Adware.Gexin.18566

Техническая информация

Вредоносные функции:

Выполняет код следующих детектируемых угроз:

Adware.Gexin.2.origin

Сетевая активность:

Подключается к:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) q####.c####.l####.####.com:80
TCP(HTTP/1.1) 13.2####.244.29:80
TCP(HTTP/1.1) up####.sdk.jig####.cn:80
TCP(HTTP/1.1) p6.q####.com:80
TCP(HTTP/1.1) qos.l####.360.cn:80
TCP(HTTP/1.1) sdk.l####.360.cn:80
TCP(HTTP/1.1) 1####.192.110.245:80
TCP(HTTP/1.1) c-h####.g####.com:80
TCP(HTTP/1.1) sh####.360t####.com:80
TCP(HTTP/1.1) ab####.m.s.####.cn:80
TCP(HTTP/1.1) amdc####.m.ta####.com:80
TCP(HTTP/1.1) sf1-ttc####.ps####.com:80
TCP(HTTP/1.1) sdk-ope####.g####.com:80
TCP(HTTP/1.1) p.s.3####.cn:80
TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
TCP(HTTP/1.1) p4.q####.com:80
TCP(HTTP/1.1) s####.l####.360.####.com:80
TCP(HTTP/1.1) k####.36####.com:80
TCP(TLS/1.0) sh####.me####.com:443
TCP(TLS/1.0) dualsta####.wagbr####.ali####.####.com:443
TCP(TLS/1.0) 2####.107.1.97:443
TCP(TLS/1.0) s####.tf.360.cn:443
TCP(TLS/1.0) mdm.ope####.360.cn:443
TCP(TLS/1.0) msg.umengc####.com:443
TCP(TLS/1.0) cc.p####.dc.####.cn:443
TCP(TLS/1.0) s####.j####.cn:443
TCP cm-1####.ig####.com:5227
TCP sdk.o####.t####.####.com:5224
UDP s.j####.cn:19000
TCP zb-cent####.m.ta####.com:443
TCP cm-1####.ig####.com:5226
TCP 43.2####.88.99:7006
TCP 1####.163.230.182:80

Запросы DNS:

7j####.c####.z0.####.com
a####.man.aliy####.com
ab####.m.s.####.cn
ag####.m.ta####.com
amdc####.m.ta####.com
app.k.36####.com
c-h####.g####.com
cc.p####.dc.####.cn
cm-1####.ig####.com
cm-1####.ig####.com
k####.36####.com
k####.36####.com
mdm.ope####.360.cn
msg.umengc####.com
p.s.3####.cn
p2.q####.com
p3.qhi####.com
p4.q####.com
p5.q####.com
p6.q####.com
p8.q####.com
plb####.u####.com
qos.l####.360.cn
s####.j####.cn
s####.l####.360.cn
s####.tf.360.cn
s.j####.cn
sdk-ope####.g####.com
sdk.c####.ig####.com
sdk.l####.360.cn
sdk.l####.360.cn
sdk.o####.t####.####.com
sdk.o####.t####.####.com
sdk.o####.t####.####.net
sf1-ttc####.ps####.com
sh####.360t####.com
sh####.me####.com
u####.u####.com
umen####.m.ta####.com
umengj####.m.ta####.com
up####.sdk.jig####.cn

Запросы HTTP GET:

13.2####.244.29/t014372f20fc99d61cf.jpg
ab####.m.s.####.cn/abtest/cloud.so?appkey=####&dt=####&os=####&ov=####&m...
k####.36####.com//k2/appconfig/getjar?appid=####&m=####&m2=####&ch=####&...
k####.36####.com/hotrizon2/appConfig?os=####&use_gear=####&time=####&sys...
k####.36####.com/hotrizon2/appUpdateInfo?os=####&time=####&sys=####&appi...
k####.36####.com/hotrizon2/channel?m2=####&appid=####&m=####&ch=####&vc=...
k####.36####.com/hotrizon2/list?svc=####&kw=####&os=####&ckw=####&sys=##...
k####.36####.com/hotrizon2/myfollower?appid=####&maxOffset=####&m=####&m...
k####.36####.com/hotrizon2/timeline?os=####&direction=####&sys=####&m2=#...
k####.36####.com/k2/appconfig/getNewinfo?appid=####&m=####&m2=####&ch=##...
k####.36####.com/k2/appconfig/getpopup?appid=####&m=####&m2=####&ch=####...
k####.36####.com/k2/home?type=####&appid=####&m=####&m2=####&ch=####&vc=...
k####.36####.com/k2/hotrizon2/aconfig?appid=####&m=####&m2=####&ch=####&...
k####.36####.com/k2/task/event-task/status?appid=####&event=####&m=####&...
p4.q####.com/t017b81a4926d045be3.jpg
p4.q####.com/t01dad536bcc510f492.jpg
p6.q####.com/t012fc70237b7f68d36.jpg
p6.q####.com/t0153de7b80fdb22358.jpg
p6.q####.com/t0158628185199f5b14.jpg
p6.q####.com/t015eaf6139faf1fa35.jpg
p6.q####.com/t019c0898a7fb0f3f57.jpg
q####.c####.l####.####.com/config/hz-hzv6.conf
q####.c####.l####.####.com/tdata_MkX219
q####.c####.l####.####.com/tdata_RTc910
q####.c####.l####.####.com/tdata_XeE960
q####.c####.l####.####.com/tdata_mtl581
qos.l####.360.cn/vc.gif?&bid=####&pid=####&ver=####&c_ver=####&os=####&m...
s####.l####.360.####.com/Object.getFile/livecloudsdk/YW5kcm9pZF9wbHVnaW5...
sdk.l####.360.cn/codec?os=####&tm=####&model=####&r=####&package=####&pi...
sdk.l####.360.cn/rtc?os=####&tm=####&model=####&r=####&package=####&pid=...
sdk.l####.360.cn/sdkconf/metainfos?sign=####&f=####&position=####&u=####...
sdk.l####.360.cn/sdkconf/videoplace?sign=####&u=####&version=####&sdk_ve...
sdk.l####.360.cn/xinxiliu_tv_android_10182.conf?os=####&tm=####&r=####&p...
sf1-ttc####.ps####.com/obj/ad.union.api/3e8fe491488bc1530c56453a3d4723a5
sh####.360t####.com/171122/c867c6e2f627a813302a3a0d0d891203/FZLTHK.TTF

Запросы HTTP POST:

amdc####.m.ta####.com/amdc/mobileDispatch?appkey=####&deviceId=####&plat...
c-h####.g####.com/api.php?format=####&t=####
k####.36####.com/k2/appconfig/getjarlist?appid=####&curEnv=####&m=####&m...
k####.36####.com/k2/hotrizon2/getSInfo?os=####&sys=####&psw2=IE####&m2=#...
p.s.3####.cn/update/update.php?p=####
sdk-ope####.g####.com/api.php?format=####&t=####
sh.wagbr####.aliyun####.com/man/api?ak=####&s=####
up####.sdk.jig####.cn/v1/push/sdk/postlist

Изменения в файловой системе:

Создает следующие файлы:

/data/data/####/.imprint
/data/data/####/.jg.ic
/data/data/####/0105c6db1501ad9d1854712cf10e5ed0501
/data/data/####/010755834705d873c02eb67733691c0e251
/data/data/####/010a77afcfdceda5752ec66510606a67c41
/data/data/####/010cc73c885a8011a89ac11b06cac08cc11
/data/data/####/01153d94f3cc2cf19384530ab596bcb3b11
/data/data/####/0125ae3ab95b324f724523053aeaac65bb1
/data/data/####/012748b7dac1b6c3dfa291e6d38c717a001
/data/data/####/012cb23dd3625be6c7cce17f1cbc3170be1
/data/data/####/0130189ac8a0f7df592c4395018af157ad1
/data/data/####/0130ec1c7c33af04a962133a2e7abadccc1
/data/data/####/01343d5f1e674f8c8e07822b9b20bae4381
/data/data/####/013519b20a660addd7dc6dc049fb6492921
/data/data/####/013db5d8675ef178555dfdcef9f44408b61
/data/data/####/013f0e53b6a0ad6f77de6935c6ecb194fd1
/data/data/####/014017d835dbe824fbb65566bf63f718b71
/data/data/####/0145a6a273103b72a50a1fc743b967c3191
/data/data/####/0147d83f617f88eb713f7ac839c7bf89521
/data/data/####/014bdf7013b75c671652078ac8b67619cf1
/data/data/####/014ec9c3753f9d5c63f436eaa0d7cb66651
/data/data/####/01502121c45e06d2b28655bce83f44b4ff1
/data/data/####/01533c869b5ef35a9ed800f217903214401
/data/data/####/015367e5dcc807b8eb59b76384b0e733c71
/data/data/####/015d8bf38584571fe0b4dabb64714557b71
/data/data/####/0160b822fc5baa0bffbbb08f20b06f595a1
/data/data/####/01611a3219bae7140688588c514ebd20a81
/data/data/####/016224cc1e237629217c4e04b9bbcfbe151
/data/data/####/016846027e2aa9e1def6d87c043b4717a91
/data/data/####/0168f0eb441ea5b7cc53f415662ed2f10dx
/data/data/####/0169f090a45641a52ee5c898cafb3f285d1
/data/data/####/0176e166e4604cb635c9342bf2d9d95de01
/data/data/####/017e718d3650f390d5b590da47cd83946b1
/data/data/####/0186773ce9088c259637f2b6d10131ae8d1
/data/data/####/0190a533b2831b1b492ec652cb2310e57a1
/data/data/####/0193f8cd29770cfb26d0ccc6f623cae5041
/data/data/####/01957f3f49b17d86e2446084890b7e0a351
/data/data/####/01989aaa8fbcc8546bfc18d8483a3168e71
/data/data/####/019b0a91b91bf1918991e21eee48d3f9e71
/data/data/####/019b8b303d8f6f7cd067bd7a5d93a149d71
/data/data/####/019ce3ef06b9649d7017b3d20bbdebde6d1
/data/data/####/019edd8b9261a280dd6cdbdc22a06da2b61
/data/data/####/019f000b29a9531443a7b541378c9486091
/data/data/####/01a1a714db747e2168e6f647dc99cb7dff1
/data/data/####/01a2c3adb30699ef94843573b003994d991
/data/data/####/01a4206d678521758c979eca1ee039e4be1
/data/data/####/01a50d37f518655209b4b00b79f196e1021
/data/data/####/01aa3e34473ea6b840be0bbcbfa667a41e1
/data/data/####/01ab09b03617e598394fa4bc795a4f1aca1
/data/data/####/01ac6976d0028699ce0593f99d4f7877491
/data/data/####/01b0b01548fa0329088e14963935018ebd1
/data/data/####/01b2e1ec35d84f4f78ccbeb8da81bda7c91
/data/data/####/01b75b048387bf1b9ca991632e2e69a8801
/data/data/####/01bcb408079628e5a06625c903480d3b141
/data/data/####/01bed23b666b4cd8453ea2c927456346851
/data/data/####/01bf1b7eb71f45bd7cc422d3e5fdc66cef1
/data/data/####/01c3154f830629cf98fd824d93a6b1460f1
/data/data/####/01d0d829b7e5e896b1557d50dd00946eb11
/data/data/####/01d3b1f2dab76b3bf436b2c18ea76cf5f81
/data/data/####/01d439c70c557ff49c136e5696c5086b131
/data/data/####/01da287b3f86c27404b5296bf3044ccbcf1
/data/data/####/01e534c2516660b2a9c8ef5d7d0e3035f01
/data/data/####/01e87ee2a0d77e7b9f065fab2dfa503bcf1
/data/data/####/01e9ad71360accf7c46ddb92749a9a0e4e1
/data/data/####/01ea101689e2d87ca3a7a30193658ad7211
/data/data/####/01ece907d0ea9963647840c46ba02f75ab1
/data/data/####/01f179c48da6d746840d48a5c6db84f1181
/data/data/####/01f32eac15171c5d1ea2b8ef4becb3e9821
/data/data/####/01fbe940395b8f251ecb2a8869c6ae29451
/data/data/####/01fde7e922f2d0a4c603a38b3bd71319511
/data/data/####/2033145970-602345128
/data/data/####/ACCS_BINDumeng;5a56c9198f4a9d0c2f0001a8.xml
/data/data/####/ACCS_SDK.xml
/data/data/####/ACCS_SDK_CHANNEL.xml
/data/data/####/AGOO_BIND.xml
/data/data/####/AKTorchDownload.db
/data/data/####/AKTorchDownload.db-journal
/data/data/####/Agoo_AppStore.xml
/data/data/####/Alliance.xml
/data/data/####/Alvin2.xml
/data/data/####/ContextData.xml
/data/data/####/DaemonServer
/data/data/####/FZ.TTF
/data/data/####/JPushSA_Config.xml
/data/data/####/MessageStore.db-journal
/data/data/####/MsgLogStore.db-journal
/data/data/####/QHA_JSON_PERSISTER_42998cf32d552343bc8e460416382dca
/data/data/####/QH_DeviceSDK.xml
/data/data/####/QH_SDK_M2.xml
/data/data/####/QH_SDK_UserData42998cf32d552343bc8e460416382dca.xml
/data/data/####/QH_SDK_UserData6766aa2750c19aad2fa1b32f36ed4aee.xml
/data/data/####/QH_SDK_sessionID42998cf32d552343bc8e460416382dca.xml
/data/data/####/Y29tLmxpZ2h0c2t5LnZpZGVv.tick.lock
/data/data/####/abtest_base_sp_filename42998cf32d552343bc8e4604...ca.xml
/data/data/####/accs.db-journal
/data/data/####/ad_config_file.xml
/data/data/####/ad_count_file.xml
/data/data/####/agoo.pid
/data/data/####/appPackageNames
/data/data/####/app_globel_config_file.xml
/data/data/####/auth_guide_config_sdk.xml
/data/data/####/cache.ttf
/data/data/####/cloud_switch_cache
/data/data/####/cn.jpush.android.user.profile.xml
/data/data/####/cn.jpush.preferences.v2.rid.xml
/data/data/####/cn.jpush.preferences.v2.xml
/data/data/####/critical_service_config.xml
/data/data/####/dW1weF9pbnRlcm5hbF8xNTczMDg4MTQzMjUz;
/data/data/####/dW1weF9pbnRlcm5hbF8xNTczMDg4MTU3OTcz;
/data/data/####/dW1weF9pbnRlcm5hbF8xNTczMDg4MTUwOTA4;
/data/data/####/dW1weF9pbnRlcm5hbF8xNTczMDg4MTY1MzM2;
/data/data/####/dW1weF9pbnRlcm5hbF8xNTczMDg4MTc4MDgy;
/data/data/####/dW1weF9pbnRlcm5hbF8xNTczMDg4MTcyMjcx;
/data/data/####/dW1weF9pbnRlcm5hbF8xNTczMDg4MTg1MTU1;
/data/data/####/dW1weF9pbnRlcm5hbF8xNTczMDg4MTk4ODk2;
/data/data/####/dW1weF9pbnRlcm5hbF8xNTczMDg4MTkyMDI1;
/data/data/####/dW1weF9wdXNoX3JlZ2lzdGVyXzE1NzMwODgxNTY0ODU=;
/data/data/####/dso_deps
/data/data/####/dso_lock
/data/data/####/dso_manifest
/data/data/####/dso_state
/data/data/####/exchangeIdentity.json
/data/data/####/exid.dat
/data/data/####/finalcore.jar
/data/data/####/getui_sp.xml
/data/data/####/gkt-journal
/data/data/####/hotrizon_sharepref.xml
/data/data/####/httpdns_config_cache.xml
/data/data/####/i==1.2.0&&1.1.82_1573088144146_envelope.log
/data/data/####/i==1.2.0&&1.1.82_1573088158295_envelope.log
/data/data/####/i==1.2.0&&1.1.82_1573088165391_envelope.log
/data/data/####/i==1.2.0&&1.1.82_1573088172462_envelope.log
/data/data/####/i==1.2.0&&1.1.82_1573088185424_envelope.log
/data/data/####/i==1.2.0&&1.1.82_1573088192007_envelope.log
/data/data/####/info.xml
/data/data/####/init.pid
/data/data/####/init_c1.pid
/data/data/####/jg_so_upgrade_setting.xml
/data/data/####/jpush_device_info.xml
/data/data/####/jpush_local_notification.db
/data/data/####/jpush_local_notification.db-journal
/data/data/####/jpush_local_notification.db-shm (deleted)
/data/data/####/jpush_local_notification.db-wal
/data/data/####/jpush_stat_cache.json
/data/data/####/jpush_stat_cache_history.json
/data/data/####/jpush_statistics.db
/data/data/####/jpush_statistics.db-journal
/data/data/####/jpush_statistics.db-shm (deleted)
/data/data/####/jpush_statistics.db-wal
/data/data/####/jpush_statistics.db-wal (deleted)
/data/data/####/jpush_uncaughtexception_file
/data/data/####/libjiagu.so
/data/data/####/libtranscore.so.tmp
/data/data/####/localserver_2.0.3.18031501.zip
/data/data/####/locker
/data/data/####/message_accs_db
/data/data/####/message_accs_db-journal
/data/data/####/multidex.version.xml
/data/data/####/p.l
/data/data/####/player_record_2.0.3.18031501.zip
/data/data/####/push.db-journal
/data/data/####/push.pid
/data/data/####/push_share.xml
/data/data/####/pushsdk.db-journal
/data/data/####/qhvc_plugin.xml
/data/data/####/qihoo_jiagu_crash_report.xml
/data/data/####/run.pid
/data/data/####/share_data.xml
/data/data/####/single_process_core_update
/data/data/####/single_process_core_update_locker
/data/data/####/single_process_device_collector
/data/data/####/single_process_device_collector_locker
/data/data/####/single_process_offlineSplash
/data/data/####/single_process_offlineSplash_locker
/data/data/####/single_process_profile_task
/data/data/####/single_process_profile_task_locker
/data/data/####/single_process_uninstall_apk
/data/data/####/single_process_uninstall_apk_locker
/data/data/####/sp.livecloud.database.xml
/data/data/####/tdata_mtl581
/data/data/####/tdata_mtl581.jar
/data/data/####/tools_2.0.3.18031501.zip
/data/data/####/torch_sdk_config.xml
/data/data/####/um_pri.xml
/data/data/####/umdat.xml
/data/data/####/umeng_common_config.xml
/data/data/####/umeng_general_config.xml
/data/data/####/umeng_it.cache
/data/data/####/umeng_message_state.xml
/data/data/####/videolist.db-journal
/data/data/####/webview.db-journal
/data/data/####/webviewCookiesChromium.db-journal
/data/data/####/webviewCookiesChromiumPrivate.db-journal
/data/media/####/.a.dat
/data/media/####/.adfwe.dat
/data/media/####/.cca.dat
/data/media/####/.deviceId
/data/media/####/.iddata
/data/media/####/.nomedia
/data/media/####/.push_deviceid
/data/media/####/.sfp
/data/media/####/.testf
/data/media/####/.umm.dat
/data/media/####/029a752958074561a3f3d88dea30ed0a
/data/media/####/11i-xuo5AOH5jJ2ViUdTUjKfJ5k.1078353397.tmp
/data/media/####/15055124fb694cc8a7ac7309ed19651d
/data/media/####/2719d0a519254b8ab0cf130fe4d6d069
/data/media/####/3Bo
/data/media/####/3Bo (deleted)
/data/media/####/3o5
/data/media/####/3o5 (deleted)
/data/media/####/42998cf32d552343bc8e460416382dca
/data/media/####/464cb6c74a2d433f8f3d152a62b21e89
/data/media/####/49786334c1d943459f35d97a4f545809
/data/media/####/4c588b178a684c588c6f5eb596024894
/data/media/####/4f408d28e23f4fba84b912309ede7894
/data/media/####/5uV
/data/media/####/5uV (deleted)
/data/media/####/6766aa2750c19aad2fa1b32f36ed4aee
/data/media/####/6766aa2750c19aad2fa1b32f36ed4aee (deleted)
/data/media/####/8a2291fc543c4337ad919f875417110f
/data/media/####/950146a43bef40879b86faa0e9858463
/data/media/####/9utIBwq8eV05NqXk6BLkJS45IMU.1348052731.tmp
/data/media/####/Alvin2.xml
/data/media/####/Blu
/data/media/####/Blu (deleted)
/data/media/####/CII
/data/media/####/CII (deleted)
/data/media/####/ContextData.xml
/data/media/####/EtC6qg_woj5JX7qJ6amF7hnuvbc.160070057.tmp
/data/media/####/NoXU333UxSn3EZ-9dNZudf48lz8.-654201402.tmp
/data/media/####/Y29tLmxpZ2h0c2t5LnZpZGVv
/data/media/####/Y29tLmxpZ2h0c2t5LnZpZGVv (deleted)
/data/media/####/Zk-ycAjyoHZdlm2Z8xkulPRhLOk.-654201402.tmp
/data/media/####/a4d2557dce704f5ba4be0262db8bd0fb
/data/media/####/a5b65a10c7644c5186a299041ea97444
/data/media/####/a84e2b1a4d8a46ed8c2abc52fd715c48
/data/media/####/aaa9955dd018401c906d69a7f29363b2
/data/media/####/app.db
/data/media/####/b80e8b6a8a75436a8b4661e9122875c8
/data/media/####/cf9baaa24d6f41f9963c9158589e49e9
/data/media/####/com.igexin.sdk.deviceId.db
/data/media/####/com.lightsky.video.bin
/data/media/####/com.lightsky.video.db
/data/media/####/d256958c34dd43eabc5f67d01c29b5e6
/data/media/####/dBu
/data/media/####/dBu (deleted)
/data/media/####/data.lock
/data/media/####/deviceToken
/data/media/####/e76a8aa918f849af8b4433fd85dd8497
/data/media/####/e9807e67dab5414dbdbabc3afe25f5dd
/data/media/####/edd1e6ba800d4ed7993dd1533631ab70
/data/media/####/f9bdae595eb74c06aaa879e3e96b12d4
/data/media/####/fUw
/data/media/####/fUw (deleted)
/data/media/####/g6TrA-kF7OVIxmf2NKmzw7OvlTY.-654201402.tmp
/data/media/####/gkt-journal
/data/media/####/gktper
/data/media/####/h6f
/data/media/####/h6f (deleted)
/data/media/####/jxQmR8dPkpim0HODIRHPkF_YC8c.-654201402.tmp
/data/media/####/q4t
/data/media/####/q4t (deleted)
/data/media/####/report.lock
/data/media/####/sysid.dat
/data/media/####/tSOcmzh1GLLppiEfa--woxVmZtU.1348052731.tmp
/data/media/####/tdata_mtl581
/data/media/####/vk_QxkqKdJGdVB8Ans-kjPgNu7A.-1048996766.tmp
/data/media/####/wLc
/data/media/####/wLc (deleted)
/data/media/####/yiU
/data/media/####/yiU (deleted)
/data/media/####/zrk
/data/media/####/zrk (deleted)

Другие:

Запускает следующие shell-скрипты:

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
<Package Folder>/files/DaemonServer -s <Package Folder>/lib/ -n runServer -p startservice -n <Package>/com.taobao.accs.ChannelService --user 0 -f <Package Folder> -t 600 -c agoo.pid -P <Package Folder> -K 1009527 -U tb_accs_eudemon_1.1.3 -L http://agoodm.m.taobao.com/agoo/report -D {"package":"<Package>","appKey":"umeng:5a56c9198f4a9d0c2f0001a8","utdid":"XcNrjosIKDUDAGdzx1FQiMqc","sdkVersion":"221"} -I agoodm.m.taobao.com -O 80 -T -Z
chmod 500 <Package Folder>/files/DaemonServer
chmod 755 <Package Folder>/.jiagu/libjiagu.so
ls /sys/class/thermal
sh

Загружает динамические библиотеки:

GPBreakpad
getuiext2
jcore118
libimagepipeline
libjiagu
libtranscore
tnet-3.1

Использует следующие алгоритмы для шифрования данных:

AES-CBC-NoPadding
AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-PKCS5Padding
AES-ECB-PKCS7Padding
DES
RSA-ECB-PKCS1Padding
RSA-NONE-OAEPWithSHA1AndMGF1Padding
RSA-None-PKCS1Padding

Использует следующие алгоритмы для расшифровки данных:

AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-NoPadding
AES-ECB-PKCS5Padding

Осуществляет доступ к приватному интерфейсу ITelephony.

Использует специальную библиотеку для скрытия исполняемого байт-кода.

Получает информацию о местоположении.

Получает информацию о сети.

Получает информацию о телефоне (номер, IMEI и т. д.).

Получает информацию об установленных приложениях.

Получает информацию о запущенных приложениях.

Получает информацию о привязанных к устройству аккаунтах (Google, Facebook и т. д.).

Добавляет задания в системный планировщик.

Отрисовывает собственные окна поверх других приложений.

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней