Техническая информация
- Adware.Dowgin.3.origin
- Adware.Waps.5.origin
- Android.DownLoader.699.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) ff.t####.com.####.com:80
- TCP(HTTP/1.1) api.cp.13####.net:80
- TCP(HTTP/1.1) app.w####.cn:80
- TCP(HTTP/1.1) so3.yo####.com:80
- TCP(TLS/1.0) nqsh####.nq.com:443
- TCP so3.yo####.com:7702
- TCP so3.yo####.com:7703
- TCP so1.yo####.com:7701
- TCP so2.yo####.com:7702
- a####.u####.com
- ads.w####.cn
- api.cp.13####.net
- app.w####.cn
- f.you####.com
- ff.t####.com
- nqsh####.nq.com
- so1.yo####.com
- so2.yo####.com
- so3.yo####.com
- app.w####.cn/action/connect/active?app_id=####&udid=####&imsi=####&net=#...
- app.w####.cn/action/pop_ad/ad?app_id=####&udid=####&imsi=####&net=####&b...
- ff.t####.com.####.com/d/44z7.jpg
- so3.yo####.com/cdn?id=####
- a####.u####.com/app_logs
- api.cp.13####.net/is/info.jsp
- api.cp.13####.net/is/init.jsp
- api.cp.13####.net/is/list.jsp
- app.w####.cn/action/user_info
- /data/data/####/.imprint
- /data/data/####/AppSettings.xml
- /data/data/####/CacheTime.dat
- /data/data/####/DexToLoad.apk
- /data/data/####/ShowAdFlag.xml
- /data/data/####/_dsph.xml
- /data/data/####/_dtnum.xml
- /data/data/####/_ls_share.xml
- /data/data/####/a.jar
- /data/data/####/aRealFruitttttt.jar
- /data/data/####/ccom
- /data/data/####/libnqshieldx86.so
- /data/data/####/nqdata
- /data/data/####/nqshield_pref_file.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/yoo_fs_download.db-journal
- /data/data/####/yoo_fsac_pre.xml
- /data/data/####/yoo_fsappInfo_pre.xml
- /data/data/####/yoo_fsconf_pre.xml
- /data/data/####/yoo_fsinfo_pre.xml
- /data/data/####/yoo_fstrategy_pre.xml
- /data/media/####/44z7.jpg.data
- /data/media/####/AppPackage.dat
- /data/media/####/CacheTime.dat
- /data/media/####/UnPackage.dat
- /data/media/####/android
- /data/media/####/comHappyAllihjuioanceRealFruitttttt.tmp
- /data/media/####/run.pp
- chmod 755 <Package Folder>/.cache/libnqshieldx86.so
- chmod 755 <Package Folder>/.cache/nqshell
- libnqshieldx86
- DES-CBC-PKCS5Padding
- DES