Android.RemoteCode.8250

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.RemoteCode.337.origin

Network activity:

Connects to:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) wap.junshi####.cn:80
TCP(HTTP/1.1) api.zhuishu####.com:80
TCP(HTTP/1.1) 10rd####.qini####.com:80
TCP(HTTP/1.1) www.go####.com:80
TCP(HTTP/1.1) chinaw####.c####.l####.####.com:80
TCP(HTTP/1.1) connect####.gst####.com:80
TCP(TLS/1.0) md####.google####.com:443
TCP(TLS/1.0) u####.u####.com:443
TCP(TLS/1.0) and####.a####.go####.com:443
TCP(TLS/1.0) and####.google####.com:443
TCP(TLS/1.0) rr2---s####.g####.com:443
TCP(TLS/1.0) plb####.u####.com:443
TCP(TLS/1.0) www.gst####.com:443
TCP(TLS/1.0) connect####.gst####.com:443
TCP(TLS/1.0) www.go####.com:443
TCP(TLS/1.0) bj.bc####.com:443
TCP(TLS/1.0) 74.1####.205.100:443
TCP(TLS/1.0) and####.b####.qq.com:443
TCP(TLS/1.0) rr9---s####.g####.com:443
TCP(TLS/1.2) and####.google####.com:443
UDP www.gst####.com:443
UDP rr18---####.g####.com:443
UDP and####.google####.com:443

DNS requests:

and####.a####.go####.com
and####.b####.qq.com
and####.google####.com
api.zhuishu####.com
arm.a####.cn
connect####.gst####.com
gmscomp####.google####.com
m####.go####.com
md####.google####.com
p####.google####.com
plb####.u####.com
rr18---####.g####.com
rr2---s####.g####.com
rr9---s####.g####.com
st####.xinxian####.com
sta####.zhuishu####.com
u####.u####.com
wap.junshi####.cn
wap.ylx####.com
www.go####.com
www.google####.com
www.gst####.com
znlg-re####.bj.bc####.com

HTTP GET requests:

10rd####.qini####.com/agent//img3.readnovel.com/incoming/book/0/4761/234...
10rd####.qini####.com/agent//s6.static.jjwxc.net/frontcover/001/600/1600...
10rd####.qini####.com/agent//ww3.sinaimg.cn/mw690/90da530cgw1f9ai9roeaxj...
10rd####.qini####.com/agent//ww3.sinaimg.cn/mw690/9fe7b345jw1eho8q82mgdj...
10rd####.qini####.com/agent/http%3A%2F%2Fimg.1391.com%2Fapi%2Fv1%2Fbookc...
api.zhuishu####.com/cats/lv2/statistics
bj.bc####.com:443/config2.json
chinaw####.c####.l####.####.com/releasev1.zip
www.go####.com/gen_204

HTTP POST requests:

and####.b####.qq.com:443/rqd/async?aid=####
plb####.u####.com:443/umpx_internal
u####.u####.com:443/unify_logs
wap.junshi####.cn/encrypt/t/g
wap.junshi####.cn/to/pg

File system changes:

Creates the following files:

/data/data/####/.fsgkea
/data/data/####/.imprint
/data/data/####/.jg.ac
/data/data/####/.jg.ri
/data/data/####/.jg.store.report_cf
/data/data/####/.jg.store.report_pid
/data/data/####/01e95888aa7611087a8b1661eb6935a964f52eafb5b27df....0.tmp
/data/data/####/0586be1c612c6a7514e2eceec3cf632835d855b9b2ff00e....0.tmp
/data/data/####/0586be1c612c6a7514e2eceec3cf632835d855b9b2ff00e...713a.0
/data/data/####/08b5cb892db732c50abefc5ba48c73df6b898031012e16f....0.tmp
/data/data/####/0a29f7f7f57066e42c3649ed746e4aa82b37f59d92d3525....0.tmp
/data/data/####/0a29f7f7f57066e42c3649ed746e4aa82b37f59d92d3525...b97b.0
/data/data/####/0b6143db535bfe2301a7f9416ed9e89f8e3fd24a299ccd1....0.tmp
/data/data/####/0b6143db535bfe2301a7f9416ed9e89f8e3fd24a299ccd1...e448.0
/data/data/####/0da1dff838dea81a2fef1625bcbf62396e27aabc0f89eec....0.tmp
/data/data/####/0da1dff838dea81a2fef1625bcbf62396e27aabc0f89eec...4570.0
/data/data/####/0f3c3cc7d965a89c9e41d15dafd3cb400475e639c67ba8c...c0ab.0
/data/data/####/1002
/data/data/####/1004
/data/data/####/11c24641572d5c2ed8c67aa06a065fff418be03b6bb3800....0.tmp
/data/data/####/11c24641572d5c2ed8c67aa06a065fff418be03b6bb3800...40b5.0
/data/data/####/142620745a132f5096966129f69839796ac3829d97808b0....0.tmp
/data/data/####/142620745a132f5096966129f69839796ac3829d97808b0...7fbb.0
/data/data/####/1524f2dad57b3383f5dc5e40e0e7d2c6761ab5ab33c76d1....0.tmp
/data/data/####/1524f2dad57b3383f5dc5e40e0e7d2c6761ab5ab33c76d1...df5e.0
/data/data/####/15a0ea82b8b321fbe55f0803d55cc47f7b084a1f8afe36d....0.tmp
/data/data/####/15a0ea82b8b321fbe55f0803d55cc47f7b084a1f8afe36d...2af1.0
/data/data/####/18012ef00ce1e6df96671240de41e05316447e1ace8910f....0.tmp
/data/data/####/18012ef00ce1e6df96671240de41e05316447e1ace8910f...ed59.0
/data/data/####/1923b5bca2982c43d46d08640ba4f2522eb3e93032f6d8b....0.tmp
/data/data/####/1923b5bca2982c43d46d08640ba4f2522eb3e93032f6d8b...00d8.0
/data/data/####/1adff15f852814ae4ebdf18c92951205e2d9a1008d72bf2....0.tmp
/data/data/####/1adff15f852814ae4ebdf18c92951205e2d9a1008d72bf2...501b.0
/data/data/####/1c14e42c04946e555269f81a0393b044354e8735a91f35e...b622.0
/data/data/####/1f67edbd7b2ce8f96c6de95d786eea8205cf33767901bca....0.tmp
/data/data/####/1f67edbd7b2ce8f96c6de95d786eea8205cf33767901bca...338f.0
/data/data/####/225e896ac31aa48fe241a9f8c6ff4c0a280254142e2d412...33bd.0
/data/data/####/2b01bb7abd18ec7f6c2f1ed4135c2d0698c654c8c144e54....0.tmp
/data/data/####/2b01bb7abd18ec7f6c2f1ed4135c2d0698c654c8c144e54...2be6.0
/data/data/####/2b0ffc8fdcc724c4aad9c24817195fd7c62726fd9086119....0.tmp
/data/data/####/2b0ffc8fdcc724c4aad9c24817195fd7c62726fd9086119...7b63.0
/data/data/####/2bcbc640356f4f5a0b6b23556eac7644eb401ed6bb56754....0.tmp
/data/data/####/2eb559d750f61a7ca7de581ebb693a6512d051c8a8840f2....0.tmp
/data/data/####/346ebf7628f946f5317207ee03c4bf5c83fa958dba9b316....0.tmp
/data/data/####/346ebf7628f946f5317207ee03c4bf5c83fa958dba9b316...be33.0
/data/data/####/3748572a5ecde4beca8b6682315a5d4f44a6eb7214c9489....0.tmp
/data/data/####/3748572a5ecde4beca8b6682315a5d4f44a6eb7214c9489...4883.0
/data/data/####/3801557f850b5532928acdb7e9dceb9aebddb247324d3c7....0.tmp
/data/data/####/3801557f850b5532928acdb7e9dceb9aebddb247324d3c7...2664.0
/data/data/####/3957c7c1df4aab08a87268c0b9830465330994dcfd0456f....0.tmp
/data/data/####/3957c7c1df4aab08a87268c0b9830465330994dcfd0456f...a69b.0
/data/data/####/3a58876e9a6cf6ec307bcea993c69ca7d2e4c26904594f6...7ffd.0
/data/data/####/4899ca2e60c92cfdc5b85a68956d0c21d7f87f43f305649....0.tmp
/data/data/####/4bc25b0d9b6401a4a1bc82e74ce226f8b345029cef0537f....0.tmp
/data/data/####/4bc25b0d9b6401a4a1bc82e74ce226f8b345029cef0537f...3c3a.0
/data/data/####/4ddcc417140be97592e0d31646a06885503e240f19418a4....0.tmp
/data/data/####/4ddcc417140be97592e0d31646a06885503e240f19418a4...d36a.0
/data/data/####/4fe52b3d2f1a8c8ed3ba1902fc8eb2c5083a843d516fe77....0.tmp
/data/data/####/4fe52b3d2f1a8c8ed3ba1902fc8eb2c5083a843d516fe77...1253.0
/data/data/####/507663cd8582cc8103002a4e4155e5122cb07bf9521a136....0.tmp
/data/data/####/507663cd8582cc8103002a4e4155e5122cb07bf9521a136...ddac.0
/data/data/####/514ef4042f5c0df046195dc9bc4a233c6258d00d6a30a1e....0.tmp
/data/data/####/5942bde28ab5e203ae485e7bd14b38fe6630ec520fd5fe9....0.tmp
/data/data/####/5942bde28ab5e203ae485e7bd14b38fe6630ec520fd5fe9...57f6.0
/data/data/####/60f8998a9c27afb58fc481bd2967532558e229fb84f8c91....0.tmp
/data/data/####/60f8998a9c27afb58fc481bd2967532558e229fb84f8c91...0237.0
/data/data/####/615fbd9c35ebedfecf35fd7a5669baf323fef26a645a26b....0.tmp
/data/data/####/615fbd9c35ebedfecf35fd7a5669baf323fef26a645a26b...d512.0
/data/data/####/63f1e98dc2998988681fc94885d112078e9a5c00fe136c1....0.tmp
/data/data/####/63f1e98dc2998988681fc94885d112078e9a5c00fe136c1...6914.0
/data/data/####/64272383741a4b632253b813c4cadc877c81dc2dd2d538c....0.tmp
/data/data/####/64272383741a4b632253b813c4cadc877c81dc2dd2d538c...deb5.0
/data/data/####/64a688e770e7d877e691b06b7ed75df6e95ce9daa4a6928....0.tmp
/data/data/####/64a688e770e7d877e691b06b7ed75df6e95ce9daa4a6928...9c08.0
/data/data/####/66229b99632c7315c049a91fbeb1f382cacd653166d2a00....0.tmp
/data/data/####/66229b99632c7315c049a91fbeb1f382cacd653166d2a00...83d2.0
/data/data/####/67aa847fd0f8b5c1d20254a8dc1105639a323f5824822ca....0.tmp
/data/data/####/67aa847fd0f8b5c1d20254a8dc1105639a323f5824822ca...928c.0
/data/data/####/6ba165f222a5586947668a404128a3b441bbd73febb3298....0.tmp
/data/data/####/6ba165f222a5586947668a404128a3b441bbd73febb3298...2348.0
/data/data/####/71cde801b4c52e6a304217a39e6f02c8c1cda47ddc08576...3fc1.0
/data/data/####/7276db6407d607459f025953c83534344a2a194121e9212...3224.0
/data/data/####/728751aea2c3b0a7c695b08ee1ee85ce88d7da5bd7be802....0.tmp
/data/data/####/728751aea2c3b0a7c695b08ee1ee85ce88d7da5bd7be802...3657.0
/data/data/####/728d63c6ea4e2d41895cb35b0fd4738dc86d7cb5572af19....0.tmp
/data/data/####/728d63c6ea4e2d41895cb35b0fd4738dc86d7cb5572af19...d3f1.0
/data/data/####/763a934dfa4eb9f858c382ba2b2e127b5db1a6a123e6ea5...9c27.0
/data/data/####/77a320e3bf40974e1cd76b0a5b58fc794515011683cf2b4...6e51.0
/data/data/####/7a44e3f110993cbcbc569e98ea0fa77e666a5ab195b7f45....0.tmp
/data/data/####/7a44e3f110993cbcbc569e98ea0fa77e666a5ab195b7f45...4889.0
/data/data/####/7c062cbce22513c3b11df40da6f38f2be3375159e5990b2....0.tmp
/data/data/####/7d007b23432dbde2f74be709606924e28e992560aacd1c5....0.tmp
/data/data/####/7d5e9b982b312dc36f4d9885a9f25fef6a5c2f986bc6672....0.tmp
/data/data/####/7d5e9b982b312dc36f4d9885a9f25fef6a5c2f986bc6672...1eaf.0
/data/data/####/7d7e9a649ab9b27869483b6dc4c93a05804bf63adac7ec4....0.tmp
/data/data/####/7d7e9a649ab9b27869483b6dc4c93a05804bf63adac7ec4...00ee.0
/data/data/####/7f5a0fa2b9cded6d8f0a73568d4e89240dede3763136be9....0.tmp
/data/data/####/7f978513fba5e9245716b44e254ae1bad8d7cf9f3e004df....0.tmp
/data/data/####/84d4fe006db3e68c3dd914f57e4fe61e75f8f11d63b55e6....0.tmp
/data/data/####/84d4fe006db3e68c3dd914f57e4fe61e75f8f11d63b55e6...40e2.0
/data/data/####/8a35f15db2a5b023f1834fb7d03efb2ea96c72710e06991....0.tmp
/data/data/####/8a35f15db2a5b023f1834fb7d03efb2ea96c72710e06991...c464.0
/data/data/####/8b36e00b0c891e09358be0b585f108e9430d7ce41932774....0.tmp
/data/data/####/8b36e00b0c891e09358be0b585f108e9430d7ce41932774...412f.0
/data/data/####/8e5dd04ca0a115c14d1cb1bda2a279c4e6bf267d71d61f7....0.tmp
/data/data/####/8e5dd04ca0a115c14d1cb1bda2a279c4e6bf267d71d61f7...8dd8.0
/data/data/####/8e9c63edadf88823ef8b2870a86509e233de3b865aa81bb....0.tmp
/data/data/####/8e9c63edadf88823ef8b2870a86509e233de3b865aa81bb...c7fb.0
/data/data/####/916e4a7acb2fb1e0d1f77aff3657c3231c8146ccf58070c....0.tmp
/data/data/####/916e4a7acb2fb1e0d1f77aff3657c3231c8146ccf58070c...7b14.0
/data/data/####/9e3019ceaf62ac3eb1cae0862095a8abc991baa5dca76b8....0.tmp
/data/data/####/9e3019ceaf62ac3eb1cae0862095a8abc991baa5dca76b8...a41f.0
/data/data/####/BUGLY_COMMON_VALUES.xml
/data/data/####/CONFIG.xml
/data/data/####/UM_PROBE_DATA.xml
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/[[kabouzeid_app-theme-helper]].xml
/data/data/####/[[kabouzeid_app-theme-helper]].xml.bak
/data/data/####/a.dex
/data/data/####/a.dex.flock (deleted)
/data/data/####/a1174043f7a78ebeb0a108e37fc13e4a09368f2f115cc6d....0.tmp
/data/data/####/a1174043f7a78ebeb0a108e37fc13e4a09368f2f115cc6d...f4f5.0
/data/data/####/a4c2f4653899d30cc8f61078b2ddb0693e183959892a052....0.tmp
/data/data/####/a4c2f4653899d30cc8f61078b2ddb0693e183959892a052...0d88.0
/data/data/####/a5e2d4b604cd6b1e89b746a007b4c04eeae61ab7763d37b....0.tmp
/data/data/####/a5e2d4b604cd6b1e89b746a007b4c04eeae61ab7763d37b...489e.0
/data/data/####/a69f11b1770d416e398cea96efc81ec4dd6d2c438e5de55....0.tmp
/data/data/####/a69f11b1770d416e398cea96efc81ec4dd6d2c438e5de55...0d10.0
/data/data/####/a85a38a768b3c94c8f1017f0078261dae27aab242500498...9e5d.0
/data/data/####/a91a4c16c7fec86e894d298a17734a478ceb8a906a45852...1d0c.0
/data/data/####/aa82739f6a009da17e98a42865cfa15cfd1221869986bc8....0.tmp
/data/data/####/ab138b5c708b33290806e821f46df918ac5678cf010bd0b...1b8d.0
/data/data/####/ab2e49a26b4413bd40fce89b7effce6919a2d9a93ee35f5....0.tmp
/data/data/####/ab2e49a26b4413bd40fce89b7effce6919a2d9a93ee35f5...2668.0
/data/data/####/ab32b41eff75c9994733c7943f108d5bc1b9f8519999490....0.tmp
/data/data/####/ab32b41eff75c9994733c7943f108d5bc1b9f8519999490...d3cc.0
/data/data/####/acac240a89ca17a5754050c82d8f595d0cbdeb0726bc1db...46d7.0
/data/data/####/b36360c43c9a519f684ca9caef33ddde3e2ff3adc9f6218....0.tmp
/data/data/####/b36360c43c9a519f684ca9caef33ddde3e2ff3adc9f6218...ab5c.0
/data/data/####/b5273f01a07eb1b8ae1184d0583bdd7f35fa4cf5405b29e....0.tmp
/data/data/####/b5273f01a07eb1b8ae1184d0583bdd7f35fa4cf5405b29e...7e25.0
/data/data/####/b5576985b513b1dc8fb6de251d7c5ea466fc36f0d8b8ecd...11c8.0
/data/data/####/b68f2643a568b7ef416a14ef1084f2402093e1f355ad835...4425.0
/data/data/####/b6cc519d40c3fc1790d7fddd55dcbde679bf476fcce7d4a....0.tmp
/data/data/####/b6cc519d40c3fc1790d7fddd55dcbde679bf476fcce7d4a...5605.0
/data/data/####/b8a79c2191f396ec12c7a5c6458f39f79fd711e4134f698...8ecc.0
/data/data/####/b933f770bd8faf4c2bd295d3609756d20d1704c8c51047b....0.tmp
/data/data/####/b933f770bd8faf4c2bd295d3609756d20d1704c8c51047b...94f9.0
/data/data/####/ba1061aeb6327fc991f51731f952387001bb5701d84985d....0.tmp
/data/data/####/ba1061aeb6327fc991f51731f952387001bb5701d84985d...beed.0
/data/data/####/bugly_db_-journal
/data/data/####/bx_sdk.so
/data/data/####/c16c9eb6fef30e79b86b2eed3179db4d1b7030284648372...ea50.0
/data/data/####/c710ef13740db739c9d2de453a629c980d6ce67e6508ee9...68f9.0
/data/data/####/c73a9e132edc84ff2ad7111beac74fc6169a1b47f237f71....0.tmp
/data/data/####/c9e416770ee81df1d9b5cff933ebf3faf4a95fffa68df1e....0.tmp
/data/data/####/c9e416770ee81df1d9b5cff933ebf3faf4a95fffa68df1e...ba3d.0
/data/data/####/cab29e61695f6fd22e639882eb33852bc9b006648f33266....0.tmp
/data/data/####/cab29e61695f6fd22e639882eb33852bc9b006648f33266...41c7.0
/data/data/####/cb900605a04b712f3139d816bceec1d0046db0af0c0704b....0.tmp
/data/data/####/classes.dex
/data/data/####/classes.dex;classes2.dex
/data/data/####/classes.dex;classes3.dex
/data/data/####/classes.dex;classes4.dex
/data/data/####/classes.dex;classes5.dex
/data/data/####/com.liu.filterlight.BETA_VALUES.xml
/data/data/####/com.liu.filterlight_preferences.xml
/data/data/####/crashrecord.xml
/data/data/####/dW1weF9pbnRlcm5hbF8xNzA2NjYxMDk5ODU3;
/data/data/####/dW1weF9pbnRlcm5hbF8xNzA2NjYxMDkyNzQ0;
/data/data/####/dd15224bf60899be5ac0b263a21da41c8526030fd0287e0....0.tmp
/data/data/####/dd15224bf60899be5ac0b263a21da41c8526030fd0287e0...8611.0
/data/data/####/de10d323baf77880d0c10c29ed8dfa9730fd5d227e71013....0.tmp
/data/data/####/de10d323baf77880d0c10c29ed8dfa9730fd5d227e71013...96fe.0
/data/data/####/df4387746006d5b0494328d083b320344d148ec9ad75502....0.tmp
/data/data/####/df4387746006d5b0494328d083b320344d148ec9ad75502...4772.0
/data/data/####/e0b80f4ffced1dc241e1d78977ba3ac92f11c37a1a15716....0.tmp
/data/data/####/e0b80f4ffced1dc241e1d78977ba3ac92f11c37a1a15716...d48b.0
/data/data/####/e31932d77d106a029ff6ffe126bce37b8460407570f5b41...9533.0
/data/data/####/e429e989472c67ccf67a6b786dd2d54f410d2f6d9195042....0.tmp
/data/data/####/e429e989472c67ccf67a6b786dd2d54f410d2f6d9195042...f02b.0
/data/data/####/e4790a92f7f967e01fef0c3dd90bc2e6fa1e25ad7e23dda....0.tmp
/data/data/####/e4790a92f7f967e01fef0c3dd90bc2e6fa1e25ad7e23dda...77b4.0
/data/data/####/e6ba37997be5f4d642af51f7fc6bfa99baf33a4e6a91e78....0.tmp
/data/data/####/e6ba37997be5f4d642af51f7fc6bfa99baf33a4e6a91e78...fa5c.0
/data/data/####/e6ddbe931a651e9db2d00e9d5c0f7daf4b25f75fa2c182d...0ee8.0
/data/data/####/e742f43c6adb6d0b1d74f797a0afeffff4c43ef1c5ca07e....0.tmp
/data/data/####/e742f43c6adb6d0b1d74f797a0afeffff4c43ef1c5ca07e...909b.0
/data/data/####/e9a7f9acfcd879582a01c937b32a5522db186e8bdc2533f....0.tmp
/data/data/####/e9a7f9acfcd879582a01c937b32a5522db186e8bdc2533f...ef7d.0
/data/data/####/exchangeIdentity.json
/data/data/####/exid.dat
/data/data/####/f0162b57d199aa44c786be13e4fe3c78a0dddf1f13e12f4....0.tmp
/data/data/####/f0162b57d199aa44c786be13e4fe3c78a0dddf1f13e12f4...355c.0
/data/data/####/f102c0a72fd89598690607f171b2ac73ecd52c47c8fd15c....0.tmp
/data/data/####/f102c0a72fd89598690607f171b2ac73ecd52c47c8fd15c...880d.0
/data/data/####/f1c45ef81d08ee43c52f0657227fd5e7c313c88820a1b9a....0.tmp
/data/data/####/f1c45ef81d08ee43c52f0657227fd5e7c313c88820a1b9a...6599.0
/data/data/####/fadfe265158f564c053874a4c4dc5abe0b841f0e167442e...27f7.0
/data/data/####/fbbf8db2b4e1898fcbe374a4f0976fb345872dd61ee2c40...dee8.0
/data/data/####/i==1.2.0&&20170_1706661092927_envelope.log
/data/data/####/i==1.2.0&&20170_1706661100685_envelope.log
/data/data/####/info.xml
/data/data/####/journal
/data/data/####/libjiagu.so
/data/data/####/local_crash_lock
/data/data/####/metrics_guid
/data/data/####/monkebook_db-journal
/data/data/####/native_record_lock
/data/data/####/proc_auxv
/data/data/####/qa_ad_mob.xml
/data/data/####/t==8.1.6&&20170_1706661094316_envelope.log
/data/data/####/temp.dat
/data/data/####/temp.png
/data/data/####/temp00.png
/data/data/####/ua.db
/data/data/####/ua.db-journal
/data/data/####/um_pri.xml
/data/data/####/umeng_common_config.xml
/data/data/####/umeng_common_location.xml
/data/data/####/umeng_general_config.xml
/data/data/####/umeng_general_config.xml.bak
/data/data/####/umeng_it.cache
/data/media/####/share.jpg
/data/media/####/sysid.dat
/data/misc/####/primary.prof

Miscellaneous:

Executes the following shell scripts:

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
/system/bin/sh -c getprop
chmod 0755 /data/user/0/<Package>/app_cache/cache/bx_sdk.so
chmod 0755 /data/user/0/<Package>/app_cache/cache/temp.dat
getprop
getprop ro.build.version.emui
getprop ro.build.version.opporom
getprop ro.miui.ui.version.name
getprop ro.smartisan.version
getprop ro.vivo.os.version
ls /
ls /sys/class/thermal

Loads the following dynamic libraries:

libBugly-ext
libjiagu

Uses the following algorithms to encrypt data:

AES-CBC-PKCS7Padding
AES-CFB-NOPADDING
DES
RSA-None-PKCS1Padding

Uses the following algorithms to decrypt data:

AES-CBC-PKCS7Padding
AES-CFB-NOPADDING

Accesses the ITelephony private interface.

Uses special library to hide executable bytecode.

Gets information about location.

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Displays its own windows over windows of other apps.

Requests the system alert window permission.

Technologies

Begriffe

Schulung und Training

Mythen

Technical information

Curing recommendations

Free trial