Pour les utilisateurs

Fermer

Bibliothèque
Ma bibliothèque

+ Ajouter à la bibliothèque

Recherche
Recherche

Contacter-nous !
Support 24/24 | Rules regarding submitting

Envoyer un message

Requête à l'aide du formulaire

Nous téléphoner

0 825 300 230

Forum

Vos requêtes

  • Toutes : -
  • Non clôturées : -
  • Dernière : le -
Créer une nouvelle requête

Nous téléphoner

0 825 300 230

Profil

FR

RU CN DE EN ES FR IT JP KZ UZ PL BY
Fermer
Services support
Scanners
Dr.Web vxCube
Démo
Bibliothèque virale
Base documentaire

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Actualités

Android.BankBot.12828

Added to the Dr.Web virus database: 2022-07-12

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.BankBot.9716
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) gmscomp####.google####.com:443
  • TCP(TLS/1.0) 74.1####.205.95:443
  • TCP(TLS/1.0) rr1---s####.g####.com:443
  • TCP(TLS/1.0) 74.1####.131.95:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) rr5---s####.g####.com:443
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.2) 64.2####.164.94:443
  • TCP(TLS/1.2) 1####.251.1.102:443
  • TCP(TLS/1.2) 74.1####.205.95:443
  • TCP(TLS/1.2) 74.1####.131.95:443
  • UDP p####.google####.com:443
  • UDP 74.1####.205.95:443
  • UDP rr5---s####.g####.com:443
  • UDP rr1---s####.g####.com:443
DNS requests:
  • and####.google####.com
  • gmscomp####.google####.com
  • m####.go####.com
  • p####.google####.com
  • rr1---s####.g####.com
  • rr5---s####.g####.com
File system changes:
Creates the following files:
  • /data/data/####/0831QS3WUC1QBR491ABNFVIV2YLR1ONG.dex
  • /data/data/####/0831QS3WUC1QBR491ABNFVIV2YLR1ONG.dex.flock (deleted)
  • /data/data/####/150035
  • /data/data/####/19
  • /data/data/####/1AKYTBA2DI034OZS15W7I80KMQJHA9WG.dex
  • /data/data/####/1AKYTBA2DI034OZS15W7I80KMQJHA9WG.dex.flock (deleted)
  • /data/data/####/2022-07-12AM020157.rt
  • /data/data/####/2022-07-12AM020157.str
  • /data/data/####/2022-07-12AM020201.so.rt
  • /data/data/####/2022-07-12AM020207.so.rt
  • /data/data/####/2022-07-12AM020214.so.rt
  • /data/data/####/2022-07-12AM020221.so.rt
  • /data/data/####/2022-07-12AM020228.so.rt
  • /data/data/####/2022-07-12AM020235.so.rt
  • /data/data/####/2022-07-12AM020241.so.rt
  • /data/data/####/2022-07-12AM020248.so.rt
  • /data/data/####/2022-07-12AM020255.so.rt
  • /data/data/####/2022-07-12AM020302.so.rt
  • /data/data/####/2022-07-12AM020310.so.rt
  • /data/data/####/2022-07-12AM020317.so.rt
  • /data/data/####/2022-07-12AM020324.so.rt
  • /data/data/####/250035
  • /data/data/####/29
  • /data/data/####/2HR88H82K9E6HXJ2CK55PNWYPCFTF03X.dex
  • /data/data/####/2HR88H82K9E6HXJ2CK55PNWYPCFTF03X.dex.flock (deleted)
  • /data/data/####/2RCSO613GD5POXE1WILNUG1UPY04BUBT.dex
  • /data/data/####/2RCSO613GD5POXE1WILNUG1UPY04BUBT.dex.flock (deleted)
  • /data/data/####/30YO6CYLMCRQOORTL6LF0QI2CLMQB385.dex
  • /data/data/####/30YO6CYLMCRQOORTL6LF0QI2CLMQB385.dex.flock (deleted)
  • /data/data/####/32Y63QOH7DTRI0WSMHM24ST7F6D87P9S.dex
  • /data/data/####/34TL57201U66DQ7UL7643163E3PX07OI.dex
  • /data/data/####/34TL57201U66DQ7UL7643163E3PX07OI.dex.flock (deleted)
  • /data/data/####/3RUYNYBJF64O1IWZ5899KP3PWRR9WLSJ.dex
  • /data/data/####/3RUYNYBJF64O1IWZ5899KP3PWRR9WLSJ.dex.flock (deleted)
  • /data/data/####/43JSN3ZRMZMXBTOVL0CE7UJQ3X29DUWM.dex
  • /data/data/####/43JSN3ZRMZMXBTOVL0CE7UJQ3X29DUWM.dex.flock (deleted)
  • /data/data/####/46WRM8RO4AADTQWCTRY30Z3RKJWMTRD.dex (deleted)
  • /data/data/####/46WRM8RO4AADTQWCTRY30Z3RKJWMTRD.dex.flock (deleted)
  • /data/data/####/46WRM8RO4AADTQWCTRY30Z3RKJWMTRD.zip
  • /data/data/####/4KRWJI3OU1JXBHLY3J7V4446KNF8E6P9.dex
  • /data/data/####/4KRWJI3OU1JXBHLY3J7V4446KNF8E6P9.dex.flock (deleted)
  • /data/data/####/4PB9NHFMJHG3PX4YIZEOXJJJ1QRJ8OHI.dex
  • /data/data/####/4PB9NHFMJHG3PX4YIZEOXJJJ1QRJ8OHI.dex.flock (deleted)
  • /data/data/####/4T2E60R1IZ7VIVSFM8358QRGJKEM90TF.dex
  • /data/data/####/4T2E60R1IZ7VIVSFM8358QRGJKEM90TF.dex.flock (deleted)
  • /data/data/####/5841KWK8VOFMO25KE9170NWRCEN2IR93.dex
  • /data/data/####/5841KWK8VOFMO25KE9170NWRCEN2IR93.dex.flock (deleted)
  • /data/data/####/5M3JVX86Z440B49GJ1GMD3WHSPRJU9QK.dex
  • /data/data/####/5M3JVX86Z440B49GJ1GMD3WHSPRJU9QK.dex.flock (deleted)
  • /data/data/####/6Fv124xi0mjLPynlSGQxi2lFaD3bB0Tr.dex
  • /data/data/####/78T5DRI416Q6L23UPRY47D6JMB51SF86.dex
  • /data/data/####/78T5DRI416Q6L23UPRY47D6JMB51SF86.dex.flock (deleted)
  • /data/data/####/79VYDNUJFTH40PRFSIXMBAMQZIJP0IG.dex (deleted)
  • /data/data/####/79VYDNUJFTH40PRFSIXMBAMQZIJP0IG.dex.flock (deleted)
  • /data/data/####/79VYDNUJFTH40PRFSIXMBAMQZIJP0IG.zip
  • /data/data/####/7F23QTARDS28EOWD622E3BZ9NEQNX540.dex
  • /data/data/####/7F23QTARDS28EOWD622E3BZ9NEQNX540.dex.flock (deleted)
  • /data/data/####/7G6S3DW474AHE6H63BMD4YAIO8PVCF2M.dex
  • /data/data/####/7G6S3DW474AHE6H63BMD4YAIO8PVCF2M.dex.flock (deleted)
  • /data/data/####/89R4KD9O99B4R7OZW662AI7ZBZJMDAPR.dex
  • /data/data/####/89R4KD9O99B4R7OZW662AI7ZBZJMDAPR.dex.flock (deleted)
  • /data/data/####/98KGDSUZ1F35CIE68NC8QI35HOZ29VFY.dex
  • /data/data/####/98KGDSUZ1F35CIE68NC8QI35HOZ29VFY.dex.flock (deleted)
  • /data/data/####/9SQ7F03LF0LXGCIHZV48WUVT0JEWMZIO.dex
  • /data/data/####/9SQ7F03LF0LXGCIHZV48WUVT0JEWMZIO.dex.flock (deleted)
  • /data/data/####/9VX4AT5KDNQNFAZOCBI9RN7T1A018NZB.dex
  • /data/data/####/9VX4AT5KDNQNFAZOCBI9RN7T1A018NZB.dex.flock (deleted)
  • /data/data/####/ABTA6NJMFF12T9Y1UO840SPL1TH87KJH.dex
  • /data/data/####/ABTA6NJMFF12T9Y1UO840SPL1TH87KJH.dex.flock (deleted)
  • /data/data/####/B20THILBLMZFIMSZ9TA6I8HNQ1KEKXSU.dex
  • /data/data/####/B20THILBLMZFIMSZ9TA6I8HNQ1KEKXSU.dex.flock (deleted)
  • /data/data/####/BAP5WT1RCZ0544Q5RMP7QNT5V8I5PA9E.dex
  • /data/data/####/BAP5WT1RCZ0544Q5RMP7QNT5V8I5PA9E.dex.flock (deleted)
  • /data/data/####/CJV2ZNLIXAFAQ4VL4N9K53RHIGRJ4VGX.dex
  • /data/data/####/CPJ0C9DCXPB8ZN8VC6AY2IB7BR3MLQLB.dex
  • /data/data/####/CPJ0C9DCXPB8ZN8VC6AY2IB7BR3MLQLB.dex.flock (deleted)
  • /data/data/####/CRBBGN5UOMQWNL9LZQ7ZHP6W4321OQ6L.dex
  • /data/data/####/CRBBGN5UOMQWNL9LZQ7ZHP6W4321OQ6L.dex.flock (deleted)
  • /data/data/####/CXH9FZ8RXOYSEOO62LR10Y86D61P1MT.dex (deleted)
  • /data/data/####/CXH9FZ8RXOYSEOO62LR10Y86D61P1MT.dex.flock (deleted)
  • /data/data/####/CXH9FZ8RXOYSEOO62LR10Y86D61P1MT.zip
  • /data/data/####/D2SHLM2D26SLKWTWHZ7RFV8840K7UNAC.dex
  • /data/data/####/D2SHLM2D26SLKWTWHZ7RFV8840K7UNAC.dex.flock (deleted)
  • /data/data/####/D8WD4K4W7CFASQD86PLJOBW3S2VM6VP3.dex
  • /data/data/####/D8WD4K4W7CFASQD86PLJOBW3S2VM6VP3.dex.flock (deleted)
  • /data/data/####/DDKWTWDP5OQUJOE5BE7RQ7PNIX9NM3MX.dex
  • /data/data/####/DDKWTWDP5OQUJOE5BE7RQ7PNIX9NM3MX.dex.flock (deleted)
  • /data/data/####/DI4IP32QXIKJ0CRK51CV280KEIBT65KW.dex
  • /data/data/####/DI4IP32QXIKJ0CRK51CV280KEIBT65KW.dex.flock (deleted)
  • /data/data/####/DOMZFWJPF4HXW0U5RZO0KEJLWB682BY8.dex
  • /data/data/####/DOMZFWJPF4HXW0U5RZO0KEJLWB682BY8.dex.flock (deleted)
  • /data/data/####/DW4J80A32RWNVDGM9G6D2GOIBP84XS5E.dex
  • /data/data/####/DW4J80A32RWNVDGM9G6D2GOIBP84XS5E.dex.flock (deleted)
  • /data/data/####/E19LEPRKE8GELR7FTOHDFBGUMH4RIO0B.dex
  • /data/data/####/E19LEPRKE8GELR7FTOHDFBGUMH4RIO0B.dex.flock (deleted)
  • /data/data/####/E4BAHOG1P4V0MN0DS6AKUMPWAMSZF23F.dex
  • /data/data/####/E4BAHOG1P4V0MN0DS6AKUMPWAMSZF23F.dex.flock (deleted)
  • /data/data/####/ERRVLTIHF6WU02MKKBDNMCM0VK7ZVCJ.dex (deleted)
  • /data/data/####/ERRVLTIHF6WU02MKKBDNMCM0VK7ZVCJ.dex.flock (deleted)
  • /data/data/####/ERRVLTIHF6WU02MKKBDNMCM0VK7ZVCJ.zip
  • /data/data/####/F22RAA2Y9QDSIGRIW3RHETUX6O5CCH3D.dex
  • /data/data/####/F22RAA2Y9QDSIGRIW3RHETUX6O5CCH3D.dex.flock (deleted)
  • /data/data/####/F7jGYNyfCSfzqoIZ1vkwXtu7CdiBx3at.dex
  • /data/data/####/F7jGYNyfCSfzqoIZ1vkwXtu7CdiBx3at.dex (deleted)
  • /data/data/####/F7jGYNyfCSfzqoIZ1vkwXtu7CdiBx3at.dex.flock (deleted)
  • /data/data/####/FSMSN54GN4A1YI5EZF690EAIWGDJGJEM.dex
  • /data/data/####/FSMSN54GN4A1YI5EZF690EAIWGDJGJEM.dex.flock (deleted)
  • /data/data/####/HBD0VPCT5J76635PUO70H4OW98HVA8E.dex (deleted)
  • /data/data/####/HBD0VPCT5J76635PUO70H4OW98HVA8E.dex.flock (deleted)
  • /data/data/####/HBD0VPCT5J76635PUO70H4OW98HVA8E.zip
  • /data/data/####/HK0GHK2VHF3PWUMEKRW4MI3LPW7QXZRI.dex
  • /data/data/####/HK0GHK2VHF3PWUMEKRW4MI3LPW7QXZRI.dex.flock (deleted)
  • /data/data/####/HQ8DTUA9IQCXW8TKHVRVZF0G8WSF2ZEG.dex
  • /data/data/####/HQ8DTUA9IQCXW8TKHVRVZF0G8WSF2ZEG.dex.flock (deleted)
  • /data/data/####/I1NGOH8MOH26XDFISOTP1F8UPCNTZKZ5.dex
  • /data/data/####/I1NGOH8MOH26XDFISOTP1F8UPCNTZKZ5.dex.flock (deleted)
  • /data/data/####/I538G9C68LA6PPNQCKPHPJWQDSZ5B8F1.dex
  • /data/data/####/I538G9C68LA6PPNQCKPHPJWQDSZ5B8F1.dex.flock (deleted)
  • /data/data/####/IID96HQYQXN7SL3ECFWGRO2CV6207KVY.dex
  • /data/data/####/IID96HQYQXN7SL3ECFWGRO2CV6207KVY.dex.flock (deleted)
  • /data/data/####/IKI1GU5EY4GVR86EB9KXQ19L6DIO39R.dex (deleted)
  • /data/data/####/IKI1GU5EY4GVR86EB9KXQ19L6DIO39R.dex.flock (deleted)
  • /data/data/####/IKI1GU5EY4GVR86EB9KXQ19L6DIO39R.zip
  • /data/data/####/IRTNQGFRABXSTLKTQ21GR1D9JBGIVE5T.dex
  • /data/data/####/IRTNQGFRABXSTLKTQ21GR1D9JBGIVE5T.dex.flock (deleted)
  • /data/data/####/ISIHWQTEAG0ZB0AERXCXIHT9U1Q0RHB.dex (deleted)
  • /data/data/####/ISIHWQTEAG0ZB0AERXCXIHT9U1Q0RHB.dex.flock (deleted)
  • /data/data/####/ISIHWQTEAG0ZB0AERXCXIHT9U1Q0RHB.zip
  • /data/data/####/IUHXQP2MAXFRSTN203G0F8EW7UI8RK7Q.dex
  • /data/data/####/IUHXQP2MAXFRSTN203G0F8EW7UI8RK7Q.dex.flock (deleted)
  • /data/data/####/IZTJE4ZNANDWHLGDYAH0BPDXR7KAV6TD.dex
  • /data/data/####/IZTJE4ZNANDWHLGDYAH0BPDXR7KAV6TD.dex.flock (deleted)
  • /data/data/####/JSE8QO6PE8RQGSB1TULF8IUQCTIINNWP.dex
  • /data/data/####/JSE8QO6PE8RQGSB1TULF8IUQCTIINNWP.dex.flock (deleted)
  • /data/data/####/JZUY7UJNRM4OT20RDW9TS1ZDGZN1O5W3.dex
  • /data/data/####/JZUY7UJNRM4OT20RDW9TS1ZDGZN1O5W3.dex.flock (deleted)
  • /data/data/####/KEC7M4FOGMEXD2KCTF6JSF7VO74YXZX.dex (deleted)
  • /data/data/####/KEC7M4FOGMEXD2KCTF6JSF7VO74YXZX.dex.flock (deleted)
  • /data/data/####/KEC7M4FOGMEXD2KCTF6JSF7VO74YXZX.zip
  • /data/data/####/KF3W7VJVUZ6P3HGJ5WWUZINUZTMPPEOI.dex
  • /data/data/####/KF3W7VJVUZ6P3HGJ5WWUZINUZTMPPEOI.dex.flock (deleted)
  • /data/data/####/KFXEIREWY7OORJHSMIVFBDI03ALNT6P7.dex
  • /data/data/####/KFXEIREWY7OORJHSMIVFBDI03ALNT6P7.dex.flock (deleted)
  • /data/data/####/KJAEKAQ2uRnVbBVK7Nx9xf7xiZpbiDlK.dex
  • /data/data/####/KJAEKAQ2uRnVbBVK7Nx9xf7xiZpbiDlK.dex.flock
  • /data/data/####/L146NDK9VLANWSTAA3G00KRSF3M4ULO1.dex
  • /data/data/####/L146NDK9VLANWSTAA3G00KRSF3M4ULO1.dex.flock (deleted)
  • /data/data/####/L14TS3OH3A8MWAMJGOGWXHPN5C0H73YY.dex
  • /data/data/####/L14TS3OH3A8MWAMJGOGWXHPN5C0H73YY.dex.flock (deleted)
  • /data/data/####/L1W0X0DX5WA67GIHVMJ3ANHBUHPZ2VIP.dex
  • /data/data/####/L1W0X0DX5WA67GIHVMJ3ANHBUHPZ2VIP.dex.flock (deleted)
  • /data/data/####/LAFVFLWA7OWK3OT0ZDCM13WX49FVIX24.dex
  • /data/data/####/LAFVFLWA7OWK3OT0ZDCM13WX49FVIX24.dex.flock (deleted)
  • /data/data/####/N2U3AE2MLUXWM4ZM4JBT2HU92WDW0L3X.dex
  • /data/data/####/N2U3AE2MLUXWM4ZM4JBT2HU92WDW0L3X.dex.flock (deleted)
  • /data/data/####/N84CI6JM0JDJ573LLCYCF5V1K10O4X4.dex (deleted)
  • /data/data/####/N84CI6JM0JDJ573LLCYCF5V1K10O4X4.dex.flock (deleted)
  • /data/data/####/N84CI6JM0JDJ573LLCYCF5V1K10O4X4.zip
  • /data/data/####/NG48YM7MCVH3PJ751K6C7LF5OP80SLO.dex (deleted)
  • /data/data/####/NG48YM7MCVH3PJ751K6C7LF5OP80SLO.dex.flock (deleted)
  • /data/data/####/NG48YM7MCVH3PJ751K6C7LF5OP80SLO.zip
  • /data/data/####/NHOVIX9MIP49VK5M5FVTNBQT7VT8OB08.dex
  • /data/data/####/NHOVIX9MIP49VK5M5FVTNBQT7VT8OB08.dex.flock (deleted)
  • /data/data/####/NW5HXF6S9QI6D27UP3UOVTMJEVDDGJK6.dex
  • /data/data/####/NW5HXF6S9QI6D27UP3UOVTMJEVDDGJK6.dex.flock (deleted)
  • /data/data/####/O5Q2MC3DAFFV6VOFMW75KQR070QALCHV.dex
  • /data/data/####/O5Q2MC3DAFFV6VOFMW75KQR070QALCHV.dex.flock (deleted)
  • /data/data/####/OGRZ43SKWVT12R9O21I2H2O65WW2T6HW.dex
  • /data/data/####/OGRZ43SKWVT12R9O21I2H2O65WW2T6HW.dex.flock (deleted)
  • /data/data/####/OWFKZEF0M1RXZHHY37BVGO4Q83RWQ2DP.dex
  • /data/data/####/OWFKZEF0M1RXZHHY37BVGO4Q83RWQ2DP.dex.flock (deleted)
  • /data/data/####/OZm2rsaZDMJw8WfdAuPhtHG8ETfSEwwj.dex
  • /data/data/####/OZm2rsaZDMJw8WfdAuPhtHG8ETfSEwwj.dex (deleted)
  • /data/data/####/OZm2rsaZDMJw8WfdAuPhtHG8ETfSEwwj.dex.flock (deleted)
  • /data/data/####/P32P8N3SO7URLYRGVXLJLLOR9HNYA5UI.dex
  • /data/data/####/P32P8N3SO7URLYRGVXLJLLOR9HNYA5UI.dex.flock (deleted)
  • /data/data/####/PMOUH3E6H6K7SGRW9XO3U40W2IVP210K.dex
  • /data/data/####/PMOUH3E6H6K7SGRW9XO3U40W2IVP210K.dex.flock (deleted)
  • /data/data/####/PUI2OK5W65RH79TJ3USYP3PNE7EMUFA.dex
  • /data/data/####/PUI2OK5W65RH79TJ3USYP3PNE7EMUFA.dex.flock (deleted)
  • /data/data/####/PUI2OK5W65RH79TJ3USYP3PNE7EMUFA.zip
  • /data/data/####/RII9IQCHGDI11RQC3683C6USTJEQ3ENG.dex
  • /data/data/####/RII9IQCHGDI11RQC3683C6USTJEQ3ENG.dex.flock (deleted)
  • /data/data/####/ROQ7VC4BGSEZAAJMVPPH95EIMUQTK98U.dex
  • /data/data/####/ROQ7VC4BGSEZAAJMVPPH95EIMUQTK98U.dex.flock (deleted)
  • /data/data/####/SD6A20NTUJ33A7C7ICN58AR8B8IAXOH3.dex
  • /data/data/####/SD6A20NTUJ33A7C7ICN58AR8B8IAXOH3.dex.flock (deleted)
  • /data/data/####/SFV87Z3ZM36T7PO7DCG63MN6FHE9DY4I.dex
  • /data/data/####/SFV87Z3ZM36T7PO7DCG63MN6FHE9DY4I.dex.flock (deleted)
  • /data/data/####/T1W2NH4X7PAB001YIJ0CO8R4BRE8IPOL.dex
  • /data/data/####/T1W2NH4X7PAB001YIJ0CO8R4BRE8IPOL.dex.flock (deleted)
  • /data/data/####/T3PKZX4TDRFQMJPDAOZ8XO0K1WPZU8M.dex (deleted)
  • /data/data/####/T3PKZX4TDRFQMJPDAOZ8XO0K1WPZU8M.dex.flock (deleted)
  • /data/data/####/T3PKZX4TDRFQMJPDAOZ8XO0K1WPZU8M.zip
  • /data/data/####/T4UN78ZX7OPX8KETFBKWWYVLC3UK6B64.dex
  • /data/data/####/T4UN78ZX7OPX8KETFBKWWYVLC3UK6B64.dex.flock (deleted)
  • /data/data/####/TIGXHYYHY2O5WOTGD7RBRF04WSSNEFUO.dex
  • /data/data/####/TIGXHYYHY2O5WOTGD7RBRF04WSSNEFUO.dex.flock (deleted)
  • /data/data/####/TLKWX85THK6EB8YX327RYZ1VI55FYNQH.dex
  • /data/data/####/TLKWX85THK6EB8YX327RYZ1VI55FYNQH.dex.flock (deleted)
  • /data/data/####/TVPOJ1GT1FVMIR1DU0RS5SGWDOHN602.dex (deleted)
  • /data/data/####/TVPOJ1GT1FVMIR1DU0RS5SGWDOHN602.dex.flock (deleted)
  • /data/data/####/TVPOJ1GT1FVMIR1DU0RS5SGWDOHN602.zip
  • /data/data/####/TZagzzaMLsd9OjqzsnIsmz2r8A8gEhjc.dex
  • /data/data/####/TZagzzaMLsd9OjqzsnIsmz2r8A8gEhjc.dex.flock
  • /data/data/####/Tlpdw0fwQM5VSuLQiHtn0gSW5LlnDUIM.dex
  • /data/data/####/Tlpdw0fwQM5VSuLQiHtn0gSW5LlnDUIM.dex.flock (deleted)
  • /data/data/####/U9HGD9V8J49KSEL7QH7QBTDFWQXPAHUR.dex
  • /data/data/####/U9HGD9V8J49KSEL7QH7QBTDFWQXPAHUR.dex.flock (deleted)
  • /data/data/####/UV5EQBN2JJ5I1HE1Y0O4O8X5P1987CZ5.dex
  • /data/data/####/UV5EQBN2JJ5I1HE1Y0O4O8X5P1987CZ5.dex.flock (deleted)
  • /data/data/####/Un2VHGIqA7bsVXWDdhwHpVl4rMhustxP.dex
  • /data/data/####/Un2VHGIqA7bsVXWDdhwHpVl4rMhustxP.dex.flock
  • /data/data/####/VUOT9AHNXANFQU8BP9QEICXV2502O9GA.dex
  • /data/data/####/VUOT9AHNXANFQU8BP9QEICXV2502O9GA.dex.flock (deleted)
  • /data/data/####/W9VKWXH81TFONVOB0YQYQIJRJZVM1I1Z.dex
  • /data/data/####/W9VKWXH81TFONVOB0YQYQIJRJZVM1I1Z.dex.flock (deleted)
  • /data/data/####/WIOBQWBO0MM59M0093UJCJ7Z4ZG6P35.dex (deleted)
  • /data/data/####/WIOBQWBO0MM59M0093UJCJ7Z4ZG6P35.dex.flock (deleted)
  • /data/data/####/WIOBQWBO0MM59M0093UJCJ7Z4ZG6P35.zip
  • /data/data/####/Y2XXU1UQMTVRKX7U8RG0N0A472EG3OBA.dex
  • /data/data/####/Y2XXU1UQMTVRKX7U8RG0N0A472EG3OBA.dex.flock (deleted)
  • /data/data/####/Y31N9JPOH32TFZICGHCMVPT9NOD56MNC.dex
  • /data/data/####/Y31N9JPOH32TFZICGHCMVPT9NOD56MNC.dex.flock (deleted)
  • /data/data/####/YEX702LU8Y38L1QZBWLPPD01OCV1V296.dex
  • /data/data/####/YEX702LU8Y38L1QZBWLPPD01OCV1V296.dex.flock (deleted)
  • /data/data/####/YGFA9WCDHSJ0UVWPS66SEQPO6Q87JERB.dex
  • /data/data/####/YGFA9WCDHSJ0UVWPS66SEQPO6Q87JERB.dex.flock (deleted)
  • /data/data/####/YLX2HLL98L87DB29F26WPG5G5NWZZ8A8.dex
  • /data/data/####/YLX2HLL98L87DB29F26WPG5G5NWZZ8A8.dex.flock (deleted)
  • /data/data/####/ZE2JMUUUXAPCM0NQKFJLY16PIWTS8LN1.dex
  • /data/data/####/ZE2JMUUUXAPCM0NQKFJLY16PIWTS8LN1.dex.flock (deleted)
  • /data/data/####/ZXNM87FUBXSP9CLEEH4VLD9B3SURAT9D.dex
  • /data/data/####/ZXNM87FUBXSP9CLEEH4VLD9B3SURAT9D.dex.flock (deleted)
  • /data/data/####/empty_classes.dex
  • /data/data/####/empty_classes.zip
  • /data/data/####/kEBNkThiAQKCPOYZPLCIMwAphzAFWV4T.dex
  • /data/data/####/kEBNkThiAQKCPOYZPLCIMwAphzAFWV4T.dex.flock
  • /data/data/####/proc_auxv
  • /data/data/####/sealeh.bdc
  • /data/data/####/vrY77wJBorN042y9dxwZGyNHBH1hpwsI.dex
  • /data/data/####/vrY77wJBorN042y9dxwZGyNHBH1hpwsI.dex.flock
  • /data/data/####/zNLTJ2PPuZfGkKLydctqVjafRuhkEHQX.dex
  • /data/data/####/zNLTJ2PPuZfGkKLydctqVjafRuhkEHQX.dex.flock
Miscellaneous:
Executes the following shell scripts:
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/0831QS3WUC1QBR491ABNFVIV2YLR1ONG.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/1AKYTBA2DI034OZS15W7I80KMQJHA9WG.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/2HR88H82K9E6HXJ2CK55PNWYPCFTF03X.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/2RCSO613GD5POXE1WILNUG1UPY04BUBT.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/30YO6CYLMCRQOORTL6LF0QI2CLMQB385.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/34TL57201U66DQ7UL7643163E3PX07OI.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/43JSN3ZRMZMXBTOVL0CE7UJQ3X29DUWM.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/4KRWJI3OU1JXBHLY3J7V4446KNF8E6P9.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/4PB9NHFMJHG3PX4YIZEOXJJJ1QRJ8OHI.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/4T2E60R1IZ7VIVSFM8358QRGJKEM90TF.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/4XY2YKVDM7V3EVK7U4B5SYROF4Q2TK9F.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/5841KWK8VOFMO25KE9170NWRCEN2IR93.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/6EPHUXIUI1NJ8XRYKB8SZW68RYU4ZGFA.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/78T5DRI416Q6L23UPRY47D6JMB51SF86.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/7F23QTARDS28EOWD622E3BZ9NEQNX540.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/7G6S3DW474AHE6H63BMD4YAIO8PVCF2M.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/89R4KD9O99B4R7OZW662AI7ZBZJMDAPR.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/98KGDSUZ1F35CIE68NC8QI35HOZ29VFY.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/9QSDHME9MI4XCCT8TRRJFFW4C4OFEJ2K.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/9SQ7F03LF0LXGCIHZV48WUVT0JEWMZIO.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/9VX4AT5KDNQNFAZOCBI9RN7T1A018NZB.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/ABTA6NJMFF12T9Y1UO840SPL1TH87KJH.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/BAP5WT1RCZ0544Q5RMP7QNT5V8I5PA9E.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/CJV2ZNLIXAFAQ4VL4N9K53RHIGRJ4VGX.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/CPJ0C9DCXPB8ZN8VC6AY2IB7BR3MLQLB.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/CRBBGN5UOMQWNL9LZQ7ZHP6W4321OQ6L.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/D2SHLM2D26SLKWTWHZ7RFV8840K7UNAC.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/D8WD4K4W7CFASQD86PLJOBW3S2VM6VP3.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/DDKWTWDP5OQUJOE5BE7RQ7PNIX9NM3MX.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/DI4IP32QXIKJ0CRK51CV280KEIBT65KW.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/DOMZFWJPF4HXW0U5RZO0KEJLWB682BY8.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/DW4J80A32RWNVDGM9G6D2GOIBP84XS5E.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/E19LEPRKE8GELR7FTOHDFBGUMH4RIO0B.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/E4BAHOG1P4V0MN0DS6AKUMPWAMSZF23F.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/F22RAA2Y9QDSIGRIW3RHETUX6O5CCH3D.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/FSMSN54GN4A1YI5EZF690EAIWGDJGJEM.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/HK0GHK2VHF3PWUMEKRW4MI3LPW7QXZRI.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/HQ8DTUA9IQCXW8TKHVRVZF0G8WSF2ZEG.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/I1NGOH8MOH26XDFISOTP1F8UPCNTZKZ5.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/I538G9C68LA6PPNQCKPHPJWQDSZ5B8F1.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/I9BSKDGI49Q6D5FM4CHLP7W2XGZ9RS3T.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/IID96HQYQXN7SL3ECFWGRO2CV6207KVY.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/IRTNQGFRABXSTLKTQ21GR1D9JBGIVE5T.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/IZTJE4ZNANDWHLGDYAH0BPDXR7KAV6TD.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/JSE8QO6PE8RQGSB1TULF8IUQCTIINNWP.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/JZUY7UJNRM4OT20RDW9TS1ZDGZN1O5W3.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/KF3W7VJVUZ6P3HGJ5WWUZINUZTMPPEOI.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/KFXEIREWY7OORJHSMIVFBDI03ALNT6P7.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/L14TS3OH3A8MWAMJGOGWXHPN5C0H73YY.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/L1W0X0DX5WA67GIHVMJ3ANHBUHPZ2VIP.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/LAFVFLWA7OWK3OT0ZDCM13WX49FVIX24.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/MFTVACJZQBDKT1OXEUTOF1D9NFSUFQLL.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/N2U3AE2MLUXWM4ZM4JBT2HU92WDW0L3X.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/NHOVIX9MIP49VK5M5FVTNBQT7VT8OB08.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/NW5HXF6S9QI6D27UP3UOVTMJEVDDGJK6.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/O5Q2MC3DAFFV6VOFMW75KQR070QALCHV.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/OGRZ43SKWVT12R9O21I2H2O65WW2T6HW.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/P32P8N3SO7URLYRGVXLJLLOR9HNYA5UI.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/PMOUH3E6H6K7SGRW9XO3U40W2IVP210K.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/RII9IQCHGDI11RQC3683C6USTJEQ3ENG.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/SD6A20NTUJ33A7C7ICN58AR8B8IAXOH3.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/T1W2NH4X7PAB001YIJ0CO8R4BRE8IPOL.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/T4UN78ZX7OPX8KETFBKWWYVLC3UK6B64.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/TLKWX85THK6EB8YX327RYZ1VI55FYNQH.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/U9HGD9V8J49KSEL7QH7QBTDFWQXPAHUR.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/UV5EQBN2JJ5I1HE1Y0O4O8X5P1987CZ5.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/VUOT9AHNXANFQU8BP9QEICXV2502O9GA.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/W9VKWXH81TFONVOB0YQYQIJRJZVM1I1Z.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/WFRWZBVB27Y5Z18RHC8UFQVUVTITXICA.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/Y2XXU1UQMTVRKX7U8RG0N0A472EG3OBA.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/Y31N9JPOH32TFZICGHCMVPT9NOD56MNC.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/YEX702LU8Y38L1QZBWLPPD01OCV1V296.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/YGFA9WCDHSJ0UVWPS66SEQPO6Q87JERB.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/YLX2HLL98L87DB29F26WPG5G5NWZZ8A8.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/ZE2JMUUUXAPCM0NQKFJLY16PIWTS8LN1.dex
  • chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>/ZXNM87FUBXSP9CLEEH4VLD9B3SURAT9D.dex
  • getprop ro.dalvik.vm.isa.arm
  • getprop ro.dalvik.vm.isa.arm64
  • rm -rf /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes
  • rm /data/user/0/<Package>/app_payload_lib/<Package>/*.dex
  • rm /data/user/0/<Package>/app_payload_lib/<Package>/0831QS3WUC1QBR491ABNFVIV2YLR1ONG.dex /data/user/0/<Package>/app_payload_lib/<Package>/7F23QTARDS28EOWD622E3BZ9NEQNX540.dex /data/user/0/<Package>/app_payload_lib/<Package>/CRBBGN5UOMQWNL9LZQ7ZHP6W4321OQ6L.dex /data/user/0/<Package>/app_payload_lib/<Package>/DW4J80A32RWNVDGM9G6D2GOIBP84XS5E.dex /data/user/0/<Package>/app_payload_lib/<Package>/P32P8N3SO7URLYRGVXLJLLOR9HNYA5UI.dex /data/user/0/<Package>/app_payload_lib/<Package>/Y31N9JPOH32TFZICGHCMVPT9NOD56MNC.dex
  • rm /data/user/0/<Package>/app_payload_lib/<Package>/1AKYTBA2DI034OZS15W7I80KMQJHA9WG.dex /data/user/0/<Package>/app_payload_lib/<Package>/9SQ7F03LF0LXGCIHZV48WUVT0JEWMZIO.dex /data/user/0/<Package>/app_payload_lib/<Package>/CPJ0C9DCXPB8ZN8VC6AY2IB7BR3MLQLB.dex /data/user/0/<Package>/app_payload_lib/<Package>/N2U3AE2MLUXWM4ZM4JBT2HU92WDW0L3X.dex /data/user/0/<Package>/app_payload_lib/<Package>/NW5HXF6S9QI6D27UP3UOVTMJEVDDGJK6.dex /data/user/0/<Package>/app_payload_lib/<Package>/TLKWX85THK6EB8YX327RYZ1VI55FYNQH.dex
  • rm /data/user/0/<Package>/app_payload_lib/<Package>/2HR88H82K9E6HXJ2CK55PNWYPCFTF03X.dex /data/user/0/<Package>/app_payload_lib/<Package>/D2SHLM2D26SLKWTWHZ7RFV8840K7UNAC.dex /data/user/0/<Package>/app_payload_lib/<Package>/IUHXQP2MAXFRSTN203G0F8EW7UI8RK7Q.dex /data/user/0/<Package>/app_payload_lib/<Package>/KF3W7VJVUZ6P3HGJ5WWUZINUZTMPPEOI.dex /data/user/0/<Package>/app_payload_lib/<Package>/O5Q2MC3DAFFV6VOFMW75KQR070QALCHV.dex /data/user/0/<Package>/app_payload_lib/<Package>/ZXNM87FUBXSP9CLEEH4VLD9B3SURAT9D.dex
  • rm /data/user/0/<Package>/app_payload_lib/<Package>/2RCSO613GD5POXE1WILNUG1UPY04BUBT.dex /data/user/0/<Package>/app_payload_lib/<Package>/9VX4AT5KDNQNFAZOCBI9RN7T1A018NZB.dex /data/user/0/<Package>/app_payload_lib/<Package>/KFXEIREWY7OORJHSMIVFBDI03ALNT6P7.dex /data/user/0/<Package>/app_payload_lib/<Package>/OGRZ43SKWVT12R9O21I2H2O65WW2T6HW.dex /data/user/0/<Package>/app_payload_lib/<Package>/ROQ7VC4BGSEZAAJMVPPH95EIMUQTK98U.dex /data/user/0/<Package>/app_payload_lib/<Package>/YLX2HLL98L87DB29F26WPG5G5NWZZ8A8.dex
  • rm /data/user/0/<Package>/app_payload_lib/<Package>/30YO6CYLMCRQOORTL6LF0QI2CLMQB385.dex /data/user/0/<Package>/app_payload_lib/<Package>/98KGDSUZ1F35CIE68NC8QI35HOZ29VFY.dex /data/user/0/<Package>/app_payload_lib/<Package>/L146NDK9VLANWSTAA3G00KRSF3M4ULO1.dex /data/user/0/<Package>/app_payload_lib/<Package>/OWFKZEF0M1RXZHHY37BVGO4Q83RWQ2DP.dex /data/user/0/<Package>/app_payload_lib/<Package>/U9HGD9V8J49KSEL7QH7QBTDFWQXPAHUR.dex /data/user/0/<Package>/app_payload_lib/<Package>/YGFA9WCDHSJ0UVWPS66SEQPO6Q87JERB.dex
  • rm /data/user/0/<Package>/app_payload_lib/<Package>/32Y63QOH7DTRI0WSMHM24ST7F6D87P9S.dex /data/user/0/<Package>/app_payload_lib/<Package>/CJV2ZNLIXAFAQ4VL4N9K53RHIGRJ4VGX.dex
  • rm /data/user/0/<Package>/app_payload_lib/<Package>/34TL57201U66DQ7UL7643163E3PX07OI.dex /data/user/0/<Package>/app_payload_lib/<Package>/89R4KD9O99B4R7OZW662AI7ZBZJMDAPR.dex /data/user/0/<Package>/app_payload_lib/<Package>/DOMZFWJPF4HXW0U5RZO0KEJLWB682BY8.dex /data/user/0/<Package>/app_payload_lib/<Package>/L1W0X0DX5WA67GIHVMJ3ANHBUHPZ2VIP.dex /data/user/0/<Package>/app_payload_lib/<Package>/PMOUH3E6H6K7SGRW9XO3U40W2IVP210K.dex /data/user/0/<Package>/app_payload_lib/<Package>/ZE2JMUUUXAPCM0NQKFJLY16PIWTS8LN1.dex
  • rm /data/user/0/<Package>/app_payload_lib/<Package>/3RUYNYBJF64O1IWZ5899KP3PWRR9WLSJ.dex /data/user/0/<Package>/app_payload_lib/<Package>/5841KWK8VOFMO25KE9170NWRCEN2IR93.dex /data/user/0/<Package>/app_payload_lib/<Package>/5M3JVX86Z440B49GJ1GMD3WHSPRJU9QK.dex /data/user/0/<Package>/app_payload_lib/<Package>/7G6S3DW474AHE6H63BMD4YAIO8PVCF2M.dex /data/user/0/<Package>/app_payload_lib/<Package>/UV5EQBN2JJ5I1HE1Y0O4O8X5P1987CZ5.dex /data/user/0/<Package>/app_payload_lib/<Package>/VUOT9AHNXANFQU8BP9QEICXV2502O9GA.dex
  • rm /data/user/0/<Package>/app_payload_lib/<Package>/43JSN3ZRMZMXBTOVL0CE7UJQ3X29DUWM.dex /data/user/0/<Package>/app_payload_lib/<Package>/HQ8DTUA9IQCXW8TKHVRVZF0G8WSF2ZEG.dex /data/user/0/<Package>/app_payload_lib/<Package>/I1NGOH8MOH26XDFISOTP1F8UPCNTZKZ5.dex /data/user/0/<Package>/app_payload_lib/<Package>/IID96HQYQXN7SL3ECFWGRO2CV6207KVY.dex /data/user/0/<Package>/app_payload_lib/<Package>/IZTJE4ZNANDWHLGDYAH0BPDXR7KAV6TD.dex /data/user/0/<Package>/app_payload_lib/<Package>/SD6A20NTUJ33A7C7ICN58AR8B8IAXOH3.dex
  • rm /data/user/0/<Package>/app_payload_lib/<Package>/4KRWJI3OU1JXBHLY3J7V4446KNF8E6P9.dex /data/user/0/<Package>/app_payload_lib/<Package>/BAP5WT1RCZ0544Q5RMP7QNT5V8I5PA9E.dex /data/user/0/<Package>/app_payload_lib/<Package>/E4BAHOG1P4V0MN0DS6AKUMPWAMSZF23F.dex /data/user/0/<Package>/app_payload_lib/<Package>/HK0GHK2VHF3PWUMEKRW4MI3LPW7QXZRI.dex /data/user/0/<Package>/app_payload_lib/<Package>/JSE8QO6PE8RQGSB1TULF8IUQCTIINNWP.dex /data/user/0/<Package>/app_payload_lib/<Package>/T1W2NH4X7PAB001YIJ0CO8R4BRE8IPOL.dex
  • rm /data/user/0/<Package>/app_payload_lib/<Package>/4PB9NHFMJHG3PX4YIZEOXJJJ1QRJ8OHI.dex /data/user/0/<Package>/app_payload_lib/<Package>/E19LEPRKE8GELR7FTOHDFBGUMH4RIO0B.dex /data/user/0/<Package>/app_payload_lib/<Package>/L14TS3OH3A8MWAMJGOGWXHPN5C0H73YY.dex /data/user/0/<Package>/app_payload_lib/<Package>/NHOVIX9MIP49VK5M5FVTNBQT7VT8OB08.dex /data/user/0/<Package>/app_payload_lib/<Package>/RII9IQCHGDI11RQC3683C6USTJEQ3ENG.dex /data/user/0/<Package>/app_payload_lib/<Package>/YEX702LU8Y38L1QZBWLPPD01OCV1V296.dex
  • rm /data/user/0/<Package>/app_payload_lib/<Package>/4T2E60R1IZ7VIVSFM8358QRGJKEM90TF.dex /data/user/0/<Package>/app_payload_lib/<Package>/I538G9C68LA6PPNQCKPHPJWQDSZ5B8F1.dex /data/user/0/<Package>/app_payload_lib/<Package>/IRTNQGFRABXSTLKTQ21GR1D9JBGIVE5T.dex /data/user/0/<Package>/app_payload_lib/<Package>/SFV87Z3ZM36T7PO7DCG63MN6FHE9DY4I.dex /data/user/0/<Package>/app_payload_lib/<Package>/TIGXHYYHY2O5WOTGD7RBRF04WSSNEFUO.dex /data/user/0/<Package>/app_payload_lib/<Package>/Y2XXU1UQMTVRKX7U8RG0N0A472EG3OBA.dex
  • rm /data/user/0/<Package>/app_payload_lib/<Package>/78T5DRI416Q6L23UPRY47D6JMB51SF86.dex /data/user/0/<Package>/app_payload_lib/<Package>/DDKWTWDP5OQUJOE5BE7RQ7PNIX9NM3MX.dex /data/user/0/<Package>/app_payload_lib/<Package>/DI4IP32QXIKJ0CRK51CV280KEIBT65KW.dex /data/user/0/<Package>/app_payload_lib/<Package>/F22RAA2Y9QDSIGRIW3RHETUX6O5CCH3D.dex /data/user/0/<Package>/app_payload_lib/<Package>/T4UN78ZX7OPX8KETFBKWWYVLC3UK6B64.dex /data/user/0/<Package>/app_payload_lib/<Package>/W9VKWXH81TFONVOB0YQYQIJRJZVM1I1Z.dex
  • rm /data/user/0/<Package>/app_payload_lib/<Package>/ABTA6NJMFF12T9Y1UO840SPL1TH87KJH.dex /data/user/0/<Package>/app_payload_lib/<Package>/B20THILBLMZFIMSZ9TA6I8HNQ1KEKXSU.dex /data/user/0/<Package>/app_payload_lib/<Package>/D8WD4K4W7CFASQD86PLJOBW3S2VM6VP3.dex /data/user/0/<Package>/app_payload_lib/<Package>/FSMSN54GN4A1YI5EZF690EAIWGDJGJEM.dex /data/user/0/<Package>/app_payload_lib/<Package>/JZUY7UJNRM4OT20RDW9TS1ZDGZN1O5W3.dex /data/user/0/<Package>/app_payload_lib/<Package>/LAFVFLWA7OWK3OT0ZDCM13WX49FVIX24.dex
  • sh -c rm /data/user/0/<Package>/app_payload_lib/<Package>/*.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/0831QS3WUC1QBR491ABNFVIV2YLR1ONG.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/1AKYTBA2DI034OZS15W7I80KMQJHA9WG.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/2HR88H82K9E6HXJ2CK55PNWYPCFTF03X.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/2RCSO613GD5POXE1WILNUG1UPY04BUBT.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/30YO6CYLMCRQOORTL6LF0QI2CLMQB385.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/34TL57201U66DQ7UL7643163E3PX07OI.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/43JSN3ZRMZMXBTOVL0CE7UJQ3X29DUWM.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/4KRWJI3OU1JXBHLY3J7V4446KNF8E6P9.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/4PB9NHFMJHG3PX4YIZEOXJJJ1QRJ8OHI.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/5841KWK8VOFMO25KE9170NWRCEN2IR93.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/5M3JVX86Z440B49GJ1GMD3WHSPRJU9QK.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/6EPHUXIUI1NJ8XRYKB8SZW68RYU4ZGFA.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/78T5DRI416Q6L23UPRY47D6JMB51SF86.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/7F23QTARDS28EOWD622E3BZ9NEQNX540.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/7G6S3DW474AHE6H63BMD4YAIO8PVCF2M.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/89R4KD9O99B4R7OZW662AI7ZBZJMDAPR.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/98KGDSUZ1F35CIE68NC8QI35HOZ29VFY.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/9QSDHME9MI4XCCT8TRRJFFW4C4OFEJ2K.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/9SQ7F03LF0LXGCIHZV48WUVT0JEWMZIO.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/9VX4AT5KDNQNFAZOCBI9RN7T1A018NZB.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/CJV2ZNLIXAFAQ4VL4N9K53RHIGRJ4VGX.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/CPJ0C9DCXPB8ZN8VC6AY2IB7BR3MLQLB.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/CRBBGN5UOMQWNL9LZQ7ZHP6W4321OQ6L.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/D8WD4K4W7CFASQD86PLJOBW3S2VM6VP3.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/DDKWTWDP5OQUJOE5BE7RQ7PNIX9NM3MX.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/DI4IP32QXIKJ0CRK51CV280KEIBT65KW.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/DOMZFWJPF4HXW0U5RZO0KEJLWB682BY8.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/DW4J80A32RWNVDGM9G6D2GOIBP84XS5E.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/E19LEPRKE8GELR7FTOHDFBGUMH4RIO0B.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/E4BAHOG1P4V0MN0DS6AKUMPWAMSZF23F.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/F22RAA2Y9QDSIGRIW3RHETUX6O5CCH3D.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/FSMSN54GN4A1YI5EZF690EAIWGDJGJEM.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/HK0GHK2VHF3PWUMEKRW4MI3LPW7QXZRI.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/HQ8DTUA9IQCXW8TKHVRVZF0G8WSF2ZEG.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/I1NGOH8MOH26XDFISOTP1F8UPCNTZKZ5.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/I538G9C68LA6PPNQCKPHPJWQDSZ5B8F1.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/I9BSKDGI49Q6D5FM4CHLP7W2XGZ9RS3T.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/IID96HQYQXN7SL3ECFWGRO2CV6207KVY.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/IRTNQGFRABXSTLKTQ21GR1D9JBGIVE5T.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/JSE8QO6PE8RQGSB1TULF8IUQCTIINNWP.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/KF3W7VJVUZ6P3HGJ5WWUZINUZTMPPEOI.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/KFXEIREWY7OORJHSMIVFBDI03ALNT6P7.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/L14TS3OH3A8MWAMJGOGWXHPN5C0H73YY.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/MFTVACJZQBDKT1OXEUTOF1D9NFSUFQLL.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/N2U3AE2MLUXWM4ZM4JBT2HU92WDW0L3X.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/NHOVIX9MIP49VK5M5FVTNBQT7VT8OB08.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/NW5HXF6S9QI6D27UP3UOVTMJEVDDGJK6.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/O5Q2MC3DAFFV6VOFMW75KQR070QALCHV.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/OGRZ43SKWVT12R9O21I2H2O65WW2T6HW.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/P32P8N3SO7URLYRGVXLJLLOR9HNYA5UI.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/PMOUH3E6H6K7SGRW9XO3U40W2IVP210K.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/RII9IQCHGDI11RQC3683C6USTJEQ3ENG.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/T1W2NH4X7PAB001YIJ0CO8R4BRE8IPOL.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/T4UN78ZX7OPX8KETFBKWWYVLC3UK6B64.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/TLKWX85THK6EB8YX327RYZ1VI55FYNQH.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/U9HGD9V8J49KSEL7QH7QBTDFWQXPAHUR.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/UV5EQBN2JJ5I1HE1Y0O4O8X5P1987CZ5.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/VUOT9AHNXANFQU8BP9QEICXV2502O9GA.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/W9VKWXH81TFONVOB0YQYQIJRJZVM1I1Z.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/Y2XXU1UQMTVRKX7U8RG0N0A472EG3OBA.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/Y31N9JPOH32TFZICGHCMVPT9NOD56MNC.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/YEX702LU8Y38L1QZBWLPPD01OCV1V296.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/YGFA9WCDHSJ0UVWPS66SEQPO6Q87JERB.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/YLX2HLL98L87DB29F26WPG5G5NWZZ8A8.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/ZE2JMUUUXAPCM0NQKFJLY16PIWTS8LN1.dex
  • touch -t 20160801.002000 /data/user/0/<Package>/app_payload_lib/<Package>/ZXNM87FUBXSP9CLEEH4VLD9B3SURAT9D.dex
Loads the following dynamic libraries:
  • libcovault-appsec
Uses the following algorithms to decrypt data:
  • AES
  • AES-ECB-PKCS5Padding
Gets information about network.
Gets information about installed apps.
Requests the system alert window permission.

Recommandations pour le traitement

Android

  1. Si votre appareil mobile fonctionne correctement, veuillez télécharger et installer sur votre appareil mobile le produit antivirus gratuit Dr.Web для Android Light. Lancez un scan complet et suivez les recommandations sur la neutralisation des menaces détectées.
  2. Si l'appareil mobile est bloqué par le Trojan de la famille Android.Locker (un message sur une violation grave de la loi ou une demande de rançon s’affichent sur l'écran de l'appareil mobile), procédez comme suit :
    • démarrez votre Smartphone ou votre tablette en mode sans échec (si vous ne savez pas comment faire, consultez la documentation de l'appareil mobile ou contactez le fabricant) ;
    • puis téléchargez et installez sur votre appareil contaminé le produit antivirus gratuit Dr.Web для Android Light et lancez un scan complet puis suivez les recommandations sur la neutralisation des menaces détectées ;
    • Débranchez votre appareil et rebranchez-le.

En savoir plus sur Dr.Web pour Android

Free trial

14 days

Download now
Get it on Google Play