Android.Packed.31297

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Triada.308.origin

Network activity:

Connecting to:

UDP(DNS) <Google DNS>
TCP(GCM) <Google Host>
TCP(HTTP/1.1) hm.b####.com:80
TCP(HTTP/1.1) box.jom####.com:80
TCP(HTTP/1.1) cpu.b####.com:80
TCP(HTTP/1.1) g####.bdst####.com:80
TCP(HTTP/1.1) nb2.wh####.com:10091
TCP(HTTP/1.1) cac####.b####.com:80

DNS requests:

cac####.b####.com
cpu.b####.com
g####.bdst####.com
g####.bdst####.com
hm.b####.com
nb2.wh####.com
s.bdst####.com

HTTP GET requests:

box.jom####.com/common/openjs/openBox.js?_v=####
cac####.b####.com/log.gif?entry=####&ctid=####&log_type=####&req_id=####...
cac####.b####.com/log.gif?entry=0&ctid=C2ECB42A9074FB9E9F176062DC8ABEB0&...
cac####.b####.com/log.gif?site_id=####&event_id=####&session_id=####&rse...
cpu.b####.com/1001/c5646cac
cpu.b####.com/1001/c5646cac?chk=####
cpu.b####.com/1021/c5646cac
cpu.b####.com/1021/c5646cac/detail/27850558551/image?position_id=####&pv...
cpu.b####.com/1021/c5646cac/detail/27951326749/image?focusid=####
cpu.b####.com/1021/c5646cac/detail/27951326749/image?focusid=####&pvid=#...
cpu.b####.com/1021/c5646cac?chk=####
cpu.b####.com/img/icons.png
cpu.b####.com/img/image_default.jpg
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0203f9f7-5562-40f2...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/060df8b4-f266-4f66...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/093e6f18-0b94-4c38...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0c575f3c-93f1-4624...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0da6969f-0602-4dd8...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0ea5b1fe-e761-433f...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0f571a8e-04d5-40a2...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0f8f878d-ac8d-4c86...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1131d177-9d27-4539...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/11a3687a-a15e-4f51...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/12189d7f-96fa-4e3c...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/123a7d7d-67e3-450a...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1662acdf-e46c-48c8...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1735870c-2e2d-4f41...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/179f1a41-62c5-4793...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/19592e04-47a5-4f01...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1cb18136-6a21-4efa...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1dcfd2c6-2e1d-433e...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1dfe5474-6084-4f43...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1e23d182-ef79-4214...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1ebb604d-2533-4d5e...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/23c74de8-e28b-4dc2...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/2b54ab14-c403-421e...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/30692eb5-3160-4f7b...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/30cf8928-73cf-4854...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/325007a0-7fd7-4b7b...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3472b977-818d-426a...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/35cd071b-38d0-45b4...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/392b1fca-eb71-4283...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3a4a8543-e2de-44e5...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3a8b7b22-0ab9-44ee...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3b981a3c-6ffb-4b77...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3db2716d-a7bb-4952...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/435354fe-4959-4a2c...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/452a9bf3-f72c-4aa5...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/456d8fbf-72e6-40de...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/47b1f65f-5dd3-441a...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4aad9624-5bb4-4bae...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4b476a98-c060-45be...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4b6fdd01-21ac-4df6...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4d9da1c8-2d57-4952...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4fc313c7-52cc-419f...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/51e2ba95-4529-4d5f...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/53d73ebc-2e1a-4e20...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/564f8181-9a17-4d70...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/56ccc62a-784c-4188...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/58586ea2-3b94-4f09...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/58eb59b4-07b0-49c7...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/5b7c9906-b98e-4f84...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/5d5e0000-c2e5-4ee0...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/5df70b8e-995e-4868...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6360387c-abbd-49b1...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/65fd8c1c-b977-49a3...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/67b650ac-e816-4eab...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/69701275-f8e6-49e3...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6b22a308-b136-4f8b...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6fa7676e-4782-4a0c...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/70867986-26eb-4093...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/725c2052-78e4-4119...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/72801c60-dc9d-4316...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7297e79b-7eb7-4955...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/74f9ea56-f014-4b3e...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/76716173-58c0-438d...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/76f8516c-9646-486e...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7b0ab4d8-6367-407e...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7cca4749-91c0-4b5d...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8104c9bc-02fc-4e1f...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/810a25e9-687c-473b...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8324c27a-3068-498d...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/84be6d06-877e-4a91...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8555d043-6488-41a3...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/87ce4f0f-623d-4a2e...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/88116502-5afe-4d07...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8890200a-6468-4db8...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8ad870dc-9caf-4ec4...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8b4be786-a247-41af...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8f182d8c-ffb2-46ed...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8f65f93e-c4d3-41be...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/91722d45-5aad-402e...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/91fdaa29-fc8b-4c7a...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/924709a4-98f0-44b5...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9248d342-ff4b-4177...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/92e89089-b912-444e...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9550392f-9622-48b1...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9613b88f-0a10-4e3c...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9665a383-418d-4e37...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/96919d24-e077-4099...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9b00e3dc-0ad0-406e...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9cd7f385-5d2b-407a...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9d193734-0f24-4e53...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9e480415-5efb-4427...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a065ea42-6679-4f26...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a46cd751-76ed-4d65...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a54aa550-da85-4051...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a565184f-7c95-4733...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a6e716a3-9953-4ce6...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a84a2a84-8a37-4fd8...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a9622510-9ff6-435f...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a9dcb847-6799-4318...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/aabfc211-1f84-4062...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b5c8b710-c3cb-4ea1...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b714baa2-7d84-41d8...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b80cb6c6-6546-4cc4...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b8beac10-5e46-4d65...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ba4b350e-ac4f-4db7...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/be5a1361-ee41-4ac2...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/beeb3661-2143-4574...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/bf065a22-676f-433d...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/bffd40bd-379d-48e0...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c09604da-56a0-4c59...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c227ccd3-4176-4eab...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c2670079-b090-4999...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c44ed783-bc1d-40aa...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c523ea4e-abd0-46dc...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c81e0509-ae25-4623...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/cb436408-93b6-4d56...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/cbcffcd0-01d5-4fb3...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/cdb108b5-ef6a-4382...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d174c164-2e19-4c54...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d1ed01f3-62e8-4b18...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d2b96bb5-7a14-4893...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d2f4c932-3d30-48bb...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d36c20f3-154a-4782...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d4c7a410-01ba-4b41...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d4d1569d-a4ab-4f6c...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d52f81f2-d6a5-43cd...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d5a14bdb-8e4e-4317...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d5e07ca5-9db7-483b...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d5f5ecb5-f2bd-425c...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d9c3a181-c01d-428f...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/da89d101-534f-4ba8...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dde7eb78-be34-43e2...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dec336f8-07c4-43b9...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dfbd39b0-c3cf-42cf...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e7031bfd-71f4-4728...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e7ebec94-9cf2-498d...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e93092bb-713f-4d8d...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e9aa3128-92d6-40a6...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ea9b0ce6-c547-4aae...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ec1d1e7f-e488-4873...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f1872cb8-8712-4bfd...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f3441131-ed9b-4816...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f4fe7186-cc11-4aaf...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f5da4663-addb-4e53...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f7d2e5d7-6de0-4bb6...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f7f1f281-843d-4492...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f8f68442-9773-44c0...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f9ab28eb-4d56-434d...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/fc763856-c240-4366...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/fe45e6ce-3fca-4782...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ffac1db4-4120-4334...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/044f230f...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/2e317eb0...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/6b91bb98...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/730b36bd...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/80aa0e0d...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/b454e49c...
g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/f28adfeb...
g####.bdst####.com/9aQTbzqaKgQFm2e88IuM_a/static/2017092781538/img/icons...
g####.bdst####.com/9aQTbzqaKgQFm2e88IuM_a/static/2017092781538/js/common...
g####.bdst####.com/9aQTbzqaKgQFm2e88IuM_a/static/2017092781538/js/defaul...
hm.b####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&ep=####&et=####&ja=#...
hm.b####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&et=####&ja=####&ln=#...
hm.b####.com/hm.gif?cc=0&ck=1&cl=16-bit&ds=800x600&ep=6299,5816&et=3&ja=...
hm.b####.com/hm.gif?cc=0&ck=1&cl=16-bit&ds=800x600&et=0&ja=0&ln=en-us&lo...
hm.b####.com/hm.js?7e45c71####

HTTP POST requests:

cpu.b####.com/1021/c5646cac/ads/27850558551/image
cpu.b####.com/1021/c5646cac/ads/27951326749/image
cpu.b####.com/1021/c5646cac/recommend/list
nb2.wh####.com:10091/opaService/link

Modified file system:

Creates the following files:

<Package Folder>/.shell_ass/####/libopalink.so_32
<Package Folder>/.shell_ass/####/libopalink.so_64
<Package Folder>/.shell_ass/libopalink.so
<Package Folder>/.shell_ass/opa_link.jar
<Package Folder>/.shell_ass/stupid
<Package Folder>/.shell_ass/stupid.zip
<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/f_000001
<Package Folder>/cache/####/f_000002
<Package Folder>/cache/####/f_000003
<Package Folder>/cache/####/f_000004
<Package Folder>/cache/####/f_000005
<Package Folder>/cache/####/f_000006
<Package Folder>/cache/####/f_000007
<Package Folder>/cache/####/f_000008
<Package Folder>/cache/####/f_000009
<Package Folder>/cache/####/f_00000a
<Package Folder>/cache/####/f_00000b
<Package Folder>/cache/####/f_00000c
<Package Folder>/cache/####/f_00000d
<Package Folder>/cache/####/f_00000e
<Package Folder>/cache/####/f_00000f
<Package Folder>/cache/####/f_000010
<Package Folder>/cache/####/f_000011
<Package Folder>/cache/####/f_000012
<Package Folder>/cache/####/f_000013
<Package Folder>/cache/####/f_000014
<Package Folder>/cache/####/f_000015
<Package Folder>/cache/####/f_000016
<Package Folder>/cache/####/f_000017
<Package Folder>/cache/####/f_000018
<Package Folder>/cache/####/f_000019
<Package Folder>/cache/####/f_00001a
<Package Folder>/cache/####/f_00001b
<Package Folder>/cache/####/f_00001c
<Package Folder>/cache/####/f_00001d
<Package Folder>/cache/####/f_00001e
<Package Folder>/cache/####/f_00001f
<Package Folder>/cache/####/f_000020
<Package Folder>/cache/####/f_000021
<Package Folder>/cache/####/f_000022
<Package Folder>/cache/####/f_000023
<Package Folder>/cache/####/f_000024
<Package Folder>/cache/####/index
<Package Folder>/databases/####/cc.db
<Package Folder>/databases/####/cc.db-journal
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
<Package Folder>/files/ltij.png
<Package Folder>/shared_prefs/cuf_config.xml
<Package Folder>/shared_prefs/umeng_general_config.xml

Miscellaneous:

Executes next shell scripts:

cat /proc/version
cat /sys/class/net/wlan0/address
getprop
getprop ro.board.platform
getprop ro.product.cpu.abi

Loads the following dynamic libraries:

libopalink

Uses the following algorithms to encrypt data:

Uses the following algorithms to decrypt data:

Gains access to network information.

Gains access to telephone information (number, imei, etc.).

Adds tasks to the system scheduler.

Displays its own windows over windows of other applications.

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical information

Recommandations pour le traitement

Free trial