Android.Triada.2535

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Triada.440.origin

Network activity:

Connects to:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) www.y####.cn:80
TCP(HTTP/1.1) cgi.con####.qq.com:80
TCP(HTTP/1.1) pi####.qq.com:80
TCP(HTTP/1.1) al####.y####.cn:80
TCP(TLS/1.0) waws-pr####.vip.azurewe####.####.net:443

DNS requests:

al####.y####.cn
cgi.con####.qq.com
code####.azurewe####.net
pi####.qq.com
www.y####.cn
www.zga####.cn

HTTP GET requests:

al####.y####.cn/author_cover/02e8c892428403263036aa1769ccc145.png_s80png
al####.y####.cn/author_cover/224a19226a36a6a852a26242184ff0f8.jpg_s80png
al####.y####.cn/author_cover/23676e594bd057106bb1908048397dbc.png_s80png
al####.y####.cn/author_cover/6407be0e54fb2d6464ca24d4f8fcc687.jpg_s80png
al####.y####.cn/author_cover/729323cbb4c35702034acb27115f5dd1.gif_s80png
al####.y####.cn/banner/1b282b1050dca48c6009486acd332cdf.jpg_mbanner
al####.y####.cn/banner/6e92bde44aa4f50f82d315b9b6c3ec98.jpeg_mbanner
al####.y####.cn/banner/79482ad0554203a078c3b35752e08c00.jpg_mbanner
al####.y####.cn/banner/7ff19a65ad8056abf0aae42ac8878b11.jpg_mbanner
al####.y####.cn/banner/b79bfe9d53e325ad644daf4f4e67ce93.jpg_mbanner
al####.y####.cn/banner/b9042a509576300fdd3478437b7fed82.jpg_mbanner
al####.y####.cn/cover/03458e3dcb9f84f25f1ab4d4b0d34363.jpg_w360png
al####.y####.cn/cover/03458e3dcb9f84f25f1ab4d4b0d34363.jpg_w680
al####.y####.cn/cover/0e1994a41b5ef09683d1c16eda87a693.jpg_w360png
al####.y####.cn/cover/15b2ff290157b50c9755e9f517e31a07.jpg_w680
al####.y####.cn/cover/30fa04d3dfc6f506e185efcd03856d97.jpg_w360png
al####.y####.cn/cover/3ea8460f525c95db2d8d4cb17bb8bca3.jpg_w680
al####.y####.cn/cover/4e801a7d8ebd699ed68656488e9894cb.jpg_w680
al####.y####.cn/cover/647b4d0fd46fb39cdd73ee61705698d5.jpg_w680
al####.y####.cn/cover/65f1006f49b27b81dd7cc1914f10a1b9.jpg_w360png
al####.y####.cn/cover/67abcb653cf2e3ff28f87ff7f56ed33f.jpg_w680
al####.y####.cn/cover/6f889aabafaf4c0668703ba2329cb5cc.jpg_w360png
al####.y####.cn/cover/806a8a000ef09859e6087457cf570ca6.jpg_w680
al####.y####.cn/cover/b498d00763cc6042892574e99f0819c9.jpg_w360png
al####.y####.cn/cover/c49297d6df40b82bbed7ad6a044a7510.jpg_w680
al####.y####.cn/cover/cae031b599b256938d254eb893bec6a6.jpg_w680
al####.y####.cn/cover/f7ff987a75c675dc45b5b6e2e93dbea3.jpg_w680
al####.y####.cn/news/04c0ecf37c23989034534c26fff20d53.jpg_wh180png
al####.y####.cn/news/0736927d68da7a6e11ec5738af01c187.jpg_wh180png
al####.y####.cn/news/0945680700b678231028940c18e9a4e5.jpg_mw680png
al####.y####.cn/news/0a6f579c9f231aea2481200aa366b54f.jpg_mw680
al####.y####.cn/news/0e9374c599cd4351b294e2a361b667c3.jpg_mw680
al####.y####.cn/news/13738fc22f19a22833f67ef4d16cb2ce.png_wh180png
al####.y####.cn/news/1425b16cca6bf35b58ef58544c9f2c2a.jpg_wh180png
al####.y####.cn/news/15537d948402fa461fc5d7de04d5dbd9.jpg_wh180png
al####.y####.cn/news/19027167a7efe39070c8c0ccaa011096.jpg_wh180png
al####.y####.cn/news/2594731efb9a022e2843d19ab15034c3.jpg_wh180png
al####.y####.cn/news/2a594dc90a46f1b065e6229aad376d5d.gif_wh180png
al####.y####.cn/news/38e22207e821805ff02778e9d79d0b6e.jpg_mw680
al####.y####.cn/news/39ba04f36b41ced13d3d20ace0139a19.jpg_mw680
al####.y####.cn/news/39ba04f36b41ced13d3d20ace0139a19.jpg_w180png
al####.y####.cn/news/3bbe590725888e2117f95fb2703dcedc.jpg_mw680
al####.y####.cn/news/40b68aa798f0a31cac17d9de377d3ea6.jpg_wh180png
al####.y####.cn/news/43a5536b0dc1c4738ba9b85b506d7ea0.jpg_mw680
al####.y####.cn/news/475b777634381e5d0c279407c245dfa0.png_wh180png
al####.y####.cn/news/4d0d30c8420f341ea59aa7f2f0a802dc.jpg_mw680
al####.y####.cn/news/4f1c3470ba8d24529770c694a4634d0f.jpg_wh180png
al####.y####.cn/news/52d9e86876069f8b32580d016296c966.jpg_wh180png
al####.y####.cn/news/5e59f23d4268590f63ebfb092c6ff224.jpg_wh180png
al####.y####.cn/news/5fc298c2df5866e09141df77b2e9df23.png_w180png
al####.y####.cn/news/604804a979349df94b779d71ca187c7a.jpg_mw680png
al####.y####.cn/news/620f6c3908ecac66bf00ab78491e5922.jpg_wh180png
al####.y####.cn/news/664c166e0d53939e3858cf842a261229.jpg_mw680png
al####.y####.cn/news/6ee110b4f69ccf1155b8d750d939fb31.jpg_mw680
al####.y####.cn/news/6f4b97f920568cfc1ae5f7ad0837e492.jpg_wh180png
al####.y####.cn/news/730470719144276375aed7b7916262b6.jpg_wh180png
al####.y####.cn/news/79b7c1c69e3631c0eb85c313c35b1fe9.gif_wh180png
al####.y####.cn/news/7d866ee2464a6b9399fb454bb2d92334.jpg_mw680
al####.y####.cn/news/7e4a869b69d0efc41d8770e4d91c2ea0.jpg_wh180png
al####.y####.cn/news/81aeacd09f4d345d61c29eb8e904a65d.jpg_wh180png
al####.y####.cn/news/890272738c4812cc842de8ac6ad0d834.jpg_wh180png
al####.y####.cn/news/895bde15fa8185a33780f286eaed5c2a.jpg_wh180png
al####.y####.cn/news/89745f398c4e52669ffa2b10bd778627.jpg_wh180png
al####.y####.cn/news/8b2158769a80a1c1739ad55f8ae2642f.jpg_wh180png
al####.y####.cn/news/8bfaa15a137dc4769ba532cdcaae3540.jpg_wh180png
al####.y####.cn/news/8e5486a4850d191d02acef997b79d7a0.jpg_wh180png
al####.y####.cn/news/93ad5e1cd9fa0570765e10e904dc68ed.jpg_wh180png
al####.y####.cn/news/956070edec6db5f342d3e47eae51c518.jpg_w180png
al####.y####.cn/news/9b5ef659d7c6ff0dcaf250bcb589ebfe.jpg_mw680
al####.y####.cn/news/a1a1a45d41186d6f1230eaa465d60ff8.jpg_wh180png
al####.y####.cn/news/a4bd254e6cec93725b88188757ad8428.png_mw680
al####.y####.cn/news/a655b66fac67646a1c59edfae61645d9.jpg_w180png
al####.y####.cn/news/a8f7b7f9f3445cfbc169b8f30b88c899.jpg_mw680
al####.y####.cn/news/aadf7f436dbd920db2bbf662efafd516.jpg_wh180png
al####.y####.cn/news/acb4e9b6ff29569abac6f6101daf0cb5.jpg_wh180png
al####.y####.cn/news/add5dec1d0581dd7b5c12f52e4af90f3.jpg_mw680png
al####.y####.cn/news/addb53bb04ff303e66c5861ce170ec62.jpg_w180png
al####.y####.cn/news/addb53bb04ff303e66c5861ce170ec62.jpg_wh180png
al####.y####.cn/news/b2d4507c7c88a53e951d76717ab189ed.jpg_mw680
al####.y####.cn/news/b2d4507c7c88a53e951d76717ab189ed.jpg_wh180png
al####.y####.cn/news/b4c5b21e4bf4a4218883139e7309ba30.jpg_wh180png
al####.y####.cn/news/b688702f9e8fe86510663163193ec108.jpg_wh180png
al####.y####.cn/news/b7cc60ac3a1f6ffed9bb4cd18ec65451.jpg_wh180png
al####.y####.cn/news/b7eb7e9d4c5e172803abe59979b91cf6.jpg_mw680png
al####.y####.cn/news/b806aea92b878ef92a6b85fa79f9b9be.jpg_mw680png
al####.y####.cn/news/b9f09b992022392cddac95edb142b646.jpg_wh180png
al####.y####.cn/news/ba5a5326366f55e9cc78bbcf10ca3aad.jpg_mw680
al####.y####.cn/news/ba68d4189efa106135fc631b8d1229c8.jpg_wh180png
al####.y####.cn/news/bb557f3fb4510f445cee00e9ab8b2ebf.jpg_wh180png
al####.y####.cn/news/c17d0c23610e9a626123ff744753b6ec.gif_wh180png
al####.y####.cn/news/c638415531b2eb756bd89edf16306f02.jpg_wh180png
al####.y####.cn/news/c9ee2db402c3521e25611abb8c64d734.gif_wh180png
al####.y####.cn/news/cb1d2747fec4a430471fbfdb6d52eb82.jpg_mw680
al####.y####.cn/news/d3ac56ab0192f05dcf59e2de64f13111.jpg_mw680png
al####.y####.cn/news/d415fb810a1f7006fc3e710f789a6f1e.jpg_wh180png
al####.y####.cn/news/d42be88d8ae5352f1fd9680d8c8e9312.jpg_wh180png
al####.y####.cn/news/d6b6ac07454f8023b5d66300fde051f9.jpg_mw680
al####.y####.cn/news/d7b4e03aec904b0ecba6e7f2336806c0.jpg_wh180png
al####.y####.cn/news/d8a9308363b3da195ce7151abb89376e.jpg_wh180png
al####.y####.cn/news/dfea3eaf6429b644b8d962cbd6237419.jpg_wh180png
al####.y####.cn/news/e16e238aa4bf0e7450526614dea764ba.jpg_wh180png
al####.y####.cn/news/e4a5afed81a18b81f0ce447fdd9a7c8d.jpg_wh180png
al####.y####.cn/news/e965ceaa7c1c0fd2c02463064b985864.jpg_mw680
al####.y####.cn/news/e9a7b56c503a79217f42c83e1cf48981.jpg_wh180png
al####.y####.cn/news/eae953ae18bc02cfc8fb4eee9ca062f7.jpg_w180png
al####.y####.cn/news/ed8b4fbe42cd0497982f2134b5f5b6fa.jpg_wh180png
al####.y####.cn/news/f49f0164cd9cf449e16fd439258a283a.jpg_wh180png
al####.y####.cn/open_screen/774187555c6035ffa325bfe7a6321dec.jpg_mw680
al####.y####.cn/static/dist/images/author.png
al####.y####.cn/tags_cover/04376329ce3f56088b3a631dafc4f7bc.png_wh180png
al####.y####.cn/tags_cover/05d70cf168d94115f7ab885aee04060a.jpg_s80
al####.y####.cn/tags_cover/07a0067bbc2b6cc4912572bc46c9443c.jpg_s80
al####.y####.cn/tags_cover/0f7343440f63bc8e68370abf50b457d3.jpg_wh180png
al####.y####.cn/tags_cover/148acc416e1923ffb9b465f7d6a27e57.jpg_s80
al####.y####.cn/tags_cover/2560e26e7b2fcaefa5d2ba95fd405b70.png_s80
al####.y####.cn/tags_cover/3d8ad4921ca7dcb08b9e6b9a0b06403d.png_s80
al####.y####.cn/tags_cover/3e0575d595a1d098493005c9ab0fefec.png_s80
al####.y####.cn/tags_cover/4649d5426e25899c11a98f484b05c65f.jpeg_s80
al####.y####.cn/tags_cover/4649d5426e25899c11a98f484b05c65f.jpeg_wh180png
al####.y####.cn/tags_cover/58b8471705d7c6aa05faf5e54440a8a3.png_s80
al####.y####.cn/tags_cover/59ad62fbb7a315c56e80214ff78d1e8e.jpg_wh180png
al####.y####.cn/tags_cover/709fadde7a39d04c71ff1be24cb30c2b.jpg_wh180png
al####.y####.cn/tags_cover/71039662c0e120988b7d5655a7def633.png_s80
al####.y####.cn/tags_cover/7a83ed9c79009c0528907ce7053f88cb.png_s80
al####.y####.cn/tags_cover/89f6b6a8595d2b011e45a58d3f70fb2b.jpg_s80
al####.y####.cn/tags_cover/a2ebed5cb04b1db871eb5b1655b06b05.jpg_s80
al####.y####.cn/tags_cover/ab8c0f39f0a51c5432703def09565781.jpg_wh180png
al####.y####.cn/tags_cover/c51e44a05da58014b11838b33b14cc51.jpg_s80
al####.y####.cn/tags_cover/d352801fd9413d5926dbc9616d747355.jpg_s80
al####.y####.cn/tags_cover/d56e7b7df6ecfbaf4c68eb056eb2a4e9.jpg_s80
al####.y####.cn/tags_cover/d742a242ddc2ec5b53f4f0298d7d2887.jpg_s80
al####.y####.cn/tags_cover/f40bac3e611d759ec9993a287a32dbd9.jpg_wh180png
al####.y####.cn/topic_cover/1a29b7686345ea7fc53576c87eda3503.jpg_w360png
al####.y####.cn/topic_cover/25607aabdf093b9262616df3f91b5104.jpg_w360png
al####.y####.cn/topic_cover/4785b9cba4cdf66cae064d2712240a47.jpg_w360png
al####.y####.cn/topic_cover/665fa9837294db87cb4d3a432cca6e52.jpg_w360png
al####.y####.cn/topic_cover/7444ce9be9d4eb5bb92c072f56cd3f5d.jpg_w360png
al####.y####.cn/topic_cover/77f35bd5cee476964a7dbc36295a0a3a.jpg_w360png
al####.y####.cn/topic_cover/7a79f357cf2304f43d86275d89d1853e.jpg_w360png
al####.y####.cn/topic_cover/8868be7fe7dc121953d5845474824b4d.jpg_w360png
al####.y####.cn/topic_cover/9abe72694b1586071128044c3e9e623e.jpeg_w360png
al####.y####.cn/topic_cover/ac79e72acfbb9e0853ae1da04f90f36a.jpg_w360png
al####.y####.cn/topic_cover/d3f8d73041499ef43d5e23f78a0e79a4.jpg_w360png
al####.y####.cn/topic_cover/d8ccbb7a56d998672a648d28bf4411c2.jpg_w360png
al####.y####.cn/topic_cover/e132e1af7a6a93a231de653fe3c6f5c3.jpg_w360png
al####.y####.cn/topic_cover/e17c9f06e6b6d24a44d58ca608434a33.jpg_w360png
al####.y####.cn/topic_cover/f06f52f6e2921fd6fc9e41a3e9618873.jpg_w360png
al####.y####.cn/topic_cover/fcd7227628d7f3d6f5fe437f1743d3a5.jpg_w360png
al####.y####.cn/url_cover/5fc298c2df5866e09141df77b2e9df23.png_wh180png
al####.y####.cn/user_avatar/4e79105043a51ed9660622fac8b00c39.jpg_s80
cgi.con####.qq.com/qqconnectopen/openapi/policy_conf?sdkv=####&appid=###...
www.y####.cn/app/account/get_login_state
www.y####.cn/app/home/get_home_docs_by_page?page=####
www.y####.cn/app/news/get_news_by_page?page=####&tag_id=####&limit=####&...
www.y####.cn/app/news/get_news_by_page?tab_id=####&page=####
www.y####.cn/app/news_comments/get_comments?page=####&news_id=####&order...

HTTP POST requests:

pi####.qq.com/mstat/report
www.y####.cn/app/home/init?v=####

File system changes:

Creates the following files:

/data/data/####/.jg.ic
/data/data/####/0124bcedeac7e2a0b908280ff63d99e367e6967ca396193....0.tmp
/data/data/####/030920f51fc34dd0c4021805852c35ac7d605ae5daf9bd8....0.tmp
/data/data/####/062352313d64172ac1b637a0a13574bc9e33c17a220462f....0.tmp
/data/data/####/07b17019a9bbc699d76b7f97b8c2e730d6636bb759a9fe6....0.tmp
/data/data/####/0826e69118a85ee016a2fc1576dde3f097e431ccb9aedde....0.tmp
/data/data/####/0b6fcdfb4a4a538e61dd6e88c49820dade4efee323ab1a6....0.tmp
/data/data/####/10aeeac6393e10451549784c8b8431432d7a08d3cc055e2....0.tmp
/data/data/####/10cb753b9aafe1ed85ed05a9c8c3689544b176cd710cbe5....0.tmp
/data/data/####/10ff311027210c85d2a9ce6b70b36b47dc71ff89cb38ad6....0.tmp
/data/data/####/141f2f098d90e907cd83e8a0a80bc71526d602240702b2a....0.tmp
/data/data/####/163de87756fe54a6e78768c77ef315b6421ac2863d88f32....0.tmp
/data/data/####/1a765634e7b548b907d02211418171f81b4ba73b941f773....0.tmp
/data/data/####/1c71c53aa70f6f6ff2f346f546fec93f5eb46da028485e6....0.tmp
/data/data/####/1da7126b4d90e9ded78c34f670ca3108ea3c01b7f77818d....0.tmp
/data/data/####/1fd8d2549b97484c692f73114a913c822a9b31d3b036424....0.tmp
/data/data/####/213036c43d088fee41be2bac8f5bd5fe59bda92b2e76f16....0.tmp
/data/data/####/232b11a451bae9033badf6af152b361db17e35c1be3b0b7....0.tmp
/data/data/####/237dae956b3e7a15df85a543cf7c57fff5f75c2bc1a1c96....0.tmp
/data/data/####/23d5d72b51fdf1e22d7a6b8bfca748b03c056ce1ecd4286....0.tmp
/data/data/####/26db50ae31c7f57424d8bafe23b126833c795654aa7989e....0.tmp
/data/data/####/272f20260294e471c5e5a87b9e57d7b6b526fe917112a8d....0.tmp
/data/data/####/2823eb9d5d20de12bf52db68f2f1cd3e3787a9aee3064f7....0.tmp
/data/data/####/2974f2b13fea5b8d1f31773e97667cfad0a6b06e298de8f....0.tmp
/data/data/####/29efaef3c194d2e75b889ee72abbd5403c14e7ef03f3a9c....0.tmp
/data/data/####/2b51dad45fa5d36480bff97d1497785ec957d1144cd2da1....0.tmp
/data/data/####/2c5f0ed5cac4cec3ba3497e9ea5be41de869169ae3d2c9d....0.tmp
/data/data/####/2eb40a51b55880ccb3b07ef0f8641fd4062c6489e1d550e....0.tmp
/data/data/####/30fce553a92a115581fe754ff242cb18b6bb3f16facf6bd....0.tmp
/data/data/####/3373ab79a224df8d320088a092a2380074b7749b249463a....0.tmp
/data/data/####/34bb904f794757e3ac80b5bc6153edce5baae821efa3a0e....0.tmp
/data/data/####/369699e29ef15a24f4720125f7dfbb5ae3a36b751a09f89....0.tmp
/data/data/####/38613bac54e45f5591a78a3d3e2b7d1868a2cbd12ca4d48....0.tmp
/data/data/####/38fd5bdf638693e8b258d8eabde5fac8fae07255390b4b1....0.tmp
/data/data/####/3ba3747930e208b69f336f4f067cf6a14caad276563adb8....0.tmp
/data/data/####/3bd75c3eb512185f9dc1183fe979d2e32929d130b144fc6....0.tmp
/data/data/####/3cd95c1459af8747d82b803aada1c3e041f537808fb24c1....0.tmp
/data/data/####/3d38ac7874c2f2b1be0de247bdcfb661ead6ae01edbee88....0.tmp
/data/data/####/3e4904501dac8d52e9bb05c78d47da307715fd5eaf48ea9....0.tmp
/data/data/####/412007330b80e5ccf97faf37a4cbf23e53af14576ba787c....0.tmp
/data/data/####/4411f25fa4578bf1b184543a4aad11a5318985786a35b71....0.tmp
/data/data/####/47d9d0d869e6659ecab53beeb7907088e15ca9dba7abb1c....0.tmp
/data/data/####/4a3a47b719e71630850237840b625fc128f859def67877c....0.tmp
/data/data/####/4b72ea9f02b1bae1bb8e68edad8ab6839cb3904648f64ce....0.tmp
/data/data/####/4d73707449c785074ee7707467db70f9c63586fb7a6bdd6....0.tmp
/data/data/####/4dea38459bb60a3a22ce7b2e3ec1b68f7654a63fc5fe1b1....0.tmp
/data/data/####/4f9010207b03640206af71c1d92e533443c1fe80f466797....0.tmp
/data/data/####/5471769f21cfe4e45ce2acf94ef576d83175e6dc6b415c7....0.tmp
/data/data/####/54e5c7c4e0659bd3e02f1bd7fb5c6033d4ee0fd8be2aa8e....0.tmp
/data/data/####/559bd40b6500a176159a52083f5eb2992681c0da0f5e3e2....0.tmp
/data/data/####/55d2283d4f3fa594a6e72292076becb80d457c5d84698ed....0.tmp
/data/data/####/56613a2d41add7956e7ac89ca6ab5342a38eebd1d4a543a....0.tmp
/data/data/####/59fa42c70d6c82347a1888ede664f354a7ce8b967f5f5bf....0.tmp
/data/data/####/5a2492f8037fd8b76c695a6154e03c161c87012f75008b8....0.tmp
/data/data/####/5a3b0e593fe2ef451e625a360563cd4e724da18b6d97631....0.tmp
/data/data/####/5abf7b8f846bb482e1882ebb12618a1fc4176aec9ffb958....0.tmp
/data/data/####/5b733b0a2a4e344ea33a563419c5b57e3b60079267c1d79....0.tmp
/data/data/####/5b8e8d06781cc215dc78241bfca25c9c3cbe3dee68a3621....0.tmp
/data/data/####/5ba504ae7907d0a7fe2bb7f780110f44620647aa28ccfb3....0.tmp
/data/data/####/5c445b8f556191bca17673aba4d3f1966106d3e3b037d2f....0.tmp
/data/data/####/60e9ea82607e445d3142d867b597b65a55d2604744b62c4....0.tmp
/data/data/####/6541fbcf3f5b372e86615dd552cae06539468072ba45b20....0.tmp
/data/data/####/6576e099c62304207492727a91c650ea74a321c5b0a0cb9....0.tmp
/data/data/####/6908bff40eb72d9332260a678ede58d844c7e381dccdbe9....0.tmp
/data/data/####/6af779c5a1d4f1ba608b57bef4fad1ee55c2a3c9d92d1ac....0.tmp
/data/data/####/6d3046d639d0734011f8a1f53a2ed79fb92d83a11072610....0.tmp
/data/data/####/6eac2821881de41b243044595ae3dcd7d9ce6338aa3e450....0.tmp
/data/data/####/6ebddda97788826dbf2aa451060a9eca0d4b1619308fac1....0.tmp
/data/data/####/6ee798db2f38cceacdcb69d945c59887a5e100b009a008b....0.tmp
/data/data/####/6f405b0fefd47aa2c6dfe72a6791b0b8908a0e6fe60d71e....0.tmp
/data/data/####/707f3ef336c9d0cde342ff7527d66400134fbc2347256cb....0.tmp
/data/data/####/715091771f5738e617a75f9f29fd28c8c732550c01f5dfc....0.tmp
/data/data/####/73fa1cc311e03ba1436c93ba5489c9f32aca9d50a290926....0.tmp
/data/data/####/761bd448e74a4cc6fd0eb3a6cbfa88c06a4fe5aab487854....0.tmp
/data/data/####/7b8eaf6da18f3f5b1d855207f9247362516eb5000b11b5c....0.tmp
/data/data/####/807fecfc1f75fa1e8cc6352a79137f9bb120e52cd1fc4dc....0.tmp
/data/data/####/824ee204ff2ba4809dfb304a384a30e6728bf2fb38a9df2....0.tmp
/data/data/####/836f75efffcf36c1142720c29a5ac18ddb66070acdba206....0.tmp
/data/data/####/86cbfe009f8ec3955691259836721e940d1d9433a8cae7b....0.tmp
/data/data/####/889d5a3c0f6fe18c8bfeddae1db6074b6b2551b76b09efe....0.tmp
/data/data/####/89822846d149dc7000c67c9d11483c4b8e90d7ce2dfa4a2....0.tmp
/data/data/####/8b3ea488ce6434b525a86b3b1c2910608a9dc67a9e0169b....0.tmp
/data/data/####/8be848523efc73077bad24528e8ae81645461665fb1926c....0.tmp
/data/data/####/8e63910986c6b02db4af77b6262b3e0c36fce6c4feeca98....0.tmp
/data/data/####/8edcf56d6963fe45dfeb35f88d04d2bf39c3cacc3808c90....0.tmp
/data/data/####/94859fc452a28d8a1c6cfa2f30f0a30cce708ae5cc541fc....0.tmp
/data/data/####/995400e9eec7a682f0f4ae5a701d8686c4ba9df1b042893....0.tmp
/data/data/####/9eb69156ada8f0163467c98a2ed85d54c89df1dabcca6b0....0.tmp
/data/data/####/CodePush.xml
/data/data/####/HwRmhUqh3DG0SGME62poO0GSGS0.-1872171129.tmp
/data/data/####/J0TWXs56Qkc2EA6khcic5i55vuQ.-1195653424.tmp
/data/data/####/MultiDex.lock
/data/data/####/RKStorage-journal
/data/data/####/T5U3JgaCaTB5C6dZaa_uopLp-oA.1837428387.tmp
/data/data/####/a10f5c6f4fe829ed2c9188e878c00da2c148bc87f5e7026....0.tmp
/data/data/####/a263f09799e4162a5ce659d8e6a60b37c836c371cc87262....0.tmp
/data/data/####/a8e0edd316af78cf3175589fadef1ee1939863052f95e82....0.tmp
/data/data/####/aba85e89ec1f1029dc921074f845c9cc6e69991ce900261....0.tmp
/data/data/####/ac2e9f01e0e3d248f41901239fd9a88bd59e14523546e38....0.tmp
/data/data/####/ad3301b449cb3e207caced71a3bcf40ee7657abae6ce9d0....0.tmp
/data/data/####/b0ac09b8bc8e278b4460798b1ae5b1c906bdb6bf9b4b5f6....0.tmp
/data/data/####/b22056519e431dbf97346b0bb4ad6153600df3d1660472a....0.tmp
/data/data/####/b22e72b8c8db62019732046d8e16c5a02abfa1fa91a5440....0.tmp
/data/data/####/b3e10fc7f82653bb593f93a291021ff832ccb3da0af5555....0.tmp
/data/data/####/b644f6d7c7885ee5ddaebd53f55bc6da41a8a870a4f50d8....0.tmp
/data/data/####/b7d8ae475690b00e91312bd981300a9714bc7cc4e15cd95....0.tmp
/data/data/####/b81cf89f04cee7d0b0a89446d88682c6d3bbf1776bcba66....0.tmp
/data/data/####/b98af3560f8891f94b0ef5118f89a132110ab874e7f515e....0.tmp
/data/data/####/bae1fadf1b625e11bae18ed6e5dd6542fa8447ffb666db9....0.tmp
/data/data/####/bda5bb73aa6ed0bea2c5924e430f8d6212b283b4bc1d70f....0.tmp
/data/data/####/bde6c51e6ec2924ef8d53d2e376a12386afdd4e6d8d8982....0.tmp
/data/data/####/bf45535a56e9579b0b486a66936844709e2b37ad6b3fef1....0.tmp
/data/data/####/c0eb51896ee0005dd9425bf05ebe444a7d345a33901f11f....0.tmp
/data/data/####/c18687d139e4f8df64b5198e05755bc68a4bb3eb1e48372....0.tmp
/data/data/####/c521f2f51d3c7d5ef644c92d0b791bcf7c0005333f4e3a3....0.tmp
/data/data/####/cc8da2d7e2021233eebb9b5878f41d7b5f0ec6ce3e2ff1b....0.tmp
/data/data/####/cn.jpush.preferences.v2.xml
/data/data/####/com.apkpre.sajhciasc_preferences.xml
/data/data/####/com.tencent.open.config.json.1106928426
/data/data/####/cycuUeiLGoLbzvt7tdFpSN_D7sE.-1267636179.tmp
/data/data/####/d05acee30ec9e6ba6a91bf24d9048f5ab3122227ec7b3e7....0.tmp
/data/data/####/d06d72179964616e462e2eece34ece71d74b9e01a3c73f9....0.tmp
/data/data/####/d2e1da9509a48d1743458a1cd1e472077d69a9882b76149....0.tmp
/data/data/####/d38a4f270b173377e9142e4c498f7677cb73e03ffece4fd....0.tmp
/data/data/####/d3b9c0dab52cac1f85dcec1a30f47431ab83be6e94e2b12....0.tmp
/data/data/####/d56aff5894791c9beae34c35707514e1fb3a023b8c6fdb7....0.tmp
/data/data/####/d596f8d6ea98e9f2e6698e73f00aafa5b51b19db75e04df....0.tmp
/data/data/####/d5e92dac95c164380b72a0e313a17c2076ff24c50fb4ff3....0.tmp
/data/data/####/d902d16347f3fa1c9f49faf5123173a625409552da79844....0.tmp
/data/data/####/d9c6a5c59a17fc48b7cced564322a88c98a54c2abfcab9b....0.tmp
/data/data/####/dc7f0d3b50c5b5a64d685f3c4cbf98c0bda872ddd9c85b6....0.tmp
/data/data/####/ddd770af3568c9e3c5c2eaf5c92e490e6b899f90450dff9....0.tmp
/data/data/####/deb1695f00d6e110f5eb0bd5505104d5c26fb65b06de689....0.tmp
/data/data/####/debc0253e6a9cf995d9af99be1b143f7c22315c9909fe9b....0.tmp
/data/data/####/def49b654c57ae21b2b521798b1be19e363a72b689c85ab....0.tmp
/data/data/####/df0471974bebffdac548b4f96b7b1b553388cfcf6045a4d....0.tmp
/data/data/####/dfbd7ad0a279fbad9dcf6ecd2cd3701d5bfb764c9b89125....0.tmp
/data/data/####/dso_deps
/data/data/####/dso_lock
/data/data/####/dso_manifest
/data/data/####/dso_state
/data/data/####/e6fe4783b84ebb9f47e4afed2070e49decf3fcebaebe4a4....0.tmp
/data/data/####/e897436c83c5e034d0eff4a3cc65a4155ce7ef798d2fbf4....0.tmp
/data/data/####/e977f944a636760a7c3fa6e815d16b2b8f568fc076250b7....0.tmp
/data/data/####/eZw9ZpF4xCdqtkZrMaM4FU89SbE.1490494812.tmp
/data/data/####/eaca6a7f140e05171974533d3ddb5b49781d12052a0520c....0.tmp
/data/data/####/ed1a4f1f7d369fcd0fb9813086595e46f1b6e60a2db464c....0.tmp
/data/data/####/edb5f7d07b74f19195f387df724d64397db3aaf926339d6....0.tmp
/data/data/####/ee26eefe7afdf6d082f061ca358c0ed733931a22f67c035....0.tmp
/data/data/####/f00492324b6f602b96c7ecc2d87062af9db7678ca4c7989....0.tmp
/data/data/####/f084a71b2db6e925f66f666e0f9dd1eed0028899607bb31....0.tmp
/data/data/####/f36b3478c3361d3ec5a0875ff49b8972431306fdd11942a....0.tmp
/data/data/####/f6bfd5427902a7c7d1258cb2fbe3c93ce4d979e0d8a7794....0.tmp
/data/data/####/fb803e8d709661b4dac5658d73ab24b7612445c438941a3....0.tmp
/data/data/####/fc58b83460ba6ef0857bf9fe406c465abe9f0e5c875ad65....0.tmp
/data/data/####/fdf31a1b32eda8e137bf523d7d9734abc5f15afa2955583....0.tmp
/data/data/####/fead30273127b4f7a84dff268295f839c252abe81e22ab6....0.tmp
/data/data/####/journal.tmp
/data/data/####/libjiagu-1248929539.so
/data/data/####/multidex.version.xml
/data/data/####/mw9INaJPDiF1PeOcUGh-ewVQgis.-958563200.tmp
/data/data/####/qkcxl6Oms4FSOVSRQT4ycw6JI_I.88636414.tmp
/data/data/####/rE_l3VxgRV55AN6ekG3ADVLWDYg.-541249177.tmp
/data/data/####/syqplRBCj3kC0jBj9Lq2bbWecUM.1112670533.tmp
/data/data/####/tencent_analysis.db-journal
/data/data/####/webview.db-journal
/data/data/####/webviewCookiesChromium.db-journal
/data/data/####/webviewCookiesChromiumPrivate.db-journal
/data/media/####/.nomedia

Miscellaneous:

Executes the following shell scripts:

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq

Loads the following dynamic libraries:

MtaNativeCrash
jcore123
libfb
libimagepipeline
libjiagu-1248929539
libreactnativejni
libyoga

Uses special library to hide executable bytecode.

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Adds tasks to the system scheduler.

Displays its own windows over windows of other apps.

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical information

Curing recommendations

Free trial