Adware.Gexin.7501

Technical information

Malicious functions:

Executes code of the following detected threats:

Adware.Gexin.2.origin

Accesses the ITelephony private interface.

Network activity:

Connects to:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) pi####.qq.com:80
TCP(HTTP/1.1) log.renre####.com:80
TCP(HTTP/1.1) 1####.254.116.117:80
TCP(HTTP/1.1) a####.rr####.com:80
TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
TCP(TLS/1.0) log.renre####.com:443
TCP(TLS/1.0) loc.map.b####.com:443
TCP(TLS/1.0) i####.rr####.com:443
TCP(TLS/1.0) 1####.217.20.78:443
TCP(TLS/1.0) sc.shanyis####.com:443
TCP(TLS/1.0) api.w####.com:443
TCP(TLS/1.0) app####.renre####.com:443
TCP(TLS/1.0) o####.map.b####.com:443
TCP(TLS/1.0) a####.rr####.com:443
TCP(TLS/1.0) api.renre####.com:443
TCP(TLS/1.0) wap.cmpass####.com:8443
TCP(TLS/1.0) regi####.xm####.xi####.com:443
TCP(TLS/1.0) api.map.b####.com:443
TCP(TLS/1.0) 1####.242.142.88:443
TCP(TLS/1.0) appver####.renre####.com:443
TCP t####.qq.com:443

DNS requests:

a####.rr####.com
api.map.b####.com
api.renre####.com
api.w####.com
app####.renre####.com
appver####.renre####.com
i####.rr####.com
loc.map.b####.com
log.renre####.com
m####.rr####.com
o####.map.b####.com
pi####.qq.com
plb####.u####.com
regi####.xm####.xi####.com
sc.shanyis####.com
t####.qq.com
u####.u####.com
wap.cmpass####.com

HTTP GET requests:

a####.rr####.com/motion/145005.png
a####.rr####.com/motion/256297.png
a####.rr####.com/motion/312830.png
a####.rr####.com/motion/340356.png
a####.rr####.com/motion/396291.png
a####.rr####.com/motion/427695.png
a####.rr####.com/motion/431388.png
a####.rr####.com/motion/694631.png
a####.rr####.com/motion/745115.png
a####.rr####.com/motion/768998.png
a####.rr####.com/motion/846606.png
a####.rr####.com/motion/852403.png
a####.rr####.com/motion/948489.png

HTTP POST requests:

log.renre####.com/index.php?c=####&m=####
pi####.qq.com/mstat/report/?index=####

File system changes:

Creates the following files:

/data/anr/traces.txt
/data/data/####/.imprint
/data/data/####/.jg.ic
/data/data/####/.tpns.service.xml.xml
/data/data/####/.tpns.settings.xml.xml
/data/data/####/.tpush_mta.xml
/data/data/####/.xml
/data/data/####/11amqxwjpjxrdn4nwfmwv879q
/data/data/####/1mlearnb6pb4p0vbae9lxp9ln
/data/data/####/29dvj1snrut1dgkpo74adw9by
/data/data/####/2zy99ru6egkp4va74sfs96tfr
/data/data/####/4fz44cy2zcciocm6ukkywjs3q
/data/data/####/55ce87ybk3ysjdtdr9eyp7ba2
/data/data/####/5g4rv2bqxlmcyz8frfoicvd37
/data/data/####/5pvdgz6melvoz81ya9fprvmtw
/data/data/####/5uhxb628pem45yuayfign3hi9
/data/data/####/5umglcgsom714ko13qcqudz8j
/data/data/####/74v4p6sg5iip87f16gpu5zwqw
/data/data/####/Alvin2.xml
/data/data/####/Carapp.db-journal
/data/data/####/ContextData.xml
/data/data/####/RRCCrashStore.xml
/data/data/####/SP_AROUTER_CACHE.xml
/data/data/####/_default_renrenche_cache_file_name.xml
/data/data/####/a==7.5.3&&5.6.0_1547205112230_envelope.log
/data/data/####/abtest_cache_data.0.tmp
/data/data/####/atayf8dekjb479e6siqwwtf
/data/data/####/authStatus_com.renrenche.renrenche;remote.xml
/data/data/####/com.renrenche.android.agent.v1_com.renrenche.renrenche.xml
/data/data/####/com.renrenche.renrenche.xml
/data/data/####/com.renrenche.renrenche_preferences.xml
/data/data/####/com.sensorsdata.analytics.android.sdk.SensorsDa...leted)
/data/data/####/com.sensorsdata.analytics.android.sdk.SensorsDa...ml.bak
/data/data/####/com.sensorsdata.analytics.android.sdk.SensorsDataAPI.xml
/data/data/####/connect.xml
/data/data/####/controlInfo.ini
/data/data/####/cwhcj3nqehiv33agda32u1ro
/data/data/####/d==7.5.3&&5.6.0_1547205112679_envelope.log
/data/data/####/d==7.5.3&&5.6.0_1547205134138_envelope.log
/data/data/####/dW1weF9pbnRlcm5hbF8xNTQ3MjA1MTA5Mjc1;
/data/data/####/dW1weF9pbnRlcm5hbF8xNTQ3MjA1MTMzNTg2;
/data/data/####/dW1weF9pbnRlcm5hbF8xNTQ3MjA1MTQ2ODE4;
/data/data/####/dW1weF9pbnRlcm5hbF8xNTQ3MjA1MTQyMTY5;
/data/data/####/dW1weF9pbnRlcm5hbF8xNTQ3MjA1MTUzMTI3;
/data/data/####/device_id.xml
/data/data/####/exchangeIdentity.json
/data/data/####/exid.dat
/data/data/####/firll.dat
/data/data/####/gal.db
/data/data/####/gal.db-journal
/data/data/####/geofencing.db
/data/data/####/geofencing.db-journal
/data/data/####/home_frist_pay_cache_key.0.tmp
/data/data/####/home_headline_info_cache_key.0.tmp
/data/data/####/hst.db
/data/data/####/hst.db-journal
/data/data/####/i==1.2.0&&5.6.0_1547205109270_envelope.log
/data/data/####/i==1.2.0&&5.6.0_1547205133839_envelope.log
/data/data/####/i==1.2.0&&5.6.0_1547205144063_envelope.log
/data/data/####/info.xml
/data/data/####/installed_1547205109764.info
/data/data/####/installed_1547205109793.info
/data/data/####/installed_1547205109855.info
/data/data/####/journal.tmp
/data/data/####/libcuid.so
/data/data/####/libjiagu-1830843141.so
/data/data/####/log.db
/data/data/####/log.db-journal
/data/data/####/mipush.xml
/data/data/####/mipush_extra.xml
/data/data/####/mipush_extra.xml.bak
/data/data/####/multidex.version.xml
/data/data/####/ofl.config
/data/data/####/ofl_location.db
/data/data/####/ofl_location.db-journal
/data/data/####/ofl_statistics.db
/data/data/####/ofl_statistics.db-journal
/data/data/####/recommend_car_info_cache.0.tmp
/data/data/####/response_server_time.xml
/data/data/####/rrc_carapp_conf.xml
/data/data/####/rrc_user.xml
/data/data/####/search_hot_words.0.tmp
/data/data/####/sell_sell_banner.0.tmp
/data/data/####/sensorsdata-journal
/data/data/####/sensorsdata.xml
/data/data/####/skinInfo.txt
/data/data/####/sp.db-journal
/data/data/####/tpush.shareprefs.xml
/data/data/####/ua.db
/data/data/####/ua.db-journal
/data/data/####/um_pri.xml
/data/data/####/umdat.xml
/data/data/####/umeng_common_config.xml
/data/data/####/umeng_common_config.xml.bak
/data/data/####/umeng_common_location.xml
/data/data/####/umeng_general_config.xml
/data/data/####/umeng_general_config.xml (deleted)
/data/data/####/umeng_general_config.xml.bak
/data/data/####/umeng_it.cache
/data/data/####/webview.db-journal
/data/data/####/webviewCookiesChromium.db-journal
/data/media/####/.a.dat
/data/media/####/.adfwe.dat
/data/media/####/.cca.dat
/data/media/####/.cuid
/data/media/####/.cuid2
/data/media/####/.nomedia
/data/media/####/.umm.dat
/data/media/####/0053b740ba47418dd4f3d948e709d165.0.tmp
/data/media/####/0053b740ba47418dd4f3d948e709d165.1.tmp
/data/media/####/02258fc57ad63dca04728fb1478d8e7c.0.tmp
/data/media/####/02258fc57ad63dca04728fb1478d8e7c.1.tmp
/data/media/####/0deafa08f2145bb9b9986a95931b530e.0.tmp
/data/media/####/0deafa08f2145bb9b9986a95931b530e.1.tmp
/data/media/####/11amqxwjpjxrdn4nwfmwv879q.0.tmp
/data/media/####/13421880b0cf45511fb7c4eeea8ff689.0.tmp
/data/media/####/13421880b0cf45511fb7c4eeea8ff689.1.tmp
/data/media/####/18b3b040425abfe44cb2877777b3d857.0.tmp
/data/media/####/18b3b040425abfe44cb2877777b3d857.1.tmp
/data/media/####/1e7b9c6983b60cb410daf83b371d9221.0.tmp
/data/media/####/1e7b9c6983b60cb410daf83b371d9221.1.tmp
/data/media/####/1mlearnb6pb4p0vbae9lxp9ln.0.tmp
/data/media/####/1qlzwh904ej0rwenbjq4v01h4.0.tmp
/data/media/####/21cm92miw5btcmf2xyufwffuu.0.tmp
/data/media/####/238eb7eba344f247ddcd79987553a862.0.tmp
/data/media/####/238eb7eba344f247ddcd79987553a862.1.tmp
/data/media/####/24aae61754267c5a1be949b8ce9647b2.0.tmp
/data/media/####/24aae61754267c5a1be949b8ce9647b2.1.tmp
/data/media/####/24b331ac6776d06d54fc9047e03359e1.0.tmp
/data/media/####/24b331ac6776d06d54fc9047e03359e1.1.tmp
/data/media/####/29dvj1snrut1dgkpo74adw9by.0.tmp
/data/media/####/2b80032aa8f5def9d15d2b9e1fb90cac.0.tmp
/data/media/####/2b80032aa8f5def9d15d2b9e1fb90cac.1.tmp
/data/media/####/2c8bed87a073b72978feef729e617f97.0.tmp
/data/media/####/2c8bed87a073b72978feef729e617f97.1.tmp
/data/media/####/2zy99ru6egkp4va74sfs96tfr.0.tmp
/data/media/####/35cecc16139003c82e18d48453be4166.0.tmp
/data/media/####/35cecc16139003c82e18d48453be4166.1.tmp
/data/media/####/36532cad2dde49bba4e815a9604d477b.0.tmp
/data/media/####/36532cad2dde49bba4e815a9604d477b.1.tmp
/data/media/####/376ttdtu0vn5bf8yv3w0vmcin.0.tmp
/data/media/####/39eh7imjge1jzaigmf6pnlga6.0.tmp
/data/media/####/3da94771ae4d41428abcf27a2b8377b0.0.tmp
/data/media/####/3da94771ae4d41428abcf27a2b8377b0.1.tmp
/data/media/####/3gauqbfwksuz4o5khc5bbzj4n.0.tmp
/data/media/####/4411fcea5278d8b24d051bbb33cffe24.0.tmp
/data/media/####/4411fcea5278d8b24d051bbb33cffe24.1.tmp
/data/media/####/48f438e7fb82dd060df25ecc67a7a9dc.0.tmp
/data/media/####/48f438e7fb82dd060df25ecc67a7a9dc.1.tmp
/data/media/####/49ecfe29b2f6f09e9d6770d02a77c05a.0.tmp
/data/media/####/49ecfe29b2f6f09e9d6770d02a77c05a.1.tmp
/data/media/####/4b749e290816372c032951f5d1f82c9d.0.tmp
/data/media/####/4b749e290816372c032951f5d1f82c9d.1.tmp
/data/media/####/4fa37b788d0361aec93658e26a7922d9.0.tmp
/data/media/####/4fa37b788d0361aec93658e26a7922d9.1.tmp
/data/media/####/4fb5aadcba5dd85574c544c64276634f.0.tmp
/data/media/####/4fb5aadcba5dd85574c544c64276634f.1.tmp
/data/media/####/4fz44cy2zcciocm6ukkywjs3q.0.tmp
/data/media/####/51b79e832cb8e10ecf0559939dfa1de0.0.tmp
/data/media/####/51b79e832cb8e10ecf0559939dfa1de0.1.tmp
/data/media/####/529d2d699cb25d2fea487f656f59bb23.0.tmp
/data/media/####/529d2d699cb25d2fea487f656f59bb23.1.tmp
/data/media/####/550c992ce28668d6d7afe329f75c3f5c.0.tmp
/data/media/####/550c992ce28668d6d7afe329f75c3f5c.1.tmp
/data/media/####/5512vtmh7dn4vcwmbbxccoyfi.0.tmp
/data/media/####/55ce87ybk3ysjdtdr9eyp7ba2.0.tmp
/data/media/####/5677041727cba86af69f01cd1cc7227c.0.tmp
/data/media/####/5677041727cba86af69f01cd1cc7227c.1.tmp
/data/media/####/56b197499dedd9c120dd2b85fbca226d.0.tmp
/data/media/####/56b197499dedd9c120dd2b85fbca226d.1.tmp
/data/media/####/596c98b6cd2d270d04b4a833885699fc.0.tmp
/data/media/####/596c98b6cd2d270d04b4a833885699fc.1.tmp
/data/media/####/5a4d07038bdfcabefd0ff268430fa5c3.0.tmp
/data/media/####/5a4d07038bdfcabefd0ff268430fa5c3.1.tmp
/data/media/####/5ac2706273d91120200936335f919ffb.0.tmp
/data/media/####/5ac2706273d91120200936335f919ffb.1.tmp
/data/media/####/5g4rv2bqxlmcyz8frfoicvd37.0.tmp
/data/media/####/5pvdgz6melvoz81ya9fprvmtw.0.tmp
/data/media/####/5uhxb628pem45yuayfign3hi9.0.tmp
/data/media/####/5umglcgsom714ko13qcqudz8j.0.tmp
/data/media/####/61418c28671ff7325757f0c1cf733591.0.tmp
/data/media/####/61418c28671ff7325757f0c1cf733591.1.tmp
/data/media/####/66377ee7b52c7180caae855d14af0d99.0.tmp
/data/media/####/66377ee7b52c7180caae855d14af0d99.1.tmp
/data/media/####/6f3a398b6ba6705c0cc88fb8d6d082df.0.tmp
/data/media/####/6f3a398b6ba6705c0cc88fb8d6d082df.1.tmp
/data/media/####/6liukb6yu4lqqgzaeslvvmyot.0.tmp
/data/media/####/713ef081b395314e0d16306f9740857c.0.tmp
/data/media/####/713ef081b395314e0d16306f9740857c.1.tmp
/data/media/####/72a788b43e606a9c345972a3a14c6fb8.0.tmp
/data/media/####/72a788b43e606a9c345972a3a14c6fb8.1.tmp
/data/media/####/72ee8840f1b0874e40a82fb1d4e8b971.0.tmp
/data/media/####/72ee8840f1b0874e40a82fb1d4e8b971.1.tmp
/data/media/####/74v4p6sg5iip87f16gpu5zwqw.0.tmp
/data/media/####/75c1705f04d99af464a1bb16c7babfe1.0.tmp
/data/media/####/75c1705f04d99af464a1bb16c7babfe1.1.tmp
/data/media/####/75c296414c251b253313cf5cd15822ca.0
/data/media/####/75c296414c251b253313cf5cd15822ca.1.tmp
/data/media/####/769221d0f90eedda02cc1b073d7da507.0.tmp
/data/media/####/769221d0f90eedda02cc1b073d7da507.1.tmp
/data/media/####/7a279464eb744ce4b6ec258a1c8ca833.0.tmp
/data/media/####/7a279464eb744ce4b6ec258a1c8ca833.1.tmp
/data/media/####/7f1b61c4701a01045b576817730d64f6.0.tmp
/data/media/####/7f1b61c4701a01045b576817730d64f6.1.tmp
/data/media/####/8134e757bc7de31141861489d1f5c744.0.tmp
/data/media/####/8134e757bc7de31141861489d1f5c744.1.tmp
/data/media/####/8936b920d0c2e4db9a537c1b016d3356.0.tmp
/data/media/####/8936b920d0c2e4db9a537c1b016d3356.1.tmp
/data/media/####/8b6099f94eb7e2c4d08e33d44213925a.0
/data/media/####/8b6099f94eb7e2c4d08e33d44213925a.1.tmp
/data/media/####/8c77598bb1c7383df656cf18cf039b6d.0.tmp
/data/media/####/8c77598bb1c7383df656cf18cf039b6d.1.tmp
/data/media/####/8c7da7a4a0340ad3ad69b3efe74996b4.0.tmp
/data/media/####/8c7da7a4a0340ad3ad69b3efe74996b4.1.tmp
/data/media/####/9366bca1a9dde27e54b9ce019980cbdd.0.tmp
/data/media/####/9366bca1a9dde27e54b9ce019980cbdd.1.tmp
/data/media/####/98a6333c565bda688077873aacb81eb0.0.tmp
/data/media/####/98a6333c565bda688077873aacb81eb0.1.tmp
/data/media/####/Alvin2.xml
/data/media/####/ContextData.xml
/data/media/####/a3c2becf8c8dec0128da03168e36fa8d.0.tmp
/data/media/####/a3c2becf8c8dec0128da03168e36fa8d.1.tmp
/data/media/####/a70f4f321b414cf7ded7c0bac9eb4edf.0.tmp
/data/media/####/a70f4f321b414cf7ded7c0bac9eb4edf.1.tmp
/data/media/####/a91f14c649aebf382cb999c34129de02.0.tmp
/data/media/####/a91f14c649aebf382cb999c34129de02.1.tmp
/data/media/####/a94096c6f77ad3a0f720eefd3adecc0a.0.tmp
/data/media/####/a94096c6f77ad3a0f720eefd3adecc0a.1.tmp
/data/media/####/ab4ea9b23eda4c7e00d5ada39fce7587.0.tmp
/data/media/####/ab4ea9b23eda4c7e00d5ada39fce7587.1.tmp
/data/media/####/ab70c7f0e17d7158be77a808baf9ab27.0.tmp
/data/media/####/ab70c7f0e17d7158be77a808baf9ab27.1.tmp
/data/media/####/ac3f165bafd3452f57f949a0c913c5a5.0.tmp
/data/media/####/ac3f165bafd3452f57f949a0c913c5a5.1.tmp
/data/media/####/aecfa6bd2db3333daf0c20d25c9dc70a.0.tmp
/data/media/####/aecfa6bd2db3333daf0c20d25c9dc70a.1.tmp
/data/media/####/atayf8dekjb479e6siqwwtf.0.tmp
/data/media/####/b234ef34bc95d3f665d17d9a154f6b6b.0.tmp
/data/media/####/b234ef34bc95d3f665d17d9a154f6b6b.1.tmp
/data/media/####/b421dd1042f8203d12a9ff5c0e0f7068.0.tmp
/data/media/####/b421dd1042f8203d12a9ff5c0e0f7068.1.tmp
/data/media/####/b569cabe85d705f75fc61f56afa79f24.0.tmp
/data/media/####/b569cabe85d705f75fc61f56afa79f24.1.tmp
/data/media/####/c307fb58772332841b5bfc767813a000.0.tmp
/data/media/####/c307fb58772332841b5bfc767813a000.1.tmp
/data/media/####/c3c77f844d23e38d2d9fd8d340693fed.0.tmp
/data/media/####/c3c77f844d23e38d2d9fd8d340693fed.1.tmp
/data/media/####/c62ab769c96c84b7c7f26b26827d7ed5.0.tmp
/data/media/####/c62ab769c96c84b7c7f26b26827d7ed5.1.tmp
/data/media/####/ca3300d4ee06d56a10eadf94d51356d4.0.tmp
/data/media/####/ca3300d4ee06d56a10eadf94d51356d4.1.tmp
/data/media/####/conlts.dat
/data/media/####/cwhcj3nqehiv33agda32u1ro.0.tmp
/data/media/####/d08899f79a634586067ac989193b412d.0.tmp
/data/media/####/d08899f79a634586067ac989193b412d.1.tmp
/data/media/####/d9a11d4fbc0cf9e798cba9d9013e4170.0.tmp
/data/media/####/d9a11d4fbc0cf9e798cba9d9013e4170.1.tmp
/data/media/####/da1931dbb6b70307a899a65e5e1de330.0.tmp
/data/media/####/da1931dbb6b70307a899a65e5e1de330.1.tmp
/data/media/####/db2ab5ca51a19f6d1421f61c07ab97ba.0.tmp
/data/media/####/db2ab5ca51a19f6d1421f61c07ab97ba.1.tmp
/data/media/####/dbf2ba609e31b30daf142b2105fe1fa2.0.tmp
/data/media/####/dbf2ba609e31b30daf142b2105fe1fa2.1.tmp
/data/media/####/dc1317a96978271aae923a24cdadd96b.0.tmp
/data/media/####/dc1317a96978271aae923a24cdadd96b.1.tmp
/data/media/####/dcdc2dbec982262c3dc7cf21c8c2b8f3.0.tmp
/data/media/####/dcdc2dbec982262c3dc7cf21c8c2b8f3.1.tmp
/data/media/####/ddaa52349dfa31eae69678caaf1f1f2a.0.tmp
/data/media/####/ddaa52349dfa31eae69678caaf1f1f2a.1.tmp
/data/media/####/de5ce705eddb2f7fbcc05b62e6364b83.0.tmp
/data/media/####/de5ce705eddb2f7fbcc05b62e6364b83.1.tmp
/data/media/####/e111631bc19ced61a8d168519e43417a.0.tmp
/data/media/####/e111631bc19ced61a8d168519e43417a.1.tmp
/data/media/####/e26acbdd06b9a5b6a25cfcca6442687b.0.tmp
/data/media/####/e26acbdd06b9a5b6a25cfcca6442687b.1.tmp
/data/media/####/e41e9fb9dee6ff410828d5d9bbea134e.0.tmp
/data/media/####/e41e9fb9dee6ff410828d5d9bbea134e.1.tmp
/data/media/####/e76f14a605b95153afedd1d28dc71957.0.tmp
/data/media/####/e76f14a605b95153afedd1d28dc71957.1.tmp
/data/media/####/e77289a025f57b2eaf3a65f69801f9a3.0.tmp
/data/media/####/e77289a025f57b2eaf3a65f69801f9a3.1.tmp
/data/media/####/e8d2f06890bac5bb0eb26164a4dd7154.0.tmp
/data/media/####/e8d2f06890bac5bb0eb26164a4dd7154.1.tmp
/data/media/####/ea3a96983300b5c429961c7212112f33.0.tmp
/data/media/####/ea3a96983300b5c429961c7212112f33.1.tmp
/data/media/####/ea6683a705c3f22db0d98ca87b966afc.0.tmp
/data/media/####/ea6683a705c3f22db0d98ca87b966afc.1.tmp
/data/media/####/ebd35d240985cd031d07a866f01cb0e8.0.tmp
/data/media/####/ebd35d240985cd031d07a866f01cb0e8.1.tmp
/data/media/####/eec14a324e6d1112921f8033072f6773.0.tmp
/data/media/####/eec14a324e6d1112921f8033072f6773.1.tmp
/data/media/####/f402fdea4be09ab65dc3a953857a51aa.0.tmp
/data/media/####/f402fdea4be09ab65dc3a953857a51aa.1.tmp
/data/media/####/f7b459a8a4fb5e607e151cd17075b907.0.tmp
/data/media/####/f7b459a8a4fb5e607e151cd17075b907.1.tmp
/data/media/####/f7c850116a26262b6952c78eb3381b20.0.tmp
/data/media/####/f7c850116a26262b6952c78eb3381b20.1.tmp
/data/media/####/fc78ba568dfed212c1b8266c017bc43a.0.tmp
/data/media/####/fc78ba568dfed212c1b8266c017bc43a.1.tmp
/data/media/####/fd11494a9616b273d5cb4b7bb261c46c.0.tmp
/data/media/####/fd11494a9616b273d5cb4b7bb261c46c.1.tmp
/data/media/####/fd6e4e44c9065384ffb4d591f85250f4.0.tmp
/data/media/####/fd6e4e44c9065384ffb4d591f85250f4.1.tmp
/data/media/####/journal
/data/media/####/journal.tmp
/data/media/####/ls.db
/data/media/####/ls.db-journal
/data/media/####/si6uwcwbw168s5r0zhxox631.0.tmp
/data/media/####/sysid.dat
/data/media/####/yoh.dat
/data/media/####/yol.dat
/data/media/####/yom.dat

Miscellaneous:

Executes the following shell scripts:

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
cat /sys/class/net/wlan0/address
getprop ro.build.display.id
getprop ro.build.version.emui
getprop ro.miui.ui.version.name
getprop ro.rom.different.version
getprop ro.vivo.os.name
ls -l /system/xbin/su
ls /sys/class/thermal

Loads the following dynamic libraries:

libjiagu-1830843141
locSDK7b
tpnsSecurity
weibosdkcore

Uses the following algorithms to encrypt data:

AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-CFB8-NoPadding
DES-CBC-PKCS5Padding
RSA-ECB-PKCS1PADDING
RSA-ECB-PKCS1Padding

Uses the following algorithms to decrypt data:

AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-CFB8-NoPadding
DES-ECB-PKCS5Padding

Uses special library to hide executable bytecode.

Gets information about location.

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Gets information about APN settings.

Gets information about installed apps.

Gets information about accounts associated with the device (Google, Facebook, etc.).

Adds tasks to the system scheduler.

Displays its own windows over windows of other apps.

Technologies

Terminology

Training and education

Myths

Technical information

Curing recommendations

Free trial