Техническая информация
- Android.DownLoader.342.origin
- Android.DownLoader.343.origin
- UDP(DNS) 8####.8.4.4:53
- UDP(NTP) 2.and####.p####.####.org:123
- TCP(TLS/1.0) and####.google####.com:443
- TCP(TLS/1.0) and####.a####.go####.com:443
- TCP(TLS/1.2) 1####.250.27.94:443
- UDP and####.google####.com:443
- 2.and####.p####.####.org
- and####.a####.go####.com
- and####.google####.com
- i.hesh####.com
- i.hesh####.com.####.8
- m####.go####.com
- n.hesh####.com
- n.hesh####.com.####.8
- /data/data/####/10A2186BE14817BA.xml
- /data/data/####/1B3DAA28D1800707.xml
- /data/data/####/7D9F5845E5E6B1B5.xml
- /data/data/####/7D9F5845E5E6B1B5.xml.bak
- /data/data/####/8D02B498DB82F169.xml
- /data/data/####/BFFCFDD-journal
- /data/data/####/CBC
- /data/data/####/CBC-journal
- /data/data/####/CBC-journal (deleted)
- /data/data/####/FEE88D1CE2738B67-journal
- /data/data/####/WMea.dex
- /data/data/####/WMea.dex.flock (deleted)
- /data/data/####/__pasys_remote_banner.tmp.jar
- /data/data/####/proc_auxv
- /data/data/####/qhcal.dex
- /data/data/####/qhcal.dex.flock (deleted)
- /data/data/####/qical.dex
- /data/data/####/qical.dex.flock (deleted)
- /data/data/####/qucal.dex
- /data/data/####/qucal.dex.flock (deleted)
- /data/data/####/vswegf
- /data/data/####/vswegf.t
- /data/data/####/wordroid.db
- /data/data/####/ypu.db-journal
- /data/data/####/ytd.db-journal
- /data/media/####/WMea
- /data/media/####/WMea.zip
- /data/media/####/XH.txt
- /data/media/####/__pasys_remote_banner.jar
- /data/media/####/check_back.png
- /data/media/####/checked_back.png
- /data/media/####/close_btn.jpg
- /data/media/####/close_btn.png
- /data/media/####/congsmall.png
- /data/media/####/default.png
- /data/media/####/enter_button.png
- /data/media/####/index.png
- /data/media/####/pic.png
- /data/media/####/qhcal
- /data/media/####/qhcal.zip
- /data/media/####/qical
- /data/media/####/qical.zip
- /data/media/####/qucal
- /data/media/####/qucal.zip
- /data/media/####/skip.png
- /data/media/####/top_part.png
- /data/media/####/tsaz_bottom_part.png
- /data/media/####/tsaz_emo_icon.png
- /data/media/####/tsaz_install_all_btn.png
- /data/media/####/tsaz_install_btn.png
- /data/media/####/tsaz_item_scroll.png
- /data/media/####/tsaz_top_part.png
- /data/media/####/vi.png
- /data/media/####/vswegf
- /data/media/####/yimeng222222222.png
- /data/user/0/<Package>/vswegf -p <Package> -r am start --user 0 -n <Package>/wikct.zn.vgje -a daemon -h http://127.0.0.1:7123/report/allData -i 3449
- /data/user/0/<Package>/vswegf -p <Package> -r am start --user 0 -n <Package>/wikct.zn.vgje -a daemon -h http://127.0.0.1:7123/report/allData -i 3535
- /system/lib/arm/houdini /data/user/0/<Package>/vswegf /data/user/0/<Package>/vswegf -p <Package> -r am start --user 0 -n <Package>/wikct.zn.vgje -a daemon -h http://127.0.0.1:7123/report/allData -i 3449
- /system/lib/arm/houdini /data/user/0/<Package>/vswegf /data/user/0/<Package>/vswegf -p <Package> -r am start --user 0 -n <Package>/wikct.zn.vgje -a daemon -h http://127.0.0.1:7123/report/allData -i 3535
- chmod 777 /data/user/0/<Package>/vswegf
- libqyuxl
- DES
- RSA-ECB-PKCS1Padding
- DES