Android.BankBot.12828

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.BankBot.9716

Network activity:

Connects to:

UDP(DNS) 8####.8.4.4:53
TCP(TLS/1.0) gmscomp####.google####.com:443
TCP(TLS/1.0) 74.1####.205.95:443
TCP(TLS/1.0) rr1---s####.g####.com:443
TCP(TLS/1.0) 74.1####.131.95:443
TCP(TLS/1.0) p####.google####.com:443
TCP(TLS/1.0) rr5---s####.g####.com:443
TCP(TLS/1.0) and####.google####.com:443
TCP(TLS/1.2) 64.2####.164.94:443
TCP(TLS/1.2) 1####.251.1.102:443
TCP(TLS/1.2) 74.1####.205.95:443
TCP(TLS/1.2) 74.1####.131.95:443
UDP p####.google####.com:443
UDP 74.1####.205.95:443
UDP rr5---s####.g####.com:443
UDP rr1---s####.g####.com:443

DNS requests:

and####.google####.com
gmscomp####.google####.com
m####.go####.com
p####.google####.com
rr1---s####.g####.com
rr5---s####.g####.com

File system changes:

Creates the following files:

/data/data/####/0831QS3WUC1QBR491ABNFVIV2YLR1ONG.dex
/data/data/####/0831QS3WUC1QBR491ABNFVIV2YLR1ONG.dex.flock (deleted)
/data/data/####/150035
/data/data/####/19
/data/data/####/1AKYTBA2DI034OZS15W7I80KMQJHA9WG.dex
/data/data/####/1AKYTBA2DI034OZS15W7I80KMQJHA9WG.dex.flock (deleted)
/data/data/####/2022-07-12AM020157.rt
/data/data/####/2022-07-12AM020157.str
/data/data/####/2022-07-12AM020201.so.rt
/data/data/####/2022-07-12AM020207.so.rt
/data/data/####/2022-07-12AM020214.so.rt
/data/data/####/2022-07-12AM020221.so.rt
/data/data/####/2022-07-12AM020228.so.rt
/data/data/####/2022-07-12AM020235.so.rt
/data/data/####/2022-07-12AM020241.so.rt
/data/data/####/2022-07-12AM020248.so.rt
/data/data/####/2022-07-12AM020255.so.rt
/data/data/####/2022-07-12AM020302.so.rt
/data/data/####/2022-07-12AM020310.so.rt
/data/data/####/2022-07-12AM020317.so.rt
/data/data/####/2022-07-12AM020324.so.rt
/data/data/####/250035
/data/data/####/29
/data/data/####/2HR88H82K9E6HXJ2CK55PNWYPCFTF03X.dex
/data/data/####/2HR88H82K9E6HXJ2CK55PNWYPCFTF03X.dex.flock (deleted)
/data/data/####/2RCSO613GD5POXE1WILNUG1UPY04BUBT.dex
/data/data/####/2RCSO613GD5POXE1WILNUG1UPY04BUBT.dex.flock (deleted)
/data/data/####/30YO6CYLMCRQOORTL6LF0QI2CLMQB385.dex
/data/data/####/30YO6CYLMCRQOORTL6LF0QI2CLMQB385.dex.flock (deleted)
/data/data/####/32Y63QOH7DTRI0WSMHM24ST7F6D87P9S.dex
/data/data/####/34TL57201U66DQ7UL7643163E3PX07OI.dex
/data/data/####/34TL57201U66DQ7UL7643163E3PX07OI.dex.flock (deleted)
/data/data/####/3RUYNYBJF64O1IWZ5899KP3PWRR9WLSJ.dex
/data/data/####/3RUYNYBJF64O1IWZ5899KP3PWRR9WLSJ.dex.flock (deleted)
/data/data/####/43JSN3ZRMZMXBTOVL0CE7UJQ3X29DUWM.dex
/data/data/####/43JSN3ZRMZMXBTOVL0CE7UJQ3X29DUWM.dex.flock (deleted)
/data/data/####/46WRM8RO4AADTQWCTRY30Z3RKJWMTRD.dex (deleted)
/data/data/####/46WRM8RO4AADTQWCTRY30Z3RKJWMTRD.dex.flock (deleted)
/data/data/####/46WRM8RO4AADTQWCTRY30Z3RKJWMTRD.zip
/data/data/####/4KRWJI3OU1JXBHLY3J7V4446KNF8E6P9.dex
/data/data/####/4KRWJI3OU1JXBHLY3J7V4446KNF8E6P9.dex.flock (deleted)
/data/data/####/4PB9NHFMJHG3PX4YIZEOXJJJ1QRJ8OHI.dex
/data/data/####/4PB9NHFMJHG3PX4YIZEOXJJJ1QRJ8OHI.dex.flock (deleted)
/data/data/####/4T2E60R1IZ7VIVSFM8358QRGJKEM90TF.dex
/data/data/####/4T2E60R1IZ7VIVSFM8358QRGJKEM90TF.dex.flock (deleted)
/data/data/####/5841KWK8VOFMO25KE9170NWRCEN2IR93.dex
/data/data/####/5841KWK8VOFMO25KE9170NWRCEN2IR93.dex.flock (deleted)
/data/data/####/5M3JVX86Z440B49GJ1GMD3WHSPRJU9QK.dex
/data/data/####/5M3JVX86Z440B49GJ1GMD3WHSPRJU9QK.dex.flock (deleted)
/data/data/####/6Fv124xi0mjLPynlSGQxi2lFaD3bB0Tr.dex
/data/data/####/78T5DRI416Q6L23UPRY47D6JMB51SF86.dex
/data/data/####/78T5DRI416Q6L23UPRY47D6JMB51SF86.dex.flock (deleted)
/data/data/####/79VYDNUJFTH40PRFSIXMBAMQZIJP0IG.dex (deleted)
/data/data/####/79VYDNUJFTH40PRFSIXMBAMQZIJP0IG.dex.flock (deleted)
/data/data/####/79VYDNUJFTH40PRFSIXMBAMQZIJP0IG.zip
/data/data/####/7F23QTARDS28EOWD622E3BZ9NEQNX540.dex
/data/data/####/7F23QTARDS28EOWD622E3BZ9NEQNX540.dex.flock (deleted)
/data/data/####/7G6S3DW474AHE6H63BMD4YAIO8PVCF2M.dex
/data/data/####/7G6S3DW474AHE6H63BMD4YAIO8PVCF2M.dex.flock (deleted)
/data/data/####/89R4KD9O99B4R7OZW662AI7ZBZJMDAPR.dex
/data/data/####/89R4KD9O99B4R7OZW662AI7ZBZJMDAPR.dex.flock (deleted)
/data/data/####/98KGDSUZ1F35CIE68NC8QI35HOZ29VFY.dex
/data/data/####/98KGDSUZ1F35CIE68NC8QI35HOZ29VFY.dex.flock (deleted)
/data/data/####/9SQ7F03LF0LXGCIHZV48WUVT0JEWMZIO.dex
/data/data/####/9SQ7F03LF0LXGCIHZV48WUVT0JEWMZIO.dex.flock (deleted)
/data/data/####/9VX4AT5KDNQNFAZOCBI9RN7T1A018NZB.dex
/data/data/####/9VX4AT5KDNQNFAZOCBI9RN7T1A018NZB.dex.flock (deleted)
/data/data/####/ABTA6NJMFF12T9Y1UO840SPL1TH87KJH.dex
/data/data/####/ABTA6NJMFF12T9Y1UO840SPL1TH87KJH.dex.flock (deleted)
/data/data/####/B20THILBLMZFIMSZ9TA6I8HNQ1KEKXSU.dex
/data/data/####/B20THILBLMZFIMSZ9TA6I8HNQ1KEKXSU.dex.flock (deleted)
/data/data/####/BAP5WT1RCZ0544Q5RMP7QNT5V8I5PA9E.dex
/data/data/####/BAP5WT1RCZ0544Q5RMP7QNT5V8I5PA9E.dex.flock (deleted)
/data/data/####/CJV2ZNLIXAFAQ4VL4N9K53RHIGRJ4VGX.dex
/data/data/####/CPJ0C9DCXPB8ZN8VC6AY2IB7BR3MLQLB.dex
/data/data/####/CPJ0C9DCXPB8ZN8VC6AY2IB7BR3MLQLB.dex.flock (deleted)
/data/data/####/CRBBGN5UOMQWNL9LZQ7ZHP6W4321OQ6L.dex
/data/data/####/CRBBGN5UOMQWNL9LZQ7ZHP6W4321OQ6L.dex.flock (deleted)
/data/data/####/CXH9FZ8RXOYSEOO62LR10Y86D61P1MT.dex (deleted)
/data/data/####/CXH9FZ8RXOYSEOO62LR10Y86D61P1MT.dex.flock (deleted)
/data/data/####/CXH9FZ8RXOYSEOO62LR10Y86D61P1MT.zip
/data/data/####/D2SHLM2D26SLKWTWHZ7RFV8840K7UNAC.dex
/data/data/####/D2SHLM2D26SLKWTWHZ7RFV8840K7UNAC.dex.flock (deleted)
/data/data/####/D8WD4K4W7CFASQD86PLJOBW3S2VM6VP3.dex
/data/data/####/D8WD4K4W7CFASQD86PLJOBW3S2VM6VP3.dex.flock (deleted)
/data/data/####/DDKWTWDP5OQUJOE5BE7RQ7PNIX9NM3MX.dex
/data/data/####/DDKWTWDP5OQUJOE5BE7RQ7PNIX9NM3MX.dex.flock (deleted)
/data/data/####/DI4IP32QXIKJ0CRK51CV280KEIBT65KW.dex
/data/data/####/DI4IP32QXIKJ0CRK51CV280KEIBT65KW.dex.flock (deleted)
/data/data/####/DOMZFWJPF4HXW0U5RZO0KEJLWB682BY8.dex
/data/data/####/DOMZFWJPF4HXW0U5RZO0KEJLWB682BY8.dex.flock (deleted)
/data/data/####/DW4J80A32RWNVDGM9G6D2GOIBP84XS5E.dex
/data/data/####/DW4J80A32RWNVDGM9G6D2GOIBP84XS5E.dex.flock (deleted)
/data/data/####/E19LEPRKE8GELR7FTOHDFBGUMH4RIO0B.dex
/data/data/####/E19LEPRKE8GELR7FTOHDFBGUMH4RIO0B.dex.flock (deleted)
/data/data/####/E4BAHOG1P4V0MN0DS6AKUMPWAMSZF23F.dex
/data/data/####/E4BAHOG1P4V0MN0DS6AKUMPWAMSZF23F.dex.flock (deleted)
/data/data/####/ERRVLTIHF6WU02MKKBDNMCM0VK7ZVCJ.dex (deleted)
/data/data/####/ERRVLTIHF6WU02MKKBDNMCM0VK7ZVCJ.dex.flock (deleted)
/data/data/####/ERRVLTIHF6WU02MKKBDNMCM0VK7ZVCJ.zip
/data/data/####/F22RAA2Y9QDSIGRIW3RHETUX6O5CCH3D.dex
/data/data/####/F22RAA2Y9QDSIGRIW3RHETUX6O5CCH3D.dex.flock (deleted)
/data/data/####/F7jGYNyfCSfzqoIZ1vkwXtu7CdiBx3at.dex
/data/data/####/F7jGYNyfCSfzqoIZ1vkwXtu7CdiBx3at.dex (deleted)
/data/data/####/F7jGYNyfCSfzqoIZ1vkwXtu7CdiBx3at.dex.flock (deleted)
/data/data/####/FSMSN54GN4A1YI5EZF690EAIWGDJGJEM.dex
/data/data/####/FSMSN54GN4A1YI5EZF690EAIWGDJGJEM.dex.flock (deleted)
/data/data/####/HBD0VPCT5J76635PUO70H4OW98HVA8E.dex (deleted)
/data/data/####/HBD0VPCT5J76635PUO70H4OW98HVA8E.dex.flock (deleted)
/data/data/####/HBD0VPCT5J76635PUO70H4OW98HVA8E.zip
/data/data/####/HK0GHK2VHF3PWUMEKRW4MI3LPW7QXZRI.dex
/data/data/####/HK0GHK2VHF3PWUMEKRW4MI3LPW7QXZRI.dex.flock (deleted)
/data/data/####/HQ8DTUA9IQCXW8TKHVRVZF0G8WSF2ZEG.dex
/data/data/####/HQ8DTUA9IQCXW8TKHVRVZF0G8WSF2ZEG.dex.flock (deleted)
/data/data/####/I1NGOH8MOH26XDFISOTP1F8UPCNTZKZ5.dex
/data/data/####/I1NGOH8MOH26XDFISOTP1F8UPCNTZKZ5.dex.flock (deleted)
/data/data/####/I538G9C68LA6PPNQCKPHPJWQDSZ5B8F1.dex
/data/data/####/I538G9C68LA6PPNQCKPHPJWQDSZ5B8F1.dex.flock (deleted)
/data/data/####/IID96HQYQXN7SL3ECFWGRO2CV6207KVY.dex
/data/data/####/IID96HQYQXN7SL3ECFWGRO2CV6207KVY.dex.flock (deleted)
/data/data/####/IKI1GU5EY4GVR86EB9KXQ19L6DIO39R.dex (deleted)
/data/data/####/IKI1GU5EY4GVR86EB9KXQ19L6DIO39R.dex.flock (deleted)
/data/data/####/IKI1GU5EY4GVR86EB9KXQ19L6DIO39R.zip
/data/data/####/IRTNQGFRABXSTLKTQ21GR1D9JBGIVE5T.dex
/data/data/####/IRTNQGFRABXSTLKTQ21GR1D9JBGIVE5T.dex.flock (deleted)
/data/data/####/ISIHWQTEAG0ZB0AERXCXIHT9U1Q0RHB.dex (deleted)
/data/data/####/ISIHWQTEAG0ZB0AERXCXIHT9U1Q0RHB.dex.flock (deleted)
/data/data/####/ISIHWQTEAG0ZB0AERXCXIHT9U1Q0RHB.zip
/data/data/####/IUHXQP2MAXFRSTN203G0F8EW7UI8RK7Q.dex
/data/data/####/IUHXQP2MAXFRSTN203G0F8EW7UI8RK7Q.dex.flock (deleted)
/data/data/####/IZTJE4ZNANDWHLGDYAH0BPDXR7KAV6TD.dex
/data/data/####/IZTJE4ZNANDWHLGDYAH0BPDXR7KAV6TD.dex.flock (deleted)
/data/data/####/JSE8QO6PE8RQGSB1TULF8IUQCTIINNWP.dex
/data/data/####/JSE8QO6PE8RQGSB1TULF8IUQCTIINNWP.dex.flock (deleted)
/data/data/####/JZUY7UJNRM4OT20RDW9TS1ZDGZN1O5W3.dex
/data/data/####/JZUY7UJNRM4OT20RDW9TS1ZDGZN1O5W3.dex.flock (deleted)
/data/data/####/KEC7M4FOGMEXD2KCTF6JSF7VO74YXZX.dex (deleted)
/data/data/####/KEC7M4FOGMEXD2KCTF6JSF7VO74YXZX.dex.flock (deleted)
/data/data/####/KEC7M4FOGMEXD2KCTF6JSF7VO74YXZX.zip
/data/data/####/KF3W7VJVUZ6P3HGJ5WWUZINUZTMPPEOI.dex
/data/data/####/KF3W7VJVUZ6P3HGJ5WWUZINUZTMPPEOI.dex.flock (deleted)
/data/data/####/KFXEIREWY7OORJHSMIVFBDI03ALNT6P7.dex
/data/data/####/KFXEIREWY7OORJHSMIVFBDI03ALNT6P7.dex.flock (deleted)
/data/data/####/KJAEKAQ2uRnVbBVK7Nx9xf7xiZpbiDlK.dex
/data/data/####/KJAEKAQ2uRnVbBVK7Nx9xf7xiZpbiDlK.dex.flock
/data/data/####/L146NDK9VLANWSTAA3G00KRSF3M4ULO1.dex
/data/data/####/L146NDK9VLANWSTAA3G00KRSF3M4ULO1.dex.flock (deleted)
/data/data/####/L14TS3OH3A8MWAMJGOGWXHPN5C0H73YY.dex
/data/data/####/L14TS3OH3A8MWAMJGOGWXHPN5C0H73YY.dex.flock (deleted)
/data/data/####/L1W0X0DX5WA67GIHVMJ3ANHBUHPZ2VIP.dex
/data/data/####/L1W0X0DX5WA67GIHVMJ3ANHBUHPZ2VIP.dex.flock (deleted)
/data/data/####/LAFVFLWA7OWK3OT0ZDCM13WX49FVIX24.dex
/data/data/####/LAFVFLWA7OWK3OT0ZDCM13WX49FVIX24.dex.flock (deleted)
/data/data/####/N2U3AE2MLUXWM4ZM4JBT2HU92WDW0L3X.dex
/data/data/####/N2U3AE2MLUXWM4ZM4JBT2HU92WDW0L3X.dex.flock (deleted)
/data/data/####/N84CI6JM0JDJ573LLCYCF5V1K10O4X4.dex (deleted)
/data/data/####/N84CI6JM0JDJ573LLCYCF5V1K10O4X4.dex.flock (deleted)
/data/data/####/N84CI6JM0JDJ573LLCYCF5V1K10O4X4.zip
/data/data/####/NG48YM7MCVH3PJ751K6C7LF5OP80SLO.dex (deleted)
/data/data/####/NG48YM7MCVH3PJ751K6C7LF5OP80SLO.dex.flock (deleted)
/data/data/####/NG48YM7MCVH3PJ751K6C7LF5OP80SLO.zip
/data/data/####/NHOVIX9MIP49VK5M5FVTNBQT7VT8OB08.dex
/data/data/####/NHOVIX9MIP49VK5M5FVTNBQT7VT8OB08.dex.flock (deleted)
/data/data/####/NW5HXF6S9QI6D27UP3UOVTMJEVDDGJK6.dex
/data/data/####/NW5HXF6S9QI6D27UP3UOVTMJEVDDGJK6.dex.flock (deleted)
/data/data/####/O5Q2MC3DAFFV6VOFMW75KQR070QALCHV.dex
/data/data/####/O5Q2MC3DAFFV6VOFMW75KQR070QALCHV.dex.flock (deleted)
/data/data/####/OGRZ43SKWVT12R9O21I2H2O65WW2T6HW.dex
/data/data/####/OGRZ43SKWVT12R9O21I2H2O65WW2T6HW.dex.flock (deleted)
/data/data/####/OWFKZEF0M1RXZHHY37BVGO4Q83RWQ2DP.dex
/data/data/####/OWFKZEF0M1RXZHHY37BVGO4Q83RWQ2DP.dex.flock (deleted)
/data/data/####/OZm2rsaZDMJw8WfdAuPhtHG8ETfSEwwj.dex
/data/data/####/OZm2rsaZDMJw8WfdAuPhtHG8ETfSEwwj.dex (deleted)
/data/data/####/OZm2rsaZDMJw8WfdAuPhtHG8ETfSEwwj.dex.flock (deleted)
/data/data/####/P32P8N3SO7URLYRGVXLJLLOR9HNYA5UI.dex
/data/data/####/P32P8N3SO7URLYRGVXLJLLOR9HNYA5UI.dex.flock (deleted)
/data/data/####/PMOUH3E6H6K7SGRW9XO3U40W2IVP210K.dex
/data/data/####/PMOUH3E6H6K7SGRW9XO3U40W2IVP210K.dex.flock (deleted)
/data/data/####/PUI2OK5W65RH79TJ3USYP3PNE7EMUFA.dex
/data/data/####/PUI2OK5W65RH79TJ3USYP3PNE7EMUFA.dex.flock (deleted)
/data/data/####/PUI2OK5W65RH79TJ3USYP3PNE7EMUFA.zip
/data/data/####/RII9IQCHGDI11RQC3683C6USTJEQ3ENG.dex
/data/data/####/RII9IQCHGDI11RQC3683C6USTJEQ3ENG.dex.flock (deleted)
/data/data/####/ROQ7VC4BGSEZAAJMVPPH95EIMUQTK98U.dex
/data/data/####/ROQ7VC4BGSEZAAJMVPPH95EIMUQTK98U.dex.flock (deleted)
/data/data/####/SD6A20NTUJ33A7C7ICN58AR8B8IAXOH3.dex
/data/data/####/SD6A20NTUJ33A7C7ICN58AR8B8IAXOH3.dex.flock (deleted)
/data/data/####/SFV87Z3ZM36T7PO7DCG63MN6FHE9DY4I.dex
/data/data/####/SFV87Z3ZM36T7PO7DCG63MN6FHE9DY4I.dex.flock (deleted)
/data/data/####/T1W2NH4X7PAB001YIJ0CO8R4BRE8IPOL.dex
/data/data/####/T1W2NH4X7PAB001YIJ0CO8R4BRE8IPOL.dex.flock (deleted)
/data/data/####/T3PKZX4TDRFQMJPDAOZ8XO0K1WPZU8M.dex (deleted)
/data/data/####/T3PKZX4TDRFQMJPDAOZ8XO0K1WPZU8M.dex.flock (deleted)
/data/data/####/T3PKZX4TDRFQMJPDAOZ8XO0K1WPZU8M.zip
/data/data/####/T4UN78ZX7OPX8KETFBKWWYVLC3UK6B64.dex
/data/data/####/T4UN78ZX7OPX8KETFBKWWYVLC3UK6B64.dex.flock (deleted)
/data/data/####/TIGXHYYHY2O5WOTGD7RBRF04WSSNEFUO.dex
/data/data/####/TIGXHYYHY2O5WOTGD7RBRF04WSSNEFUO.dex.flock (deleted)
/data/data/####/TLKWX85THK6EB8YX327RYZ1VI55FYNQH.dex
/data/data/####/TLKWX85THK6EB8YX327RYZ1VI55FYNQH.dex.flock (deleted)
/data/data/####/TVPOJ1GT1FVMIR1DU0RS5SGWDOHN602.dex (deleted)
/data/data/####/TVPOJ1GT1FVMIR1DU0RS5SGWDOHN602.dex.flock (deleted)
/data/data/####/TVPOJ1GT1FVMIR1DU0RS5SGWDOHN602.zip
/data/data/####/TZagzzaMLsd9OjqzsnIsmz2r8A8gEhjc.dex
/data/data/####/TZagzzaMLsd9OjqzsnIsmz2r8A8gEhjc.dex.flock
/data/data/####/Tlpdw0fwQM5VSuLQiHtn0gSW5LlnDUIM.dex
/data/data/####/Tlpdw0fwQM5VSuLQiHtn0gSW5LlnDUIM.dex.flock (deleted)
/data/data/####/U9HGD9V8J49KSEL7QH7QBTDFWQXPAHUR.dex
/data/data/####/U9HGD9V8J49KSEL7QH7QBTDFWQXPAHUR.dex.flock (deleted)
/data/data/####/UV5EQBN2JJ5I1HE1Y0O4O8X5P1987CZ5.dex
/data/data/####/UV5EQBN2JJ5I1HE1Y0O4O8X5P1987CZ5.dex.flock (deleted)
/data/data/####/Un2VHGIqA7bsVXWDdhwHpVl4rMhustxP.dex
/data/data/####/Un2VHGIqA7bsVXWDdhwHpVl4rMhustxP.dex.flock
/data/data/####/VUOT9AHNXANFQU8BP9QEICXV2502O9GA.dex
/data/data/####/VUOT9AHNXANFQU8BP9QEICXV2502O9GA.dex.flock (deleted)
/data/data/####/W9VKWXH81TFONVOB0YQYQIJRJZVM1I1Z.dex
/data/data/####/W9VKWXH81TFONVOB0YQYQIJRJZVM1I1Z.dex.flock (deleted)
/data/data/####/WIOBQWBO0MM59M0093UJCJ7Z4ZG6P35.dex (deleted)
/data/data/####/WIOBQWBO0MM59M0093UJCJ7Z4ZG6P35.dex.flock (deleted)
/data/data/####/WIOBQWBO0MM59M0093UJCJ7Z4ZG6P35.zip
/data/data/####/Y2XXU1UQMTVRKX7U8RG0N0A472EG3OBA.dex
/data/data/####/Y2XXU1UQMTVRKX7U8RG0N0A472EG3OBA.dex.flock (deleted)
/data/data/####/Y31N9JPOH32TFZICGHCMVPT9NOD56MNC.dex
/data/data/####/Y31N9JPOH32TFZICGHCMVPT9NOD56MNC.dex.flock (deleted)
/data/data/####/YEX702LU8Y38L1QZBWLPPD01OCV1V296.dex
/data/data/####/YEX702LU8Y38L1QZBWLPPD01OCV1V296.dex.flock (deleted)
/data/data/####/YGFA9WCDHSJ0UVWPS66SEQPO6Q87JERB.dex
/data/data/####/YGFA9WCDHSJ0UVWPS66SEQPO6Q87JERB.dex.flock (deleted)
/data/data/####/YLX2HLL98L87DB29F26WPG5G5NWZZ8A8.dex
/data/data/####/YLX2HLL98L87DB29F26WPG5G5NWZZ8A8.dex.flock (deleted)
/data/data/####/ZE2JMUUUXAPCM0NQKFJLY16PIWTS8LN1.dex
/data/data/####/ZE2JMUUUXAPCM0NQKFJLY16PIWTS8LN1.dex.flock (deleted)
/data/data/####/ZXNM87FUBXSP9CLEEH4VLD9B3SURAT9D.dex
/data/data/####/ZXNM87FUBXSP9CLEEH4VLD9B3SURAT9D.dex.flock (deleted)
/data/data/####/empty_classes.dex
/data/data/####/empty_classes.zip
/data/data/####/kEBNkThiAQKCPOYZPLCIMwAphzAFWV4T.dex
/data/data/####/kEBNkThiAQKCPOYZPLCIMwAphzAFWV4T.dex.flock
/data/data/####/proc_auxv
/data/data/####/sealeh.bdc
/data/data/####/vrY77wJBorN042y9dxwZGyNHBH1hpwsI.dex
/data/data/####/vrY77wJBorN042y9dxwZGyNHBH1hpwsI.dex.flock
/data/data/####/zNLTJ2PPuZfGkKLydctqVjafRuhkEHQX.dex
/data/data/####/zNLTJ2PPuZfGkKLydctqVjafRuhkEHQX.dex.flock

Miscellaneous:

Executes the following shell scripts:

chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/0831QS3WUC1QBR491ABNFVIV2YLR1ONG.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/1AKYTBA2DI034OZS15W7I80KMQJHA9WG.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/2HR88H82K9E6HXJ2CK55PNWYPCFTF03X.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/2RCSO613GD5POXE1WILNUG1UPY04BUBT.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/30YO6CYLMCRQOORTL6LF0QI2CLMQB385.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/34TL57201U66DQ7UL7643163E3PX07OI.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/43JSN3ZRMZMXBTOVL0CE7UJQ3X29DUWM.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/4KRWJI3OU1JXBHLY3J7V4446KNF8E6P9.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/4PB9NHFMJHG3PX4YIZEOXJJJ1QRJ8OHI.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/4T2E60R1IZ7VIVSFM8358QRGJKEM90TF.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/4XY2YKVDM7V3EVK7U4B5SYROF4Q2TK9F.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/5841KWK8VOFMO25KE9170NWRCEN2IR93.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/6EPHUXIUI1NJ8XRYKB8SZW68RYU4ZGFA.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/78T5DRI416Q6L23UPRY47D6JMB51SF86.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/7F23QTARDS28EOWD622E3BZ9NEQNX540.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/7G6S3DW474AHE6H63BMD4YAIO8PVCF2M.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/89R4KD9O99B4R7OZW662AI7ZBZJMDAPR.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/98KGDSUZ1F35CIE68NC8QI35HOZ29VFY.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/9QSDHME9MI4XCCT8TRRJFFW4C4OFEJ2K.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/9SQ7F03LF0LXGCIHZV48WUVT0JEWMZIO.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/9VX4AT5KDNQNFAZOCBI9RN7T1A018NZB.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/ABTA6NJMFF12T9Y1UO840SPL1TH87KJH.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/BAP5WT1RCZ0544Q5RMP7QNT5V8I5PA9E.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/CJV2ZNLIXAFAQ4VL4N9K53RHIGRJ4VGX.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/CPJ0C9DCXPB8ZN8VC6AY2IB7BR3MLQLB.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/CRBBGN5UOMQWNL9LZQ7ZHP6W4321OQ6L.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/D2SHLM2D26SLKWTWHZ7RFV8840K7UNAC.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/D8WD4K4W7CFASQD86PLJOBW3S2VM6VP3.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/DDKWTWDP5OQUJOE5BE7RQ7PNIX9NM3MX.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/DI4IP32QXIKJ0CRK51CV280KEIBT65KW.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/DOMZFWJPF4HXW0U5RZO0KEJLWB682BY8.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/DW4J80A32RWNVDGM9G6D2GOIBP84XS5E.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/E19LEPRKE8GELR7FTOHDFBGUMH4RIO0B.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/E4BAHOG1P4V0MN0DS6AKUMPWAMSZF23F.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/F22RAA2Y9QDSIGRIW3RHETUX6O5CCH3D.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/FSMSN54GN4A1YI5EZF690EAIWGDJGJEM.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/HK0GHK2VHF3PWUMEKRW4MI3LPW7QXZRI.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/HQ8DTUA9IQCXW8TKHVRVZF0G8WSF2ZEG.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/I1NGOH8MOH26XDFISOTP1F8UPCNTZKZ5.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/I538G9C68LA6PPNQCKPHPJWQDSZ5B8F1.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/I9BSKDGI49Q6D5FM4CHLP7W2XGZ9RS3T.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/IID96HQYQXN7SL3ECFWGRO2CV6207KVY.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/IRTNQGFRABXSTLKTQ21GR1D9JBGIVE5T.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/IZTJE4ZNANDWHLGDYAH0BPDXR7KAV6TD.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/JSE8QO6PE8RQGSB1TULF8IUQCTIINNWP.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/JZUY7UJNRM4OT20RDW9TS1ZDGZN1O5W3.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/KF3W7VJVUZ6P3HGJ5WWUZINUZTMPPEOI.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/KFXEIREWY7OORJHSMIVFBDI03ALNT6P7.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/L14TS3OH3A8MWAMJGOGWXHPN5C0H73YY.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/L1W0X0DX5WA67GIHVMJ3ANHBUHPZ2VIP.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/LAFVFLWA7OWK3OT0ZDCM13WX49FVIX24.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/MFTVACJZQBDKT1OXEUTOF1D9NFSUFQLL.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/N2U3AE2MLUXWM4ZM4JBT2HU92WDW0L3X.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/NHOVIX9MIP49VK5M5FVTNBQT7VT8OB08.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/NW5HXF6S9QI6D27UP3UOVTMJEVDDGJK6.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/O5Q2MC3DAFFV6VOFMW75KQR070QALCHV.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/OGRZ43SKWVT12R9O21I2H2O65WW2T6HW.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/P32P8N3SO7URLYRGVXLJLLOR9HNYA5UI.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/PMOUH3E6H6K7SGRW9XO3U40W2IVP210K.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/RII9IQCHGDI11RQC3683C6USTJEQ3ENG.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/SD6A20NTUJ33A7C7ICN58AR8B8IAXOH3.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/T1W2NH4X7PAB001YIJ0CO8R4BRE8IPOL.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/T4UN78ZX7OPX8KETFBKWWYVLC3UK6B64.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/TLKWX85THK6EB8YX327RYZ1VI55FYNQH.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/U9HGD9V8J49KSEL7QH7QBTDFWQXPAHUR.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/UV5EQBN2JJ5I1HE1Y0O4O8X5P1987CZ5.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/VUOT9AHNXANFQU8BP9QEICXV2502O9GA.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/W9VKWXH81TFONVOB0YQYQIJRJZVM1I1Z.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/WFRWZBVB27Y5Z18RHC8UFQVUVTITXICA.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/Y2XXU1UQMTVRKX7U8RG0N0A472EG3OBA.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/Y31N9JPOH32TFZICGHCMVPT9NOD56MNC.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/YEX702LU8Y38L1QZBWLPPD01OCV1V296.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/YGFA9WCDHSJ0UVWPS66SEQPO6Q87JERB.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/YLX2HLL98L87DB29F26WPG5G5NWZZ8A8.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/ZE2JMUUUXAPCM0NQKFJLY16PIWTS8LN1.dex
chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/ZXNM87FUBXSP9CLEEH4VLD9B3SURAT9D.dex
getprop ro.dalvik.vm.isa.arm
getprop ro.dalvik.vm.isa.arm64
rm -rf /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes
rm /data/user/0/<Package>/app_payload_lib/<Package>/*.dex
rm /data/user/0/<Package>/app_payload_lib/<Package>/0831QS3WUC1QBR491ABNFVIV2YLR1ONG.dex /data/user/0/<Package>/app_payload_lib/<Package>/7F23QTARDS28EOWD622E3BZ9NEQNX540.dex /data/user/0/<Package>/app_payload_lib/<Package>/CRBBGN5UOMQWNL9LZQ7ZHP6W4321OQ6L.dex /data/user/0/<Package>/app_payload_lib/<Package>/DW4J80A32RWNVDGM9G6D2GOIBP84XS5E.dex /data/user/0/<Package>/app_payload_lib/<Package>/P32P8N3SO7URLYRGVXLJLLOR9HNYA5UI.dex /data/user/0/<Package>/app_payload_lib/<Package>/Y31N9JPOH32TFZICGHCMVPT9NOD56MNC.dex
rm /data/user/0/<Package>/app_payload_lib/<Package>/1AKYTBA2DI034OZS15W7I80KMQJHA9WG.dex /data/user/0/<Package>/app_payload_lib/<Package>/9SQ7F03LF0LXGCIHZV48WUVT0JEWMZIO.dex /data/user/0/<Package>/app_payload_lib/<Package>/CPJ0C9DCXPB8ZN8VC6AY2IB7BR3MLQLB.dex /data/user/0/<Package>/app_payload_lib/<Package>/N2U3AE2MLUXWM4ZM4JBT2HU92WDW0L3X.dex /data/user/0/<Package>/app_payload_lib/<Package>/NW5HXF6S9QI6D27UP3UOVTMJEVDDGJK6.dex /data/user/0/<Package>/app_payload_lib/<Package>/TLKWX85THK6EB8YX327RYZ1VI55FYNQH.dex
rm /data/user/0/<Package>/app_payload_lib/<Package>/2HR88H82K9E6HXJ2CK55PNWYPCFTF03X.dex /data/user/0/<Package>/app_payload_lib/<Package>/D2SHLM2D26SLKWTWHZ7RFV8840K7UNAC.dex /data/user/0/<Package>/app_payload_lib/<Package>/IUHXQP2MAXFRSTN203G0F8EW7UI8RK7Q.dex /data/user/0/<Package>/app_payload_lib/<Package>/KF3W7VJVUZ6P3HGJ5WWUZINUZTMPPEOI.dex /data/user/0/<Package>/app_payload_lib/<Package>/O5Q2MC3DAFFV6VOFMW75KQR070QALCHV.dex /data/user/0/<Package>/app_payload_lib/<Package>/ZXNM87FUBXSP9CLEEH4VLD9B3SURAT9D.dex
rm /data/user/0/<Package>/app_payload_lib/<Package>/2RCSO613GD5POXE1WILNUG1UPY04BUBT.dex /data/user/0/<Package>/app_payload_lib/<Package>/9VX4AT5KDNQNFAZOCBI9RN7T1A018NZB.dex /data/user/0/<Package>/app_payload_lib/<Package>/KFXEIREWY7OORJHSMIVFBDI03ALNT6P7.dex /data/user/0/<Package>/app_payload_lib/<Package>/OGRZ43SKWVT12R9O21I2H2O65WW2T6HW.dex /data/user/0/<Package>/app_payload_lib/<Package>/ROQ7VC4BGSEZAAJMVPPH95EIMUQTK98U.dex /data/user/0/<Package>/app_payload_lib/<Package>/YLX2HLL98L87DB29F26WPG5G5NWZZ8A8.dex
rm /data/user/0/<Package>/app_payload_lib/<Package>/30YO6CYLMCRQOORTL6LF0QI2CLMQB385.dex /data/user/0/<Package>/app_payload_lib/<Package>/98KGDSUZ1F35CIE68NC8QI35HOZ29VFY.dex /data/user/0/<Package>/app_payload_lib/<Package>/L146NDK9VLANWSTAA3G00KRSF3M4ULO1.dex /data/user/0/<Package>/app_payload_lib/<Package>/OWFKZEF0M1RXZHHY37BVGO4Q83RWQ2DP.dex /data/user/0/<Package>/app_payload_lib/<Package>/U9HGD9V8J49KSEL7QH7QBTDFWQXPAHUR.dex /data/user/0/<Package>/app_payload_lib/<Package>/YGFA9WCDHSJ0UVWPS66SEQPO6Q87JERB.dex
rm /data/user/0/<Package>/app_payload_lib/<Package>/32Y63QOH7DTRI0WSMHM24ST7F6D87P9S.dex /data/user/0/<Package>/app_payload_lib/<Package>/CJV2ZNLIXAFAQ4VL4N9K53RHIGRJ4VGX.dex
rm /data/user/0/<Package>/app_payload_lib/<Package>/34TL57201U66DQ7UL7643163E3PX07OI.dex /data/user/0/<Package>/app_payload_lib/<Package>/89R4KD9O99B4R7OZW662AI7ZBZJMDAPR.dex /data/user/0/<Package>/app_payload_lib/<Package>/DOMZFWJPF4HXW0U5RZO0KEJLWB682BY8.dex /data/user/0/<Package>/app_payload_lib/<Package>/L1W0X0DX5WA67GIHVMJ3ANHBUHPZ2VIP.dex /data/user/0/<Package>/app_payload_lib/<Package>/PMOUH3E6H6K7SGRW9XO3U40W2IVP210K.dex /data/user/0/<Package>/app_payload_lib/<Package>/ZE2JMUUUXAPCM0NQKFJLY16PIWTS8LN1.dex
rm /data/user/0/<Package>/app_payload_lib/<Package>/3RUYNYBJF64O1IWZ5899KP3PWRR9WLSJ.dex /data/user/0/<Package>/app_payload_lib/<Package>/5841KWK8VOFMO25KE9170NWRCEN2IR93.dex /data/user/0/<Package>/app_payload_lib/<Package>/5M3JVX86Z440B49GJ1GMD3WHSPRJU9QK.dex /data/user/0/<Package>/app_payload_lib/<Package>/7G6S3DW474AHE6H63BMD4YAIO8PVCF2M.dex /data/user/0/<Package>/app_payload_lib/<Package>/UV5EQBN2JJ5I1HE1Y0O4O8X5P1987CZ5.dex /data/user/0/<Package>/app_payload_lib/<Package>/VUOT9AHNXANFQU8BP9QEICXV2502O9GA.dex
rm /data/user/0/<Package>/app_payload_lib/<Package>/43JSN3ZRMZMXBTOVL0CE7UJQ3X29DUWM.dex /data/user/0/<Package>/app_payload_lib/<Package>/HQ8DTUA9IQCXW8TKHVRVZF0G8WSF2ZEG.dex /data/user/0/<Package>/app_payload_lib/<Package>/I1NGOH8MOH26XDFISOTP1F8UPCNTZKZ5.dex /data/user/0/<Package>/app_payload_lib/<Package>/IID96HQYQXN7SL3ECFWGRO2CV6207KVY.dex /data/user/0/<Package>/app_payload_lib/<Package>/IZTJE4ZNANDWHLGDYAH0BPDXR7KAV6TD.dex /data/user/0/<Package>/app_payload_lib/<Package>/SD6A20NTUJ33A7C7ICN58AR8B8IAXOH3.dex
rm /data/user/0/<Package>/app_payload_lib/<Package>/4KRWJI3OU1JXBHLY3J7V4446KNF8E6P9.dex /data/user/0/<Package>/app_payload_lib/<Package>/BAP5WT1RCZ0544Q5RMP7QNT5V8I5PA9E.dex /data/user/0/<Package>/app_payload_lib/<Package>/E4BAHOG1P4V0MN0DS6AKUMPWAMSZF23F.dex /data/user/0/<Package>/app_payload_lib/<Package>/HK0GHK2VHF3PWUMEKRW4MI3LPW7QXZRI.dex /data/user/0/<Package>/app_payload_lib/<Package>/JSE8QO6PE8RQGSB1TULF8IUQCTIINNWP.dex /data/user/0/<Package>/app_payload_lib/<Package>/T1W2NH4X7PAB001YIJ0CO8R4BRE8IPOL.dex
rm /data/user/0/<Package>/app_payload_lib/<Package>/4PB9NHFMJHG3PX4YIZEOXJJJ1QRJ8OHI.dex /data/user/0/<Package>/app_payload_lib/<Package>/E19LEPRKE8GELR7FTOHDFBGUMH4RIO0B.dex /data/user/0/<Package>/app_payload_lib/<Package>/L14TS3OH3A8MWAMJGOGWXHPN5C0H73YY.dex /data/user/0/<Package>/app_payload_lib/<Package>/NHOVIX9MIP49VK5M5FVTNBQT7VT8OB08.dex /data/user/0/<Package>/app_payload_lib/<Package>/RII9IQCHGDI11RQC3683C6USTJEQ3ENG.dex /data/user/0/<Package>/app_payload_lib/<Package>/YEX702LU8Y38L1QZBWLPPD01OCV1V296.dex
rm /data/user/0/<Package>/app_payload_lib/<Package>/4T2E60R1IZ7VIVSFM8358QRGJKEM90TF.dex /data/user/0/<Package>/app_payload_lib/<Package>/I538G9C68LA6PPNQCKPHPJWQDSZ5B8F1.dex /data/user/0/<Package>/app_payload_lib/<Package>/IRTNQGFRABXSTLKTQ21GR1D9JBGIVE5T.dex /data/user/0/<Package>/app_payload_lib/<Package>/SFV87Z3ZM36T7PO7DCG63MN6FHE9DY4I.dex /data/user/0/<Package>/app_payload_lib/<Package>/TIGXHYYHY2O5WOTGD7RBRF04WSSNEFUO.dex /data/user/0/<Package>/app_payload_lib/<Package>/Y2XXU1UQMTVRKX7U8RG0N0A472EG3OBA.dex
rm /data/user/0/<Package>/app_payload_lib/<Package>/78T5DRI416Q6L23UPRY47D6JMB51SF86.dex /data/user/0/<Package>/app_payload_lib/<Package>/DDKWTWDP5OQUJOE5BE7RQ7PNIX9NM3MX.dex /data/user/0/<Package>/app_payload_lib/<Package>/DI4IP32QXIKJ0CRK51CV280KEIBT65KW.dex /data/user/0/<Package>/app_payload_lib/<Package>/F22RAA2Y9QDSIGRIW3RHETUX6O5CCH3D.dex /data/user/0/<Package>/app_payload_lib/<Package>/T4UN78ZX7OPX8KETFBKWWYVLC3UK6B64.dex /data/user/0/<Package>/app_payload_lib/<Package>/W9VKWXH81TFONVOB0YQYQIJRJZVM1I1Z.dex
rm /data/user/0/<Package>/app_payload_lib/<Package>/ABTA6NJMFF12T9Y1UO840SPL1TH87KJH.dex /data/user/0/<Package>/app_payload_lib/<Package>/B20THILBLMZFIMSZ9TA6I8HNQ1KEKXSU.dex /data/user/0/<Package>/app_payload_lib/<Package>/D8WD4K4W7CFASQD86PLJOBW3S2VM6VP3.dex /data/user/0/<Package>/app_payload_lib/<Package>/FSMSN54GN4A1YI5EZF690EAIWGDJGJEM.dex /data/user/0/<Package>/app_payload_lib/<Package>/JZUY7UJNRM4OT20RDW9TS1ZDGZN1O5W3.dex /data/user/0/<Package>/app_payload_lib/<Package>/LAFVFLWA7OWK3OT0ZDCM13WX49FVIX24.dex
sh -c rm /data/user/0/<Package>/app_payload_lib/<Package>/*.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/0831QS3WUC1QBR491ABNFVIV2YLR1ONG.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/1AKYTBA2DI034OZS15W7I80KMQJHA9WG.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/2HR88H82K9E6HXJ2CK55PNWYPCFTF03X.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/2RCSO613GD5POXE1WILNUG1UPY04BUBT.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/30YO6CYLMCRQOORTL6LF0QI2CLMQB385.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/34TL57201U66DQ7UL7643163E3PX07OI.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/43JSN3ZRMZMXBTOVL0CE7UJQ3X29DUWM.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/4KRWJI3OU1JXBHLY3J7V4446KNF8E6P9.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/4PB9NHFMJHG3PX4YIZEOXJJJ1QRJ8OHI.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/5841KWK8VOFMO25KE9170NWRCEN2IR93.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/5M3JVX86Z440B49GJ1GMD3WHSPRJU9QK.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/6EPHUXIUI1NJ8XRYKB8SZW68RYU4ZGFA.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/78T5DRI416Q6L23UPRY47D6JMB51SF86.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/7F23QTARDS28EOWD622E3BZ9NEQNX540.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/7G6S3DW474AHE6H63BMD4YAIO8PVCF2M.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/89R4KD9O99B4R7OZW662AI7ZBZJMDAPR.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/98KGDSUZ1F35CIE68NC8QI35HOZ29VFY.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/9QSDHME9MI4XCCT8TRRJFFW4C4OFEJ2K.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/9SQ7F03LF0LXGCIHZV48WUVT0JEWMZIO.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/9VX4AT5KDNQNFAZOCBI9RN7T1A018NZB.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/CJV2ZNLIXAFAQ4VL4N9K53RHIGRJ4VGX.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/CPJ0C9DCXPB8ZN8VC6AY2IB7BR3MLQLB.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/CRBBGN5UOMQWNL9LZQ7ZHP6W4321OQ6L.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/D8WD4K4W7CFASQD86PLJOBW3S2VM6VP3.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/DDKWTWDP5OQUJOE5BE7RQ7PNIX9NM3MX.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/DI4IP32QXIKJ0CRK51CV280KEIBT65KW.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/DOMZFWJPF4HXW0U5RZO0KEJLWB682BY8.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/DW4J80A32RWNVDGM9G6D2GOIBP84XS5E.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/E19LEPRKE8GELR7FTOHDFBGUMH4RIO0B.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/E4BAHOG1P4V0MN0DS6AKUMPWAMSZF23F.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/F22RAA2Y9QDSIGRIW3RHETUX6O5CCH3D.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/FSMSN54GN4A1YI5EZF690EAIWGDJGJEM.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/HK0GHK2VHF3PWUMEKRW4MI3LPW7QXZRI.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/HQ8DTUA9IQCXW8TKHVRVZF0G8WSF2ZEG.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/I1NGOH8MOH26XDFISOTP1F8UPCNTZKZ5.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/I538G9C68LA6PPNQCKPHPJWQDSZ5B8F1.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/I9BSKDGI49Q6D5FM4CHLP7W2XGZ9RS3T.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/IID96HQYQXN7SL3ECFWGRO2CV6207KVY.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/IRTNQGFRABXSTLKTQ21GR1D9JBGIVE5T.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/JSE8QO6PE8RQGSB1TULF8IUQCTIINNWP.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/KF3W7VJVUZ6P3HGJ5WWUZINUZTMPPEOI.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/KFXEIREWY7OORJHSMIVFBDI03ALNT6P7.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/L14TS3OH3A8MWAMJGOGWXHPN5C0H73YY.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/MFTVACJZQBDKT1OXEUTOF1D9NFSUFQLL.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/N2U3AE2MLUXWM4ZM4JBT2HU92WDW0L3X.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/NHOVIX9MIP49VK5M5FVTNBQT7VT8OB08.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/NW5HXF6S9QI6D27UP3UOVTMJEVDDGJK6.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/O5Q2MC3DAFFV6VOFMW75KQR070QALCHV.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/OGRZ43SKWVT12R9O21I2H2O65WW2T6HW.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/P32P8N3SO7URLYRGVXLJLLOR9HNYA5UI.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/PMOUH3E6H6K7SGRW9XO3U40W2IVP210K.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/RII9IQCHGDI11RQC3683C6USTJEQ3ENG.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/T1W2NH4X7PAB001YIJ0CO8R4BRE8IPOL.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/T4UN78ZX7OPX8KETFBKWWYVLC3UK6B64.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/TLKWX85THK6EB8YX327RYZ1VI55FYNQH.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/U9HGD9V8J49KSEL7QH7QBTDFWQXPAHUR.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/UV5EQBN2JJ5I1HE1Y0O4O8X5P1987CZ5.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/VUOT9AHNXANFQU8BP9QEICXV2502O9GA.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/W9VKWXH81TFONVOB0YQYQIJRJZVM1I1Z.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/Y2XXU1UQMTVRKX7U8RG0N0A472EG3OBA.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/Y31N9JPOH32TFZICGHCMVPT9NOD56MNC.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/YEX702LU8Y38L1QZBWLPPD01OCV1V296.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/YGFA9WCDHSJ0UVWPS66SEQPO6Q87JERB.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/YLX2HLL98L87DB29F26WPG5G5NWZZ8A8.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/ZE2JMUUUXAPCM0NQKFJLY16PIWTS8LN1.dex
touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/ZXNM87FUBXSP9CLEEH4VLD9B3SURAT9D.dex

Loads the following dynamic libraries:

libcovault-appsec

Uses the following algorithms to decrypt data:

AES
AES-ECB-PKCS5Padding

Gets information about network.

Gets information about installed apps.

Requests the system alert window permission.

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical information

Curing recommendations

Free trial