Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Adware.Dowgin.14.origin
Сетевая активность:
Подключается к:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) pass####.k####.com:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) api.durianc####.com:80
- TCP(HTTP/1.1) v.g####.qq.com:80
- TCP(HTTP/1.1) p####.tc.qq.com:80
- TCP(HTTP/1.1) www.51bt####.com:80
- TCP(HTTP/1.1) d.g####.qq.com:80
- TCP(HTTP/1.1) si.ei.senb####.com:80
- TCP(HTTP/1.1) s####.e.qq.com:80
- TCP(HTTP/1.1) m.k####.com:80
- TCP(HTTP/1.1) c.g####.qq.com:80
- TCP(HTTP/1.1) s####.jom####.com:80
- TCP(HTTP/1.1) www.k####.com:80
- TCP(HTTP/1.1) mcs.cdn.k####.com:80
- TCP(HTTP/1.1) c####.st####.k####.com:80
- TCP(HTTP/1.1) thi####.q####.cn:80
- TCP(HTTP/1.1) mi.g####.qq.com:80
- TCP(HTTP/1.1) s####.tc.qq.com:80
- TCP(TLS/1.0) hm.b####.com:443
Запросы DNS:
- a####.u####.com
- api.durianc####.com
- api.s####.b####.com
- c####.st####.k####.com
- c.g####.qq.com
- d.g####.qq.com
- hm.b####.com
- imgc####.qq.com
- m.k####.com
- mcs.cdn.k####.com
- mi.g####.qq.com
- p####.ugd####.com
- p####.zhanz####.b####.com
- pass####.k####.com
- q.q####.cn
- qzones####.g####.cn
- s####.e.qq.com
- si.ei.senb####.com
- thi####.q####.cn
- v.g####.qq.com
- www.51bt####.com
- www.k####.com
Запросы HTTP GET:
- c####.st####.k####.com/000/01/00/01/100059e082999aa5a.jpeg
- c####.st####.k####.com/000/01/00/03/10005a1d07a8d108c.jpeg
- c####.st####.k####.com/000/01/00/03/10005af2b704a12da.jpeg
- c####.st####.k####.com/000/01/00/03/10005b31f327308c6.jpeg
- c####.st####.k####.com/000/01/00/05/100059f698def3b58.jpeg
- c####.st####.k####.com/000/01/00/05/10005af587e59cdd3.jpeg
- c####.st####.k####.com/000/01/00/05/10005b321d774a2c0.jpeg
- c####.st####.k####.com/000/01/00/07/1000584f705e138f9.jpeg
- c####.st####.k####.com/000/01/00/07/10005850e61c61899.jpg
- c####.st####.k####.com/000/01/00/08/1000585371ec031f3.jpeg
- c####.st####.k####.com/000/01/00/08/10005ac477e7afe42.jpeg
- c####.st####.k####.com/000/01/00/10/10005875928c65f8c.jpeg
- c####.st####.k####.com/000/01/00/10/10005881b13d9cdbc.jpeg
- c####.st####.k####.com/000/01/00/10/100058870a415c6c6.jpeg
- c####.st####.k####.com/000/01/00/10/100059e47cdf607a7.jpeg
- c####.st####.k####.com/000/01/00/10/10005b31fddc5aa45.jpeg
- c####.st####.k####.com/000/01/00/11/10005881b1e07d48d.jpeg
- c####.st####.k####.com/000/01/00/11/10005977661736968.jpeg
- c####.st####.k####.com/000/01/00/11/10005b33304b765d1.jpeg
- c####.st####.k####.com/000/01/00/12/100058abb4b7c3275.jpeg
- c####.st####.k####.com/000/01/00/12/100058bd243283360.jpeg
- c####.st####.k####.com/000/01/00/12/100058be5cec74778.jpeg
- c####.st####.k####.com/000/01/00/12/100058c0cc15ebfac.jpeg
- c####.st####.k####.com/000/01/00/15/100059b8e9732dd38.jpeg
- c####.st####.k####.com/000/01/00/15/100059e5e3e7bb906.jpeg
- c####.st####.k####.com/000/01/00/17/100058d884b37501b.jpg
- c####.st####.k####.com/000/01/00/21/100059f1361e0a6b9.jpeg
- c####.st####.k####.com/000/01/00/22/100059119d4ea1bab.jpeg
- c####.st####.k####.com/000/01/00/22/10005a03c7e379e8d.jpeg
- c####.st####.k####.com/000/01/00/22/10005a040e46e99bf.jpeg
- c####.st####.k####.com/000/01/00/23/100059293ed4dcab7.jpeg
- c####.st####.k####.com/000/01/00/23/1000593e85f22720c.jpeg
- c####.st####.k####.com/000/01/00/23/10005a03c7d77d1c9.jpeg
- c####.st####.k####.com/000/01/00/24/100059e4599bb9e7a.jpeg
- c####.st####.k####.com/000/01/00/24/10005a03c7b863693.jpeg
- c####.st####.k####.com/000/01/00/25/10005a13e30990a5a.jpeg
- c####.st####.k####.com/000/01/00/26/1000598839d4b8042.jpeg
- c####.st####.k####.com/000/01/00/26/10005a03c7f1c415f.jpeg
- c####.st####.k####.com/000/01/00/26/10005b4847ce2be93.jpeg
- c####.st####.k####.com/000/01/00/27/1000599fd42265c44.jpeg
- c####.st####.k####.com/000/01/00/27/10005b433be1699c7.jpeg
- c####.st####.k####.com/000/01/00/29/100059f009a9d46df.jpeg
- c####.st####.k####.com/000/01/00/29/10005ae2d48a1c944.jpeg
- c####.st####.k####.com/000/01/00/29/10005b431316e8154.jpeg
- c####.st####.k####.com/000/01/00/30/100059e576fd02089.jpeg
- c####.st####.k####.com/000/01/00/30/10005a0970e4b7497.jpeg
- c####.st####.k####.com/000/01/00/35/10005a0cf2055e4c0.jpeg
- c####.st####.k####.com/000/01/00/36/10005a274f8d62357.jpeg
- c####.st####.k####.com/000/01/00/36/10005a2e4d6b55e4c.jpeg
- c####.st####.k####.com/000/01/00/36/10005a43711f8c28b.jpeg
- c####.st####.k####.com/000/01/00/36/10005b31f24ac2939.png
- c####.st####.k####.com/000/01/00/37/10005a41e3f27aaee.jpeg
- c####.st####.k####.com/000/01/00/37/10005a436fc69451a.jpeg
- c####.st####.k####.com/000/01/00/37/10005a4c7a88d7518.jpeg
- c####.st####.k####.com/000/01/00/37/10005aa1e1b573f73.jpeg
- c####.st####.k####.com/000/01/00/37/10005ae01dd5af246.jpeg
- c####.st####.k####.com/000/01/00/38/10005a5c6e4cd1def.png
- c####.st####.k####.com/000/01/00/38/10005b0f57a0b20a2.jpeg
- c####.st####.k####.com/000/01/00/39/10005a7184623dadc.jpeg
- c####.st####.k####.com/000/01/00/39/10005a80fc3488b23.jpeg
- c####.st####.k####.com/000/01/00/39/10005a9cac6e5d092.jpeg
- c####.st####.k####.com/000/01/00/39/10005a9d16080b54b.jpeg
- c####.st####.k####.com/000/01/00/39/10005aa257ce8ea92.jpeg
- c####.st####.k####.com/000/01/00/39/10005aa25f7a735aa.jpeg
- c####.st####.k####.com/000/01/00/40/10005aaf930166cf0.jpeg
- c####.st####.k####.com/000/01/00/40/10005ab5d7eedd91b.jpg
- c####.st####.k####.com/000/01/00/40/10005ab5da250716e.jpg
- c####.st####.k####.com/000/01/00/40/10005ab5da4e1eb6a.jpg
- c####.st####.k####.com/000/01/00/40/10005ab5dab86b366.jpg
- c####.st####.k####.com/000/01/00/40/10005abcb724e3382.jpeg
- c####.st####.k####.com/000/01/00/41/10005ac1f64329c8d.jpeg
- c####.st####.k####.com/000/01/00/42/10005ae07efa95f81.jpeg
- c####.st####.k####.com/000/01/00/42/10005b1a43cd029fe.jpeg
- c####.st####.k####.com/000/01/00/42/10005b7eb86859510.jpeg
- c####.st####.k####.com/000/01/00/42/10005b8156f3b3ddf.png
- c####.st####.k####.com/000/01/00/43/10005af4109d6186f.jpeg
- c####.st####.k####.com/000/01/00/43/10005af94e54540fb.jpeg
- c####.st####.k####.com/000/01/00/43/10005af954675e522.jpeg
- c####.st####.k####.com/000/01/00/43/10005af9558b6279e.jpeg
- c####.st####.k####.com/000/01/00/43/10005af95669d261d.jpeg
- c####.st####.k####.com/000/01/00/43/10005af9661641f93.jpeg
- c####.st####.k####.com/000/01/00/43/10005b065781ce258.jpeg
- c####.st####.k####.com/000/01/00/43/10005b0d1088a0ee7.jpeg
- c####.st####.k####.com/000/01/00/44/10005b068f8516fb7.png
- c####.st####.k####.com/000/01/00/44/10005b0b75dbea88b.jpeg
- c####.st####.k####.com/000/01/00/44/10005b0bb2e620fa1.jpeg
- c####.st####.k####.com/000/01/00/44/10005b0cf63c767cc.jpeg
- c####.st####.k####.com/000/01/00/44/10005b0f9ca257073.jpeg
- c####.st####.k####.com/000/01/00/45/10005b18f10012eca.jpeg
- c####.st####.k####.com/000/01/00/45/10005b23cf10bac31.jpeg
- c####.st####.k####.com/000/01/00/45/10005b2491cc26e35.jpeg
- c####.st####.k####.com/000/01/00/45/10005b28bdc868c66.jpeg
- c####.st####.k####.com/000/01/00/45/10005b28be83ded67.jpeg
- c####.st####.k####.com/000/01/00/46/10005b2ca03ece6a9.jpeg
- c####.st####.k####.com/000/01/00/46/10005b30acd40f606.jpeg
- c####.st####.k####.com/000/01/00/46/10005b30b2154b099.jpeg
- c####.st####.k####.com/000/01/00/46/10005b31d885f0268.jpeg
- c####.st####.k####.com/000/01/00/46/10005b32029749df1.jpeg
- c####.st####.k####.com/000/01/00/46/10005b32094e54d75.jpeg
- c####.st####.k####.com/000/01/00/47/10005b35cfb13d6b3.jpeg
- c####.st####.k####.com/000/01/00/48/10005b46ff1fea432.jpeg
- c####.st####.k####.com/000/01/00/48/10005b4717deac93f.jpeg
- c####.st####.k####.com/000/01/00/48/10005b484f18c430b.jpeg
- c####.st####.k####.com/000/01/00/48/10005b4866e5f273b.jpeg
- c####.st####.k####.com/000/01/00/49/10005b5a9719be10a.jpeg
- c####.st####.k####.com/000/01/00/49/10005b5fdd9fc0ab1.jpeg
- c####.st####.k####.com/000/01/00/50/10005b62ba3aee179.jpeg
- c####.st####.k####.com/000/01/00/50/10005b62bc7bcb584.jpeg
- c####.st####.k####.com/000/01/00/50/10005b654fac1042c.jpeg
- c####.st####.k####.com/000/01/00/50/10005b6550a0d8389.jpeg
- c####.st####.k####.com/000/01/00/50/10005b6552176d3ab.jpeg
- c####.st####.k####.com/000/01/00/50/10005b65538c032fe.jpeg
- c####.st####.k####.com/000/01/00/51/10005b6935dc12a70.jpeg
- c####.st####.k####.com/000/01/00/51/10005b695a8994e3f.jpeg
- c####.st####.k####.com/000/01/00/51/10005b6a596b08d0a.jpeg
- c####.st####.k####.com/000/01/00/51/10005b6aba06d37f6.jpeg
- c####.st####.k####.com/000/01/00/51/10005b6c049553371.png
- c####.st####.k####.com/000/01/00/52/10005b6cf57332e3b.jpeg
- c####.st####.k####.com/000/01/00/52/10005b712a750c951.jpeg
- c####.st####.k####.com/000/01/00/53/10005b7a776f4eff1.jpeg
- c.g####.qq.com/gdt_mclick.fcg?viewid=####&jtype=####&i=####&os=####&asi=...
- d.g####.qq.com/fcg-bin/gdt_appdetail.fcg?ico=####&op_appid=####
- m.k####.com/
- m.k####.com/WapConf-initAdCookie/?act=####
- m.k####.com/mh-1001502/
- m.k####.com/mh-1003094/
- m.k####.com/mh-1003637/
- m.k####.com/mh-1003694/
- m.k####.com/mh-1003701/
- m.k####.com/search/
- m.k####.com/user-login/?referer=####
- mcs.cdn.k####.com/css/weixingongzhonghao.css?1####
- mcs.cdn.k####.com/images/banner/1520581342-1.jpeg
- mcs.cdn.k####.com/images/banner/1520581643-3.jpeg
- mcs.cdn.k####.com/images/banner/1520581799-4.jpeg
- mcs.cdn.k####.com/images/banner/1520582009-5.jpeg
- mcs.cdn.k####.com/images/banner/1520582186-7.jpeg
- mcs.cdn.k####.com/images/banner/1520582310-8.jpeg
- mcs.cdn.k####.com/images/banner/1521800119-2.jpeg
- mcs.cdn.k####.com/images/banner/1526628609-6.jpeg
- mcs.cdn.k####.com/images/gift/1.png?1####
- mcs.cdn.k####.com/images/gift/2.png?1####
- mcs.cdn.k####.com/images/gift/3.png?1####
- mcs.cdn.k####.com/images/gift/4.png?1####
- mcs.cdn.k####.com/images/ico_chongzhi.png?1####
- mcs.cdn.k####.com/images/ico_dashang.png?1####
- mcs.cdn.k####.com/images/ico_fanhui.png
- mcs.cdn.k####.com/images/ico_fenlei.jpg?1####
- mcs.cdn.k####.com/images/ico_fenlei.png
- mcs.cdn.k####.com/images/ico_index_hover.png?1####
- mcs.cdn.k####.com/images/ico_jiami.png
- mcs.cdn.k####.com/images/ico_lishi.png?1####
- mcs.cdn.k####.com/images/ico_list.png?1####
- mcs.cdn.k####.com/images/ico_my.png?1####
- mcs.cdn.k####.com/images/ico_new.png?1####
- mcs.cdn.k####.com/images/ico_paixu.jpg?1####
- mcs.cdn.k####.com/images/ico_search.png
- mcs.cdn.k####.com/images/ico_shouchang.png?1####
- mcs.cdn.k####.com/images/ico_shouye1.jpg?1####
- mcs.cdn.k####.com/images/ico_shujia.png?1####
- mcs.cdn.k####.com/images/ico_top.png?1####
- mcs.cdn.k####.com/images/ico_yuepiao.png?1####
- mcs.cdn.k####.com/images/ico_zhuye.png
- mcs.cdn.k####.com/images/logo.png?1####
- mcs.cdn.k####.com/js/app-km.js?v=1.0.0?1####
- mcs.cdn.k####.com/js/dist/swiper.css?1####
- mcs.cdn.k####.com/js/jquery-2.1.4.min.js?1####
- mcs.cdn.k####.com/js/jquery.bxslider/images/bx_loader.gif
- mcs.cdn.k####.com/js/jquery.bxslider/images/controls.png
- mcs.cdn.k####.com/js/jquery.bxslider/jquery.bxslider.css?1####
- mcs.cdn.k####.com/js/jquery.bxslider/jquery.bxslider.js?1####
- mcs.cdn.k####.com/js/jquery.bxslider/jquery.bxslider.min.js?1####
- mcs.cdn.k####.com/js/jquery.bxslider/jquery.bxslider2.css?1####
- mcs.cdn.k####.com/js/wixingongzhonghao.js?1####
- mi.g####.qq.com/gdt_mview.fcg?posw=####&posh=####&count=####&r=####&data...
- mi.g####.qq.com/gdt_mview.fcg?posw=####&spsa=####&posh=####&count=####&r...
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/banner.appcache
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/banner.html
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/ad_logo.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/banner_close_b...
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/bannerbg02.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/bannerbg03.jpg
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/bannerbg07.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/close02.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/close03.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/download_icon....
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/download_icon_...
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/gdt_logo_black...
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/icon-ad.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/sdk_bg.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/tc-gdt-sdk-ope...
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/tsa_ad_logo.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/tsa_logo.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/js-release/20170821/b...
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/js/lib/require.js
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android02/images/tsa_ad_logo.png
- p####.tc.qq.com/qzone/biz/gdt/mod/android/AndroidAllInOne/proguard/his/r...
- pass####.k####.com/account/login?app_id=####&sign=####&t=####&back_uri=#...
- s####.jom####.com/push.js
- s####.jom####.com/s.gif?l=####
- s####.tc.qq.com/gdt/0/DAAHU5BAKAAPAAAuBbUaALAm-mP2Sd.jpg/0?ck=####
- thi####.q####.cn/qqapp/101341570/3ECFE7BA673B7651046B96A9ACFE7D75/100
- thi####.q####.cn/qqapp/101341570/463828E20B8B5F15CE58161CBC74EA74/100
- thi####.q####.cn/qqapp/101341570/5F109F48E8C7A25F8EAC5CD99B017B58/100
- thi####.q####.cn/qqapp/101341570/A5F0F21011453C8A1CC0F6C7DED3AFE3/100
- thi####.q####.cn/qqapp/101341570/CFD2C2E48082412D7B8E9EB1C864C1A1/100
- thi####.q####.cn/qqapp/101341570/E4248D90E44CBF24FE11BA5239C3042B/100
- thi####.q####.cn/qqapp/101341570/F4CA72A90A6A95EA901CD42003155C34/100
- v.g####.qq.com/gdt_stats.fcg?viewid=####&i=####&os=####&xp=####&gap=####
- www.k####.com/
Запросы HTTP POST:
- a####.u####.com/app_logs
- api.durianc####.com/video/v1/config.jsp
- api.durianc####.com/video/v1/info.jsp
- m.k####.com/comic-bask-1001502/
- s####.e.qq.com/activate
- s####.e.qq.com/click
- s####.e.qq.com/msg
- si.ei.senb####.com/EfF/deq/nrs/7eb6k
- si.ei.senb####.com/uJ/iHp/967el
- v.g####.qq.com/gdt_stats.fcg
- www.51bt####.com/apps/client/GetAppData8.php
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/.imprint
- /data/data/####/5ead7c1916e321af3ee0d7d6aa595238.temp
- /data/data/####/Alvin2.xml
- /data/data/####/ApplicationCache.db-journal
- /data/data/####/BuglySdkInfos.xml
- /data/data/####/ContextData.xml
- /data/data/####/GDTSDK.db
- /data/data/####/GDTSDK.db-journal
- /data/data/####/WebViewSettings.xml
- /data/data/####/_i1279589697.xml
- /data/data/####/_w1279589697.xml
- /data/data/####/bb054893612ec2111573b8574c9b08b8.temp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/com.uinixeea.jar
- /data/data/####/com.yujinwe.az.jar
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/devCloudSetting.cfg
- /data/data/####/devCloudSetting.sig
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/f_00000b
- /data/data/####/f_00000c
- /data/data/####/f_00000d
- /data/data/####/f_00000e
- /data/data/####/f_00000f
- /data/data/####/f_000010
- /data/data/####/f_000011
- /data/data/####/f_000012
- /data/data/####/f_000013
- /data/data/####/f_000014
- /data/data/####/f_000015
- /data/data/####/f_000016
- /data/data/####/f_000017
- /data/data/####/f_000018
- /data/data/####/f_000019
- /data/data/####/f_00001a
- /data/data/####/f_00001b
- /data/data/####/f_00001c
- /data/data/####/f_00001d
- /data/data/####/f_00001e
- /data/data/####/f_00001f
- /data/data/####/f_000020
- /data/data/####/f_000021
- /data/data/####/f_000022
- /data/data/####/f_000023
- /data/data/####/f_000024
- /data/data/####/f_000025
- /data/data/####/f_000026
- /data/data/####/f_000027
- /data/data/####/f_000028
- /data/data/####/f_000029
- /data/data/####/f_00002a
- /data/data/####/f_00002b
- /data/data/####/f_00002c
- /data/data/####/f_00002d
- /data/data/####/f_00002e
- /data/data/####/f_00002f
- /data/data/####/f_000030
- /data/data/####/f_000031
- /data/data/####/f_000032
- /data/data/####/f_000033
- /data/data/####/f_000034
- /data/data/####/f_000035
- /data/data/####/f_000036
- /data/data/####/f_000037
- /data/data/####/f_000038
- /data/data/####/f_000039
- /data/data/####/f_00003a
- /data/data/####/f_00003b
- /data/data/####/f_00003c
- /data/data/####/f_00003d
- /data/data/####/f_00003e
- /data/data/####/f_00003f
- /data/data/####/f_000040
- /data/data/####/f_000041
- /data/data/####/f_000042
- /data/data/####/f_000043
- /data/data/####/f_000044
- /data/data/####/f_000045
- /data/data/####/f_000046
- /data/data/####/f_000047
- /data/data/####/f_000048
- /data/data/####/f_000049
- /data/data/####/f_00004a
- /data/data/####/f_00004b
- /data/data/####/f_00004c
- /data/data/####/f_00004d
- /data/data/####/f_00004e
- /data/data/####/f_00004f
- /data/data/####/f_000050
- /data/data/####/f_000051
- /data/data/####/f_000052
- /data/data/####/f_000053
- /data/data/####/f_000054
- /data/data/####/f_000055
- /data/data/####/f_000056
- /data/data/####/f_000057
- /data/data/####/f_000058
- /data/data/####/f_000059
- /data/data/####/f_00005a
- /data/data/####/f_00005b
- /data/data/####/f_00005c
- /data/data/####/f_00005d
- /data/data/####/f_00005e
- /data/data/####/f_00005f
- /data/data/####/f_000060
- /data/data/####/f_000061
- /data/data/####/f_000062
- /data/data/####/f_000063
- /data/data/####/f_000064
- /data/data/####/f_000065
- /data/data/####/f_000066
- /data/data/####/f_000067
- /data/data/####/f_000068
- /data/data/####/f_000069
- /data/data/####/f_00006a
- /data/data/####/f_00006b
- /data/data/####/f_00006c
- /data/data/####/f_00006d
- /data/data/####/f_00006e
- /data/data/####/f_00006f
- /data/data/####/f_000070
- /data/data/####/f_000071
- /data/data/####/f_000072
- /data/data/####/f_000073
- /data/data/####/f_000074
- /data/data/####/f_000075
- /data/data/####/f_000076
- /data/data/####/f_000077
- /data/data/####/f_000078
- /data/data/####/f_000079
- /data/data/####/f_00007a
- /data/data/####/f_00007b
- /data/data/####/f_00007c
- /data/data/####/f_00007d
- /data/data/####/f_00007e
- /data/data/####/f_00007f
- /data/data/####/f_000080
- /data/data/####/f_000081
- /data/data/####/f_000082
- /data/data/####/f_000083
- /data/data/####/f_000084
- /data/data/####/f_000085
- /data/data/####/f_000086
- /data/data/####/f_000087
- /data/data/####/f_000088
- /data/data/####/f_000089
- /data/data/####/gdt_plugin.jar
- /data/data/####/gdt_plugin.jar.sig
- /data/data/####/gdt_plugin.tmp
- /data/data/####/gdt_plugin.tmp.sig
- /data/data/####/gdt_suid
- /data/data/####/index
- /data/data/####/mscom.xhxm.media.e.xml
- /data/data/####/sdkCloudSetting.cfg
- /data/data/####/sdkCloudSetting.sig
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/update_lc
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/z3967eb6c.xml
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/xhxm
Другие:
Использует следующие алгоритмы для шифрования данных:
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS7Padding
- DES
Использует следующие алгоритмы для расшифровки данных:
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS7Padding
- DES
- RSA-ECB-PKCS1Padding
Осуществляет доступ к информации о геолокации.
Осуществляет доступ к информации о сети.
Осуществляет доступ к информации о телефоне (номер, imei и тд.).
Осуществляет доступ к информации об установленных приложениях.
Добавляет задания в системный планировщик.
Отрисовывает собственные окна поверх других приложений.
