Техническая информация
Вредоносные функции:
Выполняет код следующих детектируемых угроз:
- Android.DownLoader.906.origin
- Android.Triada.482.origin
- Android.Triada.483.origin
Загружает из Интернета следующие детектируемые угрозы:
- Android.DownLoader.363.origin
- Android.DownLoader.906.origin
- Android.DownLoader.909.origin
Сетевая активность:
Подключается к:
- UDP(DNS) 8####.8.4.4:53
- TCP(HTTP/1.1) v.adma####.com.cn:80
- TCP(HTTP/1.1) c.c####.com:80
- TCP(HTTP/1.1) 1####.131.85.27:99
- TCP(HTTP/1.1) gd.a.s####.com:80
- TCP(HTTP/1.1) res####.a####.top:80
- TCP(HTTP/1.1) api.97####.com:8280
- TCP(HTTP/1.1) dup.baidust####.com:80
- TCP(HTTP/1.1) 14.17.1####.130:80
- TCP(HTTP/1.1) adv.patrick####.com.cn:80
- TCP(HTTP/1.1) pos.b####.com:80
- TCP(HTTP/1.1) 1.abc1####.net:80
- TCP(HTTP/1.1) d.bjsd####.com:80
- TCP(HTTP/1.1) ym####.89####.com:34656
- TCP(HTTP/1.1) api.free####.xin:80
- TCP(HTTP/1.1) a####.d####.com:80
- TCP(HTTP/1.1) cu.c####.cn:80
- TCP(HTTP/1.1) tfs.alipayo####.com:80
- TCP(HTTP/1.1) cdn.clou####.xyz:80
- TCP(HTTP/1.1) d####.a####.com:8080
- TCP(HTTP/1.1) pco####.ta####.com:80
- TCP(HTTP/1.1) 614.a####.top:80
- TCP(HTTP/1.1) ia.c####.cn:80
- TCP(HTTP/1.1) s.zhito####.com:808
- TCP(HTTP/1.1) z####.heyc####.net:80
- TCP(HTTP/1.1) j####.o####.com:13967
- TCP(HTTP/1.1) www.h####.com:8092
- TCP(HTTP/1.1) a####.a####.com:8280
- TCP(HTTP/1.1) api.yunco####.com:80
- TCP(HTTP/1.1) l.bjsd####.com:80
- TCP(HTTP/1.1) hd.a####.com:80
- TCP(HTTP/1.1) gm.mm####.com:80
- TCP(HTTP/1.1) y####.b####.com:12583
- TCP(HTTP/1.1) api.lubang####.com:80
- TCP(HTTP/1.1) z.c####.com:80
- TCP(HTTP/1.1) b####.serving####.com:80
- TCP(HTTP/1.1) api####.tiantia####.com:80
- TCP(HTTP/1.1) d####.dd7####.com:80
- TCP(HTTP/1.1) a3####.fj####.cn:80
- TCP(HTTP/1.1) api.s####.xin:80
- TCP(HTTP/1.1) 47.1####.59.53:900
- TCP(HTTP/1.1) s.zhito####.com:807
- TCP(HTTP/1.1) p####.sho####.com:80
- TCP(HTTP/1.1) dex.oss-ap-####.aliy####.com:80
- TCP(HTTP/1.1) 1####.114.206.247:8000
- TCP(HTTP/1.1) php.sho####.com:80
- TCP(HTTP/1.1) i####.j####.com:80
- TCP(HTTP/1.1) 1####.215.187.132:80
- TCP(HTTP/1.1) gt####.gim####.com:80
- TCP(HTTP/1.1) d2.y####.com.####.com:80
- TCP(HTTP/1.1) q####.0####.com:13967
- TCP(HTTP/1.1) e4####.0r####.com:10293
- TCP(TLS/1.0) jrtd####.jd.com:443
- TCP(TLS/1.0) o####.ssd.i####.####.com:443
- TCP(TLS/1.0) s.do####.com:443
- TCP(TLS/1.0) www.google-####.com:443
- TCP(TLS/1.0) gm.mm####.com:443
- TCP(TLS/1.0) pos.b####.com:443
- TCP(TLS/1.0) a####.d####.com:443
- TCP(TLS/1.0) z.c####.com:443
- TCP(TLS/1.0) w####.jd.com:443
- TCP(TLS/1.0) and####.google####.com:443
- TCP(TLS/1.0) wl.jd.com.####.com:443
- TCP(TLS/1.0) ur####.jd.com:443
- TCP(TLS/1.0) p####.m.jd.com:443
- TCP(TLS/1.0) m####.m.jd.com:443
- TCP(TLS/1.0) api.g####.vip:443
- TCP(TLS/1.0) ti####.b####.com:443
- TCP(TLS/1.0) wtc.d####.com:443
- TCP(TLS/1.0) dualsta####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) it####.a####.com.####.net:443
- TCP(TLS/1.0) 1####.217.168.238:443
- TCP(TLS/1.0) ip.goq####.com:443
- TCP(TLS/1.0) x5.g####.tv:16006
- TCP(TLS/1.0) i####.j####.com:443
- TCP(TLS/1.0) c.c####.com:443
- TCP(TLS/1.0) hm.b####.com:443
- TCP(TLS/1.0) sw3.d####.com:443
- TCP(TLS/1.0) 1####.217.17.42:443
- TCP(TLS/1.0) dup.baidust####.com:443
- TCP(TLS/1.0) u.j####.com:443
- TCP(TLS/1.0) www.h####.com:443
- TCP(TLS/1.0) 5.d.g####.tv:16006
- TCP(TLS/1.0) i####.d####.com:443
- TCP(TLS/1.2) 1####.217.168.238:443
- TCP(TLS/1.2) 1####.217.168.202:443
- TCP(TLS/1.2) 1####.217.20.106:443
Запросы DNS:
- 1.abc1####.net
- 5.d.g####.tv
- 614.a####.top
- a####.a####.com
- a####.a####.com
- a####.d####.com
- a####.m.jd.com
- a.bjsd####.com
- a3####.fj####.cn
- adv-u####.t####.u####.net
- adv.99y####.com
- adv.google####.com.cn
- adv.patrick####.com.cn
- and####.google####.com
- api####.tiantia####.com
- api.23####.com
- api.93####.com
- api.97####.com
- api.free####.xin
- api.g####.vip
- api.lubang####.com
- api.s####.xin
- api.yunco####.com
- b####.jd.com
- b####.serving####.com
- c####.mm####.com
- c.c####.com
- cdn.clou####.xyz
- cu.c####.cn
- d####.a####.com
- d####.dd7####.com
- d.bjsd####.com
- d2.y####.com
- dex.oss-ap-####.aliy####.com
- dup.baidust####.com
- e4####.0r####.com
- filt####.a####.top
- gt####.gim####.com
- h5s####.m.jd.com
- hm.b####.com
- i####.360bu####.com
- i####.d####.com
- ia.c####.cn
- img.d####.com
- instant####.google####.com
- ip.goq####.com
- ip.zhito####.com
- it####.a####.com
- j####.o####.com
- jrtd####.jd.com
- l.bjsd####.com
- m####.go####.com
- m####.m.jd.com
- m.360bu####.com
- o6####.ns####.cn
- p####.m.jd.com
- p####.sho####.com
- pco####.c####.com
- php.sho####.com
- plb####.u####.com
- pos.b####.com
- pp.m####.com
- pv.s####.com
- q####.0####.com
- res####.a####.top
- s.do####.com
- s.zhito####.com
- s19.c####.com
- s4.c####.com
- s5.c####.com
- sn####.kv####.com
- sto####.360bu####.com
- sw3.d####.com
- tfs.alipayo####.com
- ti####.b####.com
- u####.a####.top
- u####.u####.com
- u.j####.com
- ur####.jd.com
- v.adma####.com.cn
- v.bjsd####.com
- v1.c####.com
- w####.jd.com
- w####.jd.com
- wq.360bu####.com
- wtc.d####.com
- www.google-####.com
- www.h####.com
- x5.g####.tv
- y####.b####.com
- ym####.89####.com
- z####.heyc####.net
- z12.c####.com
- z3.c####.com
- z6.c####.com
- z8.c####.com
- z9.c####.com
- zc####.mj####.cn
Запросы HTTP GET:
- 1.abc1####.net/favicon.ico
- 1.abc1####.net/t/404.html
- 614.a####.top/controlup614.json
- 614.a####.top/new_channl_614.json
- a####.d####.com/rewrite?fromid=####
- a3####.fj####.cn/c/asovnrud.zip
- a3####.fj####.cn/tp/xzxhbtzl.png
- a3####.fj####.cn/two/qwertyuior.zip
- a3####.fj####.cn/u/qwertyuioa.jar
- b####.serving####.com/serving/adServer.bs?cn=####&c=####&mc=####&pli=###...
- c.c####.com/core.php?web_id=####&t=####
- c.c####.com/stat.php?id=####
- cdn.clou####.xyz/jar/365admob.jar
- cdn.clou####.xyz/jar/ad367.jar
- cdn.clou####.xyz/jar/adm0816.jar
- cdn.clou####.xyz/jar/miqiu0925.jar
- cdn.clou####.xyz/jar/olo0613.jar
- cdn.clou####.xyz/jar/olochaping0513.jar
- cdn.clou####.xyz/jar/san404_0924.jar
- cdn.clou####.xyz/jar/sm1023.jar
- cdn.clou####.xyz/jar/wals0923.jar
- cu.c####.cn/v1.0/pages?ao=####&pid=####&aid=####&keyword=####&model=####...
- d####.a####.com:8080/DongFengSys/bitauto_pv1.jsp?url=####&canshu=####&re...
- d####.dd7####.com//upload/sdk2/cjmob20190726.jar
- d####.dd7####.com//upload/sdk2/modex20191025.jar
- d####.dd7####.com//upload/sdk2/olo20191010.jar
- d####.dd7####.com//upload/sdk2/sdk330dex20191009.jar
- d####.dd7####.com/upload/plog/mfgz.jar
- d####.dd7####.com/upload/sdk2/JAR31dex20190530.jar
- d####.dd7####.com/upload/sdk2/rq02dex20190829.jar
- d####.dd7####.com/upload/sdk3/infodex20190809.jar
- d####.dd7####.com/upload/sdk3/kzd20190809.jar
- d2.y####.com.####.com/sg-chuanyang/67dc278a-fe49-418a-bc7e-93acfdac6204....
- d2.y####.com.####.com/sg-chuanyang/d55be81f-2606-4d09-a9f5-9497823be077....
- dex.oss-ap-####.aliy####.com/dex/20190409/testlhyy.jar?81####
- dex.oss-ap-####.aliy####.com/dex/20190708/testkd.jar?62####
- dup.baidust####.com/js/dm.js
- gd.a.s####.com/cityjson?ie=####
- gm.mm####.com/9.gif?abc=####&rnd=####
- gt####.gim####.com/s?sy=####&ax=####&ch=####&p=####&pl=####&c=####&or=##...
- hd.a####.com/android/adv/qsz/advsdk/release/advsdk-release.enc
- i####.j####.com/babel/jfs/t1/54724/10/13930/6599/5dad1d66E836ff5cf/5aee8...
- i####.j####.com/babel/jfs/t1/58450/6/13884/7550/5dad1d6bE5b11a2d1/05ba38...
- i####.j####.com/babel/jfs/t1/84583/2/14011/6370/5dad1d70E4a2e8c29/072508...
- i####.j####.com/babel/jfs/t1/98521/24/442/6062/5dad1d73E52c58372/de02c25...
- ia.c####.cn/sy17/pc2756/mt102886778/ip95.211.190.199/ti1572047180/dv8661...
- ia.c####.cn/sy17/pc2756/mt102886792/ip95.211.190.199/ti1572047180/dv8661...
- pco####.ta####.com/app.gif?&cna=####
- pos.b####.com/bfp/snippetcacher.php?dpv=####&di=####
- pos.b####.com/uclm?conwid=####&conhei=####&rtbid=####&rdid=####&dc=####&...
- pos.b####.com/uclm?psi=####&di=####&dri=####&dis=####&dai=####&ps=####&e...
- res####.a####.top/LHYY.png
- res####.a####.top/filter_control_614.json
- res####.a####.top/sdk15.png
- res####.a####.top/sdk18.png
- res####.a####.top/sdk21.png
- res####.a####.top/sdk23_1.png
- res####.a####.top/sdk24.png
- res####.a####.top/sdk5_2.png
- res####.a####.top/sdk6_15.png
- res####.a####.top/sdk9.png
- s.zhito####.com:807/528/30.html?2####
- s.zhito####.com:807/528/jd0622.html
- s.zhito####.com:807/528/wang/yiche450/430.html
- s.zhito####.com:808/0622/index.html
- s.zhito####.com:808/0622/yrc_001mobile.js
- s.zhito####.com:808/716/sw.html
- s.zhito####.com:808/favicon.ico
- tfs.alipayo####.com/L1/71/100/and/alipay_2088621115427102_55.apk
- v.adma####.com.cn/i/a133878,b3751583,c151,i0,m202,8a2,8b1,0iPUB_AO201909...
- v.adma####.com.cn/i/a133878,b3751584,c151,i0,m202,8a2,8b1,0iPUB_AO201909...
- www.h####.com:8092/c.php?id=####
- www.h####.com:8092/favicon.ico
- z.c####.com/stat.htm?id=####&cnzz_eid=####
- z.c####.com/stat.htm?id=####&r=####&lg=####&ntime=####&cnzz_eid=####&sho...
Запросы HTTP POST:
- a####.a####.com:8280/cpd/data
- adv.patrick####.com.cn/adv/dayActive
- adv.patrick####.com.cn/adv/getTask
- adv.patrick####.com.cn/adv/pluginFeedback
- adv.patrick####.com.cn/adv/pluginReq
- api####.tiantia####.com/ads
- api.97####.com:8280/ad/data
- api.97####.com:8280/ad/data/wup
- api.97####.com:8280/core/hb
- api.97####.com:8280/core/info
- api.97####.com:8280/core/report
- api.free####.xin/log/if0
- api.free####.xin/log/p02
- api.lubang####.com/domain.php
- api.lubang####.com/srp.php
- api.s####.xin/log/if0
- api.yunco####.com/service/rest
- d.bjsd####.com/index.php?r=####
- e4####.0r####.com:10293/widlth/
- j####.o####.com:13967/d0oer/
- j####.o####.com:13967/nheae/
- l.bjsd####.com/index.php?r=####
- p####.sho####.com/index.php?r=####
- php.sho####.com/index.php?r=####
- q####.0####.com:13967/x5qn0/
- y####.b####.com:12583/r2bfp/
- ym####.89####.com:34656/aowbg/
- ym####.89####.com:34656/ixowf/
- ym####.89####.com:34656/ntmjv/
- ym####.89####.com:34656/qdkle/
- ym####.89####.com:34656/rqiea/
- z####.heyc####.net/getlist
- z####.heyc####.net/xlogin
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/.DEVICES
- /data/data/####/.__mob_ad_data.xml
- /data/data/####/.droidPrefCommon.xml
- /data/data/####/.droidPrefCommon.xml.bak
- /data/data/####/.haxu
- /data/data/####/.imprint
- /data/data/####/.qckx
- /data/data/####/.usdis
- /data/data/####/032ae719ffba63f8_0
- /data/data/####/032ae719ffba63f8_1
- /data/data/####/0434138c9a95c909_0 (deleted)
- /data/data/####/04ea8b152a4f4cfc_0
- /data/data/####/06227b4680e4024f_0
- /data/data/####/07685157761e9578_0
- /data/data/####/086059d420279bdd_0
- /data/data/####/086f30fa2db0f046_0
- /data/data/####/086f30fa2db0f046_1
- /data/data/####/087fccd09717e2fa_0
- /data/data/####/08b440cfda7d273b_0
- /data/data/####/0EE9BC6365C88E5D5786D355D7363ED4.temp
- /data/data/####/0a5b42032bf56e4c_0
- /data/data/####/0b7a64ad718ef582_0
- /data/data/####/0e9b92484d89b2f6_0
- /data/data/####/0ec5d0c036cbf3ea_0
- /data/data/####/0edaf24e50da3ee4_0
- /data/data/####/0ff7f1c80cbf417c064de25d33615050.db
- /data/data/####/13a17bfa8cc4673d_0
- /data/data/####/15.dex
- /data/data/####/15.dex.flock (deleted)
- /data/data/####/15.jar
- /data/data/####/155f34845f137135_0
- /data/data/####/16f9bc34f62e552c_0
- /data/data/####/17e6bcc783d81422_0
- /data/data/####/17ebe76178a6d66e_0
- /data/data/####/18.dex
- /data/data/####/18.dex.flock (deleted)
- /data/data/####/18.jar
- /data/data/####/18e93c2b3ffdc7a0_0
- /data/data/####/1a20be47f3944083_0
- /data/data/####/1c41f9d59a936fd0_0
- /data/data/####/1c41f9d59a936fd0_1
- /data/data/####/1db120221b3bd39d_0
- /data/data/####/1deed7936f7b7aa8_0
- /data/data/####/1e2562b977b1bc8c_0
- /data/data/####/1e2562b977b1bc8c_1
- /data/data/####/1e996837ebbaf84d_0
- /data/data/####/1e996837ebbaf84d_1
- /data/data/####/1e99c1536694963f_0
- /data/data/####/1feaee0f17c2dac7_0
- /data/data/####/1s.dex
- /data/data/####/1s.dex.flock (deleted)
- /data/data/####/1s.jar
- /data/data/####/21.dex
- /data/data/####/21.dex.flock (deleted)
- /data/data/####/21.jar
- /data/data/####/2104c79e809e0e75_0
- /data/data/####/23_1.dex
- /data/data/####/23_1.dex.flock (deleted)
- /data/data/####/23_1.jar
- /data/data/####/24.dex
- /data/data/####/24.dex.flock (deleted)
- /data/data/####/24.jar
- /data/data/####/2401391c20f43864_0
- /data/data/####/2401391c20f43864_1
- /data/data/####/2614e23a7ee07e96_0
- /data/data/####/26a30d33508fec2d_0
- /data/data/####/26b5a2082a41d99c_0
- /data/data/####/2793d92e875dc209_0 (deleted)
- /data/data/####/2940195bd9870d6e_0
- /data/data/####/2940195bd9870d6e_1
- /data/data/####/2944bb758dd291d7_0
- /data/data/####/2ad0a9b7cee9a483_0
- /data/data/####/2c649830da04d7ad_0
- /data/data/####/2dac7798ab420e78_0
- /data/data/####/2e3aee0f5b16d070_0
- /data/data/####/2fa4c93bec7a5e71_0
- /data/data/####/30a5e59f173ef36e_0
- /data/data/####/316fdb564b40eb53_0
- /data/data/####/33cb8ddd98102a68_0
- /data/data/####/33fd792d52c67842_0
- /data/data/####/3be8da3d1394c8fc_0
- /data/data/####/3be8da3d1394c8fc_1
- /data/data/####/3c783fabdc6f8519_0
- /data/data/####/3cf2c4a97d6bcb01_0
- /data/data/####/3cf2c4a97d6bcb01_1
- /data/data/####/3fe23ca058718181_0 (deleted)
- /data/data/####/400fe73a9d960cdc_0
- /data/data/####/41764778fcfb143e_0
- /data/data/####/429cb91b4e9f8fba_0
- /data/data/####/439e7b2e61f2e13c_0
- /data/data/####/43aff93315659f36_0
- /data/data/####/44367F39739CCD6BBF960E91E7DB78B2.xml
- /data/data/####/44d02c9a65731369_0
- /data/data/####/44ded89f884d07f5_0
- /data/data/####/44ded89f884d07f5_0 (deleted)
- /data/data/####/45d474c3f6a3f067_0
- /data/data/####/486B25490C21EB084435CD967B985F09
- /data/data/####/48b577e64581f7e1_0
- /data/data/####/491e9ad3aa42ef42_0
- /data/data/####/4B8DB6B83129A65A2EF4DCFC1393C3B0.xml
- /data/data/####/4C43C0BBBA1469EC97154789EBDC335D
- /data/data/####/4C43C0BBBA1469EC97154789EBDC335D.dex
- /data/data/####/4C43C0BBBA1469EC97154789EBDC335D.dex.flock (deleted)
- /data/data/####/4C43C0BBBA1469EC97154789EBDC335D.temp
- /data/data/####/4C43C0BBBA1469EC97154789EBDC335D.zip
- /data/data/####/4a57884958c8f779_0
- /data/data/####/4a57884958c8f779_1
- /data/data/####/4b0ff78b3db187ca_0
- /data/data/####/4c0172d230107c74_0
- /data/data/####/4d3a7c4dc93f49ab_0
- /data/data/####/4f338ac4d39567ed_0
- /data/data/####/4f338ac4d39567ed_1
- /data/data/####/4fe7bd89a01cf83a_0
- /data/data/####/510277e5fc514552_0
- /data/data/####/5137669917adf721_0
- /data/data/####/5137669917adf721_1
- /data/data/####/52e0f34c3458f6d1_0
- /data/data/####/54a7bea15c0bb386_0
- /data/data/####/551d37db6570e4c4_0
- /data/data/####/556ea2a5968c6e3d_0
- /data/data/####/558d3127c585045b_0
- /data/data/####/55f3ddc27e68ffa2_0
- /data/data/####/5730d4a2ed80e567_0
- /data/data/####/57e4f7dc4142c9ac_0
- /data/data/####/58d041286cafe5cd_0
- /data/data/####/59d103a390634512_0
- /data/data/####/59d103a390634512_1
- /data/data/####/5_2.dex
- /data/data/####/5_2.dex.flock (deleted)
- /data/data/####/5_2.jar
- /data/data/####/5a16146e02c8fdd1_0
- /data/data/####/5a2de3af7854ec5a_0
- /data/data/####/5d58bcda667657f3_0
- /data/data/####/5e43e309e6af847c_0
- /data/data/####/5e43e309e6af847c_1
- /data/data/####/61c490d6d27b31f6_0
- /data/data/####/61c490d6d27b31f6_1
- /data/data/####/61f43d1e6ab67548_0 (deleted)
- /data/data/####/6433ba80bdca5b9d_0
- /data/data/####/64edfd4792e0695e_0
- /data/data/####/66bbbd84c8638cc5_0
- /data/data/####/66e7ca36c277c4d1_0
- /data/data/####/6744cd2b5c4e0dea_0
- /data/data/####/67a44b9824c66d30_0
- /data/data/####/680271378278caf4_0 (deleted)
- /data/data/####/6804c0bb0b5e17b0_0
- /data/data/####/6804c0bb0b5e17b0_1
- /data/data/####/697081318645ef5e_0
- /data/data/####/6_15.dex (deleted)
- /data/data/####/6_15.dex.flock (deleted)
- /data/data/####/6_15.jar
- /data/data/####/6d541f7c1cab0ede_0
- /data/data/####/6f5373cb021f6a6d_0
- /data/data/####/704aa451a45021a7_0
- /data/data/####/70c1d51663b60f5e_0
- /data/data/####/717ef3657a45ad89_0
- /data/data/####/717ef3657a45ad89_1
- /data/data/####/76a12070ce601320_0
- /data/data/####/76ee0b7645a9463f_0
- /data/data/####/76ee0b7645a9463f_1
- /data/data/####/77a16fdc45772d22_0
- /data/data/####/7976652885f3c199_0
- /data/data/####/79e3310c8268f424_0
- /data/data/####/7b2cd72332043296_0
- /data/data/####/7c4487eb98e1e2f3_0
- /data/data/####/7c939cce956f3b29_0
- /data/data/####/7d8f5e5658bf1000_0
- /data/data/####/7eaf7f45866e778f_0
- /data/data/####/7ee95a1a89cf8475_0
- /data/data/####/80cb346fe3580cb8_0
- /data/data/####/815887e26b8c65b6_0
- /data/data/####/829c73833d85f9d8_0
- /data/data/####/833b14f80f4f34fd_0
- /data/data/####/8562f65a62d35558_0
- /data/data/####/8562f65a62d35558_1
- /data/data/####/87eea3ad77d40036_0
- /data/data/####/88cfa9f91441c3bb_0
- /data/data/####/8EAD111D030291821E19A80E344C340A.xml
- /data/data/####/8b46aadf9556bc9a_0
- /data/data/####/8bd1a15b1f6ed993_0 (deleted)
- /data/data/####/8c61a5f95baa5a57_0
- /data/data/####/8d292fd5c0f97c7b_0
- /data/data/####/8e2cc375a3eb0625_0
- /data/data/####/8e8479455987ed96_0
- /data/data/####/8f31e579e2b0d950_0
- /data/data/####/8f31e579e2b0d950_0 (deleted)
- /data/data/####/9.dex (deleted)
- /data/data/####/9.dex.flock (deleted)
- /data/data/####/9.jar
- /data/data/####/9151ed3031ed7037_0
- /data/data/####/9196763a51613372_0
- /data/data/####/9196763a51613372_1
- /data/data/####/921e390f15b03729_0
- /data/data/####/92e3db511ae5538c_0
- /data/data/####/9440a5a1a0d7cfbf_0
- /data/data/####/9698f87278fcabe2_0
- /data/data/####/9698f87278fcabe2_0 (deleted)
- /data/data/####/972200a9aa424572_0
- /data/data/####/972200a9aa424572_1
- /data/data/####/97DF4C95B9CCB7B35E85338FEDB0C9B8 (deleted)
- /data/data/####/97DF4C95B9CCB7B35E85338FEDB0C9B8.dex
- /data/data/####/97DF4C95B9CCB7B35E85338FEDB0C9B8.dex.flock (deleted)
- /data/data/####/97DF4C95B9CCB7B35E85338FEDB0C9B8.jar
- /data/data/####/97DF4C95B9CCB7B35E85338FEDB0C9B8.temp
- /data/data/####/985958d976619751_0
- /data/data/####/985958d976619751_1
- /data/data/####/98718389b6635dde_0
- /data/data/####/9c69586bfe89a368_0
- /data/data/####/9c69586bfe89a368_1
- /data/data/####/9c90db0eb09c94a7_0
- /data/data/####/9cdf8e397c1dc061_0
- /data/data/####/9cdf8e397c1dc061_1
- /data/data/####/9d1693c6e97c2575_0
- /data/data/####/9db5cfb500a1b71e_0
- /data/data/####/9e7295600f52437a_0
- /data/data/####/9ed6cd4360ebb3c6_0
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/Cookies-journal
- /data/data/####/D2306CD31F0788B00AF7898632C56C15
- /data/data/####/D2306CD31F0788B00AF7898632C56C15.dex
- /data/data/####/D2306CD31F0788B00AF7898632C56C15.dex.flock (deleted)
- /data/data/####/D2306CD31F0788B00AF7898632C56C15.jar
- /data/data/####/D2306CD31F0788B00AF7898632C56C15.temp
- /data/data/####/Databases.db-journal
- /data/data/####/F340BC0945F5D76F2C470A090C6F7639
- /data/data/####/FAD73B8F04F4676D7F34017BC8A8B4CA.temp
- /data/data/####/QuotaManager-journal
- /data/data/####/UM_PROBE_DATA.xml
- /data/data/####/WebViewChromiumPrefs.xml
- /data/data/####/_p.xml
- /data/data/####/_pn
- /data/data/####/_sh.xml
- /data/data/####/_shn
- /data/data/####/a24087054e9f93ff_0
- /data/data/####/a80d6374381e50aacea2b33c6901b212.db
- /data/data/####/ad62defb184850b4_0
- /data/data/####/ad62defb184850b4_1
- /data/data/####/ahq_spu_ti.xml
- /data/data/####/al_lcom.qlz.ulg.xml
- /data/data/####/al_lcom.qlz.ulg.xml.bak
- /data/data/####/appuserid.xml
- /data/data/####/b124c1bd8df6728a_0
- /data/data/####/b3f2a0d87516e622_0
- /data/data/####/b5e077d1bae86968_0
- /data/data/####/b66d50283ceea97f_0
- /data/data/####/b704bc6006131134_0
- /data/data/####/b7b365be0be15e07_0
- /data/data/####/b8c823cacab55df7_0 (deleted)
- /data/data/####/baf01dbfc1d590b6_0
- /data/data/####/baf01dbfc1d590b6_1
- /data/data/####/bb2b6ba90e5745a4_0
- /data/data/####/bb2b6ba90e5745a4_1
- /data/data/####/be44a1680353185a_0
- /data/data/####/be5c384c7606bde9_0
- /data/data/####/bf60d27e21bd1b77_0
- /data/data/####/c090bce63592e9f9_0
- /data/data/####/c090bce63592e9f9_0 (deleted)
- /data/data/####/c1b7cdb64a3c44c7_0
- /data/data/####/c245484f7f8728e6_0
- /data/data/####/c38266b33467a544_0
- /data/data/####/c3c0211f7b4c9ffe_0 (deleted)
- /data/data/####/c3e3243e9163cf55_0
- /data/data/####/c4a60172f27beae6_0
- /data/data/####/c587b25e3c546ed5_0
- /data/data/####/c587b25e3c546ed5_1
- /data/data/####/c7ce1868366f1643_0
- /data/data/####/c8d7ea01b94ece12_0
- /data/data/####/c9227e0618f034d7a742c4eb482ba306.dex
- /data/data/####/c9227e0618f034d7a742c4eb482ba306.dex.flock (deleted)
- /data/data/####/cbdeb819af343b8c_0
- /data/data/####/cd8bdfd230d84ed7_0
- /data/data/####/cec722cb32e4402e_0
- /data/data/####/cec722cb32e4402e_1
- /data/data/####/cecd9e3c202946ab_0
- /data/data/####/cecd9e3c202946ab_1
- /data/data/####/cf077afbb952ec19_0
- /data/data/####/com.abc.download.xml
- /data/data/####/com.abc.download_preferences.xml
- /data/data/####/com_collections_cache_sdk_db_name.db
- /data/data/####/com_collections_cache_sdk_db_name.db-journal
- /data/data/####/comqskyyekxqlby.nw.xml
- /data/data/####/comxcxid.xml
- /data/data/####/countIp.xml
- /data/data/####/d0e9700dc1fc15e1_0
- /data/data/####/d15965f24161a73f_0
- /data/data/####/d4ec5e4f88214a48_0
- /data/data/####/d610f1c85c12d6d3_0
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTcyMDQ3MTM2MDEw;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTcyMDQ3MTMzMTAz;
- /data/data/####/da16f7c07344520b_0
- /data/data/####/da16f7c07344520b_1
- /data/data/####/dce626bfcff5ded0_0
- /data/data/####/ddfsfwo.data-journal
- /data/data/####/de7a02e384bd2b0c_0
- /data/data/####/downUmeng.dex
- /data/data/####/downUmeng.dex.flock (deleted)
- /data/data/####/downUmeng.jar
- /data/data/####/download.db
- /data/data/####/download.db-journal
- /data/data/####/dpi
- /data/data/####/dynamic_bundle_data.xml
- /data/data/####/e160eb8ac01f05f1_0
- /data/data/####/e31ed47e98d9e743_0 (deleted)
- /data/data/####/e40abd7e95af7a7d_0
- /data/data/####/e7b7757407075848_0
- /data/data/####/e7b7757407075848_1
- /data/data/####/e914b324a708bf1b_0
- /data/data/####/ea99ad38f632fd40_0
- /data/data/####/eeaa9072e9e90779_0
- /data/data/####/eeaa9072e9e90779_1
- /data/data/####/eec11a207ffbe249_0
- /data/data/####/eec11a207ffbe249_1
- /data/data/####/efff4a2e5cf1ffa4_0
- /data/data/####/efff4a2e5cf1ffa4_1
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f055a623f8dfd329_0
- /data/data/####/f233b552e4e91a1a_0
- /data/data/####/f42853dd18208233_0
- /data/data/####/f4fe460a6e3004c9_0
- /data/data/####/f5b663fe702b18e4812733bfd1703dd9.apk
- /data/data/####/f5f4e89d22aba6dd_0
- /data/data/####/f63868c1dbdafef0_0
- /data/data/####/f9f77c2a65303ecc_0
- /data/data/####/fb03cddb7a62015f_0 (deleted)
- /data/data/####/fb0bd373d203a5ca_0
- /data/data/####/fcvgeefrf.data-journal
- /data/data/####/fdeeddsdf.xml
- /data/data/####/fdeeddsdf.xml.bak
- /data/data/####/fdfbe6775aa12dee_0
- /data/data/####/ff23da88244e214a_0
- /data/data/####/ff696e24312bc165_0
- /data/data/####/ff696e24312bc165_0 (deleted)
- /data/data/####/ff92fa8ee764d768_0
- /data/data/####/gameid
- /data/data/####/gameid.zip
- /data/data/####/gsdwwsweq.data-journal
- /data/data/####/hawszfwdsds.xml
- /data/data/####/hawszfwdsds.xml.bak
- /data/data/####/hawszfwdsds.xml.bak (deleted)
- /data/data/####/hhq_spu_ti.xml
- /data/data/####/hid.db
- /data/data/####/http_s.zhitoudsp.com_808.localstorage (deleted)
- /data/data/####/http_s.zhitoudsp.com_808.localstorage-journal
- /data/data/####/https_pro.m.jd.com_0.localstorage-journal
- /data/data/####/https_sw3.duoyi.com_0.localstorage-journal
- /data/data/####/hxdata.xml
- /data/data/####/i==1.2.0&&1.0.7_1572047133136_envelope.log
- /data/data/####/if.xml
- /data/data/####/index
- /data/data/####/info.xml
- /data/data/####/iowaswse.xml
- /data/data/####/iowaswse.xml.bak
- /data/data/####/js_ad_bundle_data.xml
- /data/data/####/kwssheq.data-journal
- /data/data/####/libydyvjt.so
- /data/data/####/libydyvjt.so-32
- /data/data/####/libydyvjt.so-64
- /data/data/####/metrics_guid
- /data/data/####/mfvbxhmx.dex (deleted)
- /data/data/####/mfvbxhmx.dex.flock (deleted)
- /data/data/####/mfvbxhmx.jar
- /data/data/####/proc_auxv
- /data/data/####/sesvwta.xml
- /data/data/####/sfwwWQsewq.data-journal
- /data/data/####/skydriveInfo_v2.0-journal
- /data/data/####/swWsewdQe.xml
- /data/data/####/swWsewdQe.xml.bak
- /data/data/####/test391.jar.dex
- /data/data/####/test391.jar.dex.flock (deleted)
- /data/data/####/test391.jar.zip
- /data/data/####/test391.jar.zip.json
- /data/data/####/testkd.jar.dex
- /data/data/####/testkd.jar.dex.flock (deleted)
- /data/data/####/testkd.jar.zip
- /data/data/####/testkd.jar.zip.json
- /data/data/####/testlhyy.jar.dex
- /data/data/####/testlhyy.jar.dex.flock (deleted)
- /data/data/####/testlhyy.jar.zip
- /data/data/####/testlhyy.jar.zip.json
- /data/data/####/the-real-index
- /data/data/####/tjmisc.png
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_down_.db24.db
- /data/data/####/umeng_down_15.db
- /data/data/####/umeng_down_18.db
- /data/data/####/umeng_down_21.db
- /data/data/####/umeng_down_23_1.db
- /data/data/####/umeng_down_5_2.db
- /data/data/####/umeng_down_6_15.db
- /data/data/####/umeng_down_9.db
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/vbhu.xml
- /data/data/####/vbhu.xml.bak
- /data/data/####/vnfl.xml
- /data/data/####/vv.xml
- /data/data/####/x1x1zead.xml
- /data/data/####/x1x1zead.xml.bak
- /data/data/####/yd_config_c.xml
- /data/misc/####/primary.prof
Другие:
Запускает следующие shell-скрипты:
- /system/bin/cat /proc/cpuinfo
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/.oijab/mfvbxhmx.jar --oat-fd=108 --oat-location=/data/user/0/<Package>/.oijab/mfvbxhmx.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_cachedata/ffe/4C43C0BBBA1469EC97154789EBDC335D.zip --oat-fd=108 --oat-location=/data/user/0/<Package>/files/4C43C0BBBA1469EC97154789EBDC335D.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_js_adplugin/test391.jar.zip --oat-fd=60 --oat-location=/data/user/0/<Package>/app_opt/test391.jar.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_js_adplugin/testkd.jar.zip --oat-fd=111 --oat-location=/data/user/0/<Package>/app_opt/testkd.jar.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_js_adplugin/testlhyy.jar.zip --oat-fd=53 --oat-location=/data/user/0/<Package>/app_opt/testlhyy.jar.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/1s.jar --oat-fd=153 --oat-location=/data/user/0/<Package>/app_dex/1s.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/1s.jar --oat-fd=58 --oat-location=/data/user/0/<Package>/app_dex/1s.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/advDB/c9227e0618f034d7a742c4eb482ba306.db --oat-fd=173 --oat-location=/data/user/0/<Package>/cache/advDB/c9227e0618f034d7a742c4eb482ba306.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/cacheUmeng/oatCache/downUmeng.jar --oat-fd=118 --oat-location=/data/user/0/<Package>/cache/cacheUmeng/oatCache/downUmeng/downUmeng.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/hgap/<Package>/dbu/97DF4C95B9CCB7B35E85338FEDB0C9B8.jar --oat-fd=68 --oat-location=/data/user/0/<Package>/files/97DF4C95B9CCB7B35E85338FEDB0C9B8.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/hgap/<Package>/dbu/D2306CD31F0788B00AF7898632C56C15.jar --oat-fd=59 --oat-location=/data/user/0/<Package>/files/D2306CD31F0788B00AF7898632C56C15.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/15.jar --oat-fd=153 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/15.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/18.jar --oat-fd=166 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/18.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/21.jar --oat-fd=144 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/21.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/23_1.jar --oat-fd=175 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/23_1.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/24.jar --oat-fd=175 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/24.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/5_2.jar --oat-fd=151 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/5_2.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/6_15.jar --oat-fd=153 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/6_15.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/9.jar --oat-fd=153 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/9.dex --compiler-filter=speed
- /system/bin/sh
- cat /proc/cpuinfo
- cat /sys/class/android_usb/android0/idProduct
- cat /sys/class/android_usb/android0/idVendor
- cat /sys/class/net/wlan0/address
- getprop
- ls -l /dev
- ls -l /dev/__properties__
- ls -l /dev/block
- ls -l /dev/block/pci
- ls -l /dev/block/pci/pci0000:00
- ls -l /dev/block/pci/pci0000:00/0000:00:01.1
- ls -l /dev/block/pci/pci0000:00/0000:00:01.1/by-num
- ls -l /dev/block/vold
- ls -l /dev/bus
- ls -l /dev/bus/usb
- ls -l /dev/bus/usb/001
- ls -l /dev/com.android.settings
- ls -l /dev/com.android.settings.daemon
- ls -l /dev/cpuctl
- ls -l /dev/cpuset
- ls -l /dev/cpuset/background
- ls -l /dev/cpuset/foreground
- ls -l /dev/cpuset/foreground/boost
- ls -l /dev/cpuset/system-background
- ls -l /dev/cpuset/top-app
- ls -l /dev/fscklogs
- ls -l /dev/graphics
- ls -l /dev/input
- ls -l /dev/memcg
- ls -l /dev/memcg/apps
- ls -l /dev/pts
- ls -l /dev/snd
- ls -l /dev/socket
- ls -l /dev/stune
- ls -l /dev/stune/background
- ls -l /dev/stune/foreground
- ls -l /dev/stune/top-app
- ls /
- ls /sys/class/thermal
- ps
Использует следующие алгоритмы для шифрования данных:
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- DES
- DES-CBC-PKCS5Padding
- DES-ECB-PKCS5Padding
- RSA-ECB-PKCS1Padding
- RSA-None-PKCS1Padding
Использует следующие алгоритмы для расшифровки данных:
- AES-CBC-NoPadding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- ARCFOUR
- DES
- DES-CBC-PKCS5Padding
- DES-ECB-PKCS5Padding
- RSA-ECB-PKCS1Padding
- RSA-None-PKCS1Padding
Осуществляет доступ к приватному интерфейсу ITelephony.
Получает информацию о местоположении.
Получает информацию о сети.
Получает информацию о телефоне (номер, IMEI и т. д.).
Получает информацию об установленных приложениях.
Получает информацию о запущенных приложениях.
Добавляет задания в системный планировщик.
Отрисовывает собственные окна поверх других приложений.
Получает информацию о входящих/исходящих звонках.
