Adware.Gexin.19055

Техническая информация

Вредоносные функции:

Выполняет код следующих детектируемых угроз:

Adware.Gexin.2.origin

Сетевая активность:

Подключается к:

UDP(DNS) 8####.8.4.4:53
TCP(HTTP/1.1) q####.c####.l####.####.com:80
TCP(HTTP/1.1) ani####.d####.tv:8081
TCP(HTTP/1.1) cdn-sdk####.g####.com.####.com:80
TCP(HTTP/1.1) c-h####.g####.com:80
TCP(HTTP/1.1) and####.b####.qq.com:80
TCP(HTTP/1.1) njdx####.d####.tv:80
TCP(HTTP/1.1) sdk.o####.p####.####.com:80
TCP(HTTP/1.1) appact####.d####.tv:8081
TCP(HTTP/1.1) ani####.d####.tv:80
TCP(HTTP/1.1) ani####.d####.tv:8083
TCP(HTTP/1.1) cgi.con####.qq.com:80
TCP(TLS/1.0) vjs.ze####.net:443
TCP(TLS/1.0) 1####.217.20.106:443
TCP(TLS/1.0) instant####.google####.com:443
TCP(TLS/1.0) and####.google####.com:443
TCP(TLS/1.0) bj####.j####.cn:443
TCP(TLS/1.0) api.w####.com:443
TCP(TLS/1.0) mtjso####.b####.com:443
TCP(TLS/1.0) p####.google####.com:443
TCP(TLS/1.0) 1####.217.17.110:443
TCP(TLS/1.0) dxp.b####.com:443
TCP(TLS/1.0) h####.b####.com:443
TCP(TLS/1.0) sdk.verific####.jig####.cn:443
TCP(TLS/1.2) 1####.217.17.142:443
TCP(TLS/1.2) 1####.217.20.106:443
TCP 43.2####.88.81:7003
TCP cm-1####.ig####.com:5225
TCP sdk.o####.t####.####.com:5224
UDP s.j####.cn:19000
TCP 43.2####.88.73:7006
UDP sis.j####.io:19000
TCP 1####.232.25.190:21006
TCP cm-1####.ig####.com:5224

Запросы DNS:

7j####.c####.z0.####.com
and####.b####.qq.com
and####.google####.com
ani####.d####.tv
api.w####.com
appact####.d####.tv
bj####.j####.cn
c-h####.g####.com
cdn-sdk####.g####.com
cgi.con####.qq.com
cm-1####.ig####.com
cm-1####.ig####.com
cm-1####.ig####.com
dxp.b####.com
dzc####.a####.tv
easytom####.com
f####.a####.tv
f####.a####.tv
h####.b####.com
i####.me
instant####.google####.com
l####.cmpass####.com
mtjso####.b####.com
njdx####.d####.tv
o####.e.189.cn
one####.cmpass####.com
openc####.wos####.cn
p####.google####.com
s.j####.cn
sdk-ope####.g####.com
sdk.c####.ig####.com
sdk.o####.p####.####.com
sdk.o####.t####.####.com
sdk.o####.t####.####.com
sdk.o####.t####.####.net
sdk.verific####.jig####.cn
sis.j####.io
vjs.ze####.net
wap.cmpass####.com
www.a####.tv
zj####.d####.tv

Запросы HTTP GET:

ani####.d####.tv/201609302054112228/201609302054112228.jpg
ani####.d####.tv/2018/04/25/d4c1bae0a0a1165da95da9af31b69aa6.png
ani####.d####.tv/2019/05/15/b8bdfc53a59ee740a5744b9a7c59b2a3.png
ani####.d####.tv/2019/05/22/b48926020edfe13fb52fcc92d24a2fa2.png
ani####.d####.tv/2019/06/21/b0e2da654a8601b6b5cb28a71a91434c.png?devid=8...
ani####.d####.tv/2019/07/15/cfcabd0568f25db17a112ec21779333c.jpg
ani####.d####.tv/2019/10/08/7f83c3b2b177cf4b44281bd776c2b625.jpg
ani####.d####.tv/2019/10/25/626f98cc0d32c35f437dd13682dd87cd.jpg
ani####.d####.tv/2019/11/18/51ebfa035db49d2e210c08f973fd76e5.jpg
ani####.d####.tv/2019/11/18/bacd536346ceab06fbc3ca7e90606b29.png
ani####.d####.tv/2019/11/19/f3e047f866bd33f903c4ede22f2247f3.png
ani####.d####.tv/2019/12/06/002a7816755a533ed2deec248870d07f.png
ani####.d####.tv/2019/12/06/00935326a0aa12bdcc8b018139cf074a.png
ani####.d####.tv/2019/12/06/14a622edd05cf84031c224a9150c04c7.png
ani####.d####.tv/2019/12/06/19903c569d168c30c4a2b1293bc1cb46.png
ani####.d####.tv/2019/12/06/1c2e3430128b1ae694af3d311a9af8e2.png
ani####.d####.tv/2019/12/06/281f4736338e74c360d76d78e7d57e67.png
ani####.d####.tv/2019/12/06/31173971edd48d450137b52a3f5f58b5.png
ani####.d####.tv/2019/12/06/39f46d05ab13c1b72915ea65df2aee50.png
ani####.d####.tv/2019/12/06/65b1e546dfd9999afdca32f0d6aa0ce8.png
ani####.d####.tv/2019/12/06/6edd3f170489d763b29a096d4038139e.png
ani####.d####.tv/2019/12/06/7519a94037eb7f1dc17f68fe1b88e1ea.png
ani####.d####.tv/2019/12/06/7829474898947772e870e4432667197d.png
ani####.d####.tv/2019/12/06/80e7b424f35197e417378eb32b520bdc.png
ani####.d####.tv/2019/12/06/924cfd4f9e30dbf1ca9107014d75607b.png
ani####.d####.tv/2019/12/06/a8cc374376e0acbcb47a5d5327102aca.png
ani####.d####.tv/2019/12/06/b3a10c869b9a2e95c797b0ebbc826508.png
ani####.d####.tv/2019/12/06/b51dfc158b90909da5c0a8e23468b512.png
ani####.d####.tv/2019/12/06/bb390d6976c95c8c6476c328dc832582.png
ani####.d####.tv/2019/12/06/c7a56b6b8bec10805037f1b162ca2988.jpg
ani####.d####.tv/2019/12/06/dc6973174bb4fafa70fc725f65cd0288.png
ani####.d####.tv/2019/12/06/dde5e917b3fb6f23d9ce33aa5ae693d1.png
ani####.d####.tv/2019/12/06/df708b535891ec157f9b7a84f08d2049.png
ani####.d####.tv/2019/12/07/06b596647da07a5c49f25a55843d1c2b.png
ani####.d####.tv/2019/12/07/07a1ba3ad1a32ec6367a29904c0f8ea2.jpg
ani####.d####.tv/2019/12/07/10e617367739bf5e1ec8a1b2c4f7034f.jpg
ani####.d####.tv/2019/12/07/1c67670c39fc69d9d4a655c3d3f838c9.jpg
ani####.d####.tv/2019/12/07/283fa910e2515c5a03986c66180f87b0.png
ani####.d####.tv/2019/12/07/2d1ddbd9afbe801d5df17df04a8f9d1f.jpg
ani####.d####.tv/2019/12/07/62aa8983eb7e6167f605bcbcda820247.jpg
ani####.d####.tv/2019/12/07/77ce8773b0750a6b7b891139a188f5c9.jpg
ani####.d####.tv/2019/12/07/98ec87a95b11862bb6eb496e56f935e7.jpg
ani####.d####.tv/2019/12/07/a0d680ca8f831b3166391349ca080c40.png
ani####.d####.tv/2019/12/07/ad0fa933eb09404d7630a43f346fc0f8.jpg
ani####.d####.tv/2019/12/07/b76cf664fa09de450699ae0a8a0450d4.jpg
ani####.d####.tv/2019/12/07/c3c128f3cca2418e03962de8b232406e.png
ani####.d####.tv/2019/12/07/eba9143c1d4f5ea6e391601f7eb89809.jpg
ani####.d####.tv/2019/12/07/ecd751168f6b0dff254e0c81145e8b7b.png
ani####.d####.tv/5.8.6/css/iconfont.css
ani####.d####.tv/5.8.6/css/index/indexRecommend.css
ani####.d####.tv/5.8.6/css/mescroll/mescroll-option.css
ani####.d####.tv/5.8.6/css/mescroll/mescroll.min.css
ani####.d####.tv/5.8.6/css/public.css
ani####.d####.tv/5.8.6/css/swiper/swiper.min.css
ani####.d####.tv/5.8.6/css/zjtArticleDetail.css
ani####.d####.tv/5.8.6/fonts/iconfont.ttf?t=####
ani####.d####.tv/5.8.6/html/index/index_ColumnList.html?c_type=####
ani####.d####.tv/5.8.6/html/zjt/zjt_content_detail.html?content_id=####&...
ani####.d####.tv/5.8.6/images/ClipboardImage.gif
ani####.d####.tv/5.8.6/images/banner_v3.jpg
ani####.d####.tv/5.8.6/images/course_bg.gif
ani####.d####.tv/5.8.6/images/lloading.gif
ani####.d####.tv/5.8.6/js/fastclick.js
ani####.d####.tv/5.8.6/js/iconfont.js
ani####.d####.tv/5.8.6/js/jquery.base64.js
ani####.d####.tv/5.8.6/js/jquery.md5.js
ani####.d####.tv/5.8.6/js/jquery.min.js
ani####.d####.tv/5.8.6/js/mescroll/mescroll-option.js
ani####.d####.tv/5.8.6/js/mescroll/mescroll.min.js
ani####.d####.tv/5.8.6/js/public.js
ani####.d####.tv/5.8.6/template/index/style.IndexColumnList.js
ani####.d####.tv/5.8.6/template/index/tpl.IndexColumnList.js
ani####.d####.tv/5.8.6/template/pub.ColLabel.js
ani####.d####.tv/5.8.6/template/tpl.ZJT_ArticleDetail.js
ani####.d####.tv/Public/Common/js/jquery.min.js
ani####.d####.tv/Public/Common/js/messenger.js
ani####.d####.tv/Public/Index/images/ClipboardImage.gif
ani####.d####.tv/Public/Index/images/index/video_bg_aticle.jpg?v=####
ani####.d####.tv/Public/Njdx/js/video/syun/vod/play_open.js?v=####
ani####.d####.tv/Public/Njdx/js/video/vjs/live.js?v=####
ani####.d####.tv/aniuapi/api/v2/ad/appconfig?devid=####&clienttype=####&...
ani####.d####.tv/aniuapi/api/v2/ad/getadvertisement.html?id=####
ani####.d####.tv/aniuapi/api/v2/aniuChannelUserDialog/doDialog?page=####...
ani####.d####.tv/aniuapi/api/v2/comment/appQuery?channelid=####&clientid...
ani####.d####.tv/aniuapi/api/v2/menumanager/gethasmenu?platform=####&dev...
ani####.d####.tv/aniuapi/api/v2/transcript/getTsPayDetail?callback=####&...
ani####.d####.tv/aniuapi/api/v2/transcript/query?channelid=####&clientid...
ani####.d####.tv/favicon.ico
ani####.d####.tv/index/video/s/aHR0cDovL3YuYW5pdS50di92aWRlby9wbGF5L2lkL...
ani####.d####.tv:8081/useravatar255886/20150923/useravatar255886_2015092...
ani####.d####.tv:8083/aniuapi/api/v2/adrecommend/queryXqyTj?callback=###...
cdn-sdk####.g####.com.####.com/tdata_EDB102
cdn-sdk####.g####.com.####.com/tdata_SIq813
cdn-sdk####.g####.com.####.com/tdata_agG322
cdn-sdk####.g####.com.####.com/tdata_xEA084
cgi.con####.qq.com/qqconnectopen/openapi/policy_conf?status_os=####&stat...
njdx####.d####.tv/aniuapi/api/v2/ad/appconfig?devid=####&clienttype=####...
njdx####.d####.tv/aniuapi/api/v2/menumanager/gethasmenu?platform=####&de...
q####.c####.l####.####.com/config/hz-hzv6.conf
q####.c####.l####.####.com/tdata_LRe817
sdk.o####.p####.####.com/api/addr.htm

Запросы HTTP POST:

and####.b####.qq.com/rqd/async?aid=####
appact####.d####.tv:8081/addAniuApp
c-h####.g####.com/api.php?format=####&t=####
sdk.o####.p####.####.com/api.php?format=####&t=####
sdk.o####.p####.####.com/api.php?format=####&t=####&d=####&k=####

Изменения в файловой системе:

Создает следующие файлы:

/data/data/####/.jg.ic
/data/data/####/004f5f05617cdfd1_0
/data/data/####/0208ed9e4c84e2bd_0
/data/data/####/0208ed9e4c84e2bd_1
/data/data/####/027b424949484f8e_0
/data/data/####/03808d84edbe2448_0
/data/data/####/0dd6c6424a3d96b2_0
/data/data/####/1002
/data/data/####/1004
/data/data/####/1426fb1d2ae21a89_0
/data/data/####/175ced68043ac3f9_0
/data/data/####/18eed49df9a1d5a4_0
/data/data/####/19c615c7a51e977d_0
/data/data/####/1a9e14a2a8829717_0
/data/data/####/1b8e08d7027923ef_0
/data/data/####/1bf6ac44ba41f467_0
/data/data/####/232d5db5c872ad91276a60f9c54c6fe1.0.tmp
/data/data/####/232d5db5c872ad91276a60f9c54c6fe1.1.tmp
/data/data/####/236dc6aa3399184a_0
/data/data/####/2455fa71-7ca7-4dde-b79d-fbf1a84387d4
/data/data/####/260f776476ecab8e_0
/data/data/####/260f776476ecab8e_1
/data/data/####/2ac2f4192e711502_0
/data/data/####/2d63c44fbcd10056_0
/data/data/####/2f8da2f3ce2ac5e5_0
/data/data/####/348749194aa5b70d_0
/data/data/####/3c818bcac8452425_0
/data/data/####/3c818bcac8452425_1
/data/data/####/419ff4b5e849276f_0
/data/data/####/419ff4b5e849276f_1
/data/data/####/45dda39c700ca8b6_0
/data/data/####/47fa2fd4883d5abc_0
/data/data/####/4d514d4c-1921-4677-9f59-9ba6f4c346ac
/data/data/####/52a5a41146aa6c77_0
/data/data/####/52a5a41146aa6c77_1
/data/data/####/53f36df88bb4633e_0
/data/data/####/53f36df88bb4633e_1
/data/data/####/5a8cf735a6d1f236_0
/data/data/####/5cc78265c0fb33a1_0
/data/data/####/5cc78265c0fb33a1_1
/data/data/####/5dda445a6331977d_0
/data/data/####/5dda445a6331977d_1
/data/data/####/5ecf8cc829542391_0
/data/data/####/6108ef679820e31c_0
/data/data/####/65ee2058e1e4b2ef_0
/data/data/####/6a0303079577200d_0
/data/data/####/6a0303079577200d_1
/data/data/####/6c58d6bae132d8e0_0
/data/data/####/6dbf6633d1564f69_0
/data/data/####/6f796fe353b9585d_0
/data/data/####/74f538fd399b70d0_0
/data/data/####/766082d944ede615_0
/data/data/####/76edefbdfe87e9af_0
/data/data/####/7811e35b8a9ff40f_0
/data/data/####/7d8bf2482ffd2182_0
/data/data/####/7eefd6247d59f73e_0
/data/data/####/8581f4689d61c6c4_0
/data/data/####/8e9aa81b4a6b70de_0
/data/data/####/93a01ad38cd10a63_0
/data/data/####/93a01ad38cd10a63_1
/data/data/####/9ab6ca2161c42c9a_0
/data/data/####/9e755f60ac5ec2e0_0
/data/data/####/9fe76980b0ed3e00_0
/data/data/####/BUGLY_COMMON_VALUES.xml
/data/data/####/Cookies-journal
/data/data/####/IpInfos.xml
/data/data/####/IpInfos.xml.bak
/data/data/####/Push_Page_Config.xml
/data/data/####/VERIFY_SP.xml
/data/data/####/VERIFY_SP.xml.bak
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/__Baidu_Stat_SDK_SendRem.xml
/data/data/####/__Baidu_Stat_SDK_SendRem.xml.bak
/data/data/####/__local_ap_info_cache.json
/data/data/####/__local_last_session.json
/data/data/####/__local_stat_cache.json
/data/data/####/__local_stat_full_cache.json
/data/data/####/__send_data_1575692965906
/data/data/####/a0460a07920d367c_0
/data/data/####/a087bdbf4aeccd96_0
/data/data/####/a322d9840891038b_0
/data/data/####/a3e17045-d403-41c1-b64b-837afc1ba2ab
/data/data/####/a411026061d81da2_0
/data/data/####/a411026061d81da2_1
/data/data/####/a8068ea094f1
/data/data/####/a8a30d27b3e0e12f_0
/data/data/####/a8b42bbc-3a23-4017-81d3-7dea39cfb205
/data/data/####/abfa22a76f658563_0
/data/data/####/b3e78790f0e2de07f8866283d1432a7a.0.tmp
/data/data/####/b3e78790f0e2de07f8866283d1432a7a.1.tmp
/data/data/####/b8f7f64e532aa16f_0
/data/data/####/b9e3b4a6924dd465_0
/data/data/####/baidu_mtj_sdk_record.xml
/data/data/####/bal.catch
/data/data/####/bc06cc36a7cbadf1_0
/data/data/####/bc9d10fdd7565de1_0
/data/data/####/bd4e5a049d324037_0
/data/data/####/bugly_db_-journal
/data/data/####/bwc.catch
/data/data/####/c304e4f4de9a6c09d176f8ffcebaf946117920142964226....0.tmp
/data/data/####/c39772f4f660b44f_0
/data/data/####/c6e9d47f2cbf8628_0
/data/data/####/c7be39649418a9c8_0
/data/data/####/ca33f2ea8f68d71f_0
/data/data/####/ca578384c1d9fa6a_0
/data/data/####/ca578384c1d9fa6a_1
/data/data/####/cd0ddd377f7986f3_0
/data/data/####/classes.dex
/data/data/####/classes.dex;classes2.dex
/data/data/####/cn.jiguang.common.xml
/data/data/####/cn.jiguang.common.xml.bak
/data/data/####/cn.jiguang.jverify.xml
/data/data/####/cn.jiguang.sdk.address.xml
/data/data/####/cn.jiguang.sdk.user.profile.xml
/data/data/####/cn.jpush.android.user.profile.xml
/data/data/####/cn.jpush.preferences.v2.rid.xml
/data/data/####/cn.jpush.preferences.v2.xml
/data/data/####/com.tencent.open.config.json.101081844
/data/data/####/comment.db
/data/data/####/comment.db-journal
/data/data/####/content.db
/data/data/####/content.db-journal
/data/data/####/crashrecord.xml
/data/data/####/d0bca31963602f3d_0
/data/data/####/d0bca31963602f3d_1
/data/data/####/d7189ca225ee50f3_0
/data/data/####/d74309854b65060a_0
/data/data/####/d8d8a51d8f437502_0
/data/data/####/d9a86eb54107f752_0
/data/data/####/dc5eb67d85594a37_0
/data/data/####/dcff13916a658ced_0
/data/data/####/df78f1f47281b1b2_0
/data/data/####/dfcb0d22fc21a2d6_0
/data/data/####/dzcj.xml
/data/data/####/e0a8406e5edb0c06_0
/data/data/####/e0a8406e5edb0c06_1
/data/data/####/e21dfd0b60d91a8e_0
/data/data/####/e21dfd0b60d91a8e_1
/data/data/####/e8d7c6b487d0ec1bb272c2ae6744dd17.0.tmp
/data/data/####/e8d7c6b487d0ec1bb272c2ae6744dd17.1.tmp
/data/data/####/eaef6c0b1d089d5b_0
/data/data/####/ec03f0d55394931d_0
/data/data/####/ec03f0d55394931d_1
/data/data/####/ec5b098d27cec40a_0
/data/data/####/f446ec4c-5de0-458f-b7c2-cd2049b6a236
/data/data/####/f44e3ab507085561_0
/data/data/####/f466b190280b87e6_0
/data/data/####/f89197f7caea0fc0_0
/data/data/####/f8d6ee06a67b08e5_0
/data/data/####/f8d6ee06a67b08e5_1
/data/data/####/fa42615314c19bd7_0
/data/data/####/fb5ab1033b765a6d_0
/data/data/####/fe49b61ff44876fe_0
/data/data/####/fe49b61ff44876fe_1
/data/data/####/fe5189e55567baff_0
/data/data/####/fed8e7ee7dd5925d_0
/data/data/####/getui_sp.xml
/data/data/####/gkt-journal
/data/data/####/gx_sp.xml
/data/data/####/http_dzcjapp.aniu.tv_0.localstorage-journal
/data/data/####/index
/data/data/####/init.pid
/data/data/####/init_c1.pid
/data/data/####/journal.tmp
/data/data/####/libcuid.so
/data/data/####/libjiagu.so
/data/data/####/local_crash_lock
/data/data/####/metrics_guid
/data/data/####/mtj_autoTracker.js
/data/data/####/native_record_lock
/data/data/####/native_record_lock (deleted)
/data/data/####/preload_ad
/data/data/####/proc_auxv
/data/data/####/push.pid
/data/data/####/push_stat_cache.json
/data/data/####/pushext.db-journal
/data/data/####/pushg.db-journal
/data/data/####/pushsdk.db-journal
/data/data/####/rl.catch
/data/data/####/run.pid
/data/data/####/security_info
/data/data/####/tdata_SIq813
/data/data/####/tdata_SIq813.dex
/data/data/####/tdata_SIq813.dex.flock (deleted)
/data/data/####/tdata_SIq813.jar
/data/data/####/tdata_agG322
/data/data/####/tdata_agG322.dex
/data/data/####/tdata_agG322.dex.flock (deleted)
/data/data/####/tdata_agG322.jar
/data/data/####/tdata_xEA084
/data/data/####/tdata_xEA084.dex
/data/data/####/tdata_xEA084.dex.flock (deleted)
/data/data/####/tdata_xEA084.jar
/data/data/####/the-real-index
/data/data/####/tj.db-journal
/data/data/####/trace_circle.data
/data/data/####/tv.aniu.app.dzlc.BETA_VALUES.xml
/data/data/####/tv.aniu.app.dzlc_preferences.xml
/data/data/####/weibo_sdk_aid1
/data/misc/####/primary.prof

Другие:

Запускает следующие shell-скрипты:

/system/bin/cat /proc/cpuinfo
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tdata_SIq813.jar --oat-fd=69 --oat-location=/data/user/0/<Package>/files/tdata_SIq813.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tdata_agG322.jar --oat-fd=69 --oat-location=/data/user/0/<Package>/files/tdata_agG322.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tdata_xEA084.jar --oat-fd=59 --oat-location=/data/user/0/<Package>/files/tdata_xEA084.dex --compiler-filter=speed
cat /proc/uid_stat/10065/tcp_rcv
cat /proc/uid_stat/10065/tcp_snd
cat /sys/class/net/wlan0/address
getprop
getprop ro.build.display.id
getprop ro.build.version.emui
getprop ro.build.version.opporom
getprop ro.miui.ui.version.name
getprop ro.smartisan.version
getprop ro.vivo.os.version
mount
ps
sh

Использует следующие алгоритмы для шифрования данных:

AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-CFB-NoPadding
AES-ECB-PKCS5Padding
AES-GCM-NoPadding
DES-CBC-PKCS5Padding
RSA-ECB-PKCS1Padding
RSA-NONE-OAEPWithSHA1AndMGF1Padding

Использует следующие алгоритмы для расшифровки данных:

AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-PKCS5Padding
AES-GCM-NoPadding

Осуществляет доступ к приватному интерфейсу ITelephony.

Использует специальную библиотеку для скрытия исполняемого байт-кода.

Получает информацию о сети.

Получает информацию о телефоне (номер, IMEI и т. д.).

Получает информацию о настроках APN.

Получает информацию об установленных приложениях.

Отрисовывает собственные окна поверх других приложений.

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней