Technical information
- Android.SpyMax.291
- Android.SpyMax.45.origin
- UDP(DNS) <Google DNS>
- TCP(TLS/1.0) rr18---####.g####.com:443
- TCP(TLS/1.0) sqs.ap-nort####.amazo####.com:443
- TCP(TLS/1.0) connect####.gst####.com:443
- TCP(TLS/1.0) 74.1####.205.100:443
- TCP(TLS/1.0) p####.google####.com:443
- TCP(TLS/1.0) rr2---s####.g####.com:443
- TCP(TLS/1.2) 1####.250.150.100:443
- TCP(TLS/1.2) p####.google####.com:443
- UDP rr2---s####.g####.com:443
- UDP p####.google####.com:443
- and####.google####.com
- connect####.gst####.com
- m####.go####.com
- md####.google####.com
- p####.google####.com
- rr18---####.g####.com
- rr2---s####.g####.com
- rr9---s####.g####.com
- sqs.ap-nort####.amazo####.com
- www.google####.com
- sqs.ap-nort####.amazo####.com:443/664144478517/report_queue_svc
- /data/data/####/.anywhere_asthma_contract.meta
- /data/data/####/150035
- /data/data/####/19
- /data/data/####/1FL07HGDXRZUUR51I8Z89GSCLWTZMGI.dex (deleted)
- /data/data/####/1FL07HGDXRZUUR51I8Z89GSCLWTZMGI.dex.flock (deleted)
- /data/data/####/1FL07HGDXRZUUR51I8Z89GSCLWTZMGI.zip
- /data/data/####/2023-12-09PM122523.rt
- /data/data/####/2023-12-09PM122523.str
- /data/data/####/2023-12-09PM122529.so.rt
- /data/data/####/2023-12-09PM122536.so.rt
- /data/data/####/2023-12-09PM122541.so.rt
- /data/data/####/2023-12-09PM122547.so.rt
- /data/data/####/2023-12-09PM122556.so.rt
- /data/data/####/2023-12-09PM122601.so.rt
- /data/data/####/2023-12-09PM122606.so.rt
- /data/data/####/2023-12-09PM122612.so.rt
- /data/data/####/2023-12-09PM122618.so.rt
- /data/data/####/2023-12-09PM122632.so.rt
- /data/data/####/2023-12-09PM122644.so.rt
- /data/data/####/2023-12-09PM122656.so.rt
- /data/data/####/2023-12-09PM122708.so.rt
- /data/data/####/2023-12-09PM122720.so.rt
- /data/data/####/2023-12-09PM122734.so.rt
- /data/data/####/250035
- /data/data/####/29
- /data/data/####/5MI6OOPGIXRDRX9JRI8QH3D76N2YYR2.dex (deleted)
- /data/data/####/5MI6OOPGIXRDRX9JRI8QH3D76N2YYR2.dex.flock (deleted)
- /data/data/####/5MI6OOPGIXRDRX9JRI8QH3D76N2YYR2.zip
- /data/data/####/5QIMO41G6LBPRTTJRUCYD35BIZEUANM.dex (deleted)
- /data/data/####/5QIMO41G6LBPRTTJRUCYD35BIZEUANM.dex.flock (deleted)
- /data/data/####/5QIMO41G6LBPRTTJRUCYD35BIZEUANM.zip
- /data/data/####/811DF3GBLSYCEGK6QD31WYK6TAT5T6L.dex (deleted)
- /data/data/####/811DF3GBLSYCEGK6QD31WYK6TAT5T6L.dex.flock (deleted)
- /data/data/####/811DF3GBLSYCEGK6QD31WYK6TAT5T6L.zip
- /data/data/####/B532PJANB5P8K1NR0AXEBQ627YN182G.dex (deleted)
- /data/data/####/B532PJANB5P8K1NR0AXEBQ627YN182G.dex.flock (deleted)
- /data/data/####/B532PJANB5P8K1NR0AXEBQ627YN182G.zip
- /data/data/####/C2S7US3SOQU11YWG1RY3CRFJ4JKMLJ9.dex
- /data/data/####/C2S7US3SOQU11YWG1RY3CRFJ4JKMLJ9.dex (deleted)
- /data/data/####/C2S7US3SOQU11YWG1RY3CRFJ4JKMLJ9.dex.flock (deleted)
- /data/data/####/C2S7US3SOQU11YWG1RY3CRFJ4JKMLJ9.zip
- /data/data/####/CAPCA9IQC4NB4YQJP0HAH1T2XQKZXR6.dex (deleted)
- /data/data/####/CAPCA9IQC4NB4YQJP0HAH1T2XQKZXR6.dex.flock (deleted)
- /data/data/####/CAPCA9IQC4NB4YQJP0HAH1T2XQKZXR6.zip
- /data/data/####/CMSNA8FSCEETLUG0132B8773GVWIXV9.dex (deleted)
- /data/data/####/CMSNA8FSCEETLUG0132B8773GVWIXV9.dex.flock (deleted)
- /data/data/####/CMSNA8FSCEETLUG0132B8773GVWIXV9.zip
- /data/data/####/DJHCFH8X5ZZM2RPP2KJ0T8GKXGTNAC2.dex (deleted)
- /data/data/####/DJHCFH8X5ZZM2RPP2KJ0T8GKXGTNAC2.dex.flock (deleted)
- /data/data/####/DJHCFH8X5ZZM2RPP2KJ0T8GKXGTNAC2.zip
- /data/data/####/IRJFX5ALJ6OQ4AIWSZ1NY8YCVCN7F83.dex (deleted)
- /data/data/####/IRJFX5ALJ6OQ4AIWSZ1NY8YCVCN7F83.dex.flock (deleted)
- /data/data/####/IRJFX5ALJ6OQ4AIWSZ1NY8YCVCN7F83.zip
- /data/data/####/JO84IE3QCR9JL7BLTGICJ97TCXKSSPC.dex (deleted)
- /data/data/####/JO84IE3QCR9JL7BLTGICJ97TCXKSSPC.dex.flock (deleted)
- /data/data/####/JO84IE3QCR9JL7BLTGICJ97TCXKSSPC.zip
- /data/data/####/M8U9CAXI2OKVB8UQJTWPE19PQLUONLR.dex (deleted)
- /data/data/####/M8U9CAXI2OKVB8UQJTWPE19PQLUONLR.dex.flock (deleted)
- /data/data/####/M8U9CAXI2OKVB8UQJTWPE19PQLUONLR.zip
- /data/data/####/O2PGYDIM8WZR0IEZ1WXM151MXA4FTJ6.dex (deleted)
- /data/data/####/O2PGYDIM8WZR0IEZ1WXM151MXA4FTJ6.dex.flock (deleted)
- /data/data/####/O2PGYDIM8WZR0IEZ1WXM151MXA4FTJ6.zip
- /data/data/####/OA4RY0VSWYM1HEWO1RQBSVR7WN8Q5JH.dex (deleted)
- /data/data/####/OA4RY0VSWYM1HEWO1RQBSVR7WN8Q5JH.dex.flock (deleted)
- /data/data/####/OA4RY0VSWYM1HEWO1RQBSVR7WN8Q5JH.zip
- /data/data/####/T26I0CLGM13HF9XVRQOYDFL72726IZE.dex (deleted)
- /data/data/####/T26I0CLGM13HF9XVRQOYDFL72726IZE.dex.flock (deleted)
- /data/data/####/T26I0CLGM13HF9XVRQOYDFL72726IZE.zip
- /data/data/####/WXPTRB0V18Q4IG4IA9F1WUK2DYHXL2D.dex (deleted)
- /data/data/####/WXPTRB0V18Q4IG4IA9F1WUK2DYHXL2D.dex.flock (deleted)
- /data/data/####/WXPTRB0V18Q4IG4IA9F1WUK2DYHXL2D.zip
- /data/data/####/Web Data
- /data/data/####/Web Data-journal
- /data/data/####/WebViewChromiumPrefs.xml
- /data/data/####/YYMVY41V1T7A0KCMXUY0KLFJE5C7X1ST.dex
- /data/data/####/YYMVY41V1T7A0KCMXUY0KLFJE5C7X1ST.dex.flock (deleted)
- /data/data/####/anywhere.asthma.contract.xml
- /data/data/####/anywhere.asthma.contract.xml.bak
- /data/data/####/anywhere.asthma.contract_preferences.xml
- /data/data/####/empty_classes.dex
- /data/data/####/empty_classes.zip
- /data/data/####/lastReportSendTimeFile
- /data/data/####/metrics_guid
- /data/data/####/proc_auxv
- /data/data/####/sealed1.obk
- /data/data/####/sealeh.bdc
- /data/data/####/stat1
- /data/data/####/webview_data.lock
- /data/data/####/working
- /data/media/####/log-2023-12-09.txt
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/1FL07HGDXRZUUR51I8Z89GSCLWTZMGI.zip.cur.prof
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/5MI6OOPGIXRDRX9JRI8QH3D76N2YYR2.zip.cur.prof
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/5QIMO41G6LBPRTTJRUCYD35BIZEUANM.zip.cur.prof
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/811DF3GBLSYCEGK6QD31WYK6TAT5T6L.zip.cur.prof
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/B532PJANB5P8K1NR0AXEBQ627YN182G.zip.cur.prof
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/C2S7US3SOQU11YWG1RY3CRFJ4JKMLJ9.zip.cur.prof
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/CAPCA9IQC4NB4YQJP0HAH1T2XQKZXR6.zip.cur.prof
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/CMSNA8FSCEETLUG0132B8773GVWIXV9.zip.cur.prof
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/IRJFX5ALJ6OQ4AIWSZ1NY8YCVCN7F83.zip.cur.prof
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/JO84IE3QCR9JL7BLTGICJ97TCXKSSPC.zip.cur.prof
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/M8U9CAXI2OKVB8UQJTWPE19PQLUONLR.zip.cur.prof
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/O2PGYDIM8WZR0IEZ1WXM151MXA4FTJ6.zip.cur.prof
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/OA4RY0VSWYM1HEWO1RQBSVR7WN8Q5JH.zip.cur.prof
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/WXPTRB0V18Q4IG4IA9F1WUK2DYHXL2D.zip.cur.prof
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/1FL07HGDXRZUUR51I8Z89GSCLWTZMGI.odex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/1FL07HGDXRZUUR51I8Z89GSCLWTZMGI.vdex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/5MI6OOPGIXRDRX9JRI8QH3D76N2YYR2.odex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/5MI6OOPGIXRDRX9JRI8QH3D76N2YYR2.vdex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/5QIMO41G6LBPRTTJRUCYD35BIZEUANM.odex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/5QIMO41G6LBPRTTJRUCYD35BIZEUANM.vdex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/811DF3GBLSYCEGK6QD31WYK6TAT5T6L.odex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/811DF3GBLSYCEGK6QD31WYK6TAT5T6L.vdex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/B532PJANB5P8K1NR0AXEBQ627YN182G.odex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/B532PJANB5P8K1NR0AXEBQ627YN182G.vdex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/C2S7US3SOQU11YWG1RY3CRFJ4JKMLJ9.odex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/C2S7US3SOQU11YWG1RY3CRFJ4JKMLJ9.vdex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/CAPCA9IQC4NB4YQJP0HAH1T2XQKZXR6.odex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/CAPCA9IQC4NB4YQJP0HAH1T2XQKZXR6.vdex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/CMSNA8FSCEETLUG0132B8773GVWIXV9.odex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/CMSNA8FSCEETLUG0132B8773GVWIXV9.vdex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/DJHCFH8X5ZZM2RPP2KJ0T8GKXGTNAC2.odex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/IRJFX5ALJ6OQ4AIWSZ1NY8YCVCN7F83.odex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/IRJFX5ALJ6OQ4AIWSZ1NY8YCVCN7F83.vdex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/JO84IE3QCR9JL7BLTGICJ97TCXKSSPC.odex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/JO84IE3QCR9JL7BLTGICJ97TCXKSSPC.vdex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/M8U9CAXI2OKVB8UQJTWPE19PQLUONLR.odex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/M8U9CAXI2OKVB8UQJTWPE19PQLUONLR.vdex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/O2PGYDIM8WZR0IEZ1WXM151MXA4FTJ6.odex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/O2PGYDIM8WZR0IEZ1WXM151MXA4FTJ6.vdex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/OA4RY0VSWYM1HEWO1RQBSVR7WN8Q5JH.odex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/OA4RY0VSWYM1HEWO1RQBSVR7WN8Q5JH.vdex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/T26I0CLGM13HF9XVRQOYDFL72726IZE.odex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/T26I0CLGM13HF9XVRQOYDFL72726IZE.vdex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/WXPTRB0V18Q4IG4IA9F1WUK2DYHXL2D.odex
- chmod 777 /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/oat/arm/WXPTRB0V18Q4IG4IA9F1WUK2DYHXL2D.vdex
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.dex /data/user/0/<Package>/app_payload_lib/<Package>/YYMVY41V1T7A0KCMXUY0KLFJE5C7X1ST.dex
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/1FL07HGDXRZUUR51I8Z89GSCLWTZMGI.zip
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/5MI6OOPGIXRDRX9JRI8QH3D76N2YYR2.zip
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/5QIMO41G6LBPRTTJRUCYD35BIZEUANM.zip
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/811DF3GBLSYCEGK6QD31WYK6TAT5T6L.zip
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/B532PJANB5P8K1NR0AXEBQ627YN182G.zip
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/C2S7US3SOQU11YWG1RY3CRFJ4JKMLJ9.zip
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/CAPCA9IQC4NB4YQJP0HAH1T2XQKZXR6.zip
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/CMSNA8FSCEETLUG0132B8773GVWIXV9.zip
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/DJHCFH8X5ZZM2RPP2KJ0T8GKXGTNAC2.zip
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/IRJFX5ALJ6OQ4AIWSZ1NY8YCVCN7F83.zip
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/JO84IE3QCR9JL7BLTGICJ97TCXKSSPC.zip
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/M8U9CAXI2OKVB8UQJTWPE19PQLUONLR.zip
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/O2PGYDIM8WZR0IEZ1WXM151MXA4FTJ6.zip
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/OA4RY0VSWYM1HEWO1RQBSVR7WN8Q5JH.zip
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/T26I0CLGM13HF9XVRQOYDFL72726IZE.zip
- cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/WXPTRB0V18Q4IG4IA9F1WUK2DYHXL2D.zip
- dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/YYMVY41V1T7A0KCMXUY0KLFJE5C7X1ST.dex --oat-file=/data/user/0/<Package>/cache/<Package>/YYMVY41V1T7A0KCMXUY0KLFJE5C7X1ST.dex --compiler-filter=verify-none --instruction-set=x86
- getprop ro.dalvik.vm.isa.arm
- getprop ro.dalvik.vm.isa.arm64
- getprop ro.miui.ui.version.name
- sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/YYMVY41V1T7A0KCMXUY0KLFJE5C7X1ST.dex --oat-file=/data/user/0/<Package>/cache/<Package>/YYMVY41V1T7A0KCMXUY0KLFJE5C7X1ST.dex --compiler-filter=verify-none --instruction-set=x86
- libcovault-appsec