Technical information
- Android.Spy.1044.origin
- Android.SpyMax.42.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) 1####.194.73.94:80
- TCP(TLS/1.0) 1####.194.73.94:443
- TCP(TLS/1.0) dogerat####.r####.co:443
- TCP(TLS/1.0) rr9---s####.g####.com:443
- TCP(TLS/1.0) and####.a####.go####.com:443
- TCP(TLS/1.0) rr18---####.g####.com:443
- TCP(TLS/1.0) gmscomp####.google####.com:443
- TCP(TLS/1.0) p####.google####.com:443
- TCP(TLS/1.0) f####.gst####.com:443
- TCP(TLS/1.2) 2####.85.233.99:443
- TCP(TLS/1.2) 1####.194.73.94:443
- TCP(TLS/1.2) 1####.177.14.102:443
- TCP(TLS/1.2) p####.google####.com:443
- UDP p####.google####.com:443
- UDP rr2---s####.g####.com:443
- and####.a####.go####.com
- and####.google####.com
- dogerat####.r####.co
- f####.gst####.com
- gmscomp####.google####.com
- m####.go####.com
- p####.google####.com
- rr18---####.g####.com
- rr2---s####.g####.com
- rr9---s####.g####.com
- www.go####.com
- dogerat####.r####.co:443/uploadText/
- /data/data/####/.font3449-3449-0
- /data/data/####/1fbBaAQyFLS5e3Q8qhXbrCJbXd9Zny3X.dex
- /data/data/####/5joct4UHP5xWyie7j1El99E17W0eSW5p.dex
- /data/data/####/72kJwpjda7VJlYvU42EJnY0O9V7F59Cv.dex
- /data/data/####/7J2QTX96itkmhkOjh8FRndlzQdrMnz04.dex
- /data/data/####/7J2QTX96itkmhkOjh8FRndlzQdrMnz04.dex.flock (deleted)
- /data/data/####/8BcYhGjsz8hhgzITQL5lqcee7fAmL4Bn.dex
- /data/data/####/8eB4qS1TIwF4A3vSnxUlIqHpHglAqxxW.dex
- /data/data/####/9NwceZyjTidg1RuIHsTw57MMAbgD6VUJ.dex
- /data/data/####/9NwceZyjTidg1RuIHsTw57MMAbgD6VUJ.dex.flock (deleted)
- /data/data/####/Aeyi9Ho2rAzAYnKDRT15EdwYtHq2GOe1.dex
- /data/data/####/AxqWGjhzCT2RUxDxHxI9khvyZimaJhPN.dex
- /data/data/####/AxqWGjhzCT2RUxDxHxI9khvyZimaJhPN.dex.flock (deleted)
- /data/data/####/C7hcSqKpQeb4ECyClEucyc4RsrMqzeca.dex
- /data/data/####/KX7dcpXJARNMcKtP12BkwcnyhBRGBdxm.dex
- /data/data/####/M9SZ1UHTSbcAzob5HjyD95ij1ZRJRZec.dex
- /data/data/####/P8lywbaC6UTGR786FTDP2ptM2Bi2wGQS.dex
- /data/data/####/P8lywbaC6UTGR786FTDP2ptM2Bi2wGQS.dex.flock (deleted)
- /data/data/####/PhLe2XTd1UbQceqItTGV17y0SbNV59ZK.dex
- /data/data/####/PpQQkqdu1kYjdZNRIFxhTNh7GmDDUfUb.dex
- /data/data/####/drtvsqDTbI60PIPTbSrus7KM2MIZQZ9t.dex
- /data/data/####/fRBnkl4jpV8nhKGmk0GCUcniCtCMcC3f.dex
- /data/data/####/fpZAQG3UZLQbYryvsRDA3kr5WyrcN3Hg.dex
- /data/data/####/gg09WggAPES53HRW17f8RIMPvdqgmhAR.dex
- /data/data/####/hrNKWBaVLJsJYwu1C6LOsD10SYlURV7V.dex
- /data/data/####/hrNKWBaVLJsJYwu1C6LOsD10SYlURV7V.dex.flock (deleted)
- /data/data/####/i4jlStei6dXI0gb6dur72EqK8Txp1MVN.dex
- /data/data/####/i4jlStei6dXI0gb6dur72EqK8Txp1MVN.dex.flock (deleted)
- /data/data/####/jiFKF5bZ8UVVCNKP3poi6AlVn9O5WGgh.dex
- /data/data/####/jiFKF5bZ8UVVCNKP3poi6AlVn9O5WGgh.dex.flock (deleted)
- /data/data/####/kDj4ncTJkdqzoZjiJUI1lscjQjmXH5Ke.dex
- /data/data/####/kDj4ncTJkdqzoZjiJUI1lscjQjmXH5Ke.dex.flock (deleted)
- /data/data/####/kGceZs037GQ8irXojle18HB6NG19WIj5.dex
- /data/data/####/kGceZs037GQ8irXojle18HB6NG19WIj5.dex.flock (deleted)
- /data/data/####/n6058MBck5AIh5PtjLtfUxnS0ptvUjyU.dex
- /data/data/####/n6058MBck5AIh5PtjLtfUxnS0ptvUjyU.dex.flock (deleted)
- /data/data/####/nJi3yY9rbha7Q4MaBOEXJU2dOiZZ6z2G.dex
- /data/data/####/rRYrxXfFSk5A1m0nqqQIw3RLAxWAPFY4.dex
- /data/data/####/willi.fiend.xml
- /data/data/####/willi.fiend_preferences.xml
- /data/data/####/xaQ2MCgovcU05xvHLkyW4JU4RGQYME1U.dex
- /data/data/####/xn6hXNW3xNdfjvn063MpUN6Egxb6nRld.dex
- /data/data/####/xv77EmYjqE9HQysGY4LA0zzioyU1AF5y.dex
- /data/media/####/log-2023-11-10.txt
- /data/misc/####/primary.prof
- AES
- AES-ECB-PKCS5Padding