Техническая информация
Вредоносные функции:
Выполняет код следующих детектируемых угроз:
- Adware.Dowgin.14.origin
Сетевая активность:
Подключается к:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) d2.ireader####.com:80
- TCP(HTTP/1.1) d1.ireader####.com:80
- TCP(HTTP/1.1) 4####.88.6.84:80
- TCP(TLS/1.0) ssl.gst####.com:443
- TCP(TLS/1.0) www.go####.com:443
- TCP(TLS/1.0) www.gst####.com:443
- TCP(TLS/1.0) 1####.129.198.63:443
Запросы DNS:
- d1.ireader####.com
- d2.ireader####.com
- fb.u####.com
- ssl.gst####.com
- www.go####.com
- www.gst####.com
Запросы HTTP GET:
- d1.ireader####.com/GoodBooks/Books/cover/2012-09-10/8ecf0909-e2ee-4344-b...
- d1.ireader####.com/GoodBooks/Books/cover/2015-01-26/ef4c7579-a959-4564-a...
- d1.ireader####.com/GoodBooks/Books/cover/2015-01-28/5ac7717d-0881-4003-9...
- d1.ireader####.com/GoodBooks/Books/cover/2015-03-19/440b5c3e-3433-4a82-b...
- d1.ireader####.com/GoodBooks/Books/cover/2015-03-25/40b53382-d5b1-4da6-9...
- d1.ireader####.com/GoodBooks/Books/cover/2015-03-30/b501b620-dee4-46f5-9...
- d1.ireader####.com/GoodBooks/Books/cover/2015-05-08/c6e0eb27-13d9-4e16-b...
- d1.ireader####.com/GoodBooks/Books/cover/2015-06-19/7aaa5483-edb0-417f-9...
- d1.ireader####.com/GoodBooks/Books/cover/2015-06-19/efa228a8-30b1-4a9d-9...
- d1.ireader####.com/GoodBooks/Books/cover/2015-07-28/36ba05af-7865-4266-9...
- d1.ireader####.com/GoodBooks/Books/cover/2015-08-19/585b057e-9304-429f-a...
- d1.ireader####.com/GoodBooks/Books/cover/2015-08-21/48bae47d-c651-4435-9...
- d1.ireader####.com/GoodBooks/Books/cover/2015-09-06/b1a30c80-e243-42eb-a...
- d1.ireader####.com/GoodBooks/Books/cover/2015-09-18/c505a759-c92f-42ef-8...
- d1.ireader####.com/GoodBooks/Books/cover/2015-11-10/2a1437d3-8877-43d1-8...
- d1.ireader####.com/GoodBooks/Books/cover/2016-01-22/6316ab71-fd1d-4607-8...
- d1.ireader####.com/GoodBooks/Books/cover/2016-01-25/01b2df02-7063-44be-a...
- d1.ireader####.com/GoodBooks/Books/cover/2016-04-10/e595ad98-34fd-4111-a...
- d1.ireader####.com/GoodBooks/Books/cover/2016-04-14/0bac34d4-5158-4e27-b...
- d1.ireader####.com/GoodBooks/Books/cover/2016-08-19/be534156-6525-4ff8-a...
- d1.ireader####.com/GoodBooks/Books/cover/2016-08-26/8ed95684-3895-460c-b...
- d1.ireader####.com/GoodBooks/Books/cover/2016-12-31/1038c4ad-0aa1-47f1-a...
- d1.ireader####.com/GoodBooks/Books/cover/2017-02-22/567cd900-74a1-4493-b...
- d1.ireader####.com/GoodBooks/Books/cover/2017-04-22/2943efd3-88c7-4af5-8...
- d1.ireader####.com/GoodBooks/Books/cover/2017-06-16/34b75153-5268-4dfb-8...
- d1.ireader####.com/GoodBooks/Books/cover/2017-06-26/1d42eaed-fcbb-47ef-b...
- d1.ireader####.com/GoodBooks/Books/cover/2017-09-11/a6dcaea5-58ef-4509-9...
- d1.ireader####.com/GoodBooks/Books/cover/2017-12-07/578bd2d5-a5ea-4bad-8...
- d1.ireader####.com/GoodBooks/Books/cover/2018-01-03/f22bebca-d5b4-4bbc-a...
- d1.ireader####.com/GoodBooks/Books/cover/2018-01-23/953b597d-e271-4558-a...
- d1.ireader####.com/GoodBooks/Books/cover/2018-02-10/5313852f-1fcf-4d59-a...
- d1.ireader####.com/GoodBooks/Books/cover/2018-03-07/dde7f7a7-1076-42ed-8...
- d1.ireader####.com/GoodBooks/Books/cover/2018-03-08/f4b6e760-cf91-4a0c-b...
- d1.ireader####.com/GoodBooks/Books/cover/2018-03-13/b3e1ff20-2e80-4e59-9...
- d1.ireader####.com/GoodBooks/Books/cover/2018-04-11/a92746f9-dfa9-4165-b...
- d1.ireader####.com/GoodBooks/Books/cover/2018-05-26/18e078e9-3c27-4035-9...
- d1.ireader####.com/GoodBooks/Books/cover/2018-07-04/c3c39cfa-ff66-4b8f-a...
- d1.ireader####.com/GoodBooks/Books/cover/2018-08-07/47ae0877-7c1e-4817-b...
- d1.ireader####.com/GoodBooks/Books/cover/2018-09-21/b4ee7221-2a18-4388-a...
- d1.ireader####.com/GoodBooks/Books/cover/2018-11-06/d5c72f2c-cb6d-451b-8...
- d1.ireader####.com/GoodBooks/Books/cover/2018-11-09/01a6285d-ba73-4a49-9...
- d1.ireader####.com/GoodBooks/Books/cover/2018-11-10/1be56adc-2997-4d48-9...
- d1.ireader####.com/GoodBooks/Books/cover/2018-11-13/72652ed2-71df-4bcc-b...
- d1.ireader####.com/GoodBooks/Books/cover/2018-11-16/1cec3b77-6323-4c3b-9...
- d1.ireader####.com/GoodBooks/Books/cover/2018-11-16/882992e4-2953-43cc-b...
- d1.ireader####.com/GoodBooks/Books/cover/2018-11-21/801a6db2-f5c1-4c9c-8...
- d1.ireader####.com/GoodBooks/Books/cover/2018-12-07/b5d1f73e-11a4-483c-a...
- d1.ireader####.com/GoodBooks/Books/cover/2018-12-29/4cd59b90-caf5-48ed-a...
- d1.ireader####.com/GoodBooks/Books/cover/2019-06-06/169e8872-772b-43d7-9...
- d1.ireader####.com/GoodBooks/Books/cover/2019-08-17/4b66d197-724c-4f04-b...
- d1.ireader####.com/GoodBooks/Books/cover/2019-08-17/ce9bf9ce-8ecf-437a-8...
- d1.ireader####.com/GoodBooks/Books/cover/2019-09-27/ffc3df8e-a702-443a-8...
- d1.ireader####.com/GoodBooks/images/RankImg/23bd1bc9-0e01-4c92-8a45-628a...
- d1.ireader####.com/GoodBooks/images/RankImg/2bcb71bc-1763-47a0-a518-4a18...
- d1.ireader####.com/GoodBooks/images/RankImg/5dc91728-903c-4ebf-85cd-ee78...
- d1.ireader####.com/GoodBooks/images/c100/f104.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f105.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f107.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f115.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f118.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f120.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f121.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f124.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f125.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f127.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f128.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f129.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f143.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f145.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f149.png?id=####
- d1.ireader####.com/GoodBooks/images/c100/f151.png?id=####
- d2.ireader####.com/GoodBooks/Books/cover/2015-01-26/ef4c7579-a959-4564-a...
- d2.ireader####.com/GoodBooks/Books/cover/2015-03-19/053de146-8e24-4260-b...
- d2.ireader####.com/GoodBooks/Books/cover/2015-03-19/584f8873-2f20-4ac5-8...
- d2.ireader####.com/GoodBooks/Books/cover/2015-03-19/854876ee-63c0-4997-b...
- d2.ireader####.com/GoodBooks/Books/cover/2015-04-02/923e22e8-6c98-4359-8...
- d2.ireader####.com/GoodBooks/Books/cover/2015-04-14/0da8d6f2-c021-4df6-9...
- d2.ireader####.com/GoodBooks/Books/cover/2015-05-08/c6e0eb27-13d9-4e16-b...
- d2.ireader####.com/GoodBooks/Books/cover/2015-06-19/b79b4534-2dd4-42ec-a...
- d2.ireader####.com/GoodBooks/Books/cover/2015-06-19/c4cd959f-d76c-4ba0-8...
- d2.ireader####.com/GoodBooks/Books/cover/2015-06-19/e983ec41-27eb-4358-8...
- d2.ireader####.com/GoodBooks/Books/cover/2015-08-21/48bae47d-c651-4435-9...
- d2.ireader####.com/GoodBooks/Books/cover/2015-08-31/c0ab872a-41c5-4b4d-8...
- d2.ireader####.com/GoodBooks/Books/cover/2015-09-06/b1a30c80-e243-42eb-a...
- d2.ireader####.com/GoodBooks/Books/cover/2015-10-13/ed23cd7c-be46-420d-a...
- d2.ireader####.com/GoodBooks/Books/cover/2015-11-09/84be075b-1203-4bcd-9...
- d2.ireader####.com/GoodBooks/Books/cover/2015-11-11/da5aefb8-cd59-4bc7-b...
- d2.ireader####.com/GoodBooks/Books/cover/2016-01-25/01b2df02-7063-44be-a...
- d2.ireader####.com/GoodBooks/Books/cover/2016-04-10/e595ad98-34fd-4111-a...
- d2.ireader####.com/GoodBooks/Books/cover/2016-04-16/6c79e9df-2b52-488f-a...
- d2.ireader####.com/GoodBooks/Books/cover/2016-08-11/b22aeaeb-52e8-4b9e-9...
- d2.ireader####.com/GoodBooks/Books/cover/2016-10-12/9b316b0e-5422-4ad1-8...
- d2.ireader####.com/GoodBooks/Books/cover/2016-12-13/dc4a67fe-ab70-4659-8...
- d2.ireader####.com/GoodBooks/Books/cover/2017-01-13/a98f4ae0-236b-4246-8...
- d2.ireader####.com/GoodBooks/Books/cover/2017-01-16/de11f358-1e0d-4ad2-b...
- d2.ireader####.com/GoodBooks/Books/cover/2017-06-09/e54cf5ae-89e2-4a45-b...
- d2.ireader####.com/GoodBooks/Books/cover/2017-07-22/0353deeb-d959-45e6-a...
- d2.ireader####.com/GoodBooks/Books/cover/2017-09-11/74419d21-5e8e-463d-9...
- d2.ireader####.com/GoodBooks/Books/cover/2017-11-04/2491d92a-184a-4cd4-9...
- d2.ireader####.com/GoodBooks/Books/cover/2017-11-14/3c15503d-2844-4fa6-8...
- d2.ireader####.com/GoodBooks/Books/cover/2017-12-02/eb5ba06b-67dd-4089-b...
- d2.ireader####.com/GoodBooks/Books/cover/2018-01-03/f22bebca-d5b4-4bbc-a...
- d2.ireader####.com/GoodBooks/Books/cover/2018-03-07/dde7f7a7-1076-42ed-8...
- d2.ireader####.com/GoodBooks/Books/cover/2018-03-13/83f4edec-7a7b-4c65-a...
- d2.ireader####.com/GoodBooks/Books/cover/2018-04-11/0b297503-7ab6-4aa5-b...
- d2.ireader####.com/GoodBooks/Books/cover/2018-05-26/18e078e9-3c27-4035-9...
- d2.ireader####.com/GoodBooks/Books/cover/2018-06-26/6f76db2b-9ee6-4c63-8...
- d2.ireader####.com/GoodBooks/Books/cover/2018-07-26/1cbaa687-a419-4627-b...
- d2.ireader####.com/GoodBooks/Books/cover/2018-09-21/94703c14-a193-45db-9...
- d2.ireader####.com/GoodBooks/Books/cover/2018-10-17/084896c8-7556-46ab-8...
- d2.ireader####.com/GoodBooks/Books/cover/2018-10-18/96a5e057-ca3f-43ac-8...
- d2.ireader####.com/GoodBooks/Books/cover/2018-11-09/d97056f1-fc61-4b98-8...
- d2.ireader####.com/GoodBooks/Books/cover/2018-11-16/6ae7f200-6568-4939-9...
- d2.ireader####.com/GoodBooks/Books/cover/2018-11-16/7f004d8b-19ea-4285-b...
- d2.ireader####.com/GoodBooks/Books/cover/2018-12-27/9583a156-53f3-4e24-a...
- d2.ireader####.com/GoodBooks/Books/cover/2018-12-29/837aaa2f-e79f-4a20-8...
- d2.ireader####.com/GoodBooks/Books/cover/2019-05-22/3e3b3ac6-3dee-4bab-9...
- d2.ireader####.com/GoodBooks/Books/cover/2019-08-17/334bc7c2-39db-4d3e-a...
- d2.ireader####.com/GoodBooks/Books/cover/2019-08-17/f83cbadf-790b-4136-a...
- d2.ireader####.com/GoodBooks/Books/cover/2019-09-09/dc3b0ad8-a506-4725-9...
- d2.ireader####.com/GoodBooks/Books/cover/2019-09-24/75c9c1c4-036a-4056-9...
- d2.ireader####.com/GoodBooks/images/c100/f101.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f103.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f106.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f108.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f110.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f111.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f112.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f113.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f114.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f117.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f119.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f122.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f123.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f126.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f142.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f144.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f146.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f147.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f148.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f150.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f152.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f163.png?id=####
- d2.ireader####.com/GoodBooks/images/c100/f164.png?id=####
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/.jg.ic
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/aireader_v2-journal
- /data/data/####/com_ireader_city_you_qi.xml
- /data/data/####/ireader.db-journal
- /data/data/####/libjiagu-1884083783.so
- /data/data/####/multidex.version.xml
- /data/data/####/ntcbbz.jar
- /data/data/####/umeng_feedback_conversations.xml
- /data/data/####/umeng_feedback_user_info.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_message_state.xml
- /data/data/####/webview.db-journal
- /data/data/####/www.ireadercity.com.443
- /data/data/####/z092c08ec.xml
- /data/media/####/.did
- /data/media/####/.nomedia
- /data/media/####/0094f3df46b6474a923d78c1cb8119eajpgx
- /data/media/####/0094f3df46b6474a923d78c1cb8119eajpgx.tmp
- /data/media/####/00d5ee4fb6474ed1bb1d9679b5afa955jpgx_bak
- /data/media/####/011454de20ab43468b238562adb90276jpgx.tmp
- /data/media/####/011be9875a544575aa8398e284a44c72jpgx.tmp
- /data/media/####/01dde4a461f54bb4b541da11a23931e4jpgx.tmp
- /data/media/####/024d880eae714e44a580f20939d4e800jpgx.tmp
- /data/media/####/02556301cf2c48558df9cde137b4d76fjpgx.tmp
- /data/media/####/02d4d423835c452fb21b9c7ffbceea9cjpgx.tmp
- /data/media/####/031f68484fa14d4a8405a688a1094519jpgx.tmp
- /data/media/####/039c92b3245741b1aceaac92590ca147jpgx.tmp
- /data/media/####/04edc820acc245809c1b3183259cf1e0jpgx.tmp
- /data/media/####/07f702baf6cb4093a8ae4ac7d95e92afjpgx.tmp
- /data/media/####/08cbe38fb1ac4126a07b13f1afb2b4fajpgx.tmp
- /data/media/####/0ad14c981b5b45afb47bec0f0f2182e7jpgx.tmp
- /data/media/####/10a6ba4615a04deaa9b6b27f743422a4jpgx.tmp
- /data/media/####/13aa6f433a57456785c4f10e9b374fffjpgx.tmp
- /data/media/####/13f1f7f1e49340d2bb78129be8327d84jpgx.tmp
- /data/media/####/1f509a287fd04be5a7c20fb8e53c8d69jpgx.tmp
- /data/media/####/20925a0fdda94574883dcf90f22a10b1jpgx.tmp
- /data/media/####/21a26d93182e494685e9d3fa2ea6e8b0jpgx.tmp
- /data/media/####/21aab989f20a49ad8b49e18bfb927766jpgx.tmp
- /data/media/####/240ed3d2c5e144b1a0447ec5ffb2b707jpgx.tmp
- /data/media/####/267063764ac244ba942ff7d288d814fejpgx.tmp
- /data/media/####/26aacb86829e4c39ada99432ffe6eb34jpgx.tmp
- /data/media/####/2d4359bceb8d4b6fb206b8ac5bc0e57ajpgx.tmp
- /data/media/####/3237bb5cb84445bea4daef6d657786d3jpgx.tmp
- /data/media/####/357c1241d44a4fdea1e64c040007792ejpgx.tmp
- /data/media/####/36719330f8f84a9193e886049ea743b9jpgx.tmp
- /data/media/####/38cad977393c446fac942b6baf85d919jpgx.tmp
- /data/media/####/3d80ea9c50a448a9879b205d62dee328jpgx.tmp
- /data/media/####/4200bbac46954df08f3e6736aa5df155jpgx.tmp
- /data/media/####/46bdb44514c64c3d8abff7f778592e3ejpgx.tmp
- /data/media/####/49044c311e374c95b5006cea51d7a352jpgx.tmp
- /data/media/####/4a957e5fd81d4e70802711da65d1d049jpgx.tmp
- /data/media/####/4be929a8dbbc4cbcb5f3278dc1a5d90djpgx
- /data/media/####/4be929a8dbbc4cbcb5f3278dc1a5d90djpgx.tmp
- /data/media/####/4f7f22a14b5844cda8b6bae3a54fdee9jpgx.tmp
- /data/media/####/508f1e3131dd43cf92d94e0fe23af586jpgx.tmp
- /data/media/####/525c6387660e498cb98aa7c1c82d288ejpgx.tmp
- /data/media/####/5646790645334f518fbeb607ba55c7fdjpgx.tmp
- /data/media/####/585bced10c02493b934c732b18e19a09jpgx.tmp
- /data/media/####/5b5aef51349d4acfab629f4e3072671bjpgx.tmp
- /data/media/####/5bfbcefb362a4af4afddee85fb7bdc60jpgx.tmp
- /data/media/####/5cbe38dc88744000b6722c84f8cb582fjpgx.tmp
- /data/media/####/5d923f198b054809985d07376ae356c2jpgx.tmp
- /data/media/####/6b3ea00c9abb4186b36de076053b7054jpgx.tmp
- /data/media/####/6babf86484914997b0782dd447748b45jpgx.tmp
- /data/media/####/71e88fe0ed7849b3ac2ac9d0384a3a9bjpgx.tmp
- /data/media/####/72e4f44b65744806af48e519505e0e9fjpgx.tmp
- /data/media/####/73de259d5c9e463ba5b9f32e62fa1162jpgx.tmp
- /data/media/####/74350c99cfbb4a68a4ce72c0343a4179jpgx.tmp
- /data/media/####/75d6f6f2ffca4423919dc8974408701bjpgx.tmp
- /data/media/####/79c2fc8088674b1ca08e05e5f19c4623jpgx.tmp
- /data/media/####/7eb0c7e37494436da44f99c558e2b161jpgx.tmp
- /data/media/####/81b5e7c663134772aed82547e1ed564fjpgx.tmp
- /data/media/####/83171306d40f4516aee3e3c6430013a8jpgx.tmp
- /data/media/####/83b465bb18344229a21d32b947320935jpgx.tmp
- /data/media/####/861be668e3014a729bd674bd29532da3jpgx.tmp
- /data/media/####/86511a5b117b430db5a476e314916f93jpgx.tmp
- /data/media/####/9409afc69a19470bb9ac03ca8a6dff5fjpgx.tmp
- /data/media/####/974675883bc14537889a83b47181cbdfjpgx.tmp
- /data/media/####/9845e80329584aa398d1166f2cbe1998jpgx.tmp
- /data/media/####/988ef08915834164bdeab5f716e14c32jpgx.tmp
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/a8045d6e6cac434597ceef8e05cdcb7ajpgx.tmp
- /data/media/####/a84d7b84813140369449044ec47d6686jpgx.tmp
- /data/media/####/acomhyxlistennovel.txt
- /data/media/####/ad8046aa5e5d41f7b4272d5bdb8a2901jpgx.tmp
- /data/media/####/af73292e6a414ea2b38ada7e248f3115jpgx.tmp
- /data/media/####/afc890f4170a4b6089354dfa5ef68bc0jpgx.tmp
- /data/media/####/afc92b3f356d48cdb16cd0d874ff4991jpgx.tmp
- /data/media/####/b1c164c512e94a06bfe02374c34acddajpgx.tmp
- /data/media/####/b4011f34d02a4ba8893bbf0b6d948214jpgx.tmp
- /data/media/####/b426908ab92c42539db0ea424e24bce8jpgx.tmp
- /data/media/####/b6ccbda3413e437883460cea59622620jpgx.tmp
- /data/media/####/b817d5e447114c40ab48adc653a67d27jpgx.tmp
- /data/media/####/bd68dd5dd73245e0882796c28b2c900ejpgx.tmp
- /data/media/####/book_list_C105_free_1.dat
- /data/media/####/book_list_C105_new_1.dat
- /data/media/####/c5bb3dee29b34fd489a926177f677dc6jpgx.tmp
- /data/media/####/category_101.jpgx.tmp
- /data/media/####/category_103.jpgx.tmp
- /data/media/####/category_104.jpgx.tmp
- /data/media/####/category_105.jpgx.tmp
- /data/media/####/category_106.jpgx.tmp
- /data/media/####/category_107.jpgx.tmp
- /data/media/####/category_108.jpgx.tmp
- /data/media/####/category_110.jpgx.tmp
- /data/media/####/category_111.jpgx.tmp
- /data/media/####/category_112.jpgx.tmp
- /data/media/####/category_113.jpgx.tmp
- /data/media/####/category_114.jpgx.tmp
- /data/media/####/category_115.jpgx.tmp
- /data/media/####/category_117.jpgx.tmp
- /data/media/####/category_118.jpgx.tmp
- /data/media/####/category_119.jpgx.tmp
- /data/media/####/category_120.jpgx.tmp
- /data/media/####/category_121.jpgx.tmp
- /data/media/####/category_122.jpgx.tmp
- /data/media/####/category_123.jpgx.tmp
- /data/media/####/category_124.jpgx.tmp
- /data/media/####/category_125.jpgx.tmp
- /data/media/####/category_126.jpgx.tmp
- /data/media/####/category_127.jpgx.tmp
- /data/media/####/category_128.jpgx.tmp
- /data/media/####/category_129.jpgx.tmp
- /data/media/####/ccd5d58b21cf40899683e983b345608ejpgx.tmp
- /data/media/####/ce816e1481204e90a9c634d1cdb4fa87jpgx.tmp
- /data/media/####/cfg_rank.data
- /data/media/####/config.data
- /data/media/####/d70a048cba464132a727716555c381d4jpgx.tmp
- /data/media/####/de79a68dc7b941df86d298b40ee6cafbjpgx.tmp
- /data/media/####/e0afd849e7ac45779321ac0f123df038jpgx_bak
- /data/media/####/e296c8462e0e47c5bfca9a8ef6284eefjpgx.tmp
- /data/media/####/e60ce86e0e5a410bacad4d0f3eda93f9jpgx.tmp
- /data/media/####/e6bfb375052f466086342102d72d189cjpgx.tmp
- /data/media/####/e7c66c1c7697464489d49b35d399559cjpgx.tmp
- /data/media/####/e8522231f45b4907b53192cf3eec07c0jpgx.tmp
- /data/media/####/e8b92ea4d0d64a549048c4f8e5e39e63jpgx.tmp
- /data/media/####/ec713c3dba7e499f86fdd8e625947125jpgx.tmp
- /data/media/####/f09789acf13d43fabc506fd953c4e55ejpgx.tmp
- /data/media/####/f6c15d2598824ad398db321208aae1f9jpgx.tmp
- /data/media/####/f72da1d5a9124490a702c6c17f8085a5jpgx.tmp
- /data/media/####/fe0061f3abc0427281eb6be5970d90bdjpgx.tmp
- /data/media/####/ff27099b91c041079bd9db46aa1bbd6cjpgx.tmp
- /data/media/####/ffb53dfbacfd4b4c951add23e60dcfabjpgx.tmp
- /data/media/####/free.jpgx.tmp
- /data/media/####/home_infos_1.dat
- /data/media/####/home_infos_2.dat
- /data/media/####/import.dat
- /data/media/####/new.jpgx.tmp
- /data/media/####/realfree.jpgx.tmp
- /data/media/####/releated_list_00d5ee4fb6474ed1bb1d9679b5afa955.dat
Другие:
Запускает следующие shell-скрипты:
- chmod 755 <Package Folder>/.jiagu/libjiagu-1884083783.so
Загружает динамические библиотеки:
- libjiagu-1884083783
- smssdk
Использует следующие алгоритмы для шифрования данных:
- AES-CBC-PKCS5Padding
- DES
Использует следующие алгоритмы для расшифровки данных:
- AES-CBC-PKCS5Padding
Осуществляет доступ к приватному интерфейсу ITelephony.
Использует специальную библиотеку для скрытия исполняемого байт-кода.
Получает информацию о сети.
Получает информацию о телефоне (номер, IMEI и т. д.).
Получает информацию о привязанных к устройству аккаунтах (Google, Facebook и т. д.).
Отрисовывает собственные окна поверх других приложений.
