Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.Xiny.78.origin
Downloads the following detected threats from the Web:
- Android.Xiny.78.origin
Network activity:
Connecting to:
- a####.####.com
- google-####.com
HTTP GET requests:
- a####.####.com/is/init.jsp?appid=####
- google-####.com/__utm.gif?utmwv=####&utmn=####&utmcs=####&utmsr=####&utm...
Modified file system:
Creates the following files:
- <Package Folder>/.cache/hdeadriderion.jar
- <Package Folder>/databases/analytics.db
- <Package Folder>/databases/analytics.db-journal
- <Package Folder>/databases/google_analytics.db-journal
- <Package Folder>/files/of_prefs
- <Package Folder>/shared_prefs/MY_PREFS.xml
- <Package Folder>/shared_prefs/mappcfg.xml
- <Package Folder>/shared_prefs/mappcfg.xml.bak
- <SD-Card>/ddad/####/<Package>.txt
- <SD-Card>/openfeint/####/manifest.db
- <SD-Card>/openfeint/####/manifest.db-journal
Miscellaneous:
Executes next shell scripts:
- <dexopt>
