Android.Triada.2535

Техническая информация

Вредоносные функции:

Выполняет код следующих детектируемых угроз:

Android.Triada.440.origin

Сетевая активность:

Подключается к:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) www.y####.cn:80
TCP(HTTP/1.1) cgi.con####.qq.com:80
TCP(HTTP/1.1) pi####.qq.com:80
TCP(HTTP/1.1) al####.y####.cn:80
TCP(TLS/1.0) waws-pr####.vip.azurewe####.####.net:443

Запросы DNS:

al####.y####.cn
cgi.con####.qq.com
code####.azurewe####.net
pi####.qq.com
www.y####.cn
www.zga####.cn

Запросы HTTP GET:

al####.y####.cn/author_cover/02e8c892428403263036aa1769ccc145.png_s80png
al####.y####.cn/author_cover/224a19226a36a6a852a26242184ff0f8.jpg_s80png
al####.y####.cn/author_cover/23676e594bd057106bb1908048397dbc.png_s80png
al####.y####.cn/author_cover/6407be0e54fb2d6464ca24d4f8fcc687.jpg_s80png
al####.y####.cn/author_cover/729323cbb4c35702034acb27115f5dd1.gif_s80png
al####.y####.cn/banner/1b282b1050dca48c6009486acd332cdf.jpg_mbanner
al####.y####.cn/banner/6e92bde44aa4f50f82d315b9b6c3ec98.jpeg_mbanner
al####.y####.cn/banner/79482ad0554203a078c3b35752e08c00.jpg_mbanner
al####.y####.cn/banner/7ff19a65ad8056abf0aae42ac8878b11.jpg_mbanner
al####.y####.cn/banner/b79bfe9d53e325ad644daf4f4e67ce93.jpg_mbanner
al####.y####.cn/banner/b9042a509576300fdd3478437b7fed82.jpg_mbanner
al####.y####.cn/cover/03458e3dcb9f84f25f1ab4d4b0d34363.jpg_w360png
al####.y####.cn/cover/03458e3dcb9f84f25f1ab4d4b0d34363.jpg_w680
al####.y####.cn/cover/0e1994a41b5ef09683d1c16eda87a693.jpg_w360png
al####.y####.cn/cover/15b2ff290157b50c9755e9f517e31a07.jpg_w680
al####.y####.cn/cover/30fa04d3dfc6f506e185efcd03856d97.jpg_w360png
al####.y####.cn/cover/3ea8460f525c95db2d8d4cb17bb8bca3.jpg_w680
al####.y####.cn/cover/4e801a7d8ebd699ed68656488e9894cb.jpg_w680
al####.y####.cn/cover/647b4d0fd46fb39cdd73ee61705698d5.jpg_w680
al####.y####.cn/cover/65f1006f49b27b81dd7cc1914f10a1b9.jpg_w360png
al####.y####.cn/cover/67abcb653cf2e3ff28f87ff7f56ed33f.jpg_w680
al####.y####.cn/cover/6f889aabafaf4c0668703ba2329cb5cc.jpg_w360png
al####.y####.cn/cover/806a8a000ef09859e6087457cf570ca6.jpg_w680
al####.y####.cn/cover/b498d00763cc6042892574e99f0819c9.jpg_w360png
al####.y####.cn/cover/c49297d6df40b82bbed7ad6a044a7510.jpg_w680
al####.y####.cn/cover/cae031b599b256938d254eb893bec6a6.jpg_w680
al####.y####.cn/cover/f7ff987a75c675dc45b5b6e2e93dbea3.jpg_w680
al####.y####.cn/news/04c0ecf37c23989034534c26fff20d53.jpg_wh180png
al####.y####.cn/news/0736927d68da7a6e11ec5738af01c187.jpg_wh180png
al####.y####.cn/news/0945680700b678231028940c18e9a4e5.jpg_mw680png
al####.y####.cn/news/0a6f579c9f231aea2481200aa366b54f.jpg_mw680
al####.y####.cn/news/0e9374c599cd4351b294e2a361b667c3.jpg_mw680
al####.y####.cn/news/13738fc22f19a22833f67ef4d16cb2ce.png_wh180png
al####.y####.cn/news/1425b16cca6bf35b58ef58544c9f2c2a.jpg_wh180png
al####.y####.cn/news/15537d948402fa461fc5d7de04d5dbd9.jpg_wh180png
al####.y####.cn/news/19027167a7efe39070c8c0ccaa011096.jpg_wh180png
al####.y####.cn/news/2594731efb9a022e2843d19ab15034c3.jpg_wh180png
al####.y####.cn/news/2a594dc90a46f1b065e6229aad376d5d.gif_wh180png
al####.y####.cn/news/38e22207e821805ff02778e9d79d0b6e.jpg_mw680
al####.y####.cn/news/39ba04f36b41ced13d3d20ace0139a19.jpg_mw680
al####.y####.cn/news/39ba04f36b41ced13d3d20ace0139a19.jpg_w180png
al####.y####.cn/news/3bbe590725888e2117f95fb2703dcedc.jpg_mw680
al####.y####.cn/news/40b68aa798f0a31cac17d9de377d3ea6.jpg_wh180png
al####.y####.cn/news/43a5536b0dc1c4738ba9b85b506d7ea0.jpg_mw680
al####.y####.cn/news/475b777634381e5d0c279407c245dfa0.png_wh180png
al####.y####.cn/news/4d0d30c8420f341ea59aa7f2f0a802dc.jpg_mw680
al####.y####.cn/news/4f1c3470ba8d24529770c694a4634d0f.jpg_wh180png
al####.y####.cn/news/52d9e86876069f8b32580d016296c966.jpg_wh180png
al####.y####.cn/news/5e59f23d4268590f63ebfb092c6ff224.jpg_wh180png
al####.y####.cn/news/5fc298c2df5866e09141df77b2e9df23.png_w180png
al####.y####.cn/news/604804a979349df94b779d71ca187c7a.jpg_mw680png
al####.y####.cn/news/620f6c3908ecac66bf00ab78491e5922.jpg_wh180png
al####.y####.cn/news/664c166e0d53939e3858cf842a261229.jpg_mw680png
al####.y####.cn/news/6ee110b4f69ccf1155b8d750d939fb31.jpg_mw680
al####.y####.cn/news/6f4b97f920568cfc1ae5f7ad0837e492.jpg_wh180png
al####.y####.cn/news/730470719144276375aed7b7916262b6.jpg_wh180png
al####.y####.cn/news/79b7c1c69e3631c0eb85c313c35b1fe9.gif_wh180png
al####.y####.cn/news/7d866ee2464a6b9399fb454bb2d92334.jpg_mw680
al####.y####.cn/news/7e4a869b69d0efc41d8770e4d91c2ea0.jpg_wh180png
al####.y####.cn/news/81aeacd09f4d345d61c29eb8e904a65d.jpg_wh180png
al####.y####.cn/news/890272738c4812cc842de8ac6ad0d834.jpg_wh180png
al####.y####.cn/news/895bde15fa8185a33780f286eaed5c2a.jpg_wh180png
al####.y####.cn/news/89745f398c4e52669ffa2b10bd778627.jpg_wh180png
al####.y####.cn/news/8b2158769a80a1c1739ad55f8ae2642f.jpg_wh180png
al####.y####.cn/news/8bfaa15a137dc4769ba532cdcaae3540.jpg_wh180png
al####.y####.cn/news/8e5486a4850d191d02acef997b79d7a0.jpg_wh180png
al####.y####.cn/news/93ad5e1cd9fa0570765e10e904dc68ed.jpg_wh180png
al####.y####.cn/news/956070edec6db5f342d3e47eae51c518.jpg_w180png
al####.y####.cn/news/9b5ef659d7c6ff0dcaf250bcb589ebfe.jpg_mw680
al####.y####.cn/news/a1a1a45d41186d6f1230eaa465d60ff8.jpg_wh180png
al####.y####.cn/news/a4bd254e6cec93725b88188757ad8428.png_mw680
al####.y####.cn/news/a655b66fac67646a1c59edfae61645d9.jpg_w180png
al####.y####.cn/news/a8f7b7f9f3445cfbc169b8f30b88c899.jpg_mw680
al####.y####.cn/news/aadf7f436dbd920db2bbf662efafd516.jpg_wh180png
al####.y####.cn/news/acb4e9b6ff29569abac6f6101daf0cb5.jpg_wh180png
al####.y####.cn/news/add5dec1d0581dd7b5c12f52e4af90f3.jpg_mw680png
al####.y####.cn/news/addb53bb04ff303e66c5861ce170ec62.jpg_w180png
al####.y####.cn/news/addb53bb04ff303e66c5861ce170ec62.jpg_wh180png
al####.y####.cn/news/b2d4507c7c88a53e951d76717ab189ed.jpg_mw680
al####.y####.cn/news/b2d4507c7c88a53e951d76717ab189ed.jpg_wh180png
al####.y####.cn/news/b4c5b21e4bf4a4218883139e7309ba30.jpg_wh180png
al####.y####.cn/news/b688702f9e8fe86510663163193ec108.jpg_wh180png
al####.y####.cn/news/b7cc60ac3a1f6ffed9bb4cd18ec65451.jpg_wh180png
al####.y####.cn/news/b7eb7e9d4c5e172803abe59979b91cf6.jpg_mw680png
al####.y####.cn/news/b806aea92b878ef92a6b85fa79f9b9be.jpg_mw680png
al####.y####.cn/news/b9f09b992022392cddac95edb142b646.jpg_wh180png
al####.y####.cn/news/ba5a5326366f55e9cc78bbcf10ca3aad.jpg_mw680
al####.y####.cn/news/ba68d4189efa106135fc631b8d1229c8.jpg_wh180png
al####.y####.cn/news/bb557f3fb4510f445cee00e9ab8b2ebf.jpg_wh180png
al####.y####.cn/news/c17d0c23610e9a626123ff744753b6ec.gif_wh180png
al####.y####.cn/news/c638415531b2eb756bd89edf16306f02.jpg_wh180png
al####.y####.cn/news/c9ee2db402c3521e25611abb8c64d734.gif_wh180png
al####.y####.cn/news/cb1d2747fec4a430471fbfdb6d52eb82.jpg_mw680
al####.y####.cn/news/d3ac56ab0192f05dcf59e2de64f13111.jpg_mw680png
al####.y####.cn/news/d415fb810a1f7006fc3e710f789a6f1e.jpg_wh180png
al####.y####.cn/news/d42be88d8ae5352f1fd9680d8c8e9312.jpg_wh180png
al####.y####.cn/news/d6b6ac07454f8023b5d66300fde051f9.jpg_mw680
al####.y####.cn/news/d7b4e03aec904b0ecba6e7f2336806c0.jpg_wh180png
al####.y####.cn/news/d8a9308363b3da195ce7151abb89376e.jpg_wh180png
al####.y####.cn/news/dfea3eaf6429b644b8d962cbd6237419.jpg_wh180png
al####.y####.cn/news/e16e238aa4bf0e7450526614dea764ba.jpg_wh180png
al####.y####.cn/news/e4a5afed81a18b81f0ce447fdd9a7c8d.jpg_wh180png
al####.y####.cn/news/e965ceaa7c1c0fd2c02463064b985864.jpg_mw680
al####.y####.cn/news/e9a7b56c503a79217f42c83e1cf48981.jpg_wh180png
al####.y####.cn/news/eae953ae18bc02cfc8fb4eee9ca062f7.jpg_w180png
al####.y####.cn/news/ed8b4fbe42cd0497982f2134b5f5b6fa.jpg_wh180png
al####.y####.cn/news/f49f0164cd9cf449e16fd439258a283a.jpg_wh180png
al####.y####.cn/open_screen/774187555c6035ffa325bfe7a6321dec.jpg_mw680
al####.y####.cn/static/dist/images/author.png
al####.y####.cn/tags_cover/04376329ce3f56088b3a631dafc4f7bc.png_wh180png
al####.y####.cn/tags_cover/05d70cf168d94115f7ab885aee04060a.jpg_s80
al####.y####.cn/tags_cover/07a0067bbc2b6cc4912572bc46c9443c.jpg_s80
al####.y####.cn/tags_cover/0f7343440f63bc8e68370abf50b457d3.jpg_wh180png
al####.y####.cn/tags_cover/148acc416e1923ffb9b465f7d6a27e57.jpg_s80
al####.y####.cn/tags_cover/2560e26e7b2fcaefa5d2ba95fd405b70.png_s80
al####.y####.cn/tags_cover/3d8ad4921ca7dcb08b9e6b9a0b06403d.png_s80
al####.y####.cn/tags_cover/3e0575d595a1d098493005c9ab0fefec.png_s80
al####.y####.cn/tags_cover/4649d5426e25899c11a98f484b05c65f.jpeg_s80
al####.y####.cn/tags_cover/4649d5426e25899c11a98f484b05c65f.jpeg_wh180png
al####.y####.cn/tags_cover/58b8471705d7c6aa05faf5e54440a8a3.png_s80
al####.y####.cn/tags_cover/59ad62fbb7a315c56e80214ff78d1e8e.jpg_wh180png
al####.y####.cn/tags_cover/709fadde7a39d04c71ff1be24cb30c2b.jpg_wh180png
al####.y####.cn/tags_cover/71039662c0e120988b7d5655a7def633.png_s80
al####.y####.cn/tags_cover/7a83ed9c79009c0528907ce7053f88cb.png_s80
al####.y####.cn/tags_cover/89f6b6a8595d2b011e45a58d3f70fb2b.jpg_s80
al####.y####.cn/tags_cover/a2ebed5cb04b1db871eb5b1655b06b05.jpg_s80
al####.y####.cn/tags_cover/ab8c0f39f0a51c5432703def09565781.jpg_wh180png
al####.y####.cn/tags_cover/c51e44a05da58014b11838b33b14cc51.jpg_s80
al####.y####.cn/tags_cover/d352801fd9413d5926dbc9616d747355.jpg_s80
al####.y####.cn/tags_cover/d56e7b7df6ecfbaf4c68eb056eb2a4e9.jpg_s80
al####.y####.cn/tags_cover/d742a242ddc2ec5b53f4f0298d7d2887.jpg_s80
al####.y####.cn/tags_cover/f40bac3e611d759ec9993a287a32dbd9.jpg_wh180png
al####.y####.cn/topic_cover/1a29b7686345ea7fc53576c87eda3503.jpg_w360png
al####.y####.cn/topic_cover/25607aabdf093b9262616df3f91b5104.jpg_w360png
al####.y####.cn/topic_cover/4785b9cba4cdf66cae064d2712240a47.jpg_w360png
al####.y####.cn/topic_cover/665fa9837294db87cb4d3a432cca6e52.jpg_w360png
al####.y####.cn/topic_cover/7444ce9be9d4eb5bb92c072f56cd3f5d.jpg_w360png
al####.y####.cn/topic_cover/77f35bd5cee476964a7dbc36295a0a3a.jpg_w360png
al####.y####.cn/topic_cover/7a79f357cf2304f43d86275d89d1853e.jpg_w360png
al####.y####.cn/topic_cover/8868be7fe7dc121953d5845474824b4d.jpg_w360png
al####.y####.cn/topic_cover/9abe72694b1586071128044c3e9e623e.jpeg_w360png
al####.y####.cn/topic_cover/ac79e72acfbb9e0853ae1da04f90f36a.jpg_w360png
al####.y####.cn/topic_cover/d3f8d73041499ef43d5e23f78a0e79a4.jpg_w360png
al####.y####.cn/topic_cover/d8ccbb7a56d998672a648d28bf4411c2.jpg_w360png
al####.y####.cn/topic_cover/e132e1af7a6a93a231de653fe3c6f5c3.jpg_w360png
al####.y####.cn/topic_cover/e17c9f06e6b6d24a44d58ca608434a33.jpg_w360png
al####.y####.cn/topic_cover/f06f52f6e2921fd6fc9e41a3e9618873.jpg_w360png
al####.y####.cn/topic_cover/fcd7227628d7f3d6f5fe437f1743d3a5.jpg_w360png
al####.y####.cn/url_cover/5fc298c2df5866e09141df77b2e9df23.png_wh180png
al####.y####.cn/user_avatar/4e79105043a51ed9660622fac8b00c39.jpg_s80
cgi.con####.qq.com/qqconnectopen/openapi/policy_conf?sdkv=####&appid=###...
www.y####.cn/app/account/get_login_state
www.y####.cn/app/home/get_home_docs_by_page?page=####
www.y####.cn/app/news/get_news_by_page?page=####&tag_id=####&limit=####&...
www.y####.cn/app/news/get_news_by_page?tab_id=####&page=####
www.y####.cn/app/news_comments/get_comments?page=####&news_id=####&order...

Запросы HTTP POST:

pi####.qq.com/mstat/report
www.y####.cn/app/home/init?v=####

Изменения в файловой системе:

Создает следующие файлы:

/data/data/####/.jg.ic
/data/data/####/0124bcedeac7e2a0b908280ff63d99e367e6967ca396193....0.tmp
/data/data/####/030920f51fc34dd0c4021805852c35ac7d605ae5daf9bd8....0.tmp
/data/data/####/062352313d64172ac1b637a0a13574bc9e33c17a220462f....0.tmp
/data/data/####/07b17019a9bbc699d76b7f97b8c2e730d6636bb759a9fe6....0.tmp
/data/data/####/0826e69118a85ee016a2fc1576dde3f097e431ccb9aedde....0.tmp
/data/data/####/0b6fcdfb4a4a538e61dd6e88c49820dade4efee323ab1a6....0.tmp
/data/data/####/10aeeac6393e10451549784c8b8431432d7a08d3cc055e2....0.tmp
/data/data/####/10cb753b9aafe1ed85ed05a9c8c3689544b176cd710cbe5....0.tmp
/data/data/####/10ff311027210c85d2a9ce6b70b36b47dc71ff89cb38ad6....0.tmp
/data/data/####/141f2f098d90e907cd83e8a0a80bc71526d602240702b2a....0.tmp
/data/data/####/163de87756fe54a6e78768c77ef315b6421ac2863d88f32....0.tmp
/data/data/####/1a765634e7b548b907d02211418171f81b4ba73b941f773....0.tmp
/data/data/####/1c71c53aa70f6f6ff2f346f546fec93f5eb46da028485e6....0.tmp
/data/data/####/1da7126b4d90e9ded78c34f670ca3108ea3c01b7f77818d....0.tmp
/data/data/####/1fd8d2549b97484c692f73114a913c822a9b31d3b036424....0.tmp
/data/data/####/213036c43d088fee41be2bac8f5bd5fe59bda92b2e76f16....0.tmp
/data/data/####/232b11a451bae9033badf6af152b361db17e35c1be3b0b7....0.tmp
/data/data/####/237dae956b3e7a15df85a543cf7c57fff5f75c2bc1a1c96....0.tmp
/data/data/####/23d5d72b51fdf1e22d7a6b8bfca748b03c056ce1ecd4286....0.tmp
/data/data/####/26db50ae31c7f57424d8bafe23b126833c795654aa7989e....0.tmp
/data/data/####/272f20260294e471c5e5a87b9e57d7b6b526fe917112a8d....0.tmp
/data/data/####/2823eb9d5d20de12bf52db68f2f1cd3e3787a9aee3064f7....0.tmp
/data/data/####/2974f2b13fea5b8d1f31773e97667cfad0a6b06e298de8f....0.tmp
/data/data/####/29efaef3c194d2e75b889ee72abbd5403c14e7ef03f3a9c....0.tmp
/data/data/####/2b51dad45fa5d36480bff97d1497785ec957d1144cd2da1....0.tmp
/data/data/####/2c5f0ed5cac4cec3ba3497e9ea5be41de869169ae3d2c9d....0.tmp
/data/data/####/2eb40a51b55880ccb3b07ef0f8641fd4062c6489e1d550e....0.tmp
/data/data/####/30fce553a92a115581fe754ff242cb18b6bb3f16facf6bd....0.tmp
/data/data/####/3373ab79a224df8d320088a092a2380074b7749b249463a....0.tmp
/data/data/####/34bb904f794757e3ac80b5bc6153edce5baae821efa3a0e....0.tmp
/data/data/####/369699e29ef15a24f4720125f7dfbb5ae3a36b751a09f89....0.tmp
/data/data/####/38613bac54e45f5591a78a3d3e2b7d1868a2cbd12ca4d48....0.tmp
/data/data/####/38fd5bdf638693e8b258d8eabde5fac8fae07255390b4b1....0.tmp
/data/data/####/3ba3747930e208b69f336f4f067cf6a14caad276563adb8....0.tmp
/data/data/####/3bd75c3eb512185f9dc1183fe979d2e32929d130b144fc6....0.tmp
/data/data/####/3cd95c1459af8747d82b803aada1c3e041f537808fb24c1....0.tmp
/data/data/####/3d38ac7874c2f2b1be0de247bdcfb661ead6ae01edbee88....0.tmp
/data/data/####/3e4904501dac8d52e9bb05c78d47da307715fd5eaf48ea9....0.tmp
/data/data/####/412007330b80e5ccf97faf37a4cbf23e53af14576ba787c....0.tmp
/data/data/####/4411f25fa4578bf1b184543a4aad11a5318985786a35b71....0.tmp
/data/data/####/47d9d0d869e6659ecab53beeb7907088e15ca9dba7abb1c....0.tmp
/data/data/####/4a3a47b719e71630850237840b625fc128f859def67877c....0.tmp
/data/data/####/4b72ea9f02b1bae1bb8e68edad8ab6839cb3904648f64ce....0.tmp
/data/data/####/4d73707449c785074ee7707467db70f9c63586fb7a6bdd6....0.tmp
/data/data/####/4dea38459bb60a3a22ce7b2e3ec1b68f7654a63fc5fe1b1....0.tmp
/data/data/####/4f9010207b03640206af71c1d92e533443c1fe80f466797....0.tmp
/data/data/####/5471769f21cfe4e45ce2acf94ef576d83175e6dc6b415c7....0.tmp
/data/data/####/54e5c7c4e0659bd3e02f1bd7fb5c6033d4ee0fd8be2aa8e....0.tmp
/data/data/####/559bd40b6500a176159a52083f5eb2992681c0da0f5e3e2....0.tmp
/data/data/####/55d2283d4f3fa594a6e72292076becb80d457c5d84698ed....0.tmp
/data/data/####/56613a2d41add7956e7ac89ca6ab5342a38eebd1d4a543a....0.tmp
/data/data/####/59fa42c70d6c82347a1888ede664f354a7ce8b967f5f5bf....0.tmp
/data/data/####/5a2492f8037fd8b76c695a6154e03c161c87012f75008b8....0.tmp
/data/data/####/5a3b0e593fe2ef451e625a360563cd4e724da18b6d97631....0.tmp
/data/data/####/5abf7b8f846bb482e1882ebb12618a1fc4176aec9ffb958....0.tmp
/data/data/####/5b733b0a2a4e344ea33a563419c5b57e3b60079267c1d79....0.tmp
/data/data/####/5b8e8d06781cc215dc78241bfca25c9c3cbe3dee68a3621....0.tmp
/data/data/####/5ba504ae7907d0a7fe2bb7f780110f44620647aa28ccfb3....0.tmp
/data/data/####/5c445b8f556191bca17673aba4d3f1966106d3e3b037d2f....0.tmp
/data/data/####/60e9ea82607e445d3142d867b597b65a55d2604744b62c4....0.tmp
/data/data/####/6541fbcf3f5b372e86615dd552cae06539468072ba45b20....0.tmp
/data/data/####/6576e099c62304207492727a91c650ea74a321c5b0a0cb9....0.tmp
/data/data/####/6908bff40eb72d9332260a678ede58d844c7e381dccdbe9....0.tmp
/data/data/####/6af779c5a1d4f1ba608b57bef4fad1ee55c2a3c9d92d1ac....0.tmp
/data/data/####/6d3046d639d0734011f8a1f53a2ed79fb92d83a11072610....0.tmp
/data/data/####/6eac2821881de41b243044595ae3dcd7d9ce6338aa3e450....0.tmp
/data/data/####/6ebddda97788826dbf2aa451060a9eca0d4b1619308fac1....0.tmp
/data/data/####/6ee798db2f38cceacdcb69d945c59887a5e100b009a008b....0.tmp
/data/data/####/6f405b0fefd47aa2c6dfe72a6791b0b8908a0e6fe60d71e....0.tmp
/data/data/####/707f3ef336c9d0cde342ff7527d66400134fbc2347256cb....0.tmp
/data/data/####/715091771f5738e617a75f9f29fd28c8c732550c01f5dfc....0.tmp
/data/data/####/73fa1cc311e03ba1436c93ba5489c9f32aca9d50a290926....0.tmp
/data/data/####/761bd448e74a4cc6fd0eb3a6cbfa88c06a4fe5aab487854....0.tmp
/data/data/####/7b8eaf6da18f3f5b1d855207f9247362516eb5000b11b5c....0.tmp
/data/data/####/807fecfc1f75fa1e8cc6352a79137f9bb120e52cd1fc4dc....0.tmp
/data/data/####/824ee204ff2ba4809dfb304a384a30e6728bf2fb38a9df2....0.tmp
/data/data/####/836f75efffcf36c1142720c29a5ac18ddb66070acdba206....0.tmp
/data/data/####/86cbfe009f8ec3955691259836721e940d1d9433a8cae7b....0.tmp
/data/data/####/889d5a3c0f6fe18c8bfeddae1db6074b6b2551b76b09efe....0.tmp
/data/data/####/89822846d149dc7000c67c9d11483c4b8e90d7ce2dfa4a2....0.tmp
/data/data/####/8b3ea488ce6434b525a86b3b1c2910608a9dc67a9e0169b....0.tmp
/data/data/####/8be848523efc73077bad24528e8ae81645461665fb1926c....0.tmp
/data/data/####/8e63910986c6b02db4af77b6262b3e0c36fce6c4feeca98....0.tmp
/data/data/####/8edcf56d6963fe45dfeb35f88d04d2bf39c3cacc3808c90....0.tmp
/data/data/####/94859fc452a28d8a1c6cfa2f30f0a30cce708ae5cc541fc....0.tmp
/data/data/####/995400e9eec7a682f0f4ae5a701d8686c4ba9df1b042893....0.tmp
/data/data/####/9eb69156ada8f0163467c98a2ed85d54c89df1dabcca6b0....0.tmp
/data/data/####/CodePush.xml
/data/data/####/HwRmhUqh3DG0SGME62poO0GSGS0.-1872171129.tmp
/data/data/####/J0TWXs56Qkc2EA6khcic5i55vuQ.-1195653424.tmp
/data/data/####/MultiDex.lock
/data/data/####/RKStorage-journal
/data/data/####/T5U3JgaCaTB5C6dZaa_uopLp-oA.1837428387.tmp
/data/data/####/a10f5c6f4fe829ed2c9188e878c00da2c148bc87f5e7026....0.tmp
/data/data/####/a263f09799e4162a5ce659d8e6a60b37c836c371cc87262....0.tmp
/data/data/####/a8e0edd316af78cf3175589fadef1ee1939863052f95e82....0.tmp
/data/data/####/aba85e89ec1f1029dc921074f845c9cc6e69991ce900261....0.tmp
/data/data/####/ac2e9f01e0e3d248f41901239fd9a88bd59e14523546e38....0.tmp
/data/data/####/ad3301b449cb3e207caced71a3bcf40ee7657abae6ce9d0....0.tmp
/data/data/####/b0ac09b8bc8e278b4460798b1ae5b1c906bdb6bf9b4b5f6....0.tmp
/data/data/####/b22056519e431dbf97346b0bb4ad6153600df3d1660472a....0.tmp
/data/data/####/b22e72b8c8db62019732046d8e16c5a02abfa1fa91a5440....0.tmp
/data/data/####/b3e10fc7f82653bb593f93a291021ff832ccb3da0af5555....0.tmp
/data/data/####/b644f6d7c7885ee5ddaebd53f55bc6da41a8a870a4f50d8....0.tmp
/data/data/####/b7d8ae475690b00e91312bd981300a9714bc7cc4e15cd95....0.tmp
/data/data/####/b81cf89f04cee7d0b0a89446d88682c6d3bbf1776bcba66....0.tmp
/data/data/####/b98af3560f8891f94b0ef5118f89a132110ab874e7f515e....0.tmp
/data/data/####/bae1fadf1b625e11bae18ed6e5dd6542fa8447ffb666db9....0.tmp
/data/data/####/bda5bb73aa6ed0bea2c5924e430f8d6212b283b4bc1d70f....0.tmp
/data/data/####/bde6c51e6ec2924ef8d53d2e376a12386afdd4e6d8d8982....0.tmp
/data/data/####/bf45535a56e9579b0b486a66936844709e2b37ad6b3fef1....0.tmp
/data/data/####/c0eb51896ee0005dd9425bf05ebe444a7d345a33901f11f....0.tmp
/data/data/####/c18687d139e4f8df64b5198e05755bc68a4bb3eb1e48372....0.tmp
/data/data/####/c521f2f51d3c7d5ef644c92d0b791bcf7c0005333f4e3a3....0.tmp
/data/data/####/cc8da2d7e2021233eebb9b5878f41d7b5f0ec6ce3e2ff1b....0.tmp
/data/data/####/cn.jpush.preferences.v2.xml
/data/data/####/com.apkpre.sajhciasc_preferences.xml
/data/data/####/com.tencent.open.config.json.1106928426
/data/data/####/cycuUeiLGoLbzvt7tdFpSN_D7sE.-1267636179.tmp
/data/data/####/d05acee30ec9e6ba6a91bf24d9048f5ab3122227ec7b3e7....0.tmp
/data/data/####/d06d72179964616e462e2eece34ece71d74b9e01a3c73f9....0.tmp
/data/data/####/d2e1da9509a48d1743458a1cd1e472077d69a9882b76149....0.tmp
/data/data/####/d38a4f270b173377e9142e4c498f7677cb73e03ffece4fd....0.tmp
/data/data/####/d3b9c0dab52cac1f85dcec1a30f47431ab83be6e94e2b12....0.tmp
/data/data/####/d56aff5894791c9beae34c35707514e1fb3a023b8c6fdb7....0.tmp
/data/data/####/d596f8d6ea98e9f2e6698e73f00aafa5b51b19db75e04df....0.tmp
/data/data/####/d5e92dac95c164380b72a0e313a17c2076ff24c50fb4ff3....0.tmp
/data/data/####/d902d16347f3fa1c9f49faf5123173a625409552da79844....0.tmp
/data/data/####/d9c6a5c59a17fc48b7cced564322a88c98a54c2abfcab9b....0.tmp
/data/data/####/dc7f0d3b50c5b5a64d685f3c4cbf98c0bda872ddd9c85b6....0.tmp
/data/data/####/ddd770af3568c9e3c5c2eaf5c92e490e6b899f90450dff9....0.tmp
/data/data/####/deb1695f00d6e110f5eb0bd5505104d5c26fb65b06de689....0.tmp
/data/data/####/debc0253e6a9cf995d9af99be1b143f7c22315c9909fe9b....0.tmp
/data/data/####/def49b654c57ae21b2b521798b1be19e363a72b689c85ab....0.tmp
/data/data/####/df0471974bebffdac548b4f96b7b1b553388cfcf6045a4d....0.tmp
/data/data/####/dfbd7ad0a279fbad9dcf6ecd2cd3701d5bfb764c9b89125....0.tmp
/data/data/####/dso_deps
/data/data/####/dso_lock
/data/data/####/dso_manifest
/data/data/####/dso_state
/data/data/####/e6fe4783b84ebb9f47e4afed2070e49decf3fcebaebe4a4....0.tmp
/data/data/####/e897436c83c5e034d0eff4a3cc65a4155ce7ef798d2fbf4....0.tmp
/data/data/####/e977f944a636760a7c3fa6e815d16b2b8f568fc076250b7....0.tmp
/data/data/####/eZw9ZpF4xCdqtkZrMaM4FU89SbE.1490494812.tmp
/data/data/####/eaca6a7f140e05171974533d3ddb5b49781d12052a0520c....0.tmp
/data/data/####/ed1a4f1f7d369fcd0fb9813086595e46f1b6e60a2db464c....0.tmp
/data/data/####/edb5f7d07b74f19195f387df724d64397db3aaf926339d6....0.tmp
/data/data/####/ee26eefe7afdf6d082f061ca358c0ed733931a22f67c035....0.tmp
/data/data/####/f00492324b6f602b96c7ecc2d87062af9db7678ca4c7989....0.tmp
/data/data/####/f084a71b2db6e925f66f666e0f9dd1eed0028899607bb31....0.tmp
/data/data/####/f36b3478c3361d3ec5a0875ff49b8972431306fdd11942a....0.tmp
/data/data/####/f6bfd5427902a7c7d1258cb2fbe3c93ce4d979e0d8a7794....0.tmp
/data/data/####/fb803e8d709661b4dac5658d73ab24b7612445c438941a3....0.tmp
/data/data/####/fc58b83460ba6ef0857bf9fe406c465abe9f0e5c875ad65....0.tmp
/data/data/####/fdf31a1b32eda8e137bf523d7d9734abc5f15afa2955583....0.tmp
/data/data/####/fead30273127b4f7a84dff268295f839c252abe81e22ab6....0.tmp
/data/data/####/journal.tmp
/data/data/####/libjiagu-1248929539.so
/data/data/####/multidex.version.xml
/data/data/####/mw9INaJPDiF1PeOcUGh-ewVQgis.-958563200.tmp
/data/data/####/qkcxl6Oms4FSOVSRQT4ycw6JI_I.88636414.tmp
/data/data/####/rE_l3VxgRV55AN6ekG3ADVLWDYg.-541249177.tmp
/data/data/####/syqplRBCj3kC0jBj9Lq2bbWecUM.1112670533.tmp
/data/data/####/tencent_analysis.db-journal
/data/data/####/webview.db-journal
/data/data/####/webviewCookiesChromium.db-journal
/data/data/####/webviewCookiesChromiumPrivate.db-journal
/data/media/####/.nomedia

Другие:

Запускает следующие shell-скрипты:

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq

Загружает динамические библиотеки:

MtaNativeCrash
jcore123
libfb
libimagepipeline
libjiagu-1248929539
libreactnativejni
libyoga

Использует специальную библиотеку для скрытия исполняемого байт-кода.

Получает информацию о сети.

Получает информацию о телефоне (номер, IMEI и т. д.).

Добавляет задания в системный планировщик.

Отрисовывает собственные окна поверх других приложений.

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней