.zip
- img.fe####.tv/live/xiu/dress/21605.zip
- img.fe####.tv/live/xiu/dress/21606.zip
- img.fe####.tv/live/xiu/dress/21607.zip
- img.fe####.tv/live/xiu/dress/21700.zip
- img.fe####.tv/live/xiu/dress/21701.zip
- img.fe####.tv/live/xiu/dress/21703.zip
- img.fe####.tv/live/xiu/dress/21704.zip
- img.fe####.tv/live/xiu/dress/21705.zip
- img.fe####.tv/live/xiu/dress/21706.zip
- img.fe####.tv/live/xiu/dress/21707.zip
- img.fe####.tv/live/xiu/dress/21800.zip
- img.fe####.tv/live/xiu/dress/21801.zip
- img.fe####.tv/live/xiu/dress/21803.zip
- img.fe####.tv/live/xiu/dress/21804.zip
- img.fe####.tv/live/xiu/dress/21805.zip
- img.fe####.tv/live/xiu/dress/21806.zip
- img.fe####.tv/live/xiu/dress/21807.zip
- img.fe####.tv/live/xiu/dress/21900.zip
- img.fe####.tv/live/xiu/dress/21901.zip
- img.fe####.tv/live/xiu/dress/21903.zip
- img.fe####.tv/live/xiu/dress/21904.zip
- img.fe####.tv/live/xiu/dress/21905.zip
- img.fe####.tv/live/xiu/dress/21906.zip
- img.fe####.tv/live/xiu/dress/21907.zip
- img.fe####.tv/live/xiu/dress/22000.zip
- img.fe####.tv/live/xiu/dress/22001.zip
- img.fe####.tv/live/xiu/dress/22003.zip
- img.fe####.tv/live/xiu/dress/22004.zip
- img.fe####.tv/live/xiu/dress/22005.zip
- img.fe####.tv/live/xiu/dress/22006.zip
- img.fe####.tv/live/xiu/dress/22007.zip
- img.fe####.tv/live/xiu/dress/22100.zip
- img.fe####.tv/live/xiu/dress/22101.zip
- img.fe####.tv/live/xiu/dress/22103.zip
- img.fe####.tv/live/xiu/dress/22104.zip
- img.fe####.tv/live/xiu/dress/22105.zip
- img.fe####.tv/live/xiu/dress/22106.zip
- img.fe####.tv/live/xiu/dress/22107.zip
- img.fe####.tv/live/xiu/dress/22200.zip
- img.fe####.tv/live/xiu/dress/22201.zip
- img.fe####.tv/live/xiu/dress/22203.zip
- img.fe####.tv/live/xiu/dress/22204.zip
- img.fe####.tv/live/xiu/dress/22205.zip
- img.fe####.tv/live/xiu/dress/22206.zip
- img.fe####.tv/live/xiu/dress/22207.zip
- img.fe####.tv/live/xiu/dress/22300.zip
- img.fe####.tv/live/xiu/dress/22301.zip
- img.fe####.tv/live/xiu/dress/22303.zip
- img.fe####.tv/live/xiu/dress/22304.zip
- img.fe####.tv/live/xiu/dress/22305.zip
- img.fe####.tv/live/xiu/dress/22306.zip
- img.fe####.tv/live/xiu/dress/22307.zip
- img.fe####.tv/live/xiu/dress/22400.zip
- img.fe####.tv/live/xiu/dress/22401.zip
- img.fe####.tv/live/xiu/dress/22403.zip
- img.fe####.tv/live/xiu/dress/22404.zip
- img.fe####.tv/live/xiu/dress/22405.zip
- img.fe####.tv/live/xiu/dress/22406.zip
- img.fe####.tv/live/xiu/dress/22407.zip
- img.fe####.tv/live/xiu/dress/22500.zip
- img.fe####.tv/live/xiu/dress/22501.zip
- img.fe####.tv/live/xiu/dress/22503.zip
- img.fe####.tv/live/xiu/dress/22504.zip
- img.fe####.tv/live/xiu/dress/22505.zip
- img.fe####.tv/live/xiu/dress/22506.zip
- img.fe####.tv/live/xiu/dress/22507.zip
- img.fe####.tv/live/xiu/dress/22800.zip
- img.fe####.tv/live/xiu/dress/22801.zip
- img.fe####.tv/live/xiu/dress/22803.zip
- img.fe####.tv/live/xiu/dress/22804.zip
- img.fe####.tv/live/xiu/dress/22805.zip
- img.fe####.tv/live/xiu/dress/22806.zip
- img.fe####.tv/live/xiu/dress/22807.zip
- img.fe####.tv/live/xiu/dress/23000.zip
- img.fe####.tv/live/xiu/dress/23001.zip
- img.fe####.tv/live/xiu/dress/23003.zip
- img.fe####.tv/live/xiu/dress/23004.zip
- img.fe####.tv/live/xiu/dress/23005.zip
- img.fe####.tv/live/xiu/dress/23006.zip
- img.fe####.tv/live/xiu/dress/23007.zip
- img.fe####.tv/live/xiu/dress/23100.zip
- img.fe####.tv/live/xiu/dress/23101.zip
- img.fe####.tv/live/xiu/dress/23103.zip
- img.fe####.tv/live/xiu/dress/23104.zip
- img.fe####.tv/live/xiu/dress/23105.zip
- img.fe####.tv/live/xiu/dress/23106.zip
- img.fe####.tv/live/xiu/dress/23107.zip
- img.fe####.tv/live/xiu/dress/23400.zip
- img.fe####.tv/live/xiu/dress/23401.zip
- img.fe####.tv/live/xiu/dress/23403.zip
- img.fe####.tv/live/xiu/dress/23404.zip
- img.fe####.tv/live/xiu/dress/23405.zip
- img.fe####.tv/live/xiu/dress/23406.zip
- img.fe####.tv/live/xiu/dress/23407.zip
- img.fe####.tv/live/xiu/dress/23500.zip
- img.fe####.tv/live/xiu/dress/23501.zip
- img.fe####.tv/live/xiu/dress/23503.zip
- img.fe####.tv/live/xiu/dress/23504.zip
- img.fe####.tv/live/xiu/dress/23505.zip
- img.fe####.tv/live/xiu/dress/23506.zip
- img.fe####.tv/live/xiu/dress/23507.zip
- img.fe####.tv/live/xiu/dress/23800.zip
- img.fe####.tv/live/xiu/dress/23801.zip
- img.fe####.tv/live/xiu/dress/23803.zip
- img.fe####.tv/live/xiu/dress/23804.zip
- img.fe####.tv/live/xiu/dress/23805.zip
- img.fe####.tv/live/xiu/dress/23806.zip
- img.fe####.tv/live/xiu/dress/23807.zip
- img.fe####.tv/live/xiu/dress/24000.zip
- img.fe####.tv/live/xiu/dress/24001.zip
- img.fe####.tv/live/xiu/dress/24003.zip
- img.fe####.tv/live/xiu/dress/24004.zip
- img.fe####.tv/live/xiu/dress/24005.zip
- img.fe####.tv/live/xiu/dress/24006.zip
- img.fe####.tv/live/xiu/dress/24007.zip
- img.fe####.tv/live/xiu/dress/24100.zip
- img.fe####.tv/live/xiu/dress/24101.zip
- img.fe####.tv/live/xiu/dress/24103.zip
- img.fe####.tv/live/xiu/dress/24104.zip
- img.fe####.tv/live/xiu/dress/24105.zip
- img.fe####.tv/live/xiu/dress/24106.zip
- img.fe####.tv/live/xiu/dress/24107.zip
- img.fe####.tv/live/xiu/dress/24600.zip
- img.fe####.tv/live/xiu/dress/24601.zip
- img.fe####.tv/live/xiu/dress/24603.zip
- img.fe####.tv/live/xiu/dress/24604.zip
- img.fe####.tv/live/xiu/dress/24605.zip
- img.fe####.tv/live/xiu/dress/24606.zip
- img.fe####.tv/live/xiu/dress/24607.zip
- img.fe####.tv/live/xiu/dress/24800.zip
- img.fe####.tv/live/xiu/dress/24801.zip
- img.fe####.tv/live/xiu/dress/24803.zip
- img.fe####.tv/live/xiu/dress/24804.zip
- img.fe####.tv/live/xiu/dress/24805.zip
- img.fe####.tv/live/xiu/dress/24806.zip
- img.fe####.tv/live/xiu/dress/24807.zip
- img.fe####.tv/live/xiu/dress/24900.zip
- img.fe####.tv/live/xiu/dress/24901.zip
- img.fe####.tv/live/xiu/dress/24903.zip
- img.fe####.tv/live/xiu/dress/24904.zip
- img.fe####.tv/live/xiu/dress/24905.zip
- img.fe####.tv/live/xiu/dress/24906.zip
- img.fe####.tv/live/xiu/dress/24907.zip
- img.fe####.tv/live/xiu/dress/25000.zip
- img.fe####.tv/live/xiu/dress/25001.zip
- img.fe####.tv/live/xiu/dress/25003.zip
- img.fe####.tv/live/xiu/dress/25004.zip
- img.fe####.tv/live/xiu/dress/25005.zip
- img.fe####.tv/live/xiu/dress/25006.zip
- img.fe####.tv/live/xiu/dress/25007.zip
- img.fe####.tv/live/xiu/dress/25100.zip
- img.fe####.tv/live/xiu/dress/25101.zip
- img.fe####.tv/live/xiu/dress/25103.zip
- img.fe####.tv/live/xiu/dress/25104.zip
- img.fe####.tv/live/xiu/dress/25105.zip
- img.fe####.tv/live/xiu/dress/25106.zip
- img.fe####.tv/live/xiu/dress/25107.zip
- img.fe####.tv/live/xiu/dress/25200.zip
- img.fe####.tv/live/xiu/dress/25201.zip
- img.fe####.tv/live/xiu/dress/25203.zip
- img.fe####.tv/live/xiu/dress/25204.zip
- img.fe####.tv/live/xiu/dress/25205.zip
- img.fe####.tv/live/xiu/dress/25206.zip
- img.fe####.tv/live/xiu/dress/25207.zip
- img.fe####.tv/live/xiu/dress/25400.zip
- img.fe####.tv/live/xiu/dress/25401.zip
- img.fe####.tv/live/xiu/dress/25403.zip
- img.fe####.tv/live/xiu/dress/25404.zip
- img.fe####.tv/live/xiu/dress/25405.zip
- img.fe####.tv/live/xiu/dress/25406.zip
- img.fe####.tv/live/xiu/dress/25407.zip
- img.fe####.tv/live/xiu/dress/25500.zip
- img.fe####.tv/live/xiu/dress/25501.zip
- img.fe####.tv/live/xiu/dress/25503.zip
- img.fe####.tv/live/xiu/dress/25504.zip
- img.fe####.tv/live/xiu/dress/25505.zip
- img.fe####.tv/live/xiu/dress/25506.zip
- img.fe####.tv/live/xiu/dress/25507.zip
- img.fe####.tv/live/xiu/dress/25600.zip
- img.fe####.tv/live/xiu/dress/25601.zip
- img.fe####.tv/live/xiu/dress/25603.zip
- img.fe####.tv/live/xiu/dress/25604.zip
- img.fe####.tv/live/xiu/dress/25605.zip
- img.fe####.tv/live/xiu/dress/25606.zip
- img.fe####.tv/live/xiu/dress/25607.zip
- img.fe####.tv/live/xiu/dress/25700.zip
- img.fe####.tv/live/xiu/dress/25701.zip
- img.fe####.tv/live/xiu/dress/25703.zip
- img.fe####.tv/live/xiu/dress/25704.zip
- img.fe####.tv/live/xiu/dress/25705.zip
- img.fe####.tv/live/xiu/dress/25706.zip
- img.fe####.tv/live/xiu/dress/25707.zip
- img.fe####.tv/live/xiu/dress/26000.zip
- img.fe####.tv/live/xiu/dress/26001.zip
- img.fe####.tv/live/xiu/dress/26003.zip
- img.fe####.tv/live/xiu/dress/26004.zip
- img.fe####.tv/live/xiu/dress/26005.zip
- img.fe####.tv/live/xiu/dress/26006.zip
- img.fe####.tv/live/xiu/dress/26007.zip
- img.fe####.tv/live/xiu/dress/26100.zip
- img.fe####.tv/live/xiu/dress/26101.zip
- img.fe####.tv/live/xiu/dress/26103.zip
- img.fe####.tv/live/xiu/dress/26104.zip
- img.fe####.tv/live/xiu/dress/26105.zip
- img.fe####.tv/live/xiu/dress/26106.zip
- img.fe####.tv/live/xiu/dress/26107.zip
- img.fe####.tv/live/xiu/dress/26200.zip
- img.fe####.tv/live/xiu/dress/26201.zip
- img.fe####.tv/live/xiu/dress/26203.zip
- img.fe####.tv/live/xiu/dress/26204.zip
- img.fe####.tv/live/xiu/dress/26205.zip
- img.fe####.tv/live/xiu/dress/26206.zip
- img.fe####.tv/live/xiu/dress/26207.zip
- img.fe####.tv/live/xiu/dress/26400.zip
- img.fe####.tv/live/xiu/dress/26401.zip
- img.fe####.tv/live/xiu/dress/26403.zip
- img.fe####.tv/live/xiu/dress/26404.zip
- img.fe####.tv/live/xiu/dress/26405.zip
- img.fe####.tv/live/xiu/dress/26406.zip
- img.fe####.tv/live/xiu/dress/26407.zip
- img.fe####.tv/live/xiu/dress/26500.zip
- img.fe####.tv/live/xiu/dress/26501.zip
- img.fe####.tv/live/xiu/dress/26503.zip
- img.fe####.tv/live/xiu/dress/26504.zip
- img.fe####.tv/live/xiu/dress/26505.zip
- img.fe####.tv/live/xiu/dress/26506.zip
- img.fe####.tv/live/xiu/dress/26507.zip
- img.fe####.tv/live/xiu/dress/26600.zip
- img.fe####.tv/live/xiu/dress/26601.zip
- img.fe####.tv/live/xiu/dress/26603.zip
- img.fe####.tv/live/xiu/dress/26604.zip
- img.fe####.tv/live/xiu/dress/26605.zip
- img.fe####.tv/live/xiu/dress/26606.zip
- img.fe####.tv/live/xiu/dress/26607.zip
- img.fe####.tv/live/xiu/dress/26700.zip
- img.fe####.tv/live/xiu/dress/26701.zip
- img.fe####.tv/live/xiu/dress/26703.zip
- img.fe####.tv/live/xiu/dress/26704.zip
- img.fe####.tv/live/xiu/dress/26705.zip
- img.fe####.tv/live/xiu/dress/26706.zip
- img.fe####.tv/live/xiu/dress/26707.zip
- img.fe####.tv/live/xiu/dress/26800.zip
- img.fe####.tv/live/xiu/dress/26801.zip
- img.fe####.tv/live/xiu/dress/26803.zip
- img.fe####.tv/live/xiu/dress/26804.zip
- img.fe####.tv/live/xiu/dress/26805.zip
- img.fe####.tv/live/xiu/dress/26806.zip
- img.fe####.tv/live/xiu/dress/26807.zip
- img.fe####.tv/live/xiu/dress/26900.zip
- img.fe####.tv/live/xiu/dress/26901.zip
- img.fe####.tv/live/xiu/dress/26903.zip
- img.fe####.tv/live/xiu/dress/26904.zip
- img.fe####.tv/live/xiu/dress/26905.zip
- img.fe####.tv/live/xiu/dress/26906.zip
- img.fe####.tv/live/xiu/dress/26907.zip
- img.fe####.tv/live/xiu/dress/27000.zip
- img.fe####.tv/live/xiu/dress/27001.zip
- img.fe####.tv/live/xiu/dress/27003.zip
- img.fe####.tv/live/xiu/dress/27004.zip
- img.fe####.tv/live/xiu/dress/27005.zip
- img.fe####.tv/live/xiu/dress/27006.zip
- img.fe####.tv/live/xiu/dress/27007.zip
- img.fe####.tv/live/xiu/role/30000.zip
- img.fe####.tv/live/xiu/role/30001.zip
- img.fe####.tv/p8l42ldybwh49hbj/thumbnail/0014.jpg
- img.fe####.tv/qeri6e1hykji6nxz/thumbnail/0011.jpg
- img.fe####.tv/s39wpo9a267jnqz1/thumbnail/0088.jpg@!small-img
- img.fe####.tv/topics/icon/5350fdaae8912573de7d5177.jpg
- img.fe####.tv/topics/icon/5350fdaae8912573de7d517b.jpg
- img.fe####.tv/topics/icon/5350fdaae8912573de7d51a5.jpg
- img.fe####.tv/topics/icon/5350fdaae8912573de7d51d7.jpg
- img.fe####.tv/topics/icon/535dd5a62b751a62eed3804e.jpg
- img.fe####.tv/topics/icon/536c8e622b751a27b67c2179.jpg
- img.fe####.tv/topics/icon/53a0086a2b751a48a29257dd.jpg
- img.fe####.tv/topics/icon/53b3de842b751a7ef8814332.jpg
- img.fe####.tv/topics/icon/5514cd1186c6431238c8a6de.jpg
- img.fe####.tv/topics/icon/5594cb9486c6434eb58157c9.jpg
- img.fe####.tv/topics/icon/571599c9cecaab3579b39b94.jpg
- img.fe####.tv/u1ut3golp27tt9l5/thumbnail/0031.jpg@!small-img
- mo####.b####.com/ads/pa/8/__pasys_remote_banner.php?bdr=####&os=####&v=#...
- mo####.b####.com/ads/pa/8/__xadsdk__remote__8.7051.jar
- mo####.b####.com/cpro/ui/mads.php?code2=####
- pic####.fe####.tv/au/app/doz76ay2l300a776?platform=####&appVersion=####&...
- pic####.fe####.tv/is/img/62qpaxrvj9i0prew?sid=####
- pic####.fe####.tv/is/img/doz76ay2l300a776?sid=####
- pic####.fe####.tv/is/img/ef0npy6qeaidgbmh?sid=####
- pic####.fe####.tv/is/img/ft89lecvpezqcnyp?sid=####
- pic####.fe####.tv/is/img/p8l42ldybwh49hbj?sid=####
- pic####.fe####.tv/is/img/qeri6e1hykji6nxz?sid=####
- pic####.fe####.tv/is/smallimg/46xceltjhtnvu3f2?sid=####
- pic####.fe####.tv/is/smallimg/doz76ay2l300a776?sid=####
- pic####.fe####.tv/is/smallimg/ehhoxkoygbi8ttwg?sid=####
- pic####.fe####.tv/is/smallimg/gdsd1dia989o3z5p?sid=####
- pic####.fe####.tv/is/smallimg/liccwquhy2pccgm0?sid=####
- pic####.fe####.tv/is/smallimg/s39wpo9a267jnqz1?sid=####
- pic####.fe####.tv/is/smallimg/u1ut3golp27tt9l5?sid=####
- s.tou####.com/otErf/
- s6.ps####.com.####.com/package/apk/news_calendar/calendar_baidu_dsp82_an...
- si####.jom####.com/it/u=1240068934,3514179707&fm=76
- si####.jom####.com/it/u=1460917071,3039439374&fm=76
- si####.jom####.com/it/u=2824905445,2480231764&fm=76
- si####.jom####.com/it/u=3667178463,1464345644&fm=76
- st####.fe####.tv/m/dl/and/general_video_update.apk
- tfs.alipayo####.com/L1/71/1000/and/koubei/client/koubei_sh2345.apk
- ub####.baidust####.com/media/v1/0f0000ucQx8hNT_aY5w5Ms.jpg
- wap.n.sh####.com/mobads.php?0s0000K####
- wn.pos.b####.com/adx.php?c=####
- wn.pos.b####.com/adx.php?c=####&ext=####
Запросы HTTP POST:
- a####.u####.com/app_logs
- sdk.o####.p####.####.com/api.php?format=####&t=####
- sh.wagbr####.aliyun####.com/man/api?ak=####&s=####
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/MSF.C.NetConnInfoCenter.xml
- /data/data/####/OfflinePushSettings.xml
- /data/data/####/QALConfigStore.dat
- /data/data/####/TLS_DEVICE_INFO.xml
- /data/data/####/V2.8.8.3.txt
- /data/data/####/WLOGIN_DEVICE_INFO.xml
- /data/data/####/__sdk_m_0f0000ucQx8hNT_aY5w5Ms.jpg
- /data/data/####/__sdk_m_bd-logo4.png
- /data/data/####/__sdk_m_mob_adicon.png
- /data/data/####/__sdk_remote_dl_2.xml
- /data/data/####/__x_adsdk_agent_header__.xml
- /data/data/####/__xadsdk__remote__final__97622f5d-309d-4ac6-8c3...17.jar
- /data/data/####/__xadsdk__remote__final__builtin__.jar
- /data/data/####/__xadsdk_downloaded__version__.xml
- /data/data/####/baidu_mobads_activate.xml
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/com.baidu.mobads.loader.xml
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/general_video_66105.apk
- /data/data/####/gt_356507059351895_v4.msgstore-journal
- /data/data/####/httpdns_config_cache.xml
- /data/data/####/imei
- /data/data/####/init.pid
- /data/data/####/init_c.pid
- /data/data/####/install_sent.xml
- /data/data/####/jy.jar
- /data/data/####/kr.xml
- /data/data/####/libjiagu.so
- /data/data/####/multidex.version.xml
- /data/data/####/os.jar
- /data/data/####/pull_msf_succcom.hfhghjhkj.zxvbn.xml
- /data/data/####/push.pid
- /data/data/####/pushsdk.db-journal
- /data/data/####/qal_monitor.db-journal
- /data/data/####/report_v5.msgstore-journal
- /data/data/####/run.pid
- /data/data/####/t_u.db-journal
- /data/data/####/tls_device.dat
- /data/data/####/tls_sdk.db-journal
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/vbz.xml
- /data/data/####/waqu_prefs.xml
- /data/data/####/waqu_prefs.xml (deleted)
- /data/data/####/waqu_user_prefs.xml
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/webviewCookiesChromium.db-journal (deleted)
- /data/data/####/webviewCookiesChromiumPrivate.db-journal
- /data/data/####/wlogin_device.dat
- /data/data/####/wq_general_adult.db-journal
- /data/media/####/.nomedia
- /data/media/####/0ef0b153bed988bb90cabad1bbedc5d9.apk.tmp
- /data/media/####/10001.zip
- /data/media/####/10002.zip
- /data/media/####/10003.zip
- /data/media/####/10012.zip
- /data/media/####/10013.zip
- /data/media/####/10014.zip
- /data/media/####/10015.zip
- /data/media/####/10016.zip
- /data/media/####/10017.zip
- /data/media/####/10018.zip
- /data/media/####/10019.zip
- /data/media/####/10020.zip
- /data/media/####/10021.zip
- /data/media/####/10022.zip
- /data/media/####/10023.zip
- /data/media/####/10024.zip
- /data/media/####/10025.zip
- /data/media/####/10026.zip
- /data/media/####/10027.zip
- /data/media/####/10028.zip
- /data/media/####/10029.zip
- /data/media/####/10031.zip
- /data/media/####/10032.zip
- /data/media/####/10033.zip
- /data/media/####/10034.zip
- /data/media/####/10035.zip
- /data/media/####/10036.zip
- /data/media/####/10037.zip
- /data/media/####/10038.zip
- /data/media/####/10039.zip
- /data/media/####/10040.zip
- /data/media/####/10041.zip
- /data/media/####/10042.zip
- /data/media/####/10043.zip
- /data/media/####/10045.zip
- /data/media/####/10046.zip
- /data/media/####/10048.zip
- /data/media/####/10049.zip
- /data/media/####/10050.zip
- /data/media/####/10laws5v0us6khl3sm21g8798.0.tmp
- /data/media/####/11000.zip
- /data/media/####/11001.zip
- /data/media/####/11002.zip
- /data/media/####/11003.zip
- /data/media/####/11004.zip
- /data/media/####/11005.zip
- /data/media/####/11006.zip
- /data/media/####/11008.zip
- /data/media/####/11009.zip
- /data/media/####/11010.zip
- /data/media/####/11011.zip
- /data/media/####/11012.zip
- /data/media/####/11013.zip
- /data/media/####/11014.zip
- /data/media/####/11015.zip
- /data/media/####/11016.zip
- /data/media/####/11017.zip
- /data/media/####/11019.zip
- /data/media/####/11020.zip
- /data/media/####/11021.zip
- /data/media/####/11022.zip
- /data/media/####/170wakossdivyrwkildw5c30o.0.tmp
- /data/media/####/19ilkufsegfq8dr96yimht3lx.0.tmp
- /data/media/####/1ebbigr49g3cfgiy328g8jos3.0.tmp
- /data/media/####/1isd9z2i7gs1buq3mq433n4m2.0.tmp
- /data/media/####/1lpiv2x3pfu85m9wektas6ejn.0.tmp
- /data/media/####/1q5eqb2c9ly6faniyqqu7dvpx.0.tmp
- /data/media/####/20zojewe0ltsbtn7vtykclitn.0.tmp
- /data/media/####/21000.zip
- /data/media/####/21001.zip
- /data/media/####/21003.zip
- /data/media/####/21004.zip
- /data/media/####/21005.zip
- /data/media/####/21006.zip
- /data/media/####/21007.zip
- /data/media/####/21100.zip
- /data/media/####/21101.zip
- /data/media/####/21103.zip
- /data/media/####/21104.zip
- /data/media/####/21105.zip
- /data/media/####/21106.zip
- /data/media/####/21107.zip
- /data/media/####/21200.zip
- /data/media/####/21201.zip
- /data/media/####/21203.zip
- /data/media/####/21204.zip
- /data/media/####/21205.zip
- /data/media/####/21206.zip
- /data/media/####/21207.zip
- /data/media/####/21300.zip
- /data/media/####/21301.zip
- /data/media/####/21303.zip
- /data/media/####/21304.zip
- /data/media/####/21305.zip
- /data/media/####/21306.zip
- /data/media/####/21307.zip
- /data/media/####/21400.zip
- /data/media/####/21401.zip
- /data/media/####/21403.zip
- /data/media/####/21404.zip
- /data/media/####/21405.zip
- /data/media/####/21406.zip
- /data/media/####/21407.zip
- /data/media/####/21500.zip
- /data/media/####/21501.zip
- /data/media/####/21503.zip
- /data/media/####/21504.zip
- /data/media/####/21505.zip
- /data/media/####/21506.zip
- /data/media/####/21507.zip
- /data/media/####/21600.zip
- /data/media/####/21601.zip
- /data/media/####/21603.zip
- /data/media/####/21604.zip
- /data/media/####/21605.zip
- /data/media/####/21606.zip
- /data/media/####/21607.zip
- /data/media/####/21700.zip
- /data/media/####/21701.zip
- /data/media/####/21703.zip
- /data/media/####/21704.zip
- /data/media/####/21705.zip
- /data/media/####/21706.zip
- /data/media/####/21707.zip
- /data/media/####/21800.zip
- /data/media/####/21801.zip
- /data/media/####/21803.zip
- /data/media/####/21804.zip
- /data/media/####/21805.zip
- /data/media/####/21806.zip
- /data/media/####/21807.zip
- /data/media/####/21900.zip
- /data/media/####/21901.zip
- /data/media/####/21903.zip
- /data/media/####/21904.zip
- /data/media/####/21905.zip
- /data/media/####/21906.zip
- /data/media/####/21907.zip
- /data/media/####/22000.zip
- /data/media/####/22001.zip
- /data/media/####/22003.zip
- /data/media/####/22004.zip
- /data/media/####/22005.zip
- /data/media/####/22006.zip
- /data/media/####/22007.zip
- /data/media/####/22100.zip
- /data/media/####/22101.zip
- /data/media/####/22103.zip
- /data/media/####/22104.zip
- /data/media/####/22105.zip
- /data/media/####/22106.zip
- /data/media/####/22107.zip
- /data/media/####/22200.zip
- /data/media/####/22201.zip
- /data/media/####/22203.zip
- /data/media/####/22204.zip
- /data/media/####/22205.zip
- /data/media/####/22206.zip
- /data/media/####/22207.zip
- /data/media/####/22300.zip
- /data/media/####/22301.zip
- /data/media/####/22303.zip
- /data/media/####/22304.zip
- /data/media/####/22305.zip
- /data/media/####/22306.zip
- /data/media/####/22307.zip
- /data/media/####/22400.zip
- /data/media/####/22401.zip
- /data/media/####/22403.zip
- /data/media/####/22404.zip
- /data/media/####/22405.zip
- /data/media/####/22406.zip
- /data/media/####/22407.zip
- /data/media/####/22500.zip
- /data/media/####/22501.zip
- /data/media/####/22503.zip
- /data/media/####/22504.zip
- /data/media/####/22505.zip
- /data/media/####/22506.zip
- /data/media/####/22507.zip
- /data/media/####/22800.zip
- /data/media/####/22801.zip
- /data/media/####/22803.zip
- /data/media/####/22804.zip
- /data/media/####/22805.zip
- /data/media/####/22806.zip
- /data/media/####/22807.zip
- /data/media/####/23000.zip
- /data/media/####/23001.zip
- /data/media/####/23003.zip
- /data/media/####/23004.zip
- /data/media/####/23005.zip
- /data/media/####/23006.zip
- /data/media/####/23007.zip
- /data/media/####/23100.zip
- /data/media/####/23101.zip
- /data/media/####/23103.zip
- /data/media/####/23104.zip
- /data/media/####/23105.zip
- /data/media/####/23106.zip
- /data/media/####/23107.zip
- /data/media/####/23400.zip
- /data/media/####/23401.zip
- /data/media/####/23403.zip
- /data/media/####/23404.zip
- /data/media/####/23405.zip
- /data/media/####/23406.zip
- /data/media/####/23407.zip
- /data/media/####/23500.zip
- /data/media/####/23501.zip
- /data/media/####/23503.zip
- /data/media/####/23504.zip
- /data/media/####/23505.zip
- /data/media/####/23506.zip
- /data/media/####/23507.zip
- /data/media/####/23800.zip
- /data/media/####/23801.zip
- /data/media/####/23803.zip
- /data/media/####/23804.zip
- /data/media/####/23805.zip
- /data/media/####/23806.zip
- /data/media/####/23807.zip
- /data/media/####/24000.zip
- /data/media/####/24001.zip
- /data/media/####/24003.zip
- /data/media/####/24004.zip
- /data/media/####/24005.zip
- /data/media/####/24006.zip
- /data/media/####/24007.zip
- /data/media/####/24100.zip
- /data/media/####/24101.zip
- /data/media/####/24103.zip
- /data/media/####/24104.zip
- /data/media/####/24105.zip
- /data/media/####/24106.zip
- /data/media/####/24107.zip
- /data/media/####/24600.zip
- /data/media/####/24601.zip
- /data/media/####/24603.zip
- /data/media/####/24604.zip
- /data/media/####/24605.zip
- /data/media/####/24606.zip
- /data/media/####/24607.zip
- /data/media/####/24800.zip
- /data/media/####/24801.zip
- /data/media/####/24803.zip
- /data/media/####/24804.zip
- /data/media/####/24805.zip
- /data/media/####/24806.zip
- /data/media/####/24807.zip
- /data/media/####/24900.zip
- /data/media/####/24901.zip
- /data/media/####/24903.zip
- /data/media/####/24904.zip
- /data/media/####/24905.zip
- /data/media/####/24906.zip
- /data/media/####/24907.zip
- /data/media/####/25000.zip
- /data/media/####/25001.zip
- /data/media/####/25003.zip
- /data/media/####/25004.zip
- /data/media/####/25005.zip
- /data/media/####/25006.zip
- /data/media/####/25007.zip
- /data/media/####/25100.zip
- /data/media/####/25101.zip
- /data/media/####/25103.zip
- /data/media/####/25104.zip
- /data/media/####/25105.zip
- /data/media/####/25106.zip
- /data/media/####/25107.zip
- /data/media/####/25200.zip
- /data/media/####/25201.zip
- /data/media/####/25203.zip
- /data/media/####/25204.zip
- /data/media/####/25205.zip
- /data/media/####/25206.zip
- /data/media/####/25207.zip
- /data/media/####/25400.zip
- /data/media/####/25401.zip
- /data/media/####/25403.zip
- /data/media/####/25404.zip
- /data/media/####/25405.zip
- /data/media/####/25406.zip
- /data/media/####/25407.zip
- /data/media/####/25500.zip
- /data/media/####/25501.zip
- /data/media/####/25503.zip
- /data/media/####/25504.zip
- /data/media/####/25505.zip
- /data/media/####/25506.zip
- /data/media/####/25507.zip
- /data/media/####/25600.zip
- /data/media/####/25601.zip
- /data/media/####/25603.zip
- /data/media/####/25604.zip
- /data/media/####/25605.zip
- /data/media/####/25606.zip
- /data/media/####/25607.zip
- /data/media/####/25700.zip
- /data/media/####/25701.zip
- /data/media/####/25703.zip
- /data/media/####/25704.zip
- /data/media/####/25705.zip
- /data/media/####/25706.zip
- /data/media/####/25707.zip
- /data/media/####/26000.zip
- /data/media/####/26001.zip
- /data/media/####/26003.zip
- /data/media/####/26004.zip
- /data/media/####/26005.zip
- /data/media/####/26006.zip
- /data/media/####/26007.zip
- /data/media/####/26100.zip
- /data/media/####/26101.zip
- /data/media/####/26103.zip
- /data/media/####/26104.zip
- /data/media/####/26105.zip
- /data/media/####/26106.zip
- /data/media/####/26107.zip
- /data/media/####/26200.zip
- /data/media/####/26201.zip
- /data/media/####/26203.zip
- /data/media/####/26204.zip
- /data/media/####/26205.zip
- /data/media/####/26206.zip
- /data/media/####/26207.zip
- /data/media/####/26400.zip
- /data/media/####/26401.zip
- /data/media/####/26403.zip
- /data/media/####/26404.zip
- /data/media/####/26405.zip
- /data/media/####/26406.zip
- /data/media/####/26407.zip
- /data/media/####/26500.zip
- /data/media/####/26501.zip
- /data/media/####/26503.zip
- /data/media/####/26504.zip
- /data/media/####/26505.zip
- /data/media/####/26506.zip
- /data/media/####/26507.zip
- /data/media/####/26600.zip
- /data/media/####/26601.zip
- /data/media/####/26603.zip
- /data/media/####/26604.zip
- /data/media/####/26605.zip
- /data/media/####/26606.zip
- /data/media/####/26607.zip
- /data/media/####/26700.zip
- /data/media/####/26701.zip
- /data/media/####/26703.zip
- /data/media/####/26704.zip
- /data/media/####/26705.zip
- /data/media/####/26706.zip
- /data/media/####/26707.zip
- /data/media/####/26800.zip
- /data/media/####/26801.zip
- /data/media/####/26803.zip
- /data/media/####/26804.zip
- /data/media/####/26805.zip
- /data/media/####/26806.zip
- /data/media/####/26807.zip
- /data/media/####/26900.zip
- /data/media/####/26901.zip
- /data/media/####/26903.zip
- /data/media/####/26904.zip
- /data/media/####/26905.zip
- /data/media/####/26906.zip
- /data/media/####/26907.zip
- /data/media/####/27000.zip
- /data/media/####/27001.zip
- /data/media/####/27003.zip
- /data/media/####/27004.zip
- /data/media/####/27005.zip
- /data/media/####/27006.zip
- /data/media/####/27007.zip
- /data/media/####/27v58611o2j8zt9flxbji2km4.0.tmp
- /data/media/####/2eoyi64gw89fl4dtfwpdd9955.0.tmp
- /data/media/####/30000.zip
- /data/media/####/30001.zip
- /data/media/####/376d4s3r46c6iy54mvzc8863n.0.tmp
- /data/media/####/3b8op8b3osak3yfkfgo7wc4do.0.tmp
- /data/media/####/3fbi9uebkm0i862j8ht1wpolv.0.tmp
- /data/media/####/3reivbpthbv7yhse0erk246kc.0.tmp
- /data/media/####/3zr4e51r1fvjtiquqlu85zryy.0.tmp
- /data/media/####/4403f413879c3
- /data/media/####/45u3ugpxms00rpiv0tqbmg35p.0.tmp
- /data/media/####/4f30sj5s1mo1vq3lvnwma8cpo.0.tmp
- /data/media/####/4yr6se8vvtm15v67eakvjoxdo.0.tmp
- /data/media/####/54ykyjkx0zjnvivtf9gk8v6ga.0.tmp
- /data/media/####/5f1qezatrktj1bi67jirei215.0.tmp
- /data/media/####/5l0ob2shd734m7z55squ6a89d.0.tmp
- /data/media/####/63enop6t9lm32zrewmkfl4ytp.0.tmp
- /data/media/####/6fylul08bh3i9csno7hesareq.0.tmp
- /data/media/####/6jhcbm39y31p50jiomtkoaixj.0.tmp
- /data/media/####/6sejd7xg0yvlpm0e4ikrv7b40.0.tmp
- /data/media/####/6yjk0v5t79sfe1483c0qaw6pu.0.tmp
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/OpenSDKConfig
- /data/media/####/action.atlas
- /data/media/####/action.json
- /data/media/####/action.png
- /data/media/####/action2.png
- /data/media/####/alalei.zip
- /data/media/####/app.18.06.23.11.log
- /data/media/####/app.db
- /data/media/####/b.tmp
- /data/media/####/boximiya.zip
- /data/media/####/buluofengqing.zip
- /data/media/####/c94a9a3f22727db2083a691f27600f20.apk
- /data/media/####/com.hfhghjhkj.zxvbn.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/config.json
- /data/media/####/daimengtutu.zip
- /data/media/####/dress.atlas
- /data/media/####/dress.json
- /data/media/####/dress.png
- /data/media/####/dress.zip
- /data/media/####/gongzhujiadao.zip
- /data/media/####/hongdiefadai.zip
- /data/media/####/huahuanxiannv.zip
- /data/media/####/huajia.zip
- /data/media/####/imsdk_20180623.log
- /data/media/####/j8jn4ywj14logi33vsccm7ep.0.tmp
- /data/media/####/jggjxx3vtgur43eo2ysn7hvu.0.tmp
- /data/media/####/journal
- /data/media/####/journal.tmp
- /data/media/####/kaihua.zip
- /data/media/####/kongjieyouhuo.zip
- /data/media/####/lingdangmaoer.zip
- /data/media/####/mengmengxiaolu.zip
- /data/media/####/moshubang.zip
- /data/media/####/role.atlas
- /data/media/####/role.json
- /data/media/####/sdk.18.06.23.11.log
- /data/media/####/shenmimiansha.zip
- /data/media/####/skeleton.atlas
- /data/media/####/skeleton.json
- /data/media/####/skeleton.png
- /data/media/####/wangshalimao.zip
- /data/media/####/waqu_temp
- /data/media/####/xiarishatan.zip
- /data/media/####/xueba.zip
Другие:
Запускает следующие shell-скрипты:
- chmod 755 <Package Folder>/.jiagu/libjiagu.so
- chmod 777 /storage/emulated/0/Android/data/<Package>/files/Download/Android/azb/c94a9a3f22727db2083a691f27600f20.apk
Загружает динамические библиотеки:
- UDT
- _imcore_jni_gyp
- getuiext2
- hwcodec
- ijkffmpeg
- ijkplayer
- ijksdl
- libjiagu
- qalcodecwrapper
- qalmsfboot
- qavsdk
- st_mobile
- stlport_shared
- stmobile_jni
- wq_core
- wtcrypto
- xplatform
Использует следующие алгоритмы для шифрования данных:
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
Использует следующие алгоритмы для расшифровки данных:
- AES-CBC-PKCS7Padding
- DES
- RSA-ECB-PKCS1Padding
Использует специальную библиотеку для скрытия исполняемого байткода.
Осуществляет доступ к информации о геолокации.
Осуществляет доступ к информации о сети.
Осуществляет доступ к информации о телефоне (номер, imei и тд.).
Осуществляет доступ к информации об установленных приложениях.
Осуществляет доступ к информации о запущенных приложениях.
Добавляет задания в системный планировщик.
Отрисовывает собственные окна поверх других приложений.
