Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.MobiDash.2.origin
Modified file system:
Creates the following files:
- <Package Folder>/app_/bfglib_settings
- <Package Folder>/app_app_apk/onehundredpercenthogoog.dat.jar
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes867068438.zip
- <Package Folder>/databases/DownloadsDB-journal
- <Package Folder>/databases/downloads_db
- <Package Folder>/databases/downloads_db-journal
- <Package Folder>/databases/purchase.db
- <Package Folder>/databases/purchase.db-journal
- <Package Folder>/databases/webview.db
- <Package Folder>/databases/webview.db-shm
- <Package Folder>/databases/webview.db-wal
- <Package Folder>/files/####/PlayerManager.xml
- <Package Folder>/files/####/framework.dat
- <Package Folder>/files/####/gfc1-debug.log
- <Package Folder>/files/####/save1.dat
- <Package Folder>/files/####/save2.dat
- <Package Folder>/files/####/save3.dat
- <Package Folder>/files/####/sound-debug.log
- <Package Folder>/files/.flurryagent.4362a3c6
- <Package Folder>/files/UoDCdBbRf
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/AppStoreGoogle.xml
- <Package Folder>/shared_prefs/com.android.vending.licensing.APK...cy.xml
- <Package Folder>/shared_prefs/com.pms.GFCone.BFG.GFConeBFGActivity.xml
- <Package Folder>/shared_prefs/mat_app_version.xml
- <Package Folder>/shared_prefs/mat_id.xml
- <Package Folder>/shared_prefs/mat_install.xml
- <Package Folder>/shared_prefs/mat_referrer.xml
- <Package Folder>/shared_prefs/multidex.version.xml
Miscellaneous:
Loads the following dynamic libraries:
- UoDCdBbRf
Adds tasks to the system scheduler.
Displays its own windows over windows of other applications.
