Technical information
Malicious functions:
Removes its shortcut from the home screen.
Network activity:
Connecting to:
- ct####.####.net
- deli####.####.com
- hollywo####.top
- 724####.com
- se####.####.com
- w####.link
- syndica####.####.com
- r####.####.com
- c####.####.com
- watchmy####.####.com
- p####.####.link
- c####.####.link
- g####.####.info
- statist####.com
HTTP GET requests:
- c####.####.com/landings/58300/1492784968/images/jump_nl_mol_3.gif
- p####.####.link/c/da57dc555e50572d?s1=####&s2=####&s3=####&click_id=####
- c####.####.com/gfarchive/watchmygirlfriend/rwd/join/css/style.css
- w####.link/click?c=####&tracker=####&ptrack=####
- c####.####.com/landings/58300/1492784968/images/cancel.png
- c####.####.com/landings/58300/1492784968/images/jump_nl_mol_6.gif
- c####.####.com/ak/watchmygirlfriend/t2/js/bootstrap.min.js
- c####.####.com/ak/watchmygirlfriend/videos/tag/07.jpg
- 724####.com/wp-content/themes/videopro/images/ico-square.png
- c####.####.com/ak/watchmygirlfriend/t2/images/overlay.png
- c####.####.com/ak/watchmygirlfriend/t2/js/jquery.lazyload.js
- c####.####.com/gfarchive/watchmygirlfriend/rwd/join/images/arrow.png
- c####.####.com/jquery-1.10.2.min.js
- c####.####.com/landings/58300/1492784968/images/loading_bar.gif
- c####.####.com/landings/58300/1492784968/js/avsc2.js?149278####
- 724####.com/wp-content/themes/videopro/images/ico-rss.png
- g####.####.info/olkmgnsa.php
- 724####.com/wp-content/uploads/2016/10/deep-throat-oral-sex-sensation.jpg
- c####.####.com/ak/watchmygirlfriend/videos/tag/08.jpg
- syndica####.####.com/splash.php?cat=####&idzone=####&type=####&p=####&su...
- c####.####.com/ak/watchmygirlfriend/videos/tag/thumb-ads.jpg
- r####.####.com/px.gif?akey=####
- 724####.com/wp-content/uploads/2016/10/cutie-eats-her-smile-after-sado-m...
- 724####.com/wp-content/uploads/2017/03/6941002-XXX-porno-Sex-Industry-Co...
- c####.####.com/ak/watchmygirlfriend/videos/tag/12.gif
- 724####.com/wp-content/themes/videopro/colors/default.css
- c####.####.com/ak/watchmygirlfriend/videos/tag/01.jpg
- 724####.com/wp-content/themes/videopro/functions/shortcodes/shortcodes.css
- c####.####.com/ak/watchmygirlfriend/videos/tag/10.jpg
- 724####.com/wp-content/themes/videopro/includes/js/jquery.min.js
- c####.####.com/ak/watchmygirlfriend/videos/tag/97n.gif
- 724####.com/wp-content/uploads/2016/10/the-doms-fan.jpg
- se####.####.com/signup/gateways/plugins/join.js
- c####.####.com/ak/watchmygirlfriend/videos/tag/18.jpg
- se####.####.com/signup/signup.php?nats=####&step=####&tracker=####
- c####.####.com/gfarchive/watchmygirlfriend/rwd/join/images/footer-xs.jpg
- c####.####.com/landings/58300/1492784968/images/jump_nl_mol_2.gif
- 724####.com/wp-content/themes/videopro/functions/shortcodes/shortcodes.js
- c####.####.com/landings/58300/1492784968/css/1bccb5a6116838231b3333b28e3...
- c####.####.com/landings/58300/1492784968/images/age_2.jpg
- c####.####.com/ak/watchmygirlfriend/videos/tag/03.jpg
- 724####.com/
- 724####.com/wp-content/uploads/2016/10/granny-miriam-fetish-gyno-exam-sp...
- 724####.com/wp-content/uploads/2016/10/hairy-pussy-lovely-asian-in-the-t...
- syndica####.####.com/tag.php?goal=####
- 724####.com/wp-includes/js/wp-embed.min.js
- c####.####.com/ak/watchmygirlfriend/videos/tag/19.jpg
- 724####.com/wp-content/themes/videopro/custom.css
- 724####.com/wp-content/uploads/2016/10/koyuki-hara-asian-teen-gets-her-p...
- c####.####.com/ak/watchmygirlfriend/t2/images/logo.png
- hollywo####.top/
- c####.####.com/landings/58300/1492784968/images/relation_1.jpg
- c####.####.com/ak/watchmygirlfriend/videos/tag/14.jpg
- p####.####.link/c/679efeecdc3b4d07?&ijykJHsadL5=####&click_id=####&s1=##...
- c####.####.com/ak/watchmygirlfriend/t2/css/bootstrap.min.css
- 724####.com/wp-content/themes/videopro/images/dot.png
- statist####.com/adv_pxl?pid=####&id=####
- c####.####.com/gfarchive/watchmygirlfriend/rwd/join/images/banner-sm.jpg
- 724####.com/wp-content/uploads/2016/10/anal-creampie-and-deepthroat-hot-...
- 724####.com/wp-content/themes/videopro/includes/js/jquery-ui.min.js
- c####.####.com/ak/watchmygirlfriend/videos/tag/22.jpg
- c####.####.com/landings/58300/1492784968/images/body_2.jpg
- 724####.com/wp-content/themes/videopro/images/seperator.png
- c####.####.com/landings/58300/1492784968/images/ok.png
- 724####.com/wp-content/themes/videopro/includes/js/html5.js
- 724####.com/wp-content/uploads/2016/10/hot-blonde-teen-pov-blowjob.jpg
- syndica####.####.com/splash.php?idzone=####
- 724####.com/wp-includes/js/wp-emoji-release.min.js
- se####.####.com/track/NDE2NjQzNjE6MTQxOjEwMDE/?tracker=####&autocamp=####
- c####.####.com/ak/watchmygirlfriend/videos/tag/06.jpg
- 724####.com/wp-content/themes/videopro/includes/js/superfish.js
- c####.####.com/landings/58300/1492784968/images/main_girl.jpg
- 724####.com/wp-content/uploads/2016/10/angelica-sucks-and-fuck-her-boyfr...
- c####.####.com/ak/watchmygirlfriend/videos/tag/13.jpg
- c####.####.com/ak/watchmygirlfriend/videos/tag/100.gif
- c####.####.link/sites/watchmygirlfriend.php?tracker=####&clickid=####
- 724####.com/wp-content/themes/videopro/includes/js/custom.js
- 724####.com/wp-content/uploads/2016/10/classic-xxx-8-to-4-1981.jpg
- c####.####.com/gfarchive/watchmygirlfriend/rwd/join/css/bootstrap.min.css
- 724####.com/wp-content/themes/videopro/images/ico-search.png
- c####.####.com/landings/58300/1492784968/images/jump_nl_mol_4.gif
- g####.####.info/olkmgnsa.php?islem=####
- c####.####.com/gfarchive/watchmygirlfriend/rwd/join/images/btn-join.jpg
- c####.####.com/ak/watchmygirlfriend/videos/tag/17.jpg
- 724####.com/wp-content/uploads/2016/10/hot-brazilian-boys-fucking.jpg
- 724####.com/wp-content/themes/videopro/includes/fancybox/jquery.fancybox...
- 724####.com/wp-content/plugins/wp-pagenavi/pagenavi-css.css
- c####.####.com/landings/58300/1492784968/images/age_1.jpg
- c####.####.com/landings/58300/1492784968/images/body_1.jpg
- c####.####.com/ak/watchmygirlfriend/videos/tag/05.jpg
- 724####.com/wp-content/uploads/2016/10/erena-fujimori-sexy-real-asian-nu...
- 724####.com/wp-content/uploads/2016/10/busty-wife-gives-handjob-with-her...
- 724####.com/wp-content/themes/videopro/images/bg-line.png
- deli####.####.com/retargeting.php?id=####
- 724####.com/wp-content/uploads/2016/10/bondage-3d-hentai-girl-handjobs-b...
- c####.####.com/gfarchive/watchmygirlfriend/rwd/join/js/bootstrap.min.js
- c####.####.com/ak/watchmygirlfriend/videos/tag/09.jpg
- c####.####.com/ak/watchmygirlfriend/videos/tag/02.jpg
- c####.####.com/ak/watchmygirlfriend/t2/images/btm-header.jpg
- 724####.com/wp-content/uploads/2016/10/desperate-for-cash.jpg
- c####.####.com/landings/58300/1492784968/images/jump_nl_mol_5.gif
- c####.####.com/gfarchive/watchmygirlfriend/rwd/join/images/banner-xs.jpg
- 724####.com/wp-content/uploads/2016/10/jenna-jameson-gets-fucked-hard.jpg
- c####.####.com/ak/watchmygirlfriend/videos/tag/04.jpg
- c####.####.com/landings/58300/1492784968/images/jump_nl_mol_1.gif
- c####.####.com/ak/watchmygirlfriend/videos/tag/21.jpg
- 724####.com/wp-content/uploads/2016/10/raven-riley.jpg
- ct####.####.net/ctrack?action=####&type=####&id=####&context=####&cookie...
- 724####.com/wp-content/themes/videopro/images/ico-list.png
- se####.####.com/sites/?cat=####&camp=####&categoryid=####&conv=MT####
- c####.####.com/cdn/wmgtv/stylet2.css
- c####.####.com/landings/58300/1492784968/images/relation_2.jpg
- c####.####.com/landings/58300/1492784968/js/b040f9f4da7e868eabeee13dfd48...
- c####.####.com/ak/watchmygirlfriend/videos/tag/23.jpg
- 724####.com/wp-content/uploads/2016/10/lorena-sanchez-mandingo.jpg
- 724####.com/wp-content/uploads/2017/03/724.png
- c####.####.com/ak/watchmygirlfriend/videos/tag/20.jpg
- 724####.com/wp-content/uploads/2016/10/fakeagent-two-hot-amateurs-impres...
- 724####.com/wp-content/uploads/2016/10/dominno.jpg
- watchmy####.####.com/t/?nats=####&tracker=####&autocamp=####
- 724####.com/wp-content/uploads/2016/10/latina-with-big-ass-teasing-on-ca...
- c####.####.com/ak/watchmygirlfriend/videos/tag/15.jpg
- 724####.com/wp-content/themes/videopro/style.css
Modified file system:
Creates the following files:
- /data/data/####/cache/webviewCacheChromium/f_00002f
- /data/data/####/cache/webviewCacheChromium/f_00002e
- /data/data/####/cache/webviewCacheChromium/f_00002d
- /data/data/####/cache/webviewCacheChromium/f_00002c
- /data/data/####/cache/webviewCacheChromium/f_000032
- /data/data/####/cache/webviewCacheChromium/f_00002a
- /data/data/####/cache/webviewCacheChromium/f_000027
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/cache/webviewCacheChromium/f_00000e
- /data/data/####/cache/webviewCacheChromium/f_00000d
- /data/data/####/cache/webviewCacheChromium/f_00000f
- /data/data/####/cache/webviewCacheChromium/f_000019
- /data/data/####/cache/webviewCacheChromium/f_000016
- /data/data/####/databases/TurtlePlayer-journal
- /data/data/####/cache/webviewCacheChromium/f_000031
- /data/data/####/cache/webviewCacheChromium/f_000018
- /data/data/####/cache/webviewCacheChromium/f_000017
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/cache/webviewCacheChromium/f_000012
- /data/data/####/cache/webviewCacheChromium/f_000014
- /data/data/####/cache/webviewCacheChromium/f_000010
- /data/data/####/cache/webviewCacheChromium/f_000011
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000015
- /data/data/####/cache/webviewCacheChromium/f_000013
- /data/data/####/cache/webviewCacheChromium/f_000034
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_000033
- /data/data/####/cache/webviewCacheChromium/f_000029
- /data/data/####/cache/webviewCacheChromium/f_000028
- /data/data/####/cache/webviewCacheChromium/f_00002b
- /data/data/####/cache/webviewCacheChromium/f_00001f
- /data/data/####/shared_prefs/####_preferences.xml
- /data/data/####/cache/webviewCacheChromium/f_00001d
- /data/data/####/cache/webviewCacheChromium/f_00001e
- /data/data/####/cache/webviewCacheChromium/f_00001b
- /data/data/####/cache/webviewCacheChromium/f_00001c
- /data/data/####/cache/webviewCacheChromium/f_00001a
- /data/data/####/databases/webview.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/cache/webviewCacheChromium/f_000025
- /data/data/####/cache/webviewCacheChromium/f_000024
- /data/data/####/cache/webviewCacheChromium/f_000023
- /data/data/####/cache/webviewCacheChromium/f_000022
- /data/data/####/cache/webviewCacheChromium/f_000021
- /data/data/####/cache/webviewCacheChromium/f_000020
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/cache/webviewCacheChromium/f_000026
- /data/data/####/databases/webviewCookiesChromiumPrivate.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000030
- /data/data/####/cache/webviewCacheChromium/index
Miscellaneous:
Executes next shell scripts:
- ls -R /storage/emulated/0
Contains functionality to send SMS messages automatically.