Android.RemoteCode.7957

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.RemoteCode.337.origin

Network activity:

Connects to:

UDP(DNS) 8####.8.4.4:53
TCP(TLS/1.0) www.v####.com.####.net:443
TCP(TLS/1.0) app-mea####.com:443
TCP(TLS/1.0) firebas####.google####.com:443
TCP(TLS/1.0) rr7---s####.g####.com:443
TCP(TLS/1.0) f####.gst####.com:443
TCP(TLS/1.0) www.google####.com:443
TCP(TLS/1.0) laun####.appsf####.com:443
TCP(TLS/1.0) rr8---s####.g####.com:443
TCP(TLS/1.2) www.google####.com:443
TCP(TLS/1.2) 1####.194.163.211:443
TCP(TLS/1.2) 1####.250.150.94:443
TCP(TLS/1.2) 64.2####.161.138:443
TCP q####.v####.com:443
TCP api.v####.com.####.net:443
TCP pl####.anal####.io:443

DNS requests:

api.v####.com
app-mea####.com
f####.gst####.com
firebas####.google####.com
firebas####.google####.com
firebas####.google####.com
firebas####.google####.com
laun####.appsf####.com
pl####.anal####.io
q####.v####.com
rr7---s####.g####.com
rr8---s####.g####.com
www.google####.com
www.v####.com

HTTP POST requests:

firebas####.google####.com:443/v1/projects/api-project-370141853687/inst...
www.google####.com:443/v1/projects/370141853687/namespaces/firebase:fetch

File system changes:

Creates the following files:

/data/data/####/.GgB
/data/data/####/.JjF
/data/data/####/.TNV
/data/data/####/.bundledAppData
/data/data/####/.fsgkea
/data/data/####/.jg.ac
/data/data/####/.jg.ri
/data/data/####/.jg.store.report_cf
/data/data/####/.jg.store.report_pid
/data/data/####/.
/data/data/####/. .flock (deleted)
/data/data/####/.
/data/data/####/.
/data/data/####/.
/data/data/####/.
/data/data/####/.
/data/data/####/.
/data/data/####/. .flock (deleted)
/data/data/####/000003.log
/data/data/####/638FF43C010A000177E018A5AAC5EB83user.meta
/data/data/####/63A461FD03AF000128E918A5AAC5EB83user.meta
/data/data/####/63A4624A02F5000131D918A5AAC5EB83user.meta
/data/data/####/63A532F5037B00010FA618A5AAC5EB83user.meta
/data/data/####/63A5384A03A7000135FF18A5AAC5EB83user.meta
/data/data/####/63A54D9402D5000144A018A5AAC5EB83user.meta
/data/data/####/63A561C3007400017C8D18A5AAC5EB83user.meta
/data/data/####/63A67A12024D0001662C18A5AAC5EB83user.meta
/data/data/####/63A686A1030E0001307E18A5AAC5EB83user.meta
/data/data/####/63A6B272025C00012F3318A5AAC5EB83user.meta
/data/data/####/63A6D4F20373000113A518A5AAC5EB83user.meta
/data/data/####/63A732B2015000010DE418A5AAC5EB83user.meta
/data/data/####/63A7FCDB037F0001597718A5AAC5EB83user.meta
/data/data/####/63A8291301AE000149B718A5AAC5EB83user.meta
/data/data/####/63A83725000E00013A1318A5AAC5EB83user.meta
/data/data/####/63A9729B02FC00014F2C18A5AAC5EB83user.meta
/data/data/####/63A9AC6A02C500017BB518A5AAC5EB83user.meta
/data/data/####/63AA9179032B000160BB18A5AAC5EB83user.meta
/data/data/####/63ABC7E2019000011D4018A5AAC5EB83user.meta
/data/data/####/63ABCEC5034E00014AC418A5AAC5EB83user.meta
/data/data/####/63AC14A2035500014CFD18A5AAC5EB83user.meta
/data/data/####/63AC62A802C70001312C18A5AAC5EB83user.meta
/data/data/####/63AD13810397000136D318A5AAC5EB83user.meta
/data/data/####/63AD2264034E000163E418A5AAC5EB83user.meta
/data/data/####/63AD597C029C0001217118A5AAC5EB83user.meta
/data/data/####/63AE6B11011E0001273618A5AAC5EB83user.meta
/data/data/####/63AE9ADA013B0001689818A5AAC5EB83user.meta
/data/data/####/63AF0B580231000179F518A5AAC5EB83user.meta
/data/data/####/63B01C0F01F70001296E18A5AAC5EB83user.meta
/data/data/####/63B0A67300FC00014E0318A5AAC5EB83user.meta
/data/data/####/63B0AB64030800015E4F18A5AAC5EB83user.meta
/data/data/####/63B0B15D03C100016B8518A5AAC5EB83user.meta
/data/data/####/63B0FE00018600014F3D18A5AAC5EB83user.meta
/data/data/####/63B128BC034B0001311318A5AAC5EB83user.meta
/data/data/####/63B24E8403DE00016F8D18A5AAC5EB83user.meta
/data/data/####/63B2676601F200011C2118A5AAC5EB83user.meta
/data/data/####/63B27AB90191000125E218A5AAC5EB83user.meta
/data/data/####/63B29D78033100014F3818A5AAC5EB83user.meta
/data/data/####/63B39ACF0025000163BA18A5AAC5EB83user.meta
/data/data/####/63B3A0E303D200010D7518A5AAC5EB83user.meta
/data/data/####/63B3D2D500800001708018A5AAC5EB83user.meta
/data/data/####/63B3E836015000016EEB18A5AAC5EB83user.meta
/data/data/####/63B4EBFE039E0001655418A5AAC5EB83user.meta
/data/data/####/63B4F06401C6000112EB18A5AAC5EB83user.meta
/data/data/####/63B50CB000E100014D7918A5AAC5EB83user.meta
/data/data/####/63B56D6502450001059118A5AAC5EB83user.meta
/data/data/####/63B63F3F03200001181218A5AAC5EB83user.meta
/data/data/####/63B65A0101E80001415C18A5AAC5EB83user.meta
/data/data/####/63B6613901F70001705518A5AAC5EB83user.meta
/data/data/####/63B67706013100012ED718A5AAC5EB83user.meta
/data/data/####/63B78EDF03A1000117E118A5AAC5EB83user.meta
/data/data/####/63B7ABEF004B000128BE18A5AAC5EB83user.meta
/data/data/####/63B7C73302F00001344518A5AAC5EB83user.meta
/data/data/####/63B7D242024700010F1C18A5AAC5EB83user.meta
/data/data/####/63B837D20292000169AC18A5AAC5EB83user.meta
/data/data/####/63B8E132012B0001471D18A5AAC5EB83user.meta
/data/data/####/63B8E45F027D000169CF18A5AAC5EB83user.meta
/data/data/####/63B8FCF2000A000166E518A5AAC5EB83user.meta
/data/data/####/63B9039B02D800010D2C18A5AAC5EB83user.meta
/data/data/####/63B99E9603040001357918A5AAC5EB83user.meta
/data/data/####/63BA387C00680001213C18A5AAC5EB83user.meta
/data/data/####/63BA4EF802150001605D18A5AAC5EB83user.meta
/data/data/####/63BA6A0A01760001397018A5AAC5EB83user.meta
/data/data/####/63BA6AB903690001490C18A5AAC5EB83user.meta
/data/data/####/63BA6AD900C600014FC118A5AAC5EB83user.meta
/data/data/####/63BA8684036C0001207A18A5AAC5EB83user.meta
/data/data/####/63BA8DA00389000154BE18A5AAC5EB83user.meta
/data/data/####/63BAD3E7010D00014B4518A5AAC5EB83user.meta
/data/data/####/63BAE21E01E400010B0418A5AAC5EB83user.meta
/data/data/####/63BB8371035300011BD118A5AAC5EB83user.meta
/data/data/####/63BB89E803830001599A18A5AAC5EB83user.meta
/data/data/####/63BB9C1800780001361218A5AAC5EB83user.meta
/data/data/####/63BBADE602DB00014ABC18A5AAC5EB83user.meta
/data/data/####/63BBDF00001D000113B318A5AAC5EB83user.meta
/data/data/####/63BCF3EF027600014E7518A5AAC5EB83user.meta
/data/data/####/63BD3E9F01AC00011B9218A5AAC5EB83user.meta
/data/data/####/63BE2E0001000001656E18A5AAC5EB83user.meta
/data/data/####/63BE43F2008B0001301618A5AAC5EB83user.meta
/data/data/####/63BE971C030F00014E3718A5AAC5EB83user.meta
/data/data/####/63BF854D016F0001182318A5AAC5EB83user.meta
/data/data/####/63BFCC3F01C20001311518A5AAC5EB83user.meta
/data/data/####/63C0D44F00E5000110F718A5AAC5EB83user.meta
/data/data/####/63C0E593022B000137D418A5AAC5EB83user.meta
/data/data/####/63C0F39F03D50001323B18A5AAC5EB83user.meta
/data/data/####/63C222E2005B00012D9018A5AAC5EB83user.meta
/data/data/####/63C2257900360001365D18A5AAC5EB83user.meta
/data/data/####/63C23B6601380001388E18A5AAC5EB83user.meta
/data/data/####/63C24CC7017D0001223A18A5AAC5EB83user.meta
/data/data/####/63C2AC5003970001550A18A5AAC5EB83user.meta
/data/data/####/63C2C121030300016E1F18A5AAC5EB83user.meta
/data/data/####/63C2DBB60092000128A918A5AAC5EB83user.meta
/data/data/####/63C349E8023F00017D0718A5AAC5EB83user.meta
/data/data/####/63C36C7701090001712A18A5AAC5EB83user.meta
/data/data/####/63C373D302AB0001429618A5AAC5EB83user.meta
/data/data/####/63C3B66603010001329E18A5AAC5EB83user.meta
/data/data/####/63C3C25F01100001477C18A5AAC5EB83user.meta
/data/data/####/63C4239C0367000170A618A5AAC5EB83user.meta
/data/data/####/63C42DDD0383000102E518A5AAC5EB83user.meta
/data/data/####/63C493C1027800011DF318A5AAC5EB83user.meta
/data/data/####/63C4B6E2036B00011A7218A5AAC5EB83user.meta
/data/data/####/63C4BDF7023E0001491518A5AAC5EB83user.meta
/data/data/####/63C4E2FC027200014DD918A5AAC5EB83user.meta
/data/data/####/63C5832601F000015D7C18A5AAC5EB83user.meta
/data/data/####/63C7643F023A00010CF118A5AAC5EB83user.meta
/data/data/####/63C7647C02AA000118D718A5AAC5EB83user.meta
/data/data/####/63C767F6024C000145DD18A5AAC5EB83user.meta
/data/data/####/63C77795010E000136AA18A5AAC5EB83user.meta
/data/data/####/63C784B901E900016D2B18A5AAC5EB83user.meta
/data/data/####/63C78B6302CF00016AB618A5AAC5EB83user.meta
/data/data/####/63CAFDFF01000001367C18A5AAC5EB83user.meta
/data/data/####/63CAFE4900BD000138CE18A5AAC5EB83user.meta
/data/data/####/63CAFE5E031900013A0118A5AAC5EB83user.meta
/data/data/####/63CAFE63004D00013AE218A5AAC5EB83user.meta
/data/data/####/63CAFE71021500013BF018A5AAC5EB83user.meta
/data/data/####/63CAFEB3009C0001419318A5AAC5EB83user.meta
/data/data/####/63CB1CE303090001211C18A5AAC5EB83user.meta
/data/data/####/63CB1D4203960001295F18A5AAC5EB83user.meta
/data/data/####/63CB1E4D037E0001381918A5AAC5EB83user.meta
/data/data/####/63CB1F4401B10001437E18A5AAC5EB83user.meta
/data/data/####/63CB1F9F035C0001494918A5AAC5EB83user.meta
/data/data/####/63CB1FB202E900014B3018A5AAC5EB83user.meta
/data/data/####/63CB1FFE02C40001552018A5AAC5EB83user.meta
/data/data/####/63CB20020100000156F618A5AAC5EB83user.meta
/data/data/####/63CB201703D100015C9918A5AAC5EB83user.meta
/data/data/####/63CB204702B0000160A018A5AAC5EB83user.meta
/data/data/####/63CB205702CD000161B918A5AAC5EB83user.meta
/data/data/####/63CB206E005A0001632E18A5AAC5EB83user.meta
/data/data/####/63CB207801AC000164E118A5AAC5EB83user.meta
/data/data/####/63CB209103CC0001671118A5AAC5EB83user.meta
/data/data/####/63CB211B001600016DF018A5AAC5EB83user.meta
/data/data/####/63CB21B702B50001731818A5AAC5EB83user.meta
/data/data/####/63CB21DF0350000174A818A5AAC5EB83user.meta
/data/data/####/63CB22020186000176A118A5AAC5EB83user.meta
/data/data/####/63CB221700A3000177D318A5AAC5EB83user.meta
/data/data/####/63CB233C02E900010F7518A5AAC5EB83user.meta
/data/data/####/63CB25E90272000128E218A5AAC5EB83user.meta
/data/data/####/63CB290D02F9000141AB18A5AAC5EB83user.meta
/data/data/####/63DE07F503CA00015229C70D14D64478user.meta
/data/data/####/63DE080F02CF0001565EC70D14D64478user.meta
/data/data/####/63DE25B101CA00014D87C70D14D64478user.meta
/data/data/####/63DF742C021F00015F9DC70D14D64478user.meta
/data/data/####/63DF7E34038D00011BFFC70D14D64478user.meta
/data/data/####/63E0D9CE01AF0001412BC70D14D64478user.meta
/data/data/####/63E0FA76002700015772C70D14D64478user.meta
/data/data/####/63E1F77C01F700012D31C70D14D64478user.meta
/data/data/####/63E2582601AE000119D5C70D14D64478user.meta
/data/data/####/63E3694101380001777DC70D14D64478user.meta
/data/data/####/63E49A0C03220001442AC70D14D64478user.meta
/data/data/####/63E4F59B012C000164C3C70D14D64478user.meta
/data/data/####/63E5D980023F0001677EC70D14D64478user.meta
/data/data/####/63E5DDD6018900011BA0C70D14D64478user.meta
/data/data/####/63E72147038400010E39C70D14D64478user.meta
/data/data/####/63E74795008900017C85C70D14D64478user.meta
/data/data/####/63E75FF202C7000156DDC70D14D64478user.meta
/data/data/####/63E7879500A000012A6AC70D14D64478user.meta
/data/data/####/63E7CD1E017E00016B2EC70D14D64478user.meta
/data/data/####/63E84178000F00015978C70D14D64478user.meta
/data/data/####/63E8764D00FF0001091DC70D14D64478user.meta
/data/data/####/63E880CE011B00016F91C70D14D64478user.meta
/data/data/####/63E898730131000158B3C70D14D64478user.meta
/data/data/####/63E9F19D0127000131ECC70D14D64478user.meta
/data/data/####/63EA9899029000011815C70D14D64478user.meta
/data/data/####/63EA9ACD017B000129E6C70D14D64478user.meta
/data/data/####/63EA9B18029E00012D39C70D14D64478user.meta
/data/data/####/63EA9B49035400013506C70D14D64478user.meta
/data/data/####/63EAA5DC025D000158C3C70D14D64478user.meta
/data/data/####/63EAA96C001400010AA5C70D14D64478user.meta
/data/data/####/63EAAAA300D600012690C70D14D64478user.meta
/data/data/####/63EAACC1034B0001444EC70D14D64478user.meta
/data/data/####/63EAAD42031000014C89C70D14D64478user.meta
/data/data/####/63EAAF69030800016258C70D14D64478user.meta
/data/data/####/63EB2ABF020A00013AF7C70D14D64478user.meta
/data/data/####/63EB436F0374000108BFC70D14D64478user.meta
/data/data/####/63EB484F019200012D90C70D14D64478user.meta
/data/data/####/63F00188011C00010E3D4CD442193F39user.meta
/data/data/####/7;8£!@!#;bcff466.xml
/data/data/####/7d32854d5cbe8b41.uid
/data/data/####/Anonymous-DexFile@1151071778.vdex
/data/data/####/Anonymous-DexFile@2338005876.vdex
/data/data/####/Anonymous-DexFile@368809633.vdex
/data/data/####/AppEventsLogger.persistedevents
/data/data/####/AwOriginVisitLoggerPrefs.xml
/data/data/####/BrowserMetrics-spare.pma
/data/data/####/CURRENT
/data/data/####/Cookies
/data/data/####/Cookies-journal
/data/data/####/Databases.db
/data/data/####/Databases.db-journal
/data/data/####/Dollarbird.xml
/data/data/####/DsgUCGrGsHdL (deleted)
/data/data/####/FirebaseAppHeartBeat.xml
/data/data/####/FirebaseAppHeartBeat.xml.bak
/data/data/####/FirebasePerfSharedPrefs.xml
/data/data/####/LOCK
/data/data/####/LOG
/data/data/####/LOG.old
/data/data/####/MANIFEST-000001
/data/data/####/PersistedInstallation.W0RFRkFVTFRd+MTozNzAxNDE4...x.json
/data/data/####/PersistedInstallation1188401539tmp
/data/data/####/PersistedInstallation376163590tmp
/data/data/####/QuMLGcHUomup (deleted)
/data/data/####/QuotaManager
/data/data/####/QuotaManager-journal
/data/data/####/VidioRoom.db
/data/data/####/VidioRoom.db-shm
/data/data/####/VidioRoom.db-wal
/data/data/####/Web Data
/data/data/####/Web Data-journal
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/admob.xml
/data/data/####/androidx.work.workdb-journal (deleted)
/data/data/####/appsflyer-data.xml
/data/data/####/classes.dex
/data/data/####/classes.dex;classes2.dex
/data/data/####/classes.dex;classes3.dex
/data/data/####/classes.dex;classes4.dex
/data/data/####/classes.dex;classes5.dex
/data/data/####/classes.dex;classes6.dex
/data/data/####/classes.dex;classes7.dex
/data/data/####/cloneSettings.json
/data/data/####/com.applisto.appcloner.classes.xml
/data/data/####/com.crashlytics.settings.json
/data/data/####/com.facebook.AccessTokenManager.SharedPreferences.xml
/data/data/####/com.facebook.AuthenticationTokenManager.SharedP...es.xml
/data/data/####/com.facebook.internal.MODEL_STORE.xml
/data/data/####/com.facebook.internal.preferences.APP_GATEKEEPERS.xml
/data/data/####/com.facebook.internal.preferences.APP_SETTINGS.xml
/data/data/####/com.facebook.loginManager.xml
/data/data/####/com.facebook.sdk.USER_SETTINGS.xml
/data/data/####/com.facebook.sdk.appEventPreferences.xml
/data/data/####/com.facebook.sdk.attributionTracking.xml
/data/data/####/com.google.android.datatransport.events-journal
/data/data/####/com.google.android.gms.analytics.prefs.xml
/data/data/####/com.google.android.gms.appid-no-backup
/data/data/####/com.google.android.gms.appid.xml
/data/data/####/com.google.android.gms.measurement.prefs.xml
/data/data/####/com.google.android.gms.signin.xml
/data/data/####/com.google.firebase.crashlytics.prefs.xml
/data/data/####/com.google.firebase.crashlytics.xml
/data/data/####/com.google.firebase.inappmessaging.xml
/data/data/####/com.google.firebase.messaging.xml
/data/data/####/com.kmklabs.plentydb
/data/data/####/com.kmklabs.plentydb-shm
/data/data/####/com.kmklabs.plentydb-wal
/data/data/####/com.vidio.android.client_cast_analytics_data.xml
/data/data/####/com.vidio.android_preferences.xml
/data/data/####/crashlytics-userlog-638FF43C010A000177E018A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63A461FD03AF000128E918A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CAFDFF01000001367C18A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CAFE4900BD000138CE18A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CAFE5E031900013A0118A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CAFE63004D00013AE218A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CAFE71021500013BF018A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CAFEB3009C0001419318A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CB1CE303090001211C18A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CB1D4203960001295F18A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CB1F4401B10001437E18A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CB1F9F035C0001494918A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CB1FFE02C40001552018A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CB201703D100015C9918A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CB204702B0000160A018A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CB206E005A0001632E18A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CB209103CC0001671118A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CB221700A3000177D318A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CB233C02E900010F7518A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CB25E90272000128E218A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63CB290D02F9000141AB18A5AAC5EB83.temp
/data/data/####/crashlytics-userlog-63DE07F503CA00015229C70D14D64478.temp
/data/data/####/crashlytics-userlog-63DE080F02CF0001565EC70D14D64478.temp
/data/data/####/crashlytics-userlog-63E2582601AE000119D5C70D14D64478.temp
/data/data/####/crashlytics-userlog-63EA9899029000011815C70D14D64478.temp
/data/data/####/crashlytics-userlog-63EA9ACD017B000129E6C70D14D64478.temp
/data/data/####/crashlytics-userlog-63EA9B18029E00012D39C70D14D64478.temp
/data/data/####/crashlytics-userlog-63EAA5DC025D000158C3C70D14D64478.temp
/data/data/####/crashlytics-userlog-63EAA96C001400010AA5C70D14D64478.temp
/data/data/####/crashlytics-userlog-63EAAAA300D600012690C70D14D64478.temp
/data/data/####/crashlytics-userlog-63EAACC1034B0001444EC70D14D64478.temp
/data/data/####/crashlytics-userlog-63EAAF69030800016258C70D14D64478.temp
/data/data/####/crashlytics-userlog-63EB484F019200012D90C70D14D64478.temp
/data/data/####/crashlytics-userlog-63F00188011C00010E3D4CD442193F39.temp
/data/data/####/d7c545fd1a183cdc6a1dcbe912a29ebb.0.tmp
/data/data/####/d7c545fd1a183cdc6a1dcbe912a29ebb.1
/data/data/####/d7c545fd1a183cdc6a1dcbe912a29ebb.1.tmp
/data/data/####/disabled_com.google.android.gms.analytics.prefs.xml
/data/data/####/exoplayer_internal.db
/data/data/####/exoplayer_internal.db-journal
/data/data/####/fiam_eligible_campaigns_cache_file
/data/data/####/fiam_impressions_store_file
/data/data/####/frc_1;370141853687;android;210b398de10385e1_fir...e.json
/data/data/####/frc_1;370141853687;android;210b398de10385e1_fir...gs.xml
/data/data/####/frc_1;370141853687;android;210b398de10385e1_fir...h.json
/data/data/####/frc_1;370141853687;android;210b398de10385e1_fir...ml.bak
/data/data/####/frc_1;370141853687;android;210b398de10385e1_fir...s.json
/data/data/####/generatefid.lock
/data/data/####/google_analytics_v4.db
/data/data/####/google_analytics_v4.db-journal
/data/data/####/google_app_measurement_local.db
/data/data/####/google_app_measurement_local.db-journal
/data/data/####/initialization_marker
/data/data/####/journal
/data/data/####/journal.bkp (deleted)
/data/data/####/libjiagu.so
/data/data/####/log.0.log
/data/data/####/metrics_guid
/data/data/####/notice.xml
/data/data/####/pcam.jar
/data/data/####/pcam.jar.cur.prof
/data/data/####/pcam.jar.prof
/data/data/####/pcam.odex
/data/data/####/pcam.vdex
/data/data/####/pcbc
/data/data/####/pcvmspf.xml
/data/data/####/play-next-recency.xml
/data/data/####/playback.0.log
/data/data/####/playerheader.0.log
/data/data/####/plenty_lib_shared_preferences.xml
/data/data/####/pref_store
/data/data/####/report
/data/data/####/start-time
/data/data/####/user
/data/data/####/variations_seed
/data/data/####/variations_stamp
/data/data/####/webview_data.lock
/data/misc/####/primary.prof

Miscellaneous:

Loads the following dynamic libraries:

libconscrypt_gmscore_jni
libjiagu

Uses the following algorithms to encrypt data:

AES-CBC-PKCS5Padding

Uses special library to hide executable bytecode.

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Displays its own windows over windows of other apps.

Technologies

Terminology

Training and education

Myths

Technical information

Curing recommendations

Free trial