Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.SmsSpy.12446

Added to the Dr.Web virus database: 2025-02-17

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.SmsSpy.1029.origin
Network activity:
Connects to:
  • UDP(DNS) <Google DNS>
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) rr6---s####.g####.com:443
  • TCP(TLS/1.0) 2####.58.211.3:443
  • TCP(TLS/1.0) bkash-b####.ve####.app:443
  • TCP(TLS/1.0) tel####.ph:443
  • TCP(TLS/1.0) gmscomp####.google####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) i.i####.co:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.2) gmscomp####.google####.com:443
  • TCP(TLS/1.2) 2####.58.211.3:443
  • TCP(TLS/1.2) 1####.250.74.68:443
  • TCP(TLS/1.2) 1####.250.74.67:443
  • UDP p####.google####.com:443
DNS requests:
  • api.tele####.org
  • bkash-b####.ve####.app
  • gmscomp####.google####.com
  • i.i####.co
  • p####.google####.com
  • pla####.google####.com
  • rr6---s####.g####.com
  • rr9---s####.g####.com
  • tel####.ph
File system changes:
Creates the following files:
  • /data/anr/traces.txt
  • /data/data/####/0V3KjlaCXacxKhGlFPovOvQY1vjA9U8y.dex
  • /data/data/####/0V3KjlaCXacxKhGlFPovOvQY1vjA9U8y.dex.flock (deleted)
  • /data/data/####/0luEI6rpWbMZUXKr4e3xRAWELBidWerP.dex
  • /data/data/####/0oWCUVsrt2O7TRjmkTbHCSEmW71WnSN9.dex
  • /data/data/####/0oWCUVsrt2O7TRjmkTbHCSEmW71WnSN9.dex.flock (deleted)
  • /data/data/####/0v9BVCOjH0VQv3CXc3QTf4t4qzRu0V6P.dex
  • /data/data/####/0v9BVCOjH0VQv3CXc3QTf4t4qzRu0V6P.dex.flock (deleted)
  • /data/data/####/1EM3iE3EkqLPZditoe95wj98OQz4840G.dex
  • /data/data/####/1QEepSSgpFSWQydsRlgUC0teAeANZkrV.dex
  • /data/data/####/1QEepSSgpFSWQydsRlgUC0teAeANZkrV.dex.flock (deleted)
  • /data/data/####/1WhQmkyyj2js3y5RrVkhgP9OXiGt4AKG.dex
  • /data/data/####/1WhQmkyyj2js3y5RrVkhgP9OXiGt4AKG.dex.flock (deleted)
  • /data/data/####/1pgCjRnsjIDB1pKvdguGqvUhHKrlfpLq.dex
  • /data/data/####/1pgCjRnsjIDB1pKvdguGqvUhHKrlfpLq.dex.flock (deleted)
  • /data/data/####/2b6qi6TAPFLPlA3Mn1FV7trBzTji9nXx.dex
  • /data/data/####/2b6qi6TAPFLPlA3Mn1FV7trBzTji9nXx.dex.flock (deleted)
  • /data/data/####/2mN4Eco2DaeIUSHnD46KVsHwN4USdsZF.dex
  • /data/data/####/2w8wbLYvAhxXsyF0z0d6PZ2bnoFcGIYT.dex
  • /data/data/####/2w8wbLYvAhxXsyF0z0d6PZ2bnoFcGIYT.dex.flock (deleted)
  • /data/data/####/3DKpb8ak8sFlE5YKwllxAP7gYpGKpYMM.dex
  • /data/data/####/3DKpb8ak8sFlE5YKwllxAP7gYpGKpYMM.dex.flock (deleted)
  • /data/data/####/3m9kKugDtpWrAzqHaXtY83FuNUr4J5uH.dex
  • /data/data/####/3m9kKugDtpWrAzqHaXtY83FuNUr4J5uH.dex.flock (deleted)
  • /data/data/####/4Ce53SrlB6J6KP9rL6zA5Xj3mBZjAVgr.dex
  • /data/data/####/4F9kyIPMlPpfsNePSxUF0jHem0HjR6zw.dex
  • /data/data/####/4F9kyIPMlPpfsNePSxUF0jHem0HjR6zw.dex.flock (deleted)
  • /data/data/####/4Uyrug9A8UH4BFlNEHEFCkOfKE2Bxk4A.dex
  • /data/data/####/4Uyrug9A8UH4BFlNEHEFCkOfKE2Bxk4A.dex.flock (deleted)
  • /data/data/####/4WNUncHMWNsN0XEnOdDEOEOpK9sMLMuz.dex
  • /data/data/####/4WNUncHMWNsN0XEnOdDEOEOpK9sMLMuz.dex.flock (deleted)
  • /data/data/####/4djRZhCDuIx5z6emrT2NrJG94ccLYYxT.dex
  • /data/data/####/4nkr7NOhZtfiTduda1AzGE8hM9Vo8BDn.dex
  • /data/data/####/4nkr7NOhZtfiTduda1AzGE8hM9Vo8BDn.dex.flock (deleted)
  • /data/data/####/4tu9M59o6nOmgmqkdjQGnLYpCPDMuCqM.dex
  • /data/data/####/4tu9M59o6nOmgmqkdjQGnLYpCPDMuCqM.dex.flock (deleted)
  • /data/data/####/58b274b468ba22d0_0
  • /data/data/####/5CKK4l79YJPNO39RjCgk4w6gHSiYDzA6.dex
  • /data/data/####/5CKK4l79YJPNO39RjCgk4w6gHSiYDzA6.dex.flock (deleted)
  • /data/data/####/5ILlwUK7j3rcsSoWNVdtuHw2OdxSH0sa.dex
  • /data/data/####/5ILlwUK7j3rcsSoWNVdtuHw2OdxSH0sa.dex.flock (deleted)
  • /data/data/####/5RLMT0uxCjWErIZVV6By9qO7SEQjntKE.dex
  • /data/data/####/5RLMT0uxCjWErIZVV6By9qO7SEQjntKE.dex.flock (deleted)
  • /data/data/####/5bm9WC28VwKv6KewLunkcQH65so0Bb4q.dex
  • /data/data/####/5gWSzqAVw9iwlpWJfD09NrLfq4XDeQdP.dex
  • /data/data/####/5gWSzqAVw9iwlpWJfD09NrLfq4XDeQdP.dex.flock (deleted)
  • /data/data/####/5qaYcvYHdmV7cgvHLy8rSFhy3fhe1HPS.dex
  • /data/data/####/5qaYcvYHdmV7cgvHLy8rSFhy3fhe1HPS.dex.flock (deleted)
  • /data/data/####/63DEuZa93trlmG7cm17AtFCqdFAKPnn1.dex
  • /data/data/####/63DEuZa93trlmG7cm17AtFCqdFAKPnn1.dex.flock (deleted)
  • /data/data/####/6tmBtKOuZHKe4JfGMX3snRxiD6f5sGt8.dex
  • /data/data/####/6tmBtKOuZHKe4JfGMX3snRxiD6f5sGt8.dex.flock (deleted)
  • /data/data/####/7YyQizLqebtsuqbRSQaZMxOub7PBhYCi.dex
  • /data/data/####/7YyQizLqebtsuqbRSQaZMxOub7PBhYCi.dex.flock (deleted)
  • /data/data/####/7e424d8c921c917b_0
  • /data/data/####/7hZLvppRzpahlnae1zt7TVqPG2npiusB.dex
  • /data/data/####/7hZLvppRzpahlnae1zt7TVqPG2npiusB.dex.flock (deleted)
  • /data/data/####/7n6SwUzCSi611uptAXPRa7oPN7ie3JzG.dex
  • /data/data/####/8Mryuq1arRYTeTQ0ECWiybjzqdP03FKt.dex
  • /data/data/####/8Mryuq1arRYTeTQ0ECWiybjzqdP03FKt.dex.flock (deleted)
  • /data/data/####/92UlM5KlmT3G3aRRUrXcSUZYaLuFvWgM.dex
  • /data/data/####/956ByixCP61Ljfr9k2P6IEB4QKz9YeWH.dex
  • /data/data/####/956ByixCP61Ljfr9k2P6IEB4QKz9YeWH.dex.flock (deleted)
  • /data/data/####/9IiKzUhCpE6S2eopECCaVCN3gODj8oFk.dex
  • /data/data/####/9IiKzUhCpE6S2eopECCaVCN3gODj8oFk.dex.flock (deleted)
  • /data/data/####/9kmyMgUBEv4hGJ3V1qwKkdALDH2kwSqR.dex
  • /data/data/####/9kmyMgUBEv4hGJ3V1qwKkdALDH2kwSqR.dex.flock (deleted)
  • /data/data/####/9oOUIrA6OwDGPUw1jgXTXqP5Y2sOIzHc.dex
  • /data/data/####/A5vmFm3KvZQvDW8Y7ChL2jfqIp391619.dex
  • /data/data/####/A5vmFm3KvZQvDW8Y7ChL2jfqIp391619.dex.flock (deleted)
  • /data/data/####/AyS65a5MiyODsflU9SWChU82WXS7hpH2.dex
  • /data/data/####/BmJK6r5ZaQxWDQRmvZcqnGhW4OeUliIm.dex
  • /data/data/####/C2qsddgSL8FIlDe31RF5H72yq0UJHpLf.dex
  • /data/data/####/CYAoQFYpgDY2SVKBU9EvEijfmaNB83wz.dex
  • /data/data/####/CYAoQFYpgDY2SVKBU9EvEijfmaNB83wz.dex.flock (deleted)
  • /data/data/####/Cfk3OmzFWiFfhn9Smvtw7CW0ys3IJHpC.dex
  • /data/data/####/Cfk3OmzFWiFfhn9Smvtw7CW0ys3IJHpC.dex.flock (deleted)
  • /data/data/####/Cookies-journal
  • /data/data/####/CqdOOCW0QFVHgAEkfIwDnCvz9PshPedW.dex
  • /data/data/####/Cu9sK77D4u0r0LMZqyyoRPHKcIlaTvvL.dex
  • /data/data/####/DNln3BJHb7V4O1hukwewJr8Zwjj079Qo.dex
  • /data/data/####/DQbvASOTXgqmJzdmQQPIGkiWy5mx8m3C.dex
  • /data/data/####/Dh4hjN27eelTODSrq4r09eDqkaUcVFDc.dex
  • /data/data/####/DnyWjaODWSRcoJiiC4DkWP6IiB6xUInH.dex
  • /data/data/####/DnyWjaODWSRcoJiiC4DkWP6IiB6xUInH.dex.flock (deleted)
  • /data/data/####/DrXYtX0eniUM45sCO3NksCGREmd7slUt.dex
  • /data/data/####/DrXYtX0eniUM45sCO3NksCGREmd7slUt.dex.flock (deleted)
  • /data/data/####/DueuxBeyx7U6Fx0EuyreHvPgdHi67j7W.dex
  • /data/data/####/DueuxBeyx7U6Fx0EuyreHvPgdHi67j7W.dex.flock (deleted)
  • /data/data/####/E2ODFejJwgPtNIBrhcxUZDxCzFoClsAO.dex
  • /data/data/####/E2ODFejJwgPtNIBrhcxUZDxCzFoClsAO.dex.flock (deleted)
  • /data/data/####/EB9fqjn4pdLP73AdS3ioD5GSuAYl4qMU.dex
  • /data/data/####/EB9fqjn4pdLP73AdS3ioD5GSuAYl4qMU.dex.flock (deleted)
  • /data/data/####/F1wbsikt1izpUI951qACI1XnUtLbBcX8.dex
  • /data/data/####/F1wbsikt1izpUI951qACI1XnUtLbBcX8.dex.flock (deleted)
  • /data/data/####/F7PyjdEGB5ylgFPDYbyGH9SEUJTNhEIb.dex
  • /data/data/####/F7PyjdEGB5ylgFPDYbyGH9SEUJTNhEIb.dex.flock (deleted)
  • /data/data/####/FBn8cJuUYEl3BncrTn6cPCcEsyiz10nF.dex
  • /data/data/####/FBn8cJuUYEl3BncrTn6cPCcEsyiz10nF.dex.flock (deleted)
  • /data/data/####/FWNXS7hvBg9D8Pv0hSP8H0PRuHfUc39i.dex
  • /data/data/####/FWNXS7hvBg9D8Pv0hSP8H0PRuHfUc39i.dex.flock (deleted)
  • /data/data/####/FbtuViaG67vhfJZ2L5sSwFcWtlewcVWn.dex
  • /data/data/####/FbtuViaG67vhfJZ2L5sSwFcWtlewcVWn.dex.flock (deleted)
  • /data/data/####/Fo5D6AqVo6o0BJKfeLi5OG9WV3R74O41.dex
  • /data/data/####/Fo5D6AqVo6o0BJKfeLi5OG9WV3R74O41.dex.flock (deleted)
  • /data/data/####/GWHBpRoFKtyUuIzmyuV2ucmXEvGQ6lom.dex
  • /data/data/####/GWHBpRoFKtyUuIzmyuV2ucmXEvGQ6lom.dex.flock (deleted)
  • /data/data/####/GhB8NNX2wO6e0dIRO9b6Sw1HKIWmfe1l.dex
  • /data/data/####/GhB8NNX2wO6e0dIRO9b6Sw1HKIWmfe1l.dex.flock (deleted)
  • /data/data/####/Gsb5k4qG3QP3X1LSrPRIQUd3SitR117A.dex
  • /data/data/####/Gsb5k4qG3QP3X1LSrPRIQUd3SitR117A.dex.flock (deleted)
  • /data/data/####/HHq5MFkWWfk8unl84Sl4LZ4lCpvlXZ2v.dex
  • /data/data/####/HMQr9Yy0MaySfkyR0YY45HAZipdQyTJB.dex
  • /data/data/####/HTdpHl3aAP8Iqor57ekjjZTsKHZai0mm.dex
  • /data/data/####/HTdpHl3aAP8Iqor57ekjjZTsKHZai0mm.dex.flock (deleted)
  • /data/data/####/HYoGg1Q5AOYqTXwCLsFNhYQQ64IlfQKY.dex
  • /data/data/####/I5wZ5FA2mdNRpTmmqq6kdcqJH94AGglF.dex
  • /data/data/####/I5wZ5FA2mdNRpTmmqq6kdcqJH94AGglF.dex.flock (deleted)
  • /data/data/####/IdeV5gUv2HvL4iDI7RpT1h6iWbVflFqr.dex
  • /data/data/####/JVJ6hB1zZZHxeCqYBlu7ZSmnD1sjIqLL.dex
  • /data/data/####/JVJ6hB1zZZHxeCqYBlu7ZSmnD1sjIqLL.dex.flock (deleted)
  • /data/data/####/JuoX3gjhRbbP0YK3dkfuzRjByZvCYecF.dex
  • /data/data/####/JuoX3gjhRbbP0YK3dkfuzRjByZvCYecF.dex.flock (deleted)
  • /data/data/####/KI0XMDnEztYJsEIcGAOgsLbr2t8czHim.dex
  • /data/data/####/KI0XMDnEztYJsEIcGAOgsLbr2t8czHim.dex.flock (deleted)
  • /data/data/####/KkRjXWJhkmYM86mK9thnN1PobTFQCzRZ.dex
  • /data/data/####/KuG0solc7BP4zpwe1IuAMYT1VliwU2de.dex
  • /data/data/####/KuG0solc7BP4zpwe1IuAMYT1VliwU2de.dex.flock (deleted)
  • /data/data/####/L0xpfCJSZBQWrTZeaSMgTn52D4JKhrPr.dex
  • /data/data/####/L0xpfCJSZBQWrTZeaSMgTn52D4JKhrPr.dex.flock (deleted)
  • /data/data/####/LLTmVLoDYXdwsMsga4rQE0ltC8sQSj1U.dex
  • /data/data/####/LZRPu26Kuau2MEkbVNAE7NPrCZ92Mdkv.dex
  • /data/data/####/LZRPu26Kuau2MEkbVNAE7NPrCZ92Mdkv.dex.flock (deleted)
  • /data/data/####/LZaugVYdLuIkf4l8gi4SwAVUqspfY5Q9.dex
  • /data/data/####/LZaugVYdLuIkf4l8gi4SwAVUqspfY5Q9.dex.flock (deleted)
  • /data/data/####/M0LMIa0C0tClBp9EUfUWVgz1SmkFhKUe.dex
  • /data/data/####/M0LMIa0C0tClBp9EUfUWVgz1SmkFhKUe.dex.flock (deleted)
  • /data/data/####/MDTsJc77jyGgzyzSBg6Gn8zFwnbdAeHR.dex
  • /data/data/####/MDTsJc77jyGgzyzSBg6Gn8zFwnbdAeHR.dex.flock (deleted)
  • /data/data/####/Mk0JzNr9GuGwdKkzko3GhxDZdirgpFDh.dex
  • /data/data/####/N1ofJsTx1GjV7xDsGM8j1p3XUeZTfZ4E.dex
  • /data/data/####/N1ofJsTx1GjV7xDsGM8j1p3XUeZTfZ4E.dex.flock (deleted)
  • /data/data/####/N35Si0wXOoLfbaSSUzl4ScfQbzNlWC6z.dex
  • /data/data/####/N35Si0wXOoLfbaSSUzl4ScfQbzNlWC6z.dex.flock (deleted)
  • /data/data/####/NN5fjJZNNIQBBuALLs4vZn4kdHYDNR1b.dex
  • /data/data/####/NN5fjJZNNIQBBuALLs4vZn4kdHYDNR1b.dex.flock (deleted)
  • /data/data/####/NPmQgQFrIadIc33u42vM44Z5ufFBinco.dex
  • /data/data/####/NbNwdGKnxVam45SKFkvEs62G9yEkDLBy.dex
  • /data/data/####/NbNwdGKnxVam45SKFkvEs62G9yEkDLBy.dex.flock (deleted)
  • /data/data/####/No8zPqz5Q8bFKVXsLjeoXcMNHt9B29Cq.dex
  • /data/data/####/No8zPqz5Q8bFKVXsLjeoXcMNHt9B29Cq.dex.flock (deleted)
  • /data/data/####/NqdGZkv4v6suQH4bfKvwGPb2hdSA1iFb.dex
  • /data/data/####/NqdGZkv4v6suQH4bfKvwGPb2hdSA1iFb.dex.flock (deleted)
  • /data/data/####/NquI6X9e7mwyGhNqVZKqnoM8LxOSwbHT.dex
  • /data/data/####/NwaWDpm3VeuRWer79odOsHMAF9q7OiS8.dex
  • /data/data/####/O8AF88Qwa38ISkVbWVX93ENY2eBlINmz.dex
  • /data/data/####/O8AF88Qwa38ISkVbWVX93ENY2eBlINmz.dex.flock (deleted)
  • /data/data/####/OVZCY7xjye5iZ2xqQ45MTvOi1Sbt4PNm.dex
  • /data/data/####/OVZCY7xjye5iZ2xqQ45MTvOi1Sbt4PNm.dex.flock (deleted)
  • /data/data/####/OwT8vaTwClYZIQlpfqZTOEKReLi7E33s.dex
  • /data/data/####/OwT8vaTwClYZIQlpfqZTOEKReLi7E33s.dex.flock (deleted)
  • /data/data/####/P7Kcy7ZnMmTlp7x3g6VcOgMfU2lKMNoA.dex
  • /data/data/####/P7Kcy7ZnMmTlp7x3g6VcOgMfU2lKMNoA.dex.flock (deleted)
  • /data/data/####/PaLDfDtfpxRYUkOLBiqGGqupoSHtOXRj.dex
  • /data/data/####/PmxmfTp6ffOpZAns1Xp7f4HFJAv3Cmkf.dex
  • /data/data/####/Q7ZKaQrOBWKXo909puHyu68nssrQQUOW.dex
  • /data/data/####/Q7ZKaQrOBWKXo909puHyu68nssrQQUOW.dex.flock (deleted)
  • /data/data/####/QFshuTfN9yOXt0roOsLvBh1DA0TgzlM0.dex
  • /data/data/####/RBS2nLNz46kW6xCsJ93YoCGz9YPUu06Z.dex
  • /data/data/####/RBS2nLNz46kW6xCsJ93YoCGz9YPUu06Z.dex.flock (deleted)
  • /data/data/####/RSOwKqZ7cH0dJDwudKmLXqbVwhhNLn3h.dex
  • /data/data/####/RaunXu6lCeWZCdfOq9ANr0FGGjmU2bZS.dex
  • /data/data/####/RmWkQkKf9i8GfrJxc9umT2eFq1BVI12u.dex
  • /data/data/####/SISEyRDttOmeUs3mXV9UUu30qUA6sg1w.dex
  • /data/data/####/SXjxojVj1Jtgw7IlhgkiSLJ2RPw7rx3Z.dex
  • /data/data/####/SXjxojVj1Jtgw7IlhgkiSLJ2RPw7rx3Z.dex.flock (deleted)
  • /data/data/####/SYgblRl8GuyU5QRZr2SINgW5J1vMAgMQ.dex
  • /data/data/####/SYgblRl8GuyU5QRZr2SINgW5J1vMAgMQ.dex.flock (deleted)
  • /data/data/####/ScRN0sfJH9vrufBKjoDs5ffWNB3zlQXZ.dex
  • /data/data/####/ScRN0sfJH9vrufBKjoDs5ffWNB3zlQXZ.dex.flock (deleted)
  • /data/data/####/T9uZNbR2qDiGHHK5vXwcyUx6gZ5tOFo9.dex
  • /data/data/####/T9uZNbR2qDiGHHK5vXwcyUx6gZ5tOFo9.dex.flock (deleted)
  • /data/data/####/TTAF3Su9173u0lKfSMvmgpyhpAy089Uo.dex
  • /data/data/####/Ti9Slp8hNO8O0oal2tWMWYYOFG9mSnBn.dex
  • /data/data/####/Ti9Slp8hNO8O0oal2tWMWYYOFG9mSnBn.dex.flock (deleted)
  • /data/data/####/U4Z7FTjN9tlnu132wG5QkJqeER3oac51.dex
  • /data/data/####/U4Z7FTjN9tlnu132wG5QkJqeER3oac51.dex.flock (deleted)
  • /data/data/####/UCtM81l9uDVHFPBT1hBzAjgOCp4aoYpe.dex
  • /data/data/####/UCtM81l9uDVHFPBT1hBzAjgOCp4aoYpe.dex.flock (deleted)
  • /data/data/####/UJiv3L7ZZfh0P4zC0stoECdf7ZjJBTWs.dex
  • /data/data/####/UJiv3L7ZZfh0P4zC0stoECdf7ZjJBTWs.dex.flock (deleted)
  • /data/data/####/UPKQtMRsjRWJOdIFHa0FLuN8NevLZV98.dex
  • /data/data/####/UxbMLYpkYh2qtshY8cIQ4unUyVvxvYXq.dex
  • /data/data/####/UxbMLYpkYh2qtshY8cIQ4unUyVvxvYXq.dex.flock (deleted)
  • /data/data/####/V4eQLQC4wWQKhqlI4VExsNkM3j7Up37F.dex
  • /data/data/####/V4eQLQC4wWQKhqlI4VExsNkM3j7Up37F.dex.flock (deleted)
  • /data/data/####/VzXyppqK2JLpQCjNJNqUDjFPcnF35esr.dex
  • /data/data/####/VzXyppqK2JLpQCjNJNqUDjFPcnF35esr.dex.flock (deleted)
  • /data/data/####/W1eWdZnKPzm2tsyZTxghe3H4cTOXZ7tO.dex
  • /data/data/####/W1eWdZnKPzm2tsyZTxghe3H4cTOXZ7tO.dex.flock (deleted)
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/XZpCURzrWzfmH6wVIv4TRkuogJtadZ2f.dex
  • /data/data/####/XZpCURzrWzfmH6wVIv4TRkuogJtadZ2f.dex.flock (deleted)
  • /data/data/####/Xe1769gluFQCa9t0YUGzWG8dTX4IeRiJ.dex
  • /data/data/####/Xe1769gluFQCa9t0YUGzWG8dTX4IeRiJ.dex.flock (deleted)
  • /data/data/####/XeJgOp8dpWQh2sDSlYFoeOPzrWnM5Gdp.dex
  • /data/data/####/YJUHrGVFsI9pleKFwuzlJeQv4lsAWtjJ.dex
  • /data/data/####/YJUHrGVFsI9pleKFwuzlJeQv4lsAWtjJ.dex.flock (deleted)
  • /data/data/####/Yq3U5BwWpyt03h0phSf2KwZaglMtuZQR.dex
  • /data/data/####/Yq3U5BwWpyt03h0phSf2KwZaglMtuZQR.dex.flock (deleted)
  • /data/data/####/Z1lJ9wYZo6ZBoEIboAodJ4CGXgr6CLtk.dex
  • /data/data/####/Z1lJ9wYZo6ZBoEIboAodJ4CGXgr6CLtk.dex.flock (deleted)
  • /data/data/####/ZGWel5WL4aJxQalVcsub9hNGGh0dAApp.dex
  • /data/data/####/ZGWel5WL4aJxQalVcsub9hNGGh0dAApp.dex.flock (deleted)
  • /data/data/####/ZSOKUg4Rwcpm2dnDHEpusWgm8jfy8sCP.dex
  • /data/data/####/ZSOKUg4Rwcpm2dnDHEpusWgm8jfy8sCP.dex.flock (deleted)
  • /data/data/####/ZmBGGSM39ZOA1VjvoCu9bwZU4EivadXe.dex
  • /data/data/####/ZmBGGSM39ZOA1VjvoCu9bwZU4EivadXe.dex.flock (deleted)
  • /data/data/####/aHd1zgK0mfOxldqRISWlgHubsH48eblG.dex
  • /data/data/####/aHd1zgK0mfOxldqRISWlgHubsH48eblG.dex.flock (deleted)
  • /data/data/####/arFnXUyy9ESRqrB1L2ONrWN4pqvmM9sW.dex
  • /data/data/####/arFnXUyy9ESRqrB1L2ONrWN4pqvmM9sW.dex.flock (deleted)
  • /data/data/####/b4hgFYtteNYZUVKUhwluCtmOFJHMeoKV.dex
  • /data/data/####/b4hgFYtteNYZUVKUhwluCtmOFJHMeoKV.dex.flock (deleted)
  • /data/data/####/b6o5vu0Cqx8Wj6agy7uvtPxizQiMl9Nm.dex
  • /data/data/####/b6o5vu0Cqx8Wj6agy7uvtPxizQiMl9Nm.dex.flock (deleted)
  • /data/data/####/bC9WhphKTVYBeMsAJS9OgWHQ7GyJ4JyV.dex
  • /data/data/####/bLlCOLf7mXNwffYbsG5JFvOEfcF3A9C6.dex
  • /data/data/####/bUdoDjHq2x77HLfhEXecUzCxd3GhjHty.dex
  • /data/data/####/bUdoDjHq2x77HLfhEXecUzCxd3GhjHty.dex.flock (deleted)
  • /data/data/####/beWcyMY0wSEZfK3ey1kMEUny6UEssJu3.dex
  • /data/data/####/beWcyMY0wSEZfK3ey1kMEUny6UEssJu3.dex.flock (deleted)
  • /data/data/####/c9d8ac66238879bd_0
  • /data/data/####/cQLcWM0aHvCcR42FQqZoJvGzNBfuuCKz.dex
  • /data/data/####/cgW11oWKFML6WkrcSVA8pn3nZv8hcoJ2.dex
  • /data/data/####/com.redx.ratTest_preferences.xml
  • /data/data/####/dOa5Gl8Dy7haPFthtDGrl2N71RWi0FeL.dex
  • /data/data/####/dOa5Gl8Dy7haPFthtDGrl2N71RWi0FeL.dex.flock (deleted)
  • /data/data/####/ddgj5rBdphlHHbCFcBE2PRw7O3ww46H3.dex
  • /data/data/####/ddgj5rBdphlHHbCFcBE2PRw7O3ww46H3.dex.flock (deleted)
  • /data/data/####/dooPmMVviqJdwIOo1RoGmaqBfR2Gu3CS.dex
  • /data/data/####/dooPmMVviqJdwIOo1RoGmaqBfR2Gu3CS.dex.flock (deleted)
  • /data/data/####/e4zFLgvGVLM00OtazHFQtxOgN6jAjk6M.dex
  • /data/data/####/e4zFLgvGVLM00OtazHFQtxOgN6jAjk6M.dex.flock (deleted)
  • /data/data/####/eEybmCd9SK3jjadUnddbFXCxCUXwUjAR.dex
  • /data/data/####/eEybmCd9SK3jjadUnddbFXCxCUXwUjAR.dex.flock (deleted)
  • /data/data/####/egP5mlnCNRkIpCXN9pccIR94fcCybYn5.dex
  • /data/data/####/egP5mlnCNRkIpCXN9pccIR94fcCybYn5.dex.flock (deleted)
  • /data/data/####/euyy97InWs3uxbgBdEJmjLAHsosPuwMt.dex
  • /data/data/####/euyy97InWs3uxbgBdEJmjLAHsosPuwMt.dex.flock (deleted)
  • /data/data/####/f41287beef4a181e_0
  • /data/data/####/f52cdzhR7pj0kxWSBvs7jY4QC9fwEJ1O.dex
  • /data/data/####/f52cdzhR7pj0kxWSBvs7jY4QC9fwEJ1O.dex.flock (deleted)
  • /data/data/####/gIq5QoTGZPxOlzS9r5OT2gXV2s0wXmhb.dex
  • /data/data/####/gIq5QoTGZPxOlzS9r5OT2gXV2s0wXmhb.dex.flock (deleted)
  • /data/data/####/gUmkB0RPTlFd64JyN1fuRHN4VNTlSMic.dex
  • /data/data/####/gUmkB0RPTlFd64JyN1fuRHN4VNTlSMic.dex.flock (deleted)
  • /data/data/####/gXIZi61zeryuHWK1J0ZEbrZym5gKjWVk.dex
  • /data/data/####/gXIZi61zeryuHWK1J0ZEbrZym5gKjWVk.dex.flock (deleted)
  • /data/data/####/glsCE96xY3CLQN0W6yTbGIZaVJIEuP1h.dex
  • /data/data/####/hWwyieEyLOJDJOWBvgwy6NW5Ggzswblt.dex
  • /data/data/####/hWwyieEyLOJDJOWBvgwy6NW5Ggzswblt.dex.flock (deleted)
  • /data/data/####/hZHt29ICBD6YzLaTJbQxZfWI6aFxPl0T.dex
  • /data/data/####/iMxswmVH2OtzLwGAd4EPGT2uvUO1JkFd.dex
  • /data/data/####/iMxswmVH2OtzLwGAd4EPGT2uvUO1JkFd.dex.flock (deleted)
  • /data/data/####/iPRpzgdd3s0Z3HVuIcnrt6p1iBPxcESR.dex
  • /data/data/####/iiXAHjVHkwUFGWh3bQIG2uCfAayRBBsD.dex
  • /data/data/####/index
  • /data/data/####/jDtdKrJR31tMLeXhfwblg3dvPZzKa1SL.dex
  • /data/data/####/jP249VTkIu2ZhE23Qw2j6vRk9vUrxF32.dex
  • /data/data/####/jUdGwAGtXH000a1rtEt6oURCyukM0mgU.dex
  • /data/data/####/jtj6kzG3wexT4RNMOO97sD2MT6lVQ93A.dex
  • /data/data/####/khMDQweYKYdjikCQHJ7iMiYKKlMp6wcm.dex
  • /data/data/####/khMDQweYKYdjikCQHJ7iMiYKKlMp6wcm.dex.flock (deleted)
  • /data/data/####/krEk56JfMGQ1gnbbBzvEEoDZdUOEUZes.dex
  • /data/data/####/krEk56JfMGQ1gnbbBzvEEoDZdUOEUZes.dex.flock (deleted)
  • /data/data/####/lMBKTJPPnffsxuFihhisF4N5lOM5b1Gh.dex
  • /data/data/####/lMBKTJPPnffsxuFihhisF4N5lOM5b1Gh.dex.flock (deleted)
  • /data/data/####/lNh6MCgRxibussxQD21F0MGUXDQXpBup.dex
  • /data/data/####/lNh6MCgRxibussxQD21F0MGUXDQXpBup.dex.flock (deleted)
  • /data/data/####/lQIW44w9bLppH5F3V6gdLOOrizqv4wrT.dex
  • /data/data/####/lZDbOmXhObRKNB8PaPY2WqAa2pjzOVbO.dex
  • /data/data/####/lZDbOmXhObRKNB8PaPY2WqAa2pjzOVbO.dex.flock (deleted)
  • /data/data/####/lmXVe3sLE0B1EJFLhXfmIN1QCu4HP1NG.dex
  • /data/data/####/m9bW3WhJeTIsQScZK4YSsHEFPw4WeUIT.dex
  • /data/data/####/m9bW3WhJeTIsQScZK4YSsHEFPw4WeUIT.dex.flock (deleted)
  • /data/data/####/metrics_guid
  • /data/data/####/n5rF3enPo2YAIRYSIX2tJFFMBQRFXhdI.dex
  • /data/data/####/n5rF3enPo2YAIRYSIX2tJFFMBQRFXhdI.dex.flock (deleted)
  • /data/data/####/n8OqkToFvQwuTPnoPxwyUMNh73EUAibi.dex
  • /data/data/####/nBP8yn8Y02V4m5I0LhRrKuY4QVxVt0Sz.dex
  • /data/data/####/nBP8yn8Y02V4m5I0LhRrKuY4QVxVt0Sz.dex.flock (deleted)
  • /data/data/####/nOnhotInfsXohIRckdBHjbWirso3oQzD.dex
  • /data/data/####/nOnhotInfsXohIRckdBHjbWirso3oQzD.dex.flock (deleted)
  • /data/data/####/nd5olMnxhTGhBv04NTkYdzaDPnPD6U5F.dex
  • /data/data/####/nd5olMnxhTGhBv04NTkYdzaDPnPD6U5F.dex.flock (deleted)
  • /data/data/####/nqyaQyLUfbVh0c4SyFQcN1gEDmdn5MQi.dex
  • /data/data/####/o9WD6AM0SsciQqAwcw25aG452sEiOTO0.dex
  • /data/data/####/oBVIdiOXqXWrU4pXN8xUTB8ePURmWQrR.dex
  • /data/data/####/oBVIdiOXqXWrU4pXN8xUTB8ePURmWQrR.dex.flock (deleted)
  • /data/data/####/oqnaGU1IFZMxB0FTqvOA3RKe5qqkmUXx.dex
  • /data/data/####/oqnaGU1IFZMxB0FTqvOA3RKe5qqkmUXx.dex.flock (deleted)
  • /data/data/####/q9CseeH91FwDaDTUSA5VtNXeJ8f14GjD.dex
  • /data/data/####/qFRTNvAS4yCtEsPSauOfSy02CAEQj04F.dex
  • /data/data/####/qFRTNvAS4yCtEsPSauOfSy02CAEQj04F.dex.flock (deleted)
  • /data/data/####/qQNaupl6z64JQZ6zDRGk6WeiJ2NPfKSJ.dex
  • /data/data/####/qVbs6REbeUTNW9F0vhywbO4qIVmPWgEW.dex
  • /data/data/####/qVbs6REbeUTNW9F0vhywbO4qIVmPWgEW.dex.flock (deleted)
  • /data/data/####/qd7kojk9kL4KexwE791gkNPkkaHPuUNs.dex
  • /data/data/####/qd7kojk9kL4KexwE791gkNPkkaHPuUNs.dex.flock (deleted)
  • /data/data/####/qqRYntn6kftuA9LIjrLk9L5mS0cw2OJ5.dex
  • /data/data/####/qqRYntn6kftuA9LIjrLk9L5mS0cw2OJ5.dex.flock (deleted)
  • /data/data/####/qrRljCkTnCicqpNKb5QOUXn7oPYZcX3Q.dex
  • /data/data/####/qrRljCkTnCicqpNKb5QOUXn7oPYZcX3Q.dex.flock (deleted)
  • /data/data/####/qvJ0DjDzAOkcnaWMvg297xagwbhfXpXU.dex
  • /data/data/####/r27Lb1P5znxEFxjuezWHAdqejSbtYELu.dex
  • /data/data/####/r27Lb1P5znxEFxjuezWHAdqejSbtYELu.dex.flock (deleted)
  • /data/data/####/rA1Tp1tLw2Z7wKsz6rPfDrfxEjoviLTT.dex
  • /data/data/####/rA1Tp1tLw2Z7wKsz6rPfDrfxEjoviLTT.dex.flock (deleted)
  • /data/data/####/rhaY9rBh7BWaLKmoNQ1KBrKBBqcBXu0R.dex
  • /data/data/####/rhaY9rBh7BWaLKmoNQ1KBrKBBqcBXu0R.dex.flock (deleted)
  • /data/data/####/sMicMg5DYtL3Suj2mHft9Yxn9d7F3cY9.dex
  • /data/data/####/t3HBetn6PsBvrcYwjz6DelKvLDmFbJeX.dex
  • /data/data/####/temp-index
  • /data/data/####/tg21mB4SjaReZzFTHecFg5NWZ1UzPyPp.dex
  • /data/data/####/tg21mB4SjaReZzFTHecFg5NWZ1UzPyPp.dex.flock (deleted)
  • /data/data/####/the-real-index
  • /data/data/####/txgYwfhGarzGV0Slv6ANM0KFY0tATyBE.dex
  • /data/data/####/uShtVP8qfmYCSjU6XlUDH9PujZxckXzh.dex
  • /data/data/####/uShtVP8qfmYCSjU6XlUDH9PujZxckXzh.dex.flock (deleted)
  • /data/data/####/v1qbOg6GooBTtLFeWrbfWDuktVz6rGje.dex
  • /data/data/####/v1qbOg6GooBTtLFeWrbfWDuktVz6rGje.dex.flock (deleted)
  • /data/data/####/vI661BEhiQpSZKBDvtHgmjPpkN13XF0p.dex
  • /data/data/####/vI661BEhiQpSZKBDvtHgmjPpkN13XF0p.dex.flock (deleted)
  • /data/data/####/vWM3yBzUfo6C1I4qGgOmMespeQ2eBLnc.dex
  • /data/data/####/vWM3yBzUfo6C1I4qGgOmMespeQ2eBLnc.dex.flock (deleted)
  • /data/data/####/vjZIufVB95CVODlgEDMvaXzkkt8tm0M3.dex
  • /data/data/####/yKqgLhC3gcPXBjAxy3t6WZA9V67q5oeN.dex
  • /data/data/####/z6hQZSxGXLxjPKWxaiUP7c9FxXwkTnjR.dex
  • /data/data/####/ziEQhCn4vgjzupxk1m0UTot3Rwtmanms.dex
  • /data/data/####/ziEQhCn4vgjzupxk1m0UTot3Rwtmanms.dex.flock (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Executes the following shell scripts:
  • rm -r/data/user/0/<Package>/app_ded/0V3KjlaCXacxKhGlFPovOvQY1vjA9U8y.dex
  • rm -r/data/user/0/<Package>/app_ded/0luEI6rpWbMZUXKr4e3xRAWELBidWerP.dex
  • rm -r/data/user/0/<Package>/app_ded/0oWCUVsrt2O7TRjmkTbHCSEmW71WnSN9.dex
  • rm -r/data/user/0/<Package>/app_ded/0v9BVCOjH0VQv3CXc3QTf4t4qzRu0V6P.dex
  • rm -r/data/user/0/<Package>/app_ded/1EM3iE3EkqLPZditoe95wj98OQz4840G.dex
  • rm -r/data/user/0/<Package>/app_ded/1QEepSSgpFSWQydsRlgUC0teAeANZkrV.dex
  • rm -r/data/user/0/<Package>/app_ded/1WhQmkyyj2js3y5RrVkhgP9OXiGt4AKG.dex
  • rm -r/data/user/0/<Package>/app_ded/1pgCjRnsjIDB1pKvdguGqvUhHKrlfpLq.dex
  • rm -r/data/user/0/<Package>/app_ded/2b6qi6TAPFLPlA3Mn1FV7trBzTji9nXx.dex
  • rm -r/data/user/0/<Package>/app_ded/2mN4Eco2DaeIUSHnD46KVsHwN4USdsZF.dex
  • rm -r/data/user/0/<Package>/app_ded/2w8wbLYvAhxXsyF0z0d6PZ2bnoFcGIYT.dex
  • rm -r/data/user/0/<Package>/app_ded/3DKpb8ak8sFlE5YKwllxAP7gYpGKpYMM.dex
  • rm -r/data/user/0/<Package>/app_ded/3m9kKugDtpWrAzqHaXtY83FuNUr4J5uH.dex
  • rm -r/data/user/0/<Package>/app_ded/4Ce53SrlB6J6KP9rL6zA5Xj3mBZjAVgr.dex
  • rm -r/data/user/0/<Package>/app_ded/4F9kyIPMlPpfsNePSxUF0jHem0HjR6zw.dex
  • rm -r/data/user/0/<Package>/app_ded/4Uyrug9A8UH4BFlNEHEFCkOfKE2Bxk4A.dex
  • rm -r/data/user/0/<Package>/app_ded/4WNUncHMWNsN0XEnOdDEOEOpK9sMLMuz.dex
  • rm -r/data/user/0/<Package>/app_ded/4djRZhCDuIx5z6emrT2NrJG94ccLYYxT.dex
  • rm -r/data/user/0/<Package>/app_ded/4nkr7NOhZtfiTduda1AzGE8hM9Vo8BDn.dex
  • rm -r/data/user/0/<Package>/app_ded/4tu9M59o6nOmgmqkdjQGnLYpCPDMuCqM.dex
  • rm -r/data/user/0/<Package>/app_ded/5CKK4l79YJPNO39RjCgk4w6gHSiYDzA6.dex
  • rm -r/data/user/0/<Package>/app_ded/5ILlwUK7j3rcsSoWNVdtuHw2OdxSH0sa.dex
  • rm -r/data/user/0/<Package>/app_ded/5RLMT0uxCjWErIZVV6By9qO7SEQjntKE.dex
  • rm -r/data/user/0/<Package>/app_ded/5bm9WC28VwKv6KewLunkcQH65so0Bb4q.dex
  • rm -r/data/user/0/<Package>/app_ded/5gWSzqAVw9iwlpWJfD09NrLfq4XDeQdP.dex
  • rm -r/data/user/0/<Package>/app_ded/5qaYcvYHdmV7cgvHLy8rSFhy3fhe1HPS.dex
  • rm -r/data/user/0/<Package>/app_ded/63DEuZa93trlmG7cm17AtFCqdFAKPnn1.dex
  • rm -r/data/user/0/<Package>/app_ded/6tmBtKOuZHKe4JfGMX3snRxiD6f5sGt8.dex
  • rm -r/data/user/0/<Package>/app_ded/7YyQizLqebtsuqbRSQaZMxOub7PBhYCi.dex
  • rm -r/data/user/0/<Package>/app_ded/7hZLvppRzpahlnae1zt7TVqPG2npiusB.dex
  • rm -r/data/user/0/<Package>/app_ded/7n6SwUzCSi611uptAXPRa7oPN7ie3JzG.dex
  • rm -r/data/user/0/<Package>/app_ded/8Mryuq1arRYTeTQ0ECWiybjzqdP03FKt.dex
  • rm -r/data/user/0/<Package>/app_ded/92UlM5KlmT3G3aRRUrXcSUZYaLuFvWgM.dex
  • rm -r/data/user/0/<Package>/app_ded/956ByixCP61Ljfr9k2P6IEB4QKz9YeWH.dex
  • rm -r/data/user/0/<Package>/app_ded/9IiKzUhCpE6S2eopECCaVCN3gODj8oFk.dex
  • rm -r/data/user/0/<Package>/app_ded/9kmyMgUBEv4hGJ3V1qwKkdALDH2kwSqR.dex
  • rm -r/data/user/0/<Package>/app_ded/9oOUIrA6OwDGPUw1jgXTXqP5Y2sOIzHc.dex
  • rm -r/data/user/0/<Package>/app_ded/A5vmFm3KvZQvDW8Y7ChL2jfqIp391619.dex
  • rm -r/data/user/0/<Package>/app_ded/AyS65a5MiyODsflU9SWChU82WXS7hpH2.dex
  • rm -r/data/user/0/<Package>/app_ded/BmJK6r5ZaQxWDQRmvZcqnGhW4OeUliIm.dex
  • rm -r/data/user/0/<Package>/app_ded/C2qsddgSL8FIlDe31RF5H72yq0UJHpLf.dex
  • rm -r/data/user/0/<Package>/app_ded/CYAoQFYpgDY2SVKBU9EvEijfmaNB83wz.dex
  • rm -r/data/user/0/<Package>/app_ded/Cfk3OmzFWiFfhn9Smvtw7CW0ys3IJHpC.dex
  • rm -r/data/user/0/<Package>/app_ded/CqdOOCW0QFVHgAEkfIwDnCvz9PshPedW.dex
  • rm -r/data/user/0/<Package>/app_ded/Cu9sK77D4u0r0LMZqyyoRPHKcIlaTvvL.dex
  • rm -r/data/user/0/<Package>/app_ded/DNln3BJHb7V4O1hukwewJr8Zwjj079Qo.dex
  • rm -r/data/user/0/<Package>/app_ded/DQbvASOTXgqmJzdmQQPIGkiWy5mx8m3C.dex
  • rm -r/data/user/0/<Package>/app_ded/Dh4hjN27eelTODSrq4r09eDqkaUcVFDc.dex
  • rm -r/data/user/0/<Package>/app_ded/DnyWjaODWSRcoJiiC4DkWP6IiB6xUInH.dex
  • rm -r/data/user/0/<Package>/app_ded/DrXYtX0eniUM45sCO3NksCGREmd7slUt.dex
  • rm -r/data/user/0/<Package>/app_ded/DueuxBeyx7U6Fx0EuyreHvPgdHi67j7W.dex
  • rm -r/data/user/0/<Package>/app_ded/E2ODFejJwgPtNIBrhcxUZDxCzFoClsAO.dex
  • rm -r/data/user/0/<Package>/app_ded/EB9fqjn4pdLP73AdS3ioD5GSuAYl4qMU.dex
  • rm -r/data/user/0/<Package>/app_ded/F1wbsikt1izpUI951qACI1XnUtLbBcX8.dex
  • rm -r/data/user/0/<Package>/app_ded/F7PyjdEGB5ylgFPDYbyGH9SEUJTNhEIb.dex
  • rm -r/data/user/0/<Package>/app_ded/FBn8cJuUYEl3BncrTn6cPCcEsyiz10nF.dex
  • rm -r/data/user/0/<Package>/app_ded/FWNXS7hvBg9D8Pv0hSP8H0PRuHfUc39i.dex
  • rm -r/data/user/0/<Package>/app_ded/FbtuViaG67vhfJZ2L5sSwFcWtlewcVWn.dex
  • rm -r/data/user/0/<Package>/app_ded/Fo5D6AqVo6o0BJKfeLi5OG9WV3R74O41.dex
  • rm -r/data/user/0/<Package>/app_ded/GWHBpRoFKtyUuIzmyuV2ucmXEvGQ6lom.dex
  • rm -r/data/user/0/<Package>/app_ded/GhB8NNX2wO6e0dIRO9b6Sw1HKIWmfe1l.dex
  • rm -r/data/user/0/<Package>/app_ded/Gsb5k4qG3QP3X1LSrPRIQUd3SitR117A.dex
  • rm -r/data/user/0/<Package>/app_ded/HHq5MFkWWfk8unl84Sl4LZ4lCpvlXZ2v.dex
  • rm -r/data/user/0/<Package>/app_ded/HMQr9Yy0MaySfkyR0YY45HAZipdQyTJB.dex
  • rm -r/data/user/0/<Package>/app_ded/HTdpHl3aAP8Iqor57ekjjZTsKHZai0mm.dex
  • rm -r/data/user/0/<Package>/app_ded/HYoGg1Q5AOYqTXwCLsFNhYQQ64IlfQKY.dex
  • rm -r/data/user/0/<Package>/app_ded/I5wZ5FA2mdNRpTmmqq6kdcqJH94AGglF.dex
  • rm -r/data/user/0/<Package>/app_ded/IdeV5gUv2HvL4iDI7RpT1h6iWbVflFqr.dex
  • rm -r/data/user/0/<Package>/app_ded/JVJ6hB1zZZHxeCqYBlu7ZSmnD1sjIqLL.dex
  • rm -r/data/user/0/<Package>/app_ded/JuoX3gjhRbbP0YK3dkfuzRjByZvCYecF.dex
  • rm -r/data/user/0/<Package>/app_ded/KI0XMDnEztYJsEIcGAOgsLbr2t8czHim.dex
  • rm -r/data/user/0/<Package>/app_ded/KkRjXWJhkmYM86mK9thnN1PobTFQCzRZ.dex
  • rm -r/data/user/0/<Package>/app_ded/KuG0solc7BP4zpwe1IuAMYT1VliwU2de.dex
  • rm -r/data/user/0/<Package>/app_ded/L0xpfCJSZBQWrTZeaSMgTn52D4JKhrPr.dex
  • rm -r/data/user/0/<Package>/app_ded/LLTmVLoDYXdwsMsga4rQE0ltC8sQSj1U.dex
  • rm -r/data/user/0/<Package>/app_ded/LZRPu26Kuau2MEkbVNAE7NPrCZ92Mdkv.dex
  • rm -r/data/user/0/<Package>/app_ded/LZaugVYdLuIkf4l8gi4SwAVUqspfY5Q9.dex
  • rm -r/data/user/0/<Package>/app_ded/M0LMIa0C0tClBp9EUfUWVgz1SmkFhKUe.dex
  • rm -r/data/user/0/<Package>/app_ded/MDTsJc77jyGgzyzSBg6Gn8zFwnbdAeHR.dex
  • rm -r/data/user/0/<Package>/app_ded/Mk0JzNr9GuGwdKkzko3GhxDZdirgpFDh.dex
  • rm -r/data/user/0/<Package>/app_ded/N1ofJsTx1GjV7xDsGM8j1p3XUeZTfZ4E.dex
  • rm -r/data/user/0/<Package>/app_ded/N35Si0wXOoLfbaSSUzl4ScfQbzNlWC6z.dex
  • rm -r/data/user/0/<Package>/app_ded/NN5fjJZNNIQBBuALLs4vZn4kdHYDNR1b.dex
  • rm -r/data/user/0/<Package>/app_ded/NPmQgQFrIadIc33u42vM44Z5ufFBinco.dex
  • rm -r/data/user/0/<Package>/app_ded/NbNwdGKnxVam45SKFkvEs62G9yEkDLBy.dex
  • rm -r/data/user/0/<Package>/app_ded/No8zPqz5Q8bFKVXsLjeoXcMNHt9B29Cq.dex
  • rm -r/data/user/0/<Package>/app_ded/NqdGZkv4v6suQH4bfKvwGPb2hdSA1iFb.dex
  • rm -r/data/user/0/<Package>/app_ded/NquI6X9e7mwyGhNqVZKqnoM8LxOSwbHT.dex
  • rm -r/data/user/0/<Package>/app_ded/NwaWDpm3VeuRWer79odOsHMAF9q7OiS8.dex
  • rm -r/data/user/0/<Package>/app_ded/O8AF88Qwa38ISkVbWVX93ENY2eBlINmz.dex
  • rm -r/data/user/0/<Package>/app_ded/OVZCY7xjye5iZ2xqQ45MTvOi1Sbt4PNm.dex
  • rm -r/data/user/0/<Package>/app_ded/OwT8vaTwClYZIQlpfqZTOEKReLi7E33s.dex
  • rm -r/data/user/0/<Package>/app_ded/P7Kcy7ZnMmTlp7x3g6VcOgMfU2lKMNoA.dex
  • rm -r/data/user/0/<Package>/app_ded/PaLDfDtfpxRYUkOLBiqGGqupoSHtOXRj.dex
  • rm -r/data/user/0/<Package>/app_ded/PmxmfTp6ffOpZAns1Xp7f4HFJAv3Cmkf.dex
  • rm -r/data/user/0/<Package>/app_ded/Q7ZKaQrOBWKXo909puHyu68nssrQQUOW.dex
  • rm -r/data/user/0/<Package>/app_ded/QFshuTfN9yOXt0roOsLvBh1DA0TgzlM0.dex
  • rm -r/data/user/0/<Package>/app_ded/RBS2nLNz46kW6xCsJ93YoCGz9YPUu06Z.dex
  • rm -r/data/user/0/<Package>/app_ded/RSOwKqZ7cH0dJDwudKmLXqbVwhhNLn3h.dex
  • rm -r/data/user/0/<Package>/app_ded/RaunXu6lCeWZCdfOq9ANr0FGGjmU2bZS.dex
  • rm -r/data/user/0/<Package>/app_ded/RmWkQkKf9i8GfrJxc9umT2eFq1BVI12u.dex
  • rm -r/data/user/0/<Package>/app_ded/SISEyRDttOmeUs3mXV9UUu30qUA6sg1w.dex
  • rm -r/data/user/0/<Package>/app_ded/SXjxojVj1Jtgw7IlhgkiSLJ2RPw7rx3Z.dex
  • rm -r/data/user/0/<Package>/app_ded/SYgblRl8GuyU5QRZr2SINgW5J1vMAgMQ.dex
  • rm -r/data/user/0/<Package>/app_ded/ScRN0sfJH9vrufBKjoDs5ffWNB3zlQXZ.dex
  • rm -r/data/user/0/<Package>/app_ded/T9uZNbR2qDiGHHK5vXwcyUx6gZ5tOFo9.dex
  • rm -r/data/user/0/<Package>/app_ded/TTAF3Su9173u0lKfSMvmgpyhpAy089Uo.dex
  • rm -r/data/user/0/<Package>/app_ded/Ti9Slp8hNO8O0oal2tWMWYYOFG9mSnBn.dex
  • rm -r/data/user/0/<Package>/app_ded/U4Z7FTjN9tlnu132wG5QkJqeER3oac51.dex
  • rm -r/data/user/0/<Package>/app_ded/UCtM81l9uDVHFPBT1hBzAjgOCp4aoYpe.dex
  • rm -r/data/user/0/<Package>/app_ded/UJiv3L7ZZfh0P4zC0stoECdf7ZjJBTWs.dex
  • rm -r/data/user/0/<Package>/app_ded/UPKQtMRsjRWJOdIFHa0FLuN8NevLZV98.dex
  • rm -r/data/user/0/<Package>/app_ded/UxbMLYpkYh2qtshY8cIQ4unUyVvxvYXq.dex
  • rm -r/data/user/0/<Package>/app_ded/V4eQLQC4wWQKhqlI4VExsNkM3j7Up37F.dex
  • rm -r/data/user/0/<Package>/app_ded/VzXyppqK2JLpQCjNJNqUDjFPcnF35esr.dex
  • rm -r/data/user/0/<Package>/app_ded/W1eWdZnKPzm2tsyZTxghe3H4cTOXZ7tO.dex
  • rm -r/data/user/0/<Package>/app_ded/XZpCURzrWzfmH6wVIv4TRkuogJtadZ2f.dex
  • rm -r/data/user/0/<Package>/app_ded/Xe1769gluFQCa9t0YUGzWG8dTX4IeRiJ.dex
  • rm -r/data/user/0/<Package>/app_ded/XeJgOp8dpWQh2sDSlYFoeOPzrWnM5Gdp.dex
  • rm -r/data/user/0/<Package>/app_ded/YJUHrGVFsI9pleKFwuzlJeQv4lsAWtjJ.dex
  • rm -r/data/user/0/<Package>/app_ded/Yq3U5BwWpyt03h0phSf2KwZaglMtuZQR.dex
  • rm -r/data/user/0/<Package>/app_ded/Z1lJ9wYZo6ZBoEIboAodJ4CGXgr6CLtk.dex
  • rm -r/data/user/0/<Package>/app_ded/ZGWel5WL4aJxQalVcsub9hNGGh0dAApp.dex
  • rm -r/data/user/0/<Package>/app_ded/ZSOKUg4Rwcpm2dnDHEpusWgm8jfy8sCP.dex
  • rm -r/data/user/0/<Package>/app_ded/ZmBGGSM39ZOA1VjvoCu9bwZU4EivadXe.dex
  • rm -r/data/user/0/<Package>/app_ded/aHd1zgK0mfOxldqRISWlgHubsH48eblG.dex
  • rm -r/data/user/0/<Package>/app_ded/arFnXUyy9ESRqrB1L2ONrWN4pqvmM9sW.dex
  • rm -r/data/user/0/<Package>/app_ded/b4hgFYtteNYZUVKUhwluCtmOFJHMeoKV.dex
  • rm -r/data/user/0/<Package>/app_ded/b6o5vu0Cqx8Wj6agy7uvtPxizQiMl9Nm.dex
  • rm -r/data/user/0/<Package>/app_ded/bC9WhphKTVYBeMsAJS9OgWHQ7GyJ4JyV.dex
  • rm -r/data/user/0/<Package>/app_ded/bLlCOLf7mXNwffYbsG5JFvOEfcF3A9C6.dex
  • rm -r/data/user/0/<Package>/app_ded/bUdoDjHq2x77HLfhEXecUzCxd3GhjHty.dex
  • rm -r/data/user/0/<Package>/app_ded/beWcyMY0wSEZfK3ey1kMEUny6UEssJu3.dex
  • rm -r/data/user/0/<Package>/app_ded/cQLcWM0aHvCcR42FQqZoJvGzNBfuuCKz.dex
  • rm -r/data/user/0/<Package>/app_ded/cgW11oWKFML6WkrcSVA8pn3nZv8hcoJ2.dex
  • rm -r/data/user/0/<Package>/app_ded/dOa5Gl8Dy7haPFthtDGrl2N71RWi0FeL.dex
  • rm -r/data/user/0/<Package>/app_ded/ddgj5rBdphlHHbCFcBE2PRw7O3ww46H3.dex
  • rm -r/data/user/0/<Package>/app_ded/dooPmMVviqJdwIOo1RoGmaqBfR2Gu3CS.dex
  • rm -r/data/user/0/<Package>/app_ded/e4zFLgvGVLM00OtazHFQtxOgN6jAjk6M.dex
  • rm -r/data/user/0/<Package>/app_ded/eEybmCd9SK3jjadUnddbFXCxCUXwUjAR.dex
  • rm -r/data/user/0/<Package>/app_ded/egP5mlnCNRkIpCXN9pccIR94fcCybYn5.dex
  • rm -r/data/user/0/<Package>/app_ded/euyy97InWs3uxbgBdEJmjLAHsosPuwMt.dex
  • rm -r/data/user/0/<Package>/app_ded/f52cdzhR7pj0kxWSBvs7jY4QC9fwEJ1O.dex
  • rm -r/data/user/0/<Package>/app_ded/gIq5QoTGZPxOlzS9r5OT2gXV2s0wXmhb.dex
  • rm -r/data/user/0/<Package>/app_ded/gUmkB0RPTlFd64JyN1fuRHN4VNTlSMic.dex
  • rm -r/data/user/0/<Package>/app_ded/gXIZi61zeryuHWK1J0ZEbrZym5gKjWVk.dex
  • rm -r/data/user/0/<Package>/app_ded/glsCE96xY3CLQN0W6yTbGIZaVJIEuP1h.dex
  • rm -r/data/user/0/<Package>/app_ded/hWwyieEyLOJDJOWBvgwy6NW5Ggzswblt.dex
  • rm -r/data/user/0/<Package>/app_ded/hZHt29ICBD6YzLaTJbQxZfWI6aFxPl0T.dex
  • rm -r/data/user/0/<Package>/app_ded/iMxswmVH2OtzLwGAd4EPGT2uvUO1JkFd.dex
  • rm -r/data/user/0/<Package>/app_ded/iPRpzgdd3s0Z3HVuIcnrt6p1iBPxcESR.dex
  • rm -r/data/user/0/<Package>/app_ded/iiXAHjVHkwUFGWh3bQIG2uCfAayRBBsD.dex
  • rm -r/data/user/0/<Package>/app_ded/jDtdKrJR31tMLeXhfwblg3dvPZzKa1SL.dex
  • rm -r/data/user/0/<Package>/app_ded/jP249VTkIu2ZhE23Qw2j6vRk9vUrxF32.dex
  • rm -r/data/user/0/<Package>/app_ded/jUdGwAGtXH000a1rtEt6oURCyukM0mgU.dex
  • rm -r/data/user/0/<Package>/app_ded/jtj6kzG3wexT4RNMOO97sD2MT6lVQ93A.dex
  • rm -r/data/user/0/<Package>/app_ded/khMDQweYKYdjikCQHJ7iMiYKKlMp6wcm.dex
  • rm -r/data/user/0/<Package>/app_ded/krEk56JfMGQ1gnbbBzvEEoDZdUOEUZes.dex
  • rm -r/data/user/0/<Package>/app_ded/lMBKTJPPnffsxuFihhisF4N5lOM5b1Gh.dex
  • rm -r/data/user/0/<Package>/app_ded/lNh6MCgRxibussxQD21F0MGUXDQXpBup.dex
  • rm -r/data/user/0/<Package>/app_ded/lQIW44w9bLppH5F3V6gdLOOrizqv4wrT.dex
  • rm -r/data/user/0/<Package>/app_ded/lZDbOmXhObRKNB8PaPY2WqAa2pjzOVbO.dex
  • rm -r/data/user/0/<Package>/app_ded/lmXVe3sLE0B1EJFLhXfmIN1QCu4HP1NG.dex
  • rm -r/data/user/0/<Package>/app_ded/m9bW3WhJeTIsQScZK4YSsHEFPw4WeUIT.dex
  • rm -r/data/user/0/<Package>/app_ded/n5rF3enPo2YAIRYSIX2tJFFMBQRFXhdI.dex
  • rm -r/data/user/0/<Package>/app_ded/n8OqkToFvQwuTPnoPxwyUMNh73EUAibi.dex
  • rm -r/data/user/0/<Package>/app_ded/nBP8yn8Y02V4m5I0LhRrKuY4QVxVt0Sz.dex
  • rm -r/data/user/0/<Package>/app_ded/nOnhotInfsXohIRckdBHjbWirso3oQzD.dex
  • rm -r/data/user/0/<Package>/app_ded/nd5olMnxhTGhBv04NTkYdzaDPnPD6U5F.dex
  • rm -r/data/user/0/<Package>/app_ded/nqyaQyLUfbVh0c4SyFQcN1gEDmdn5MQi.dex
  • rm -r/data/user/0/<Package>/app_ded/o9WD6AM0SsciQqAwcw25aG452sEiOTO0.dex
  • rm -r/data/user/0/<Package>/app_ded/oBVIdiOXqXWrU4pXN8xUTB8ePURmWQrR.dex
  • rm -r/data/user/0/<Package>/app_ded/oqnaGU1IFZMxB0FTqvOA3RKe5qqkmUXx.dex
  • rm -r/data/user/0/<Package>/app_ded/q9CseeH91FwDaDTUSA5VtNXeJ8f14GjD.dex
  • rm -r/data/user/0/<Package>/app_ded/qFRTNvAS4yCtEsPSauOfSy02CAEQj04F.dex
  • rm -r/data/user/0/<Package>/app_ded/qQNaupl6z64JQZ6zDRGk6WeiJ2NPfKSJ.dex
  • rm -r/data/user/0/<Package>/app_ded/qVbs6REbeUTNW9F0vhywbO4qIVmPWgEW.dex
  • rm -r/data/user/0/<Package>/app_ded/qd7kojk9kL4KexwE791gkNPkkaHPuUNs.dex
  • rm -r/data/user/0/<Package>/app_ded/qqRYntn6kftuA9LIjrLk9L5mS0cw2OJ5.dex
  • rm -r/data/user/0/<Package>/app_ded/qrRljCkTnCicqpNKb5QOUXn7oPYZcX3Q.dex
  • rm -r/data/user/0/<Package>/app_ded/qvJ0DjDzAOkcnaWMvg297xagwbhfXpXU.dex
  • rm -r/data/user/0/<Package>/app_ded/r27Lb1P5znxEFxjuezWHAdqejSbtYELu.dex
  • rm -r/data/user/0/<Package>/app_ded/rA1Tp1tLw2Z7wKsz6rPfDrfxEjoviLTT.dex
  • rm -r/data/user/0/<Package>/app_ded/rhaY9rBh7BWaLKmoNQ1KBrKBBqcBXu0R.dex
  • rm -r/data/user/0/<Package>/app_ded/sMicMg5DYtL3Suj2mHft9Yxn9d7F3cY9.dex
  • rm -r/data/user/0/<Package>/app_ded/t3HBetn6PsBvrcYwjz6DelKvLDmFbJeX.dex
  • rm -r/data/user/0/<Package>/app_ded/tg21mB4SjaReZzFTHecFg5NWZ1UzPyPp.dex
  • rm -r/data/user/0/<Package>/app_ded/txgYwfhGarzGV0Slv6ANM0KFY0tATyBE.dex
  • rm -r/data/user/0/<Package>/app_ded/uShtVP8qfmYCSjU6XlUDH9PujZxckXzh.dex
  • rm -r/data/user/0/<Package>/app_ded/v1qbOg6GooBTtLFeWrbfWDuktVz6rGje.dex
  • rm -r/data/user/0/<Package>/app_ded/vI661BEhiQpSZKBDvtHgmjPpkN13XF0p.dex
  • rm -r/data/user/0/<Package>/app_ded/vWM3yBzUfo6C1I4qGgOmMespeQ2eBLnc.dex
  • rm -r/data/user/0/<Package>/app_ded/vjZIufVB95CVODlgEDMvaXzkkt8tm0M3.dex
  • rm -r/data/user/0/<Package>/app_ded/yKqgLhC3gcPXBjAxy3t6WZA9V67q5oeN.dex
  • rm -r/data/user/0/<Package>/app_ded/z6hQZSxGXLxjPKWxaiUP7c9FxXwkTnjR.dex
  • rm -r/data/user/0/<Package>/app_ded/ziEQhCn4vgjzupxk1m0UTot3Rwtmanms.dex
Uses the following algorithms to decrypt data:
  • AES-ECB-PKCS5Padding
Uses special library to hide executable bytecode.
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.
Parses information from SMS.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android