Android.Packed.37645

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.DownLoader.683.origin

Network activity:

Connecting to:

UDP(DNS) <Google DNS>
TCP(HTTP/1.0) 4####.92.62.1:80
TCP(HTTP/1.0) pis.al####.com:80
TCP(HTTP/1.1) www.google-####.com:80
TCP(HTTP/1.1) pus.al####.com:80
TCP(HTTP/1.1) cdn-hig####.unit####.uni####.com:80
TCP(HTTP/1.1) pss.al####.com:80
TCP(HTTP/1.1) 1####.185.149.167:80
TCP(HTTP/1.1) cdn.img.h####.####.com:80
TCP(HTTP/1.1) cdn.game####.org:80
TCP(HTTP/1.1) 1####.76.224.67:80
TCP(TLS/1.0) im####.appli####.com:443
TCP(TLS/1.0) up####.weihu####.com:443
TCP(TLS/1.0) mzw.4####.top:443
TCP(TLS/1.0) pns.al####.com:443
UDP 1####.168.76.254:4466

DNS requests:

cdn-hig####.unit####.uni####.com
cdn.app.h####.top
cdn.game####.org
cdn.img.h####.top
im####.appli####.com
mzw.4####.top
pis.al####.com
pns.al####.com
pss.al####.com
pus.al####.com
q####.4####.top
up####.weihu####.com
www.google-####.com

HTTP GET requests:

1####.185.149.167/swenjian/you
cdn-hig####.unit####.uni####.com/assets/5a81660994a39c0012c001e2/m31-100...
cdn-hig####.unit####.uni####.com/impact/webview/production/impact/img/cl...
cdn-hig####.unit####.uni####.com/impact/webview/production/impact/index....
cdn.game####.org/strategy/UnknownDev
cdn.game####.org/strategy/base
cdn.game####.org/strategy/dev_root
cdn.game####.org/strategy/dev_root2
cdn.game####.org/strategy/larger4.3
cdn.game####.org/strategy/loss_4.3
cdn.game####.org/strategy/sul18
cdn.game####.org/strategy/symlink-adbd
cdn.img.h####.####.com/upload/201805/11/app/20180511180722282.apk
cdn.img.h####.####.com/upload/201805/11/img/20180511180711461.png
cdn.img.h####.####.com/upload/201805/8/img/20180508175440871.png
pus.al####.com/kernal/sdkcontrol/vod_android-mobile_x86_9.1.1.1220.jpg
www.google-####.com/ga.js

HTTP POST requests:

pis.al####.com/p/pcdn/i.php?v=####
pss.al####.com/iku/log/acc
pss.al####.com/iku/log/acc?ver=####&flag=####&t=####&mytype=####

Modified file system:

Creates the following files:

/data/data/####/0ecb53e7-91aa-4754-9232-268e17e39d90.jar
/data/data/####/1740c449fc10be62df60ba0f18696c9f
/data/data/####/192d1878-2314-4b64-b260-10fa11fe9453
/data/data/####/26e27037-62f8-48ce-ad9d-f306b2e827ed
/data/data/####/32edd79a240b5f1e461d069caab1ec3e
/data/data/####/39d19112-2ce5-466f-897c-0532976951d1.jar
/data/data/####/5b332d6e-d146-4579-81e7-2e4a9f2a5092
/data/data/####/69721775-c7a7-4649-a6de-43ee634d7565
/data/data/####/77620f24-78a1-4cd7-b658-dd156a1b3ded
/data/data/####/8b6f263391259b7a8e5f58ee71852ca8
/data/data/####/8f169e4e-0efb-424a-945e-733fb7f95abe
/data/data/####/ApplicationCache.db-journal
/data/data/####/IsCanGetShareMoney
/data/data/####/IsDownloadProjectPuzzlecube
/data/data/####/IsDownloadProjectSaying
/data/data/####/IsDownloadProjectSearching
/data/data/####/IsDownloadProjectSudoku
/data/data/####/IsDownloadProjectTwoPicture
/data/data/####/IsDownloadProjectTwoPicture2
/data/data/####/IsRate
/data/data/####/IsShareToFBToday
/data/data/####/LoginDate
/data/data/####/LoginHours
/data/data/####/LoginMonth
/data/data/####/LoginYear
/data/data/####/Matrix
/data/data/####/SUBOXLOG_
/data/data/####/UserMoney
/data/data/####/UserStage
/data/data/####/UserStageAry1
/data/data/####/UserStageAry10
/data/data/####/UserStageAry100
/data/data/####/UserStageAry101
/data/data/####/UserStageAry102
/data/data/####/UserStageAry103
/data/data/####/UserStageAry104
/data/data/####/UserStageAry105
/data/data/####/UserStageAry106
/data/data/####/UserStageAry107
/data/data/####/UserStageAry108
/data/data/####/UserStageAry109
/data/data/####/UserStageAry11
/data/data/####/UserStageAry110
/data/data/####/UserStageAry111
/data/data/####/UserStageAry112
/data/data/####/UserStageAry113
/data/data/####/UserStageAry114
/data/data/####/UserStageAry115
/data/data/####/UserStageAry116
/data/data/####/UserStageAry117
/data/data/####/UserStageAry118
/data/data/####/UserStageAry119
/data/data/####/UserStageAry12
/data/data/####/UserStageAry120
/data/data/####/UserStageAry121
/data/data/####/UserStageAry122
/data/data/####/UserStageAry123
/data/data/####/UserStageAry124
/data/data/####/UserStageAry125
/data/data/####/UserStageAry126
/data/data/####/UserStageAry127
/data/data/####/UserStageAry128
/data/data/####/UserStageAry129
/data/data/####/UserStageAry13
/data/data/####/UserStageAry130
/data/data/####/UserStageAry131
/data/data/####/UserStageAry132
/data/data/####/UserStageAry133
/data/data/####/UserStageAry134
/data/data/####/UserStageAry135
/data/data/####/UserStageAry136
/data/data/####/UserStageAry137
/data/data/####/UserStageAry138
/data/data/####/UserStageAry139
/data/data/####/UserStageAry14
/data/data/####/UserStageAry140
/data/data/####/UserStageAry141
/data/data/####/UserStageAry142
/data/data/####/UserStageAry143
/data/data/####/UserStageAry144
/data/data/####/UserStageAry145
/data/data/####/UserStageAry146
/data/data/####/UserStageAry147
/data/data/####/UserStageAry148
/data/data/####/UserStageAry149
/data/data/####/UserStageAry15
/data/data/####/UserStageAry150
/data/data/####/UserStageAry151
/data/data/####/UserStageAry152
/data/data/####/UserStageAry153
/data/data/####/UserStageAry154
/data/data/####/UserStageAry155
/data/data/####/UserStageAry156
/data/data/####/UserStageAry157
/data/data/####/UserStageAry158
/data/data/####/UserStageAry159
/data/data/####/UserStageAry16
/data/data/####/UserStageAry160
/data/data/####/UserStageAry161
/data/data/####/UserStageAry162
/data/data/####/UserStageAry163
/data/data/####/UserStageAry164
/data/data/####/UserStageAry165
/data/data/####/UserStageAry166
/data/data/####/UserStageAry167
/data/data/####/UserStageAry168
/data/data/####/UserStageAry169
/data/data/####/UserStageAry17
/data/data/####/UserStageAry170
/data/data/####/UserStageAry171
/data/data/####/UserStageAry172
/data/data/####/UserStageAry173
/data/data/####/UserStageAry174
/data/data/####/UserStageAry175
/data/data/####/UserStageAry176
/data/data/####/UserStageAry177
/data/data/####/UserStageAry178
/data/data/####/UserStageAry179
/data/data/####/UserStageAry18
/data/data/####/UserStageAry180
/data/data/####/UserStageAry181
/data/data/####/UserStageAry182
/data/data/####/UserStageAry183
/data/data/####/UserStageAry184
/data/data/####/UserStageAry185
/data/data/####/UserStageAry186
/data/data/####/UserStageAry187
/data/data/####/UserStageAry188
/data/data/####/UserStageAry189
/data/data/####/UserStageAry19
/data/data/####/UserStageAry190
/data/data/####/UserStageAry191
/data/data/####/UserStageAry192
/data/data/####/UserStageAry193
/data/data/####/UserStageAry194
/data/data/####/UserStageAry195
/data/data/####/UserStageAry196
/data/data/####/UserStageAry197
/data/data/####/UserStageAry198
/data/data/####/UserStageAry199
/data/data/####/UserStageAry2
/data/data/####/UserStageAry20
/data/data/####/UserStageAry200
/data/data/####/UserStageAry201
/data/data/####/UserStageAry202
/data/data/####/UserStageAry203
/data/data/####/UserStageAry204
/data/data/####/UserStageAry205
/data/data/####/UserStageAry206
/data/data/####/UserStageAry207
/data/data/####/UserStageAry208
/data/data/####/UserStageAry209
/data/data/####/UserStageAry21
/data/data/####/UserStageAry210
/data/data/####/UserStageAry211
/data/data/####/UserStageAry212
/data/data/####/UserStageAry213
/data/data/####/UserStageAry214
/data/data/####/UserStageAry215
/data/data/####/UserStageAry216
/data/data/####/UserStageAry217
/data/data/####/UserStageAry218
/data/data/####/UserStageAry219
/data/data/####/UserStageAry22
/data/data/####/UserStageAry220
/data/data/####/UserStageAry221
/data/data/####/UserStageAry222
/data/data/####/UserStageAry223
/data/data/####/UserStageAry224
/data/data/####/UserStageAry225
/data/data/####/UserStageAry226
/data/data/####/UserStageAry227
/data/data/####/UserStageAry228
/data/data/####/UserStageAry229
/data/data/####/UserStageAry23
/data/data/####/UserStageAry230
/data/data/####/UserStageAry231
/data/data/####/UserStageAry232
/data/data/####/UserStageAry233
/data/data/####/UserStageAry234
/data/data/####/UserStageAry235
/data/data/####/UserStageAry236
/data/data/####/UserStageAry237
/data/data/####/UserStageAry238
/data/data/####/UserStageAry239
/data/data/####/UserStageAry24
/data/data/####/UserStageAry240
/data/data/####/UserStageAry241
/data/data/####/UserStageAry242
/data/data/####/UserStageAry243
/data/data/####/UserStageAry244
/data/data/####/UserStageAry245
/data/data/####/UserStageAry246
/data/data/####/UserStageAry247
/data/data/####/UserStageAry248
/data/data/####/UserStageAry249
/data/data/####/UserStageAry25
/data/data/####/UserStageAry250
/data/data/####/UserStageAry251
/data/data/####/UserStageAry252
/data/data/####/UserStageAry253
/data/data/####/UserStageAry254
/data/data/####/UserStageAry255
/data/data/####/UserStageAry256
/data/data/####/UserStageAry257
/data/data/####/UserStageAry258
/data/data/####/UserStageAry259
/data/data/####/UserStageAry26
/data/data/####/UserStageAry260
/data/data/####/UserStageAry261
/data/data/####/UserStageAry262
/data/data/####/UserStageAry263
/data/data/####/UserStageAry264
/data/data/####/UserStageAry265
/data/data/####/UserStageAry266
/data/data/####/UserStageAry267
/data/data/####/UserStageAry268
/data/data/####/UserStageAry269
/data/data/####/UserStageAry27
/data/data/####/UserStageAry270
/data/data/####/UserStageAry271
/data/data/####/UserStageAry272
/data/data/####/UserStageAry273
/data/data/####/UserStageAry274
/data/data/####/UserStageAry275
/data/data/####/UserStageAry276
/data/data/####/UserStageAry277
/data/data/####/UserStageAry278
/data/data/####/UserStageAry279
/data/data/####/UserStageAry28
/data/data/####/UserStageAry280
/data/data/####/UserStageAry281
/data/data/####/UserStageAry282
/data/data/####/UserStageAry283
/data/data/####/UserStageAry284
/data/data/####/UserStageAry285
/data/data/####/UserStageAry286
/data/data/####/UserStageAry287
/data/data/####/UserStageAry288
/data/data/####/UserStageAry289
/data/data/####/UserStageAry29
/data/data/####/UserStageAry290
/data/data/####/UserStageAry291
/data/data/####/UserStageAry292
/data/data/####/UserStageAry293
/data/data/####/UserStageAry294
/data/data/####/UserStageAry295
/data/data/####/UserStageAry296
/data/data/####/UserStageAry297
/data/data/####/UserStageAry298
/data/data/####/UserStageAry299
/data/data/####/UserStageAry3
/data/data/####/UserStageAry30
/data/data/####/UserStageAry300
/data/data/####/UserStageAry301
/data/data/####/UserStageAry302
/data/data/####/UserStageAry303
/data/data/####/UserStageAry304
/data/data/####/UserStageAry305
/data/data/####/UserStageAry306
/data/data/####/UserStageAry307
/data/data/####/UserStageAry308
/data/data/####/UserStageAry309
/data/data/####/UserStageAry31
/data/data/####/UserStageAry310
/data/data/####/UserStageAry311
/data/data/####/UserStageAry312
/data/data/####/UserStageAry313
/data/data/####/UserStageAry314
/data/data/####/UserStageAry315
/data/data/####/UserStageAry316
/data/data/####/UserStageAry317
/data/data/####/UserStageAry318
/data/data/####/UserStageAry319
/data/data/####/UserStageAry32
/data/data/####/UserStageAry320
/data/data/####/UserStageAry321
/data/data/####/UserStageAry322
/data/data/####/UserStageAry323
/data/data/####/UserStageAry324
/data/data/####/UserStageAry325
/data/data/####/UserStageAry326
/data/data/####/UserStageAry327
/data/data/####/UserStageAry328
/data/data/####/UserStageAry329
/data/data/####/UserStageAry33
/data/data/####/UserStageAry330
/data/data/####/UserStageAry331
/data/data/####/UserStageAry332
/data/data/####/UserStageAry333
/data/data/####/UserStageAry334
/data/data/####/UserStageAry335
/data/data/####/UserStageAry336
/data/data/####/UserStageAry337
/data/data/####/UserStageAry338
/data/data/####/UserStageAry339
/data/data/####/UserStageAry34
/data/data/####/UserStageAry340
/data/data/####/UserStageAry341
/data/data/####/UserStageAry342
/data/data/####/UserStageAry343
/data/data/####/UserStageAry344
/data/data/####/UserStageAry345
/data/data/####/UserStageAry346
/data/data/####/UserStageAry347
/data/data/####/UserStageAry348
/data/data/####/UserStageAry349
/data/data/####/UserStageAry35
/data/data/####/UserStageAry350
/data/data/####/UserStageAry351
/data/data/####/UserStageAry352
/data/data/####/UserStageAry353
/data/data/####/UserStageAry354
/data/data/####/UserStageAry355
/data/data/####/UserStageAry356
/data/data/####/UserStageAry357
/data/data/####/UserStageAry358
/data/data/####/UserStageAry359
/data/data/####/UserStageAry36
/data/data/####/UserStageAry360
/data/data/####/UserStageAry361
/data/data/####/UserStageAry362
/data/data/####/UserStageAry363
/data/data/####/UserStageAry364
/data/data/####/UserStageAry365
/data/data/####/UserStageAry366
/data/data/####/UserStageAry367
/data/data/####/UserStageAry368
/data/data/####/UserStageAry369
/data/data/####/UserStageAry37
/data/data/####/UserStageAry370
/data/data/####/UserStageAry371
/data/data/####/UserStageAry372
/data/data/####/UserStageAry373
/data/data/####/UserStageAry374
/data/data/####/UserStageAry375
/data/data/####/UserStageAry376
/data/data/####/UserStageAry377
/data/data/####/UserStageAry378
/data/data/####/UserStageAry379
/data/data/####/UserStageAry38
/data/data/####/UserStageAry380
/data/data/####/UserStageAry381
/data/data/####/UserStageAry382
/data/data/####/UserStageAry383
/data/data/####/UserStageAry384
/data/data/####/UserStageAry385
/data/data/####/UserStageAry386
/data/data/####/UserStageAry387
/data/data/####/UserStageAry388
/data/data/####/UserStageAry389
/data/data/####/UserStageAry39
/data/data/####/UserStageAry390
/data/data/####/UserStageAry391
/data/data/####/UserStageAry392
/data/data/####/UserStageAry393
/data/data/####/UserStageAry394
/data/data/####/UserStageAry395
/data/data/####/UserStageAry396
/data/data/####/UserStageAry397
/data/data/####/UserStageAry398
/data/data/####/UserStageAry399
/data/data/####/UserStageAry4
/data/data/####/UserStageAry40
/data/data/####/UserStageAry400
/data/data/####/UserStageAry401
/data/data/####/UserStageAry402
/data/data/####/UserStageAry403
/data/data/####/UserStageAry404
/data/data/####/UserStageAry405
/data/data/####/UserStageAry406
/data/data/####/UserStageAry407
/data/data/####/UserStageAry408
/data/data/####/UserStageAry409
/data/data/####/UserStageAry41
/data/data/####/UserStageAry410
/data/data/####/UserStageAry411
/data/data/####/UserStageAry412
/data/data/####/UserStageAry413
/data/data/####/UserStageAry414
/data/data/####/UserStageAry415
/data/data/####/UserStageAry416
/data/data/####/UserStageAry417
/data/data/####/UserStageAry418
/data/data/####/UserStageAry419
/data/data/####/UserStageAry42
/data/data/####/UserStageAry420
/data/data/####/UserStageAry421
/data/data/####/UserStageAry422
/data/data/####/UserStageAry423
/data/data/####/UserStageAry424
/data/data/####/UserStageAry425
/data/data/####/UserStageAry426
/data/data/####/UserStageAry427
/data/data/####/UserStageAry428
/data/data/####/UserStageAry429
/data/data/####/UserStageAry43
/data/data/####/UserStageAry430
/data/data/####/UserStageAry431
/data/data/####/UserStageAry432
/data/data/####/UserStageAry433
/data/data/####/UserStageAry434
/data/data/####/UserStageAry435
/data/data/####/UserStageAry436
/data/data/####/UserStageAry437
/data/data/####/UserStageAry438
/data/data/####/UserStageAry439
/data/data/####/UserStageAry44
/data/data/####/UserStageAry440
/data/data/####/UserStageAry441
/data/data/####/UserStageAry442
/data/data/####/UserStageAry443
/data/data/####/UserStageAry444
/data/data/####/UserStageAry445
/data/data/####/UserStageAry446
/data/data/####/UserStageAry447
/data/data/####/UserStageAry448
/data/data/####/UserStageAry449
/data/data/####/UserStageAry45
/data/data/####/UserStageAry450
/data/data/####/UserStageAry451
/data/data/####/UserStageAry452
/data/data/####/UserStageAry453
/data/data/####/UserStageAry454
/data/data/####/UserStageAry455
/data/data/####/UserStageAry456
/data/data/####/UserStageAry457
/data/data/####/UserStageAry458
/data/data/####/UserStageAry459
/data/data/####/UserStageAry46
/data/data/####/UserStageAry460
/data/data/####/UserStageAry461
/data/data/####/UserStageAry462
/data/data/####/UserStageAry463
/data/data/####/UserStageAry464
/data/data/####/UserStageAry465
/data/data/####/UserStageAry466
/data/data/####/UserStageAry467
/data/data/####/UserStageAry468
/data/data/####/UserStageAry469
/data/data/####/UserStageAry47
/data/data/####/UserStageAry470
/data/data/####/UserStageAry471
/data/data/####/UserStageAry472
/data/data/####/UserStageAry473
/data/data/####/UserStageAry474
/data/data/####/UserStageAry475
/data/data/####/UserStageAry476
/data/data/####/UserStageAry477
/data/data/####/UserStageAry478
/data/data/####/UserStageAry479
/data/data/####/UserStageAry48
/data/data/####/UserStageAry480
/data/data/####/UserStageAry481
/data/data/####/UserStageAry482
/data/data/####/UserStageAry483
/data/data/####/UserStageAry484
/data/data/####/UserStageAry485
/data/data/####/UserStageAry486
/data/data/####/UserStageAry487
/data/data/####/UserStageAry488
/data/data/####/UserStageAry489
/data/data/####/UserStageAry49
/data/data/####/UserStageAry490
/data/data/####/UserStageAry491
/data/data/####/UserStageAry492
/data/data/####/UserStageAry493
/data/data/####/UserStageAry494
/data/data/####/UserStageAry495
/data/data/####/UserStageAry496
/data/data/####/UserStageAry497
/data/data/####/UserStageAry498
/data/data/####/UserStageAry499
/data/data/####/UserStageAry5
/data/data/####/UserStageAry50
/data/data/####/UserStageAry500
/data/data/####/UserStageAry501
/data/data/####/UserStageAry502
/data/data/####/UserStageAry503
/data/data/####/UserStageAry504
/data/data/####/UserStageAry505
/data/data/####/UserStageAry506
/data/data/####/UserStageAry507
/data/data/####/UserStageAry508
/data/data/####/UserStageAry509
/data/data/####/UserStageAry51
/data/data/####/UserStageAry510
/data/data/####/UserStageAry511
/data/data/####/UserStageAry512
/data/data/####/UserStageAry513
/data/data/####/UserStageAry514
/data/data/####/UserStageAry515
/data/data/####/UserStageAry516
/data/data/####/UserStageAry517
/data/data/####/UserStageAry518
/data/data/####/UserStageAry519
/data/data/####/UserStageAry52
/data/data/####/UserStageAry520
/data/data/####/UserStageAry521
/data/data/####/UserStageAry522
/data/data/####/UserStageAry523
/data/data/####/UserStageAry524
/data/data/####/UserStageAry525
/data/data/####/UserStageAry526
/data/data/####/UserStageAry527
/data/data/####/UserStageAry528
/data/data/####/UserStageAry529
/data/data/####/UserStageAry53
/data/data/####/UserStageAry530
/data/data/####/UserStageAry531
/data/data/####/UserStageAry532
/data/data/####/UserStageAry533
/data/data/####/UserStageAry534
/data/data/####/UserStageAry535
/data/data/####/UserStageAry536
/data/data/####/UserStageAry537
/data/data/####/UserStageAry538
/data/data/####/UserStageAry539
/data/data/####/UserStageAry54
/data/data/####/UserStageAry540
/data/data/####/UserStageAry541
/data/data/####/UserStageAry542
/data/data/####/UserStageAry543
/data/data/####/UserStageAry544
/data/data/####/UserStageAry545
/data/data/####/UserStageAry546
/data/data/####/UserStageAry547
/data/data/####/UserStageAry548
/data/data/####/UserStageAry549
/data/data/####/UserStageAry55
/data/data/####/UserStageAry550
/data/data/####/UserStageAry551
/data/data/####/UserStageAry552
/data/data/####/UserStageAry553
/data/data/####/UserStageAry554
/data/data/####/UserStageAry555
/data/data/####/UserStageAry556
/data/data/####/UserStageAry557
/data/data/####/UserStageAry558
/data/data/####/UserStageAry559
/data/data/####/UserStageAry56
/data/data/####/UserStageAry560
/data/data/####/UserStageAry561
/data/data/####/UserStageAry562
/data/data/####/UserStageAry563
/data/data/####/UserStageAry564
/data/data/####/UserStageAry565
/data/data/####/UserStageAry566
/data/data/####/UserStageAry567
/data/data/####/UserStageAry568
/data/data/####/UserStageAry569
/data/data/####/UserStageAry57
/data/data/####/UserStageAry570
/data/data/####/UserStageAry571
/data/data/####/UserStageAry572
/data/data/####/UserStageAry573
/data/data/####/UserStageAry574
/data/data/####/UserStageAry575
/data/data/####/UserStageAry576
/data/data/####/UserStageAry577
/data/data/####/UserStageAry578
/data/data/####/UserStageAry579
/data/data/####/UserStageAry58
/data/data/####/UserStageAry580
/data/data/####/UserStageAry581
/data/data/####/UserStageAry582
/data/data/####/UserStageAry583
/data/data/####/UserStageAry584
/data/data/####/UserStageAry585
/data/data/####/UserStageAry586
/data/data/####/UserStageAry587
/data/data/####/UserStageAry588
/data/data/####/UserStageAry589
/data/data/####/UserStageAry59
/data/data/####/UserStageAry590
/data/data/####/UserStageAry591
/data/data/####/UserStageAry592
/data/data/####/UserStageAry593
/data/data/####/UserStageAry594
/data/data/####/UserStageAry595
/data/data/####/UserStageAry596
/data/data/####/UserStageAry597
/data/data/####/UserStageAry598
/data/data/####/UserStageAry599
/data/data/####/UserStageAry6
/data/data/####/UserStageAry60
/data/data/####/UserStageAry600
/data/data/####/UserStageAry601
/data/data/####/UserStageAry602
/data/data/####/UserStageAry603
/data/data/####/UserStageAry604
/data/data/####/UserStageAry605
/data/data/####/UserStageAry606
/data/data/####/UserStageAry607
/data/data/####/UserStageAry608
/data/data/####/UserStageAry609
/data/data/####/UserStageAry61
/data/data/####/UserStageAry610
/data/data/####/UserStageAry611
/data/data/####/UserStageAry612
/data/data/####/UserStageAry613
/data/data/####/UserStageAry614
/data/data/####/UserStageAry615
/data/data/####/UserStageAry616
/data/data/####/UserStageAry617
/data/data/####/UserStageAry618
/data/data/####/UserStageAry619
/data/data/####/UserStageAry62
/data/data/####/UserStageAry620
/data/data/####/UserStageAry621
/data/data/####/UserStageAry622
/data/data/####/UserStageAry623
/data/data/####/UserStageAry624
/data/data/####/UserStageAry625
/data/data/####/UserStageAry626
/data/data/####/UserStageAry627
/data/data/####/UserStageAry628
/data/data/####/UserStageAry629
/data/data/####/UserStageAry63
/data/data/####/UserStageAry630
/data/data/####/UserStageAry631
/data/data/####/UserStageAry632
/data/data/####/UserStageAry633
/data/data/####/UserStageAry634
/data/data/####/UserStageAry635
/data/data/####/UserStageAry636
/data/data/####/UserStageAry637
/data/data/####/UserStageAry638
/data/data/####/UserStageAry639
/data/data/####/UserStageAry64
/data/data/####/UserStageAry640
/data/data/####/UserStageAry641
/data/data/####/UserStageAry642
/data/data/####/UserStageAry643
/data/data/####/UserStageAry644
/data/data/####/UserStageAry645
/data/data/####/UserStageAry646
/data/data/####/UserStageAry647
/data/data/####/UserStageAry648
/data/data/####/UserStageAry649
/data/data/####/UserStageAry65
/data/data/####/UserStageAry650
/data/data/####/UserStageAry651
/data/data/####/UserStageAry652
/data/data/####/UserStageAry653
/data/data/####/UserStageAry654
/data/data/####/UserStageAry655
/data/data/####/UserStageAry656
/data/data/####/UserStageAry657
/data/data/####/UserStageAry658
/data/data/####/UserStageAry659
/data/data/####/UserStageAry66
/data/data/####/UserStageAry660
/data/data/####/UserStageAry67
/data/data/####/UserStageAry68
/data/data/####/UserStageAry69
/data/data/####/UserStageAry7
/data/data/####/UserStageAry70
/data/data/####/UserStageAry71
/data/data/####/UserStageAry72
/data/data/####/UserStageAry73
/data/data/####/UserStageAry74
/data/data/####/UserStageAry75
/data/data/####/UserStageAry76
/data/data/####/UserStageAry77
/data/data/####/UserStageAry78
/data/data/####/UserStageAry79
/data/data/####/UserStageAry8
/data/data/####/UserStageAry80
/data/data/####/UserStageAry81
/data/data/####/UserStageAry82
/data/data/####/UserStageAry83
/data/data/####/UserStageAry84
/data/data/####/UserStageAry85
/data/data/####/UserStageAry86
/data/data/####/UserStageAry87
/data/data/####/UserStageAry88
/data/data/####/UserStageAry89
/data/data/####/UserStageAry9
/data/data/####/UserStageAry90
/data/data/####/UserStageAry91
/data/data/####/UserStageAry92
/data/data/####/UserStageAry93
/data/data/####/UserStageAry94
/data/data/####/UserStageAry95
/data/data/####/UserStageAry96
/data/data/####/UserStageAry97
/data/data/####/UserStageAry98
/data/data/####/UserStageAry99
/data/data/####/ads660426283.jar
/data/data/####/alldown.xml
/data/data/####/b0141e478b25af7c40a8cca8de6c4708
/data/data/####/b0b300df-1a94-4679-ad41-f797a88e2ce3
/data/data/####/b18a021d11a3004d25017230b681476b
/data/data/####/b298eb50-6d62-4606-9e56-2593041a94c8
/data/data/####/b2f1b5a8-cc89-434e-af7f-c19bea7f4cf4
/data/data/####/b5f00a0d-da45-4e23-8156-735567756f0a
/data/data/####/c61913b615fb6224701377a119081f36
/data/data/####/data_0
/data/data/####/data_1
/data/data/####/data_2
/data/data/####/data_3
/data/data/####/ddexe
/data/data/####/debuggerd
/data/data/####/device.db
/data/data/####/efeaabaa-cc57-4b7a-b59e-85d0bfc23d54
/data/data/####/f21076b0-a0c8-4553-8b22-8dbf6791b5ba
/data/data/####/f_000001
/data/data/####/f_000002
/data/data/####/fileWork
/data/data/####/h.jar
/data/data/####/h.xml
/data/data/####/index
/data/data/####/install-recovery.sh
/data/data/####/libpcdn_acc.zip
/data/data/####/libpcdn_acc_new.so
/data/data/####/mivmi.xml
/data/data/####/pcdnconfigs.xml
/data/data/####/pidof
/data/data/####/root3
/data/data/####/su
/data/data/####/supolicy
/data/data/####/toolbox
/data/data/####/vmeni1.db-journal
/data/data/####/webview.db-journal
/data/data/####/webviewCookiesChromium.db-journal
/data/data/####/wsroot.sh
/data/media/####/.nomedia
/data/media/####/030659155233879cd0e918cc8a943e00.apk
/data/media/####/2a2f7a3feef67
/data/media/####/59be7504b6717149bddb9669e33d4858.apk
/data/media/####/5ab3d37ec1082803eea8bfa10e9f7970260220343d4bfb...00.mp4
/data/media/####/5ab3d37ec1082803eea8bfa199373a1810136b34641132...00.mp4
/data/media/####/6dd685038ebe0
/data/media/####/cl.tmp
/data/media/####/dv.tmp
/data/media/####/dv.tmp (deleted)
/data/media/####/myself.dat

Miscellaneous:

Executes next shell scripts:

chmod 777 /storage/emulated/0/instal/030659155233879cd0e918cc8a943e00.apk
chmod 777 /storage/emulated/0/instal/59be7504b6717149bddb9669e33d4858.apk
chmod 777 Matrix ddexe debuggerd device.db fileWork install-recovery.sh pidof root3 su supolicy toolbox wsroot.sh
chmod 777 Matrix ddexe debuggerd fileWork install-recovery.sh pidof su supolicy toolbox wsroot.sh
sh

Loads the following dynamic libraries:

libpcdn_acc
pcdn_acc

Uses the following algorithms to decrypt data:

AES-CBC-PKCS5Padding

Gains access to network information.

Gains access to telephone information (number, imei, etc.).

Gains access to information about installed applications.

Gains access to information about running applications.

Adds tasks to the system scheduler.

Displays its own windows over windows of other applications.

Technologies

Terminology

Training and education

Myths

Technical information

Curing recommendations

Free trial