4da58ccd0b84f65d4a40969049412668

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2022-Apr-03 00:17:19
TLS Callbacks 1 callback(s) detected.

Plugin Output

Suspicious Strings found in the binary may indicate undesirable behavior: Looks for VMWare presence:
  • VMware
Miscellaneous malware strings:
  • Virus
  • exploit
  • virus
Contains domain names:
  • 0www.entrust.net
  • 360samsungvr.com
  • 7www.entrust.net
  • Booking.com
  • Entrust.net
  • GoDaddy.com
  • aetherpal.attdh.se
  • allaboutcircuits.com
  • amazon.com
  • analysis.com
  • android-developers.googleblog.com
  • android.bixby.es
  • android.com
  • android.googlesource.com
  • android.net
  • android.networkstack.cn
  • android.networkstack.inprocess.cn
  • android.se
  • android.stackexchange.com
  • androidauthority.com
  • androidcentral.com
  • androidexplained.com
  • androidpit.com
  • androidpolice.com
  • api.github.com
  • aptilo.com
  • archive.org
  • arstechnica.com
  • arvr.google.com
  • arxiv.org
  • asecare.att.com
  • asia.nikkei.com
  • athenaforensics.co.uk
  • attdh.se
  • aura.ironsrc.com
  • aws.amazon.com
  • bayton.org
  • bestcellular.com
  • beta.pithus.org
  • bixby.es
  • bleepingcomputer.com
  • blog.mindorks.com
  • blog.quarkslab.com
  • blog.thijsbroenink.com
  • blog.usejournal.com
  • blogspot.com
  • bluesecblog.wordpress.com
  • bromite.org
  • buzzfeednews.com
  • c-sharpcorner.com
  • cacert.org
  • catcert.net
  • cdn.samsungknox.com
  • cequint.com
  • checkpoint.com
  • chrisdcmoore.co.uk
  • cineday.orange.fr
  • cloud.huawei.com
  • club.hihonor.com
  • cn-ms.samsungapps.com
  • code.tutsplus.com
  • codeaurora.org
  • coloros.com
  • com.aetherpal.attdh.se
  • com.android.networkstack.inprocess.cn
  • com.android.se
  • com.google.android.networkstack.cn
  • com.gotv.nflgamecenter.us
  • com.oneplus.commonoverlay.com
  • com.oneplus.commonoverlay.com.android.networkstack.inprocess.cn
  • com.oneplus.commonoverlay.com.google.android.networkstack.cn
  • com.oneplus.odmoverlay.com
  • com.oneplus.productoverlay.com
  • com.orange.mail.fr
  • com.orange.mylivebox.fr
  • com.samsung.android.bixby.es
  • com.samsung.android.net
  • com.samsung.vvm.se
  • com.sec.svoice.lang.it
  • commonoverlay.com
  • commonoverlay.com.android.networkstack.inprocess.cn
  • commonoverlay.com.google.android.networkstack.cn
  • community.coloros.com
  • community.phones.nokia.com
  • community.sprint.com
  • company.ironsrc.com
  • comparitech.com
  • consumer.huawei.com
  • cordcuttersnews.com
  • cs.android.com
  • csoonline.com
  • custhelp.com
  • dc.dqa.samsung.com
  • devcondition.com
  • developer.android.com
  • developer.qualcomm.com
  • developer.samsung.com
  • developers.com
  • developers.google.com
  • developers.googleblog.com
  • deviantart.com
  • digitalinformationworld.com
  • digitaltrends.com
  • diotek.com
  • docs.samsungknox.com
  • dontkillmyapp.com
  • dqa.samsung.com
  • drivemode.com
  • droid-life.com
  • droid.org
  • ee.co.uk
  • ekahau.com
  • en.diotek.com
  • en.wikipedia.org
  • entrust.net
  • eteknix.com
  • exodus-privacy.eu.org
  • f-droid.org
  • fairphone.com
  • feedly.com
  • felicanetworks.co.jp
  • fidoalliance.org
  • fiercewireless.com
  • financialmirror.com
  • findmymobile.samsung.com
  • fontello.com
  • forum.fairphone.com
  • forum.xda-developers.com
  • forums.androidcentral.com
  • forums.oneplus.com
  • fr.wikipedia.org
  • freecodecamp.org
  • freepatentsonline.com
  • freshpatents.com
  • gadgetguy.com.au
  • gadgets.ndtv.com
  • galaxystore.samsung.com
  • geekwire.com
  • getpocket.com
  • github.com
  • githubusercontent.com
  • gitlab.com
  • gizchina.com
  • global-portal.custhelp.com
  • google.android.networkstack.cn
  • google.com
  • googleapis.com
  • googleblog.com
  • googleprojectzero.blogspot.com
  • googlesource.com
  • gotv.nflgamecenter.us
  • gpsworld.com
  • greenbot.com
  • hihonor.com
  • howtogeek.com
  • http://blog.thijsbroenink.com
  • http://blog.thijsbroenink.com/2016/09/xiaomis-analytics-app-reverse-engineered/\n
  • http://cn-ms.samsungapps.com
  • http://en.diotek.com
  • http://en.diotek.com/\n
  • http://fontello.com
  • http://reporting.qti.qualcomm.com
  • http://reporting.qti.qualcomm.com/learnmore_en.html
  • http://scripts.sil.org
  • http://scripts.sil.org/OFL
  • http://www.cacert.org
  • http://www.cacert.org/\nCACert
  • http://www.freepatentsonline.com
  • http://www.freepatentsonline.com/5469497.html\nIt's
  • http://www.ironsrc.com
  • http://www.ironsrc.com/wp-content/uploads/2019/03/ironSource-Privacy-Policy.pdf
  • http://www.lg.com
  • http://www.lg.com/us/mobile-phones/g4/display\n
  • http://www.typoland.com
  • http://www.typoland.com/
  • http://www.typoland.com/designers/Lukasz_Dziedzic/Copyright
  • http://www.typoland.com/http
  • https://360samsungvr.com
  • https://alertify.eu
  • https://android-developers.googleblog.com
  • https://android-developers.googleblog.com/2019/08/gesture-navigation-backstory.html
  • https://android-developers.googleblog.com/search/label/Trusted%20User%20Interface\nhttps
  • https://android.googlesource.com
  • https://android.googlesource.com/platform/frameworks/base/+/51e458e/packages/CtsShim\nhttps
  • https://android.googlesource.com/platform/frameworks/base/+/master/core/java/android/os/ConfigUpdate.java
  • https://android.googlesource.com/platform/frameworks/base/+/master/packages/SimAppDialog/src/com/android/simappdialog/InstallCarrierAppActivity.java
  • https://android.googlesource.com/platform/packages/apps/Browser/+/refs/heads/master/src/com/android/browser/provider/BrowserProvider.java\nRelated
  • https://android.googlesource.com/platform/packages/apps/Camera2/+/master/src/com/android/camera\n
  • https://android.googlesource.com/platform/packages/apps/CellBroadcastReceiver/+/refs/heads/master/src/com/android/cellbroadcastreceiver
  • https://android.googlesource.com/platform/packages/providers/CallLogProvider/+/refs/heads/master/src/com/android/calllogbackup
  • https://android.stackexchange.com
  • https://android.stackexchange.com/questions/191163/what-does-the-intent-filter-verification-service-app-from-google-do
  • https://android.stackexchange.com/questions/216176/what-is-the-exact-functionality-of-google-play-services-google-services-framew\nhttps
  • https://android.stackexchange.com/questions/226580/how-is-verizon-suddenly-tracking-my-hot-spot-usage-on-android-and-how-do-i-disab\n
  • https://api.github.com
  • https://api.github.com/repos/0x192/universal-android-debloater/releasesFailed
  • https://arstechnica.com
  • https://arvr.google.com
  • https://arvr.google.com/daydream/
  • https://arxiv.org
  • https://asecare.att.com
  • https://asecare.att.com/tutorials/adding-and-deleting-an-extension-on-your-officehand-mobile-app-2990/?product
  • https://asia.nikkei.com
  • https://asia.nikkei.com/Economy/Trade-war/US-sanctions-8-China-tech-companies-over-role-in-Xinjiang-abuses\n
  • https://asia.nikkei.com/Economy/Trade-war/US-sanctions-8-China-tech-companies-over-role-in-Xinjiang-abuses\nArchive
  • https://athenaforensics.co.uk
  • https://athenaforensics.co.uk/com-sec-android-gallery3d-mobile-phone-forensics/\nNOTE
  • https://aura.ironsrc.com
  • https://aura.ironsrc.com/
  • https://aura.ironsrc.com/tools/drive-app-downloads/\nhttps
  • https://aws.amazon.com
  • https://aws.amazon.com/ses/
  • https://bayton.org
  • https://bestcellular.com
  • https://beta.pithus.org
  • https://beta.pithus.org/report/60835b97f38d9e64d4f554a73dab71c892153486a8e0fd81461c3d85359d9fae
  • https://beta.pithus.org/report/6c68ddd1f9e2d1f9e1df2eab572c07f1e34c4a6490c0ba98554a7356ca2a351d\n\nNote
  • https://beta.pithus.org/report/6e8de7e02aba34c4f02dc966b39002f60b0852f55da923cdccc4ba4c09ed4a4a
  • https://beta.pithus.org/report/7041823ff880c207ed2ddacdc92e5ed803b1eb105e4483696d2152bea44903aa
  • https://beta.pithus.org/report/797a7e405bc8e767deebbbcab3e06a19b05156de44292c918b582dff3078d7b8\nIMPORTANT
  • https://beta.pithus.org/report/817514371bbdb76ec52da4c8456bbc116deec179603099deabbe6fcce6f6ccdb
  • https://beta.pithus.org/report/99ea324529f950fe351d22724f8b894cce19c16607fcc9c2855bc906b1f8e644
  • https://beta.pithus.org/report/bc54b5e2446ace90d9f992278d0ec320befe4983a76cb4fdcf47e565366e67b6\n
  • https://beta.pithus.org/report/e80a1fa70adc097fc9817720b5c8c81cfd156a76e6d062759b2bc3d6937a97e7
  • https://beta.pithus.org/report/f4cf38e1c35a04c3579fa198d2abd3ef1ff7be79633d6d3f2bc69c8a69164e1d
  • https://beta.pithus.org/report/f8c24ccfc526389ff9084505c60fba3d3463565f92e2015190e2974b370e7c4e\nREMOVING
  • https://bgr.com
  • https://blog.cdemi.io
  • https://blog.cdemi.io/never-accept-an-mdm-policy-on-your-personal-phone/\n
  • https://blog.cdemi.io/never-accept-an-mdm-policy-on-your-personal-phone/\nThis
  • https://blog.google
  • https://blog.mindorks.com
  • https://blog.mindorks.com/understanding-the-scoped-storage-in-android.
  • https://blog.quarkslab.com
  • https://blog.quarkslab.com/abusing-samsung-knox-to-remotely-install-a-malicious-application-story-of-a-half-patched-vulnerability.html\n
  • https://blog.quarkslab.com/introduction-to-trusted-execution-environment-arms-trustzone.html\nGood
  • https://blog.quarkslab.com/introduction-to-trusted-execution-environment-arms-trustzone.html\nhttps
  • https://blog.usejournal.com
  • https://blog.usejournal.com/why-i-would-never-trust-booking-com-again-so-you-should-too-a2ab535ed915?gi
  • https://bluesecblog.wordpress.com
  • https://bluesecblog.wordpress.com/2016/11/18/uicc-sim-usim/\nGood
  • https://bluesecblog.wordpress.com/2016/11/18/uicc-sim-usim/\nI
  • https://c.mi.com
  • https://c.mi.com/thread-1017547-1-0.html\n
  • https://c.mi.com/thread-1744085-1-0.html\n
  • https://cineday.orange.fr
  • https://cineday.orange.fr/cineday/\n
  • https://cloud.huawei.com
  • https://cloud.huawei.com/privacyStatementTransit\n
  • https://club.hihonor.com
  • https://club.hihonor.com/in/topic/16341/detail.htm\n
  • https://code.tutsplus.com
  • https://code.tutsplus.com/tutorials/quick-tip-theme-android-with-the-runtime-resource-overlay-framework--cms-29708\n
  • https://community.coloros.com
  • https://community.coloros.com/thread-9962-1-1.html\n
  • https://community.phones.nokia.com
  • https://community.phones.nokia.com/discussion/52566/android-10-on-nokia-8-1/p19\nUseless
  • https://community.sprint.com
  • https://community.sprint.com/t5/Samsung/How-to-stop-quot-Mobile-Installer-quot-from-pushing-apps-to/td-p/1036387\n
  • https://company.ironsrc.com
  • https://company.ironsrc.com/
  • https://consumer.huawei.com
  • https://consumer.huawei.com/en/emui/celia/
  • https://consumer.huawei.com/en/mobileservices/huawei-wallet/\n
  • https://consumer.huawei.com/en/mobileservices/mobilecloud/\n
  • https://consumer.huawei.com/en/support/content/en-us00206571/\nLets
  • https://consumer.huawei.com/en/support/content/en-us00754246/\n
  • https://consumer.huawei.com/en/support/content/en-us00956296/
  • https://consumer.huawei.com/en/support/hisuite/\n
  • https://consumer.huawei.com/en/support/how-to/detail-troubleshooting/en-us00310067/\n
  • https://consumer.huawei.com/uk/support/faq/have-you-tried-the-new-hitouch-assistant/\n
  • https://cs.android.com
  • https://cs.android.com/android/platform/superproject/+/master
  • https://dc.dqa.samsung.com
  • https://dc.dqa.samsung.com\nSTG
  • https://devcondition.com
  • https://developer.android.com
  • https://developer.android.com/guide/components/intents-filters\nhttps
  • https://developer.android.com/guide/topics/data/testingbackup
  • https://developer.android.com/guide/topics/display-cutout\nhttps
  • https://developer.android.com/guide/topics/providers/content-providers.html
  • https://developer.android.com/guide/topics/providers/content-providers.html\nBreaks
  • https://developer.android.com/guide/topics/providers/content-providers.html\nSeems
  • https://developer.android.com/guide/topics/ui/picture-in-picture\nhttps
  • https://developer.android.com/reference/android/Manifest.permission#READ_PHONE_STATE\n#\nHardcoded
  • https://developer.android.com/reference/android/content/Intent\nIntent
  • https://developer.android.com/reference/android/media/audiofx/AudioEffect
  • https://developer.android.com/reference/android/service/dreams/DreamService
  • https://developer.android.com/reference/android/telephony/AvailableNetworkInfo\nhttps
  • https://developer.android.com/reference/android/telephony/data/ApnSetting\n
  • https://developer.android.com/topic/dsu
  • https://developer.android.com/topic/performance/tracing
  • https://developer.android.com/training/articles/direct-boot\nSimple
  • https://developer.android.com/training/connect-devices-wirelessly/nsd-wifi-direct\n
  • https://developer.qualcomm.com
  • https://developer.qualcomm.com/blog/rise-esims-and-isims-and-their-impact-iot\nhttps
  • https://developer.samsung.com
  • https://developer.samsung.com/codelab/SDC18-experiences/Galaxy-Friends\n
  • https://developer.samsung.com/ese/overview.html\nKMS
  • https://developer.samsung.com/galaxy/stickers
  • https://developer.samsung.com/galaxy/stickers\n
  • https://developer.samsung.com/galaxy/stickers\nSafe
  • https://developer.samsung.com/html/techdoc/ProgrammingGuide_ProfessionalAudio.pdf\n
  • https://developer.samsung.com/samsung-dex/how-it-works\n
  • https://developer.samsung.com/tech-insights/knox/mobile-device-management\n
  • https://developers.google.com
  • https://developers.google.com/analytics/solutions/google-analytics-super-proxy\n
  • https://developers.google.com/android/work/requirements/work-profile\nNeeded
  • https://developers.google.com/drive/api/v3/reference\n
  • https://developers.google.com/identity/fido/android/native-apps\nSafe
  • https://developers.google.com/identity/fido/android/native-apps\nThe
  • https://docs.samsungknox.com
  • https://docs.samsungknox.com/KC-Getting-Started/Content/about-shared-device.htm\n
  • https://docs.samsungknox.com/admin/knox-configure/normal-mode.html\n
  • https://docs.samsungknox.com/admin/knox-mobile-enrollment/enroll-your-devices.htm\nFYI
  • https://docs.samsungknox.com/admin/whitepaper/kpe/attestation.htm\n
  • https://docs.samsungknox.com/admin/whitepaper/kpe/client-certificate-manager.htm\n
  • https://docs.samsungknox.com/admin/whitepaper/kpe/sensitive-data-protection.htm
  • https://docs.samsungknox.com/dev/knox-sdk/about-keystores.htm\nThis
  • https://docs.samsungknox.com/dev/knox-sdk/about-keystores.htm\nhttps
  • https://docs.samsungknox.com/dev/knox-sdk/container-data-sharing-policies.htm\n
  • https://docs.samsungknox.com/dev/knox-sdk/faqs/general/what-is-the-knox-tima-ccm.htm\nhttps
  • https://docs.samsungknox.com/dev/knox-sdk/faqs/general/what-is-universal-credential-management_-ucm.htm\nhttps
  • https://docs.samsungknox.com/knox-platform-for-enterprise/admin-guide/bluetooth.htm\nNOTE
  • https://docs.samsungknox.com/knox-platform-for-enterprise/admin-guide/sensitive-data-protection.htm\n
  • https://docs.samsungknox.com/knox-platform-for-enterprise/admin-guide/workspace-shortcuts.htm\n
  • https://docs.samsungknox.com/whitepapers/knox-platform/app-container.htm\n
  • https://dontkillmyapp.com
  • https://drivemode.com
  • https://ee.co.uk
  • https://ee.co.uk/help/help-new/billing-usage-and-top-up/call-text-and-data-charges/how-can-i-get-help-by-texting-150-on-pay-as-you-go-or-flex\nExodus
  • https://element.io
  • https://en.wikipedia.org
  • https://en.wikipedia.org/wiki/ARM_architecture#Security_extensions\nhttps
  • https://en.wikipedia.org/wiki/AetherPal
  • https://en.wikipedia.org/wiki/BHIM\nUPI
  • https://en.wikipedia.org/wiki/Board_support_package
  • https://en.wikipedia.org/wiki/Booking.com\nhttps
  • https://en.wikipedia.org/wiki/Call_forwarding\n
  • https://en.wikipedia.org/wiki/Calling_Name_Presentation
  • https://en.wikipedia.org/wiki/Captive_portal\nA
  • https://en.wikipedia.org/wiki/Carrier-sense_multiple_access_with_collision_avoidance\nhttps
  • https://en.wikipedia.org/wiki/Carrier_IQ
  • https://en.wikipedia.org/wiki/Carrier_IQ#Rootkit_discovery_and_media_attention\n
  • https://en.wikipedia.org/wiki/Carrier_IQ\nhttps
  • https://en.wikipedia.org/wiki/Cell_Broadcast\nhttps
  • https://en.wikipedia.org/wiki/Consumer_Cellular\n
  • https://en.wikipedia.org/wiki/Criticism_of_Yahoo
  • https://en.wikipedia.org/wiki/Demo_mode
  • https://en.wikipedia.org/wiki/Demo_mode\n
  • https://en.wikipedia.org/wiki/Dialog_
  • https://en.wikipedia.org/wiki/Digital_rights_management
  • https://en.wikipedia.org/wiki/DirecTV#Consumer_protection_lawsuits_and_violations\n
  • https://en.wikipedia.org/wiki/DraftKings
  • https://en.wikipedia.org/wiki/DraftKings\n\nDrivemode
  • https://en.wikipedia.org/wiki/End-user_license_agreement\n
  • https://en.wikipedia.org/wiki/FIDO_Alliance\nFido
  • https://en.wikipedia.org/wiki/Fast_Dormancy
  • https://en.wikipedia.org/wiki/FeliCa
  • https://en.wikipedia.org/wiki/Geo-fence
  • https://en.wikipedia.org/wiki/Groupon#Reception\n
  • https://en.wikipedia.org/wiki/Hiya_
  • https://en.wikipedia.org/wiki/HomeAdvisor#Critism\n
  • https://en.wikipedia.org/wiki/Hulu\nhttps
  • https://en.wikipedia.org/wiki/IFlytek
  • https://en.wikipedia.org/wiki/IQiyi
  • https://en.wikipedia.org/wiki/IronSource.\n
  • https://en.wikipedia.org/wiki/IronSource\nhttps
  • https://en.wikipedia.org/wiki/Kingsoft
  • https://en.wikipedia.org/wiki/List_of_country_calling_codes\n\nThis
  • https://en.wikipedia.org/wiki/Milk_Music_
  • https://en.wikipedia.org/wiki/Miracast
  • https://en.wikipedia.org/wiki/Miracast\nMy
  • https://en.wikipedia.org/wiki/MobiTV
  • https://en.wikipedia.org/wiki/Mobile_data_offloading
  • https://en.wikipedia.org/wiki/Multimedia_Broadcast_Multicast_Service
  • https://en.wikipedia.org/wiki/Napster\n
  • https://en.wikipedia.org/wiki/OMA_Device_Management
  • https://en.wikipedia.org/wiki/OMA_Device_Management\nI
  • https://en.wikipedia.org/wiki/OMA_Device_Management\nUse
  • https://en.wikipedia.org/wiki/Online_to_offline\nNOTE
  • https://en.wikipedia.org/wiki/PhonePe
  • https://en.wikipedia.org/wiki/Polaris_Office\nhttps
  • https://en.wikipedia.org/wiki/Prime_Video\n
  • https://en.wikipedia.org/wiki/Proxy_auto-config
  • https://en.wikipedia.org/wiki/Qihoo_360
  • https://en.wikipedia.org/wiki/Quadrature-division_multiple_access
  • https://en.wikipedia.org/wiki/RealVNC
  • https://en.wikipedia.org/wiki/Republic_Wireless
  • https://en.wikipedia.org/wiki/Rich_Communication_Services
  • https://en.wikipedia.org/wiki/Rich_Communication_Services\nUses
  • https://en.wikipedia.org/wiki/SIM_Application_Toolkit#cite_note-CellularZA-1\nHas
  • https://en.wikipedia.org/wiki/Samsung_DeX\n
  • https://en.wikipedia.org/wiki/Samsung_DeX\nhttps
  • https://en.wikipedia.org/wiki/Samsung_Galaxy_Store\n
  • https://en.wikipedia.org/wiki/Samsung_Gear_VR
  • https://en.wikipedia.org/wiki/Samsung_Health\nS
  • https://en.wikipedia.org/wiki/Samsung_Knox
  • https://en.wikipedia.org/wiki/Samsung_Music_Hub\n
  • https://en.wikipedia.org/wiki/Samsung_Pay\nNOTE
  • https://en.wikipedia.org/wiki/Samsung_WatchON\n
  • https://en.wikipedia.org/wiki/Sharecare#Criticisms\n
  • https://en.wikipedia.org/wiki/Shim_
  • https://en.wikipedia.org/wiki/SmartThings\n
  • https://en.wikipedia.org/wiki/SmartThings\nREMINDER
  • https://en.wikipedia.org/wiki/Specific_absorption_rate
  • https://en.wikipedia.org/wiki/SwiftKey
  • https://en.wikipedia.org/wiki/Swype\n
  • https://en.wikipedia.org/wiki/System_Architecture_Evolution#Evolved_Packet_Core_
  • https://en.wikipedia.org/wiki/TecTile\nYou
  • https://en.wikipedia.org/wiki/Tethering
  • https://en.wikipedia.org/wiki/TikTok#Privacy,_cyberbullying_and_addiction_concerns\n
  • https://en.wikipedia.org/wiki/TripAdvisor
  • https://en.wikipedia.org/wiki/Trusted_execution_environment\nDisabling
  • https://en.wikipedia.org/wiki/Uber#Criticism\n
  • https://en.wikipedia.org/wiki/Unified_Payments_Interface\n
  • https://en.wikipedia.org/wiki/Vlingo\nFYI
  • https://en.wikipedia.org/wiki/Vodafone\n
  • https://en.wikipedia.org/wiki/Voice_Mate
  • https://en.wikipedia.org/wiki/Voice_over_LTE\nIMS
  • https://en.wikipedia.org/wiki/Voltari\nhttps
  • https://en.wikipedia.org/wiki/WLAN_Authentication_and_Privacy_Infrastructure\nDigital
  • https://en.wikipedia.org/wiki/WLAN_Authentication_and_Privacy_Infrastructure\nIt
  • https://en.wikipedia.org/wiki/Wi-Fi_Direct
  • https://en.wikipedia.org/wiki/Wi-Fi_Direct\nspmirroring
  • https://en.wikipedia.org/wiki/Widget\n
  • https://en.wikipedia.org/wiki/Wireless_LAN
  • https://en.wikipedia.org/wiki/XT9\n
  • https://en.wikipedia.org/wiki/Xfinity
  • https://en.wikipedia.org/wiki/Yelp#Controversy_and_litigation
  • https://en.wikipedia.org/wiki/Yelp#Controversy_and_litigation\n\nTikTok
  • https://en.wikipedia.org/wiki/Youdao
  • https://f-droid.org
  • https://feedly.com
  • https://fidoalliance.org
  • https://findmymobile.samsung.com
  • https://findmymobile.samsung.com/\n
  • https://forum.fairphone.com
  • https://forum.fairphone.com/t/telemetry-spyware-list-of-privacy-threats-on-fp3-android-9/55179/74
  • https://forum.xda-developers.com
  • https://forum.xda-developers.com/android/apps-games/app-chrome-homepage-t3695804
  • https://forum.xda-developers.com/android/miui/floating-windows-miui-12-t4125661\n
  • https://forum.xda-developers.com/galaxy-note-8/accessories/how-led-cover-t3686694
  • https://forum.xda-developers.com/galaxy-note-8/accessories/how-led-cover-t3686694\n
  • https://forum.xda-developers.com/galaxy-note-8/help/q-hidden-network-settings-pie-t3914421/page4
  • https://forum.xda-developers.com/galaxy-note-8/help/q-hidden-network-settings-pie-t3914421/page4\n\nSame
  • https://forum.xda-developers.com/galaxy-note-9/help/samsung-services-dialling-home-to-china-t3894033\n
  • https://forum.xda-developers.com/galaxy-s5/help/bluetoothtest-apk-calling-home-t3035182
  • https://forum.xda-developers.com/honor-6x/how-to/guide-list-bloat-software-emui-safe-to-t3700814\nAdditional
  • https://forum.xda-developers.com/huawei-p40-pro/how-to/adb-debloating-t4088633\nYet,
  • https://forum.xda-developers.com/moto-x-2014/help/location-modality-services-battery-t2982752
  • https://forum.xda-developers.com/showpost.php?s
  • https://forum.xda-developers.com/showthread.php?t
  • https://forum.xda-developers.com/tmobile-lg-v10/development/rom-lg-v10-h901-10c-debranded-debloated-t3277305/page12/page12\n
  • https://forums.androidcentral.com
  • https://forums.androidcentral.com/samsung-galaxy-s6-edge/523172-enhanced-features.html\nhttps
  • https://forums.oneplus.com
  • https://forums.oneplus.com/threads/psa-non-root-root-stop-oneplus-push-notifications.580058/\nOnePlus
  • https://fr.wikipedia.org
  • https://fr.wikipedia.org/wiki/Session_Initiation_Protocol
  • https://fr.wikipedia.org/wiki/Smart_Switch\n
  • https://gadgets.ndtv.com
  • https://gadgets.ndtv.com/mobiles/news/xiaomi-mi-recycle-cashify-miui-security-app-2018024\n
  • https://galaxystore.samsung.com
  • https://galaxystore.samsung.com/detail/com.samsung.SMT\n
  • https://galaxystore.samsung.com/prepost/000003980724?appId
  • https://galaxystore.samsung.com/prepost/000004170688?appId
  • https://galaxystore.samsung.com/prepost/000004807357
  • https://galaxystore.samsung.com/prepost/000004906980?appId
  • https://getpocket.com
  • https://github.com
  • https://gitlab.com
  • https://googleprojectzero.blogspot.com
  • https://googleprojectzero.blogspot.com/2017/07/trust-issues-exploiting-trustzone-tees.html\nhttps
  • https://hiya.com
  • https://ifstudies.org
  • https://itmunch.com
  • https://jibe.google.com
  • https://jibe.google.com/
  • https://jibe.google.com/policies/terms/\nhttps
  • https://knowledge.protektoid.com
  • https://knowledge.protektoid.com/apps/com.dti.att/7a36d4f5f00bae044566221400719c75ea2f4f33bc2578a7f8210f36d718a8d6\nSomeone
  • https://knowledge.protektoid.com/apps/com.sonymobile.deviceconfigtool/91e44f1e19b364411776d758ff3b27f703bd4b60c9399c43c124f37d0c30df27\n
  • https://knowledge.protektoid.com/apps/com.verizon.obdm/d48680955d8d58bade2e6620ccb1e30b9bf23cb8e50055e10de3466da558c0ee
  • https://kp-cdn.samsungknox.com
  • https://kp-cdn.samsungknox.com/b60a7f0f59df8f466e8054f783fbbfe2.pdf\n
  • https://ldplayer.net
  • https://libredd.it
  • https://m.att.com
  • https://m.att.com/shopmobile/wireless/features/smart-limits.html\n
  • https://medium.com
  • https://milankragujevic.com
  • https://mirrorlink.com
  • https://mobeam.com
  • https://mobile.softpedia.com
  • https://mobile.softpedia.com/blog/Moto-Care-App-Gets-Updated-Now-Called-Motorola-Help-432827.shtml\nHowever
  • https://mobile.spectrum.com
  • https://mobile.spectrum.com/support/article/360001296667/samsung-visual-voicemail
  • https://mobile.spectrum.com/support/article/360001296667/samsung-visual-voicemail\n
  • https://mobileinternist.com
  • https://motorola-global-portal.custhelp.com
  • https://motorola-global-portal.custhelp.com/app/answers/prod_answer_detail/a_id/140542\nhttps
  • https://nakedsecurity.sophos.com
  • https://nakedsecurity.sophos.com/2020/06/10/billions-of-devices-affected-by-upnp-vulnerability/\nThis
  • https://nelenkov.blogspot.com
  • https://nelenkov.blogspot.com/2014/12/dissecting-lollipops-smart-lock.html
  • https://news.ycombinator.com
  • https://news.ycombinator.com/item?id
  • https://nextradioapp.com
  • https://nitter.42l.fr
  • https://nitter.42l.fr/wysdomai
  • https://nitter.net
  • https://nvd.nist.gov
  • https://nvd.nist.gov/vuln/detail/CVE-2016-10135\n
  • https://nvd.nist.gov/vuln/detail/CVE-2019-15340\n
  • https://nvd.nist.gov/vuln/detail/CVE-2019-15368\nAny
  • https://nvd.nist.gov/vuln/detail/CVE-2019-15472
  • https://nypost.com
  • https://onezero.medium.com
  • https://onezero.medium.com/dont-put-your-work-email-on-your-personal-phone-ef7fef956c2f\nhttps
  • https://patents.google.com
  • https://patents.google.com/patent/US20020163933A1
  • https://pinsightmedia.com
  • https://play.google.com
  • https://play.google.com/store/apps/details?id
  • https://pocketnow.com
  • https://prip.me
  • https://programmersought.com
  • https://raw.githubusercontent.com
  • https://raw.githubusercontent.com/0x192/universal-android-debloater/main/resources/assets/uad_lists.jsonCould
  • https://reports.exodus-privacy.eu.org
  • https://reports.exodus-privacy.eu.org/en/reports/com.particlenews.newsbreak/latest/\n
  • https://reports.exodus-privacy.eu.org/en/reports/com.remotefairy4/latest/\n
  • https://reports.exodus-privacy.eu.org/en/reports/com.touchtype.swiftkey/latest/\nNOTE
  • https://reports.exodus-privacy.eu.org/en/reports/com.ume.browser.cust/latest/
  • https://reports.exodus-privacy.eu.org/en/reports/com.wavemarket.waplauncher/latest/
  • https://reports.exodus-privacy.eu.org/en/reports/in.playsimple.wordtrip/latest/
  • https://reports.exodus-privacy.eu.org/en/reports/jp.gocro.smartnews.android/latest/
  • https://reports.exodus-privacy.eu.org/fr/reports/143830/
  • https://reports.exodus-privacy.eu.org/fr/reports/144565/
  • https://reports.exodus-privacy.eu.org/fr/reports/uk.co.ee.myee/latest/\nhttps
  • https://research.checkpoint.com
  • https://research.checkpoint.com/2019/advanced-sms-phishing-attacks-against-modern-android-based-smartphones/\nhttps
  • https://research.checkpoint.com/2019/vulnerability-in-xiaomi-pre-installed-security-app/\n
  • https://research.checkpoint.com/2019/vulnerability-in-xiaomi-pre-installed-security-app/\nYou
  • https://ro-che.info
  • https://searchstorage.techtarget.com
  • https://searchstorage.techtarget.com/definition/cloud-storage-gateway\n#\nNeeds
  • https://security.stackexchange.com
  • https://security.stackexchange.com/questions/102550/what-are-wifi-certificates-used-for-what-are-they
  • https://security.stackexchange.com/questions/161190/does-samsungs-security-enhancements-for-android-offer-anything-for-consumers\nNot
  • https://security.stackexchange.com/questions/216716/android-keychain-what-is-a-system-wide-credential\n
  • https://security.stackexchange.com/questions/223290/esim-vs-sim-card-what-is-more-secure\n
  • https://shopping.naver.com
  • https://shopping.naver.com/
  • https://source.android.com
  • https://source.android.com/devices/architecture/modular-system/extservices\nhttps
  • https://source.android.com/devices/architecture/modular-system/networking\n
  • https://source.android.com/devices/architecture/modular-system/networking\nProvides
  • https://source.android.com/devices/architecture/modular-system/permissioncontroller
  • https://source.android.com/devices/architecture/rros
  • https://source.android.com/devices/tech/config/carrier\nhttps
  • https://source.android.com/devices/tech/connect/esim-overview
  • https://source.android.com/devices/tech/connect/oob-users
  • https://source.android.com/devices/tech/display/display-cutouts
  • https://source.android.com/devices/tech/display/retail-mode\n
  • https://source.android.com/security/selinux\n
  • https://source.codeaurora.org
  • https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/bluetooth\n
  • https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/fm/tree/fmapp2/src/com/caf/fmradio\n
  • https://stackoverflow.com
  • https://stg-dc.dqa.samsung.com
  • https://stg-dc.dqa.samsung.com\nPRD
  • https://support.google.com
  • https://support.google.com/accounts/answer/3118687?hl
  • https://support.google.com/work/android/answer/6191949?\nhttps
  • https://support.motorola.com
  • https://support.motorola.com/uk/en/solution/ms108519
  • https://support.motorola.com/us/en/documents/MS116403/\n
  • https://support.samsungknox.com
  • https://support.samsungknox.com/hc/en-us/articles/115012547907-What-URLs-do-I-have-to-whitelist-to-make-Samsung-apps-work-with-an-authenticated-proxy-\n
  • https://support.sonymobile.com
  • https://support.sonymobile.com/gb/xperiaxz/userguide/battery-and-power-management/\n
  • https://support.sonymobile.com/global-en/xperia10/faq/apps-&-settings/801930747866b72a016b307df3b6007faf/\n
  • https://support.sonymobile.com/global-en/xperiaxz/userguide/smart-call-handling/\n
  • https://support.sonymobile.com/global-en/xperiaxz/userguide/xperia-actions/\n
  • https://support.sonymobile.com/global-en/xperiaxz1compact/faq/apps-&-settings/8019307455ff6184015e92f63324005926/\n
  • https://support.sonymobile.com/global-en/xperiaz2/userguide/backing-up-and-restoring-content-on-a-device/
  • https://support.t-mobile.com
  • https://support.t-mobile.com/docs/DOC-14011\n
  • https://support.vodafone.co.uk
  • https://support.vodafone.co.uk/Vodafone-apps/Call-and-Message/60900956/What-is-Call.htm
  • https://tamingthedroid.com
  • https://techcrunch.com
  • https://thatoneprivacysite.net
  • https://thehackernews.com
  • https://thoughtarama.wordpress.com
  • https://thoughtarama.wordpress.com/2017/05/09/mab-fucker-or-why-im-giving-up-my-xiaomi-redmi-note-3-phone/\nMab
  • https://tnsi.com
  • https://uk.linkedin.com
  • https://uk.linkedin.com/in/hemant-kumar-dewnarain-2b779679\n
  • https://vas.samsungapps.com
  • https://videotron.tmtx.ca
  • https://videotron.tmtx.ca/en/topic/samsung_galaxys9/using_people_edge.html\nIt
  • https://wallabag.org
  • https://web.archive.org
  • https://web.archive.org/save/https
  • https://web.archive.org/web/20200107110205/https
  • https://web.archive.org/web/20200604093347/https
  • https://web.archive.org/web/20200607140002/https
  • https://web.archive.org/web/20200915164901/https
  • https://wladimir-tm4pda.github.io
  • https://wladimir-tm4pda.github.io/porting/telephony.html\nhttps
  • https://www.3gpp.org
  • https://www.3gpp.org/technologies/keywords-acronyms/100-the-evolved-packet-core\n-
  • https://www.allaboutcircuits.com
  • https://www.allaboutcircuits.com/technical-articles/direct-digital-synthesis/
  • https://www.android.com
  • https://www.android.com/intl/en_en/auto/
  • https://www.androidauthority.com
  • https://www.androidauthority.com/nokia-7-plus-user-info-967901/
  • https://www.androidcentral.com
  • https://www.androidcentral.com/amber-alerts-and-android-what-you-need-know
  • https://www.androidcentral.com/amber-alerts-and-android-what-you-need-know\nI
  • https://www.androidcentral.com/amber-alerts-and-android-what-you-need-know\nhttps
  • https://www.androidexplained.com
  • https://www.androidexplained.com/galaxy-note-9-disable-security-log-agent/\nRun
  • https://www.androidpit.com
  • https://www.androidpit.com/Vlingo-Privacy-Breach\n
  • https://www.androidpit.com/oneplus-opbugreportlite-data-collection\nSource
  • https://www.androidpolice.com
  • https://www.androidpolice.com/2015/03/10/android-5-1-includes-new-carrier-provisioning-api-allows-carriers-easier-methods-of-setting-up-services-on-devices-they-dont-control/\n
  • https://www.androidpolice.com/2015/03/10/android-5-1-includes-new-carrier-provisioning-api-allows-carriers-easier-methods-of-setting-up-services-on-devices-they-dont-control/\nDisplays
  • https://www.androidpolice.com/2017/10/10/never-settle-oneplus-found-collecting-personally-identifiable-analytics-data-phone-owners/
  • https://www.androidpolice.com/2019/07/01/oneplus-accidentally-pushed-a-cryptic-notification-to-all-7-pro-users/
  • https://www.androidpolice.com/2019/08/27/nokia-hmd-phones-disable-evenwell-background-process-app-killer/
  • https://www.androidpolice.com/2019/11/19/xiaomi-quick-apps-flagged-blocked-google-play-protect/\n#\nReverse
  • https://www.aptilo.com
  • https://www.aptilo.com/solutions/mobile-data-offloading/3gpp-wifi-access/\n-
  • https://www.att.com
  • https://www.att.com/shop/wireless/features/wifi-calling.html\n
  • https://www.bleepingcomputer.com
  • https://www.bleepingcomputer.com/news/security/second-oneplus-factory-app-discovered-this-one-dumps-photos-wifi-and-gps-logs/\nhttps
  • https://www.bleepingcomputer.com/news/security/smartphones-from-11-oems-vulnerable-to-attacks-via-hidden-at-commands/\n
  • https://www.bromite.org
  • https://www.bromite.org/system_web_view
  • https://www.buzzfeednews.com
  • https://www.buzzfeednews.com/article/craigsilverman/google-banned-cootek-adware\n
  • https://www.c-sharpcorner.com
  • https://www.c-sharpcorner.com/article/directory-services-vs-rdbms/\nLDAP
  • https://www.catcert.net
  • https://www.catcert.net/verarrel
  • https://www.cequint.com
  • https://www.cequint.com/
  • https://www.chrisdcmoore.co.uk
  • https://www.chrisdcmoore.co.uk/post/oneplus-analytics/\nPress
  • https://www.comparitech.com
  • https://www.comparitech.com/blog/vpn-privacy/what-is-geofencing-privacy/\n
  • https://www.cordcuttersnews.com
  • https://www.cordcuttersnews.com/att-tv-vs-att-tv-now-whats-the-difference/\n
  • https://www.csoonline.com
  • https://www.csoonline.com/article/3435729/sms-based-provisioning-messages-enable-advanced-phishing-on-android-phones.html\n
  • https://www.ctrl.blog
  • https://www.ctrl.blog/entry/what-is-samsung-secure-wi-fi.html\nNote
  • https://www.deviantart.com
  • https://www.deviantart.com/zdunex25/gallery/26889741/themes\n
  • https://www.digitalinformationworld.com
  • https://www.digitalinformationworld.com/2019/05/url-spoofing-uc-browser-android.html\n
  • https://www.digitaltrends.com
  • https://www.digitaltrends.com/home-theater/hulu-vs-disney-plus/\n
  • https://www.diotek.co.kr
  • https://www.diotek.co.kr/\n
  • https://www.droid-life.com
  • https://www.droid-life.com/2013/02/12/verizon-introduces-my-infozone-widget-allows-easy-access-to-tips-device-info-and-account-information/\n
  • https://www.eff.org
  • https://www.eff.org/deeplinks/2017/04/update-verizons-appflash-pre-installed-spyware-still-spyware\n
  • https://www.eff.org/deeplinks/2020/01/why-public-wi-fi-lot-safer-you-think\nYou
  • https://www.ekahau.com
  • https://www.ekahau.com/wp-content/uploads/2017/03/Webinar-slides-802.11ax-Sneak-Peek-%E2%80%93-The-Next-Generation-Wi-Fi.pdf\nNot
  • https://www.eteknix.com
  • https://www.eteknix.com/samsungs-context-service-may-take-data-collection-surveillance-worrying-levels/\nhttps
  • https://www.europol.europa.eu
  • https://www.europol.europa.eu/activities-services/public-awareness-and-prevention-guides/risks-of-using-public-wi-fi\nhttps
  • https://www.fairphone.com
  • https://www.fairphone.com/en/2021/12/20/my-fairphone-app/
  • https://www.felicanetworks.co.jp
  • https://www.felicanetworks.co.jp/en/
  • https://www.fiercewireless.com
  • https://www.fiercewireless.com/wireless/sprint-sells-mobile-ad-biz-pinsight-media-to-inmobi\n
  • https://www.fiercewireless.com/wireless/t-mobile-to-launch-caller-id-service-from-cequint\nNOTE
  • https://www.fiercewireless.com/wireless/t-mobile-to-offer-name-id-service-from-whitepages\nhttps
  • https://www.financialmirror.com
  • https://www.financialmirror.com/2007/10/31/motorola-packs-moto-q-9h-global-smart-device-with-third-party-applications/\n
  • https://www.freecodecamp.org
  • https://www.freecodecamp.org/news/why-you-should-never-unlock-your-phone-with-your-face-79c07772a28/
  • https://www.freshpatents.com
  • https://www.freshpatents.com/-dt20180607ptan20180159824.php
  • https://www.gadgetguy.com.au
  • https://www.gadgetguy.com.au/amazon-assistant-spies-on-you/\n
  • https://www.geekwire.com
  • https://www.geekwire.com/2013/earnouts-bad-cequint-execs-sue-parent-company/\n
  • https://www.geekwire.com/2016/whitepages-spins-caller-id-spam-blocking-app-startup-hiya/\n
  • https://www.gizchina.com
  • https://www.gizchina.com/2018/06/20/oppo-find-x-slide-up-camera-has-anti-fall-feature-guarantees-5-years-usage/\n
  • https://www.google.com
  • https://www.google.com/search?hl
  • https://www.gpsworld.com
  • https://www.gpsworld.com/wirelessexpert-advice-positioning-protocol-next-gen-cell-phones-11125/\nI
  • https://www.greenbot.com
  • https://www.greenbot.com/article/2904397/everything-you-need-to-know-about-device-protection-in-android-51.html\n
  • https://www.gsd.inesc-id.pt
  • https://www.gsd.inesc-id.pt/
  • https://www.howtogeek.com
  • https://www.howtogeek.com/316375/how-to-use-adapt-sound-on-the-galaxy-s7-and-s8-for-better-sound-quality/\n#\nSettings
  • https://www.huawei.com
  • https://www.huawei.com/en/press-events/news/2016/10/Cloud-Network-Synergy-Whitepaper\n
  • https://www.hybrid-analysis.com
  • https://www.hybrid-analysis.com/sample/05dab93ee2102a2fb6edf16e85750eb1f0189d7b82703c6a00c92cd08d62bb28?environmentId
  • https://www.hybrid-analysis.com/sample/2ef5367f700d2644fc51d2cdd8dd0ce97e9a6594cb5b89052537037c5a7aac56?environmentId
  • https://www.justaskgemalto.com
  • https://www.justaskgemalto.com/us/what-uicc-and-how-it-different-sim-card/\n
  • https://www.kaspersky.com
  • https://www.kaspersky.com/blog/face-unlock-insecurity/21618/\nhttps
  • https://www.lg.com
  • https://www.lg.com/africa/support/product-help/CT20080025-1436354408798-others\n
  • https://www.lg.com/ca_en/support/product-help/CT20098088-20150129256824-others\n
  • https://www.lg.com/ca_en/support/product-help/CT30014940-1440413573040-others\nhttps
  • https://www.lg.com/ca_en/support/product-help/CT31903570-1428542236040-file-media-transfer-pictures-music-etc\n
  • https://www.lg.com/hk_en/support/product-help/CT20136018-20150122834174-others\n
  • https://www.lg.com/hk_en/support/product-help/CT30007700-20150123957406-others\n
  • https://www.lg.com/hk_en/support/product-help/CT30019000-1433767985158-others\n
  • https://www.lg.com/uk/support/product-help/CT00008356-1433767701724-setting\n
  • https://www.lg.com/uk/support/product-help/CT00008356-20150332136499-others\n
  • https://www.lg.com/us/mobile-phones/VS980/Userguide/109-1.html\n
  • https://www.lg.com/us/mobile-phones/VS980/Userguide/281.html\n
  • https://www.lg.com/us/mobile-phones/VS985/Userguide/048.html\n
  • https://www.lg.com/us/mobile-phones/VS986/Userguide/339.html\n
  • https://www.lg.com/us/support/help-library/lg-android-backup-CT10000025-20150104708841\n
  • https://www.lg.com/us/support/help-library/lg-android-lg-health-CT30013120-20150103629401\n
  • https://www.lg.com/us/support/help-library/lg-android-quick-help-CT10000026-20150103624836\n
  • https://www.lg.com/us/support/help-library/lg-android-quickmemo-CT10000025-20150103629575\n
  • https://www.lg.com/us/support/help-library/lg-android-smart-settings-CT10000025-20150103623722\n
  • https://www.lg.com/us/support/help-library/lg-g4-content-lock-CT10000027-1432774759427\n
  • https://www.lightreading.com
  • https://www.lightreading.com/motricity-holds-on-to-verizon-account/d/d-id/678478?\n
  • https://www.logmeinrescue.com
  • https://www.logmeinrescue.com/
  • https://www.logmeinrescue.com/customer-stories/motorola\nIt
  • https://www.mi-pay.com
  • https://www.mi-pay.com/\n#\n.in
  • https://www.mi.com
  • https://www.mi.com/in/service/privilegefaq/\n
  • https://www.mobilefun.co.uk
  • https://www.mobilefun.co.uk/blog/2008/06/software-updates-sony-ericsson/
  • https://www.neowin.net
  • https://www.neowin.net/news/lg-v30-closer-look-floating-bar/\n
  • https://www.newsbreak.com
  • https://www.newsbreak.com/
  • https://www.nowsms.com
  • https://www.nowsms.com/doc/submitting-sms-messages/sending-wap-push-messages
  • https://www.nuance.com
  • https://www.nuance.com/mobile/mobile-applications/swype/android.html\nhttps
  • https://www.olorin.me
  • https://www.olorin.me/2019/09/08/debloating-the-umidigi-f1-play/
  • https://www.pcmag.com
  • https://www.pcmag.com/news/mcafee-samsung-partner-on-built-in-security-vpn-for-galaxy-s9\nhttps
  • https://www.pcmag.com/news/the-cost-of-avasts-free-antivirus-companies-can-spy-on-your-clicks
  • https://www.pcmag.com/news/the-cost-of-avasts-free-antivirus-companies-can-spy-on-your-clicks\n
  • https://www.phonearena.com
  • https://www.phonearena.com/news/Sony-Xperia-Lounge-shutting-down_id118252\n
  • https://www.playphone.com
  • https://www.playphone.com/
  • https://www.privacytools.io
  • https://www.privacytools.io/providers/vpn/
  • https://www.privateinternetaccess.com
  • https://www.privateinternetaccess.com/blog/android-community-worried-about-presence-of-chinese-spyware-by-qihoo-360-in-samsung-smartphones-and-tablets/\nhttps
  • https://www.programmersought.com
  • https://www.programmersought.com/article/50164530665/\nIMS
  • https://www.qualcomm.com
  • https://www.qualcomm.com/news/onq/2013/07/02/qualcomms-cne-bringing-smarts-3g4g-wi-fi-seamless-interworking\nhttps
  • https://www.qualcomm.com/news/onq/2016/05/02/qualcomm-trupalette-brings-your-phones-display-life
  • https://www.qualcomm.com/news/releases/1996/05/07/qualcomm-introduces-new-high-speed-dual-direct-digital-synthesizer\nInfo
  • https://www.qualcomm.com/news/releases/2015/03/02/qualcomm-powers-mobile-and-home-connectivity-innovations-mobile-world
  • https://www.qualcomm.com/products/xr-vr-ar
  • https://www.qualcomm.com/site/privacy/services
  • https://www.quora.com
  • https://www.quora.com/What-is-VSIM-virtual-SIM-technology\nHas
  • https://www.quora.com/Whats-wrong-with-UC-Browser\nhttps
  • https://www.realvnc.com
  • https://www.realvnc.com/en/legal/#privacy\nNot
  • https://www.reddit.com
  • https://www.reddit.com/r/Android/comments/ektg8u/chinese_spyware_preinstalled_on_all_samsung/\nhttps
  • https://www.reddit.com/r/Android/comments/fde3l6/3rd_party_telemetry_found_in_nokia_smartphones/fjh4zbx/?context
  • https://www.reddit.com/r/GalaxyS8/comments/6esiub/tmobile_s8s8_multiline_setting_is_awesome/did2pur/\n
  • https://www.reddit.com/r/google/comments/ajnbmh/the_reviews_for_device_health_services_are_quite/
  • https://www.reddit.com/r/lgv20/comments/6u0wnf/what_is_mobile_services_manager_did_i_catch_a/\n
  • https://www.repricerexpress.com
  • https://www.repricerexpress.com/amazon-attribution/\n
  • https://www.reuters.com
  • https://www.reuters.com/companies/EDITol.SI
  • https://www.sammobile.com
  • https://www.sammobile.com/news/samsung-pay-new-privacy-policy-your-data-sold/
  • https://www.samsung.com
  • https://www.samsung.com/africa_en/support/mobile-devices/what-is-s-translator-and-how-does-it-work/\n
  • https://www.samsung.com/au/getstarted/advanced/create-favourite-contacts-on-your-home-screen/\nIs
  • https://www.samsung.com/au/support/mobile-devices/connecting-devices-via-wifi-direct/\nhttps
  • https://www.samsung.com/au/support/mobile-devices/how-to-use-game-tools/
  • https://www.samsung.com/au/support/mobile-devices/using-one-handed-mode/\n
  • https://www.samsung.com/au/support/mobile-devices/what-is-app-icon-badge/\n
  • https://www.samsung.com/au/support/mobile-devices/what-is-link-sharing/\n
  • https://www.samsung.com/global/galaxy/apps/bixby/reminder/
  • https://www.samsung.com/global/galaxy/apps/bixby/vision/\n
  • https://www.samsung.com/global/galaxy/apps/galaxy-themes/\nYou'll
  • https://www.samsung.com/global/galaxy/apps/game-launcher/\nAll
  • https://www.samsung.com/global/galaxy/apps/kids-mode/
  • https://www.samsung.com/global/galaxy/apps/samsung-dex/\n
  • https://www.samsung.com/global/galaxy/apps/samsung-kids-home/
  • https://www.samsung.com/global/galaxy/apps/samsung-members/\nOOOPS
  • https://www.samsung.com/global/galaxy/apps/samsung-notes/
  • https://www.samsung.com/global/galaxy/apps/samsung-pass/\n
  • https://www.samsung.com/global/galaxy/apps/smart-switch/\nhttps
  • https://www.samsung.com/global/galaxy/apps/smartthings/\n\nProbably
  • https://www.samsung.com/global/galaxy/what-is/air-command/\n
  • https://www.samsung.com/global/galaxy/what-is/apps-edge/
  • https://www.samsung.com/global/galaxy/what-is/ar-emoji/\n
  • https://www.samsung.com/global/galaxy/what-is/bixby-routines/
  • https://www.samsung.com/global/galaxy/what-is/dual-messenger/
  • https://www.samsung.com/global/galaxy/what-is/find-my-mobile/\nhttps
  • https://www.samsung.com/global/galaxy/what-is/live-focus/\n
  • https://www.samsung.com/global/galaxy/what-is/live-message/\n
  • https://www.samsung.com/global/galaxy/what-is/motion-panorama/\n
  • https://www.samsung.com/global/galaxy/what-is/motion-photo/\n
  • https://www.samsung.com/global/galaxy/what-is/people-edge/\nhttps
  • https://www.samsung.com/global/galaxy/what-is/s-finder/
  • https://www.samsung.com/global/galaxy/what-is/s-voice/\n
  • https://www.samsung.com/hk_en/mobile-accessories/led-cover-for-galaxy-s10/EF-KG973CBEGWW/\nHOW
  • https://www.samsung.com/ie/support/mobile-devices/what-are-widgets-and-how-do-i-add-them-to-my-android-smartphone-or-tablet/\n
  • https://www.samsung.com/in/samsung-pay/mini/\n
  • https://www.samsung.com/in/support/mobile-devices/what-is-group-play-in-samsung-smartphones/\n
  • https://www.samsung.com/in/support/mobile-devices/what-is-story-album-application-in-samsung-galaxy-s4/
  • https://www.samsung.com/latin_en/support/mobile-devices/media-and-device-feature/\nHas
  • https://www.samsung.com/levant/multi-device-experience/
  • https://www.samsung.com/levant/support/mobile-devices/galaxy-s7-edge-how-do-i-add-tasks-edge/\n
  • https://www.samsung.com/levant/support/mobile-devices/galaxy-s8-s8-plus-what-is-the-smart-fitting-display-for-vod-games/\n
  • https://www.samsung.com/levant/support/mobile-devices/which-features-are-available-in-the-ar-zone-in-the-galaxy-z-flip/\nLets
  • https://www.samsung.com/levant/support/side-sync/\n
  • https://www.samsung.com/my/support/mobile-devices/what-is-galaxy-essentials-and-how-can-i-add-or-remove-it-from-my-smartphone-home-screen/\n
  • https://www.samsung.com/nz/support/mobile-devices/samsung-separate-app-sound/\n
  • https://www.samsung.com/nz/support/mobile-devices/samsung-sos-smart-phone-emergency-message-guide/\n
  • https://www.samsung.com/nz/support/mobile-devices/what-is-mobile-tracker/\n
  • https://www.samsung.com/semiconductor/security/ese/\nSee
  • https://www.samsung.com/sg/support/mobile-devices/how-do-you-convert-handwriting-to-text-and-other-formats-using-s-pen-and-samsung-notes/\n
  • https://www.samsung.com/uk/accessibility/mobile-assistant-menu/\n
  • https://www.samsung.com/uk/accessibility/mobile-universal-switch/\n
  • https://www.samsung.com/uk/support/mobile-devices/what-is-emergency-mode/
  • https://www.samsung.com/uk/support/mobile-devices/what-is-private-mode-and-how-do-i-use-it/\n
  • https://www.samsung.com/uk/support/mobile-devices/what-is-video-collage-and-how-do-i-use-it/\nUse
  • https://www.samsung.com/uk/support/tv-audio-video/what-is-screen-mirroring-and-how-do-i-use-it-with-my-samsung-tv-and-samsung-mobile-device/\n
  • https://www.samsung.com/us/2012-allshare-play/\n
  • https://www.samsung.com/us/account/customization-service/
  • https://www.samsung.com/us/apps/smart-view-2/\n
  • https://www.samsung.com/us/explore/shop-samsung-app/\n
  • https://www.samsung.com/us/support/answer/ANS00048972/\n
  • https://www.samsung.com/us/support/answer/ANS00077583/\n
  • https://www.samsung.com/us/support/answer/ANS00078920/\n
  • https://www.samsung.com/us/support/answer/ANS00080448/\n
  • https://www.samsung.com/us/support/answer/ANS00082282/\n
  • https://www.samsung.com/us/support/answer/ANS00084210/\n
  • https://www.samsung.com/us/support/owners/app/samsung-cloud
  • https://www.samsung.com/us/support/troubleshooting/TSG01001489/\nHOW
  • https://www.samsung.com/za/support/mobile-devices/how-do-i-use-the-scrapbook-memo-feature-on-my-samsung-galaxy-note3/\n
  • https://www.samsung.com/za/support/mobile-devices/what-is-enhanced-messaging/\n
  • https://www.samsung.com/za/support/mobile-devices/what-is-the-peel-smart-remote-application/\n
  • https://www.samsunggeeks.com
  • https://www.samsunggeeks.com/2015/10/25/what-is-the-samsung-push-service/\n
  • https://www.samsungknox.com
  • https://www.samsungknox.com/en/solutions/it-solutions/knox-manage\nhttps
  • https://www.samsungknox.com/en/solutions/personal-apps/secure-folder\nNOTE
  • https://www.scoutgps.com
  • https://www.scoutgps.com/\n
  • https://www.sonymobile.com
  • https://www.sonymobile.com/global-en/apps-services/3d-creator/\n
  • https://www.sprint.com
  • https://www.sprint.com/en/support/solutions/services/restrict-your-caller-id-information.html\n
  • https://www.sprint.com/en/support/solutions/services/safe-and-found.html\n
  • https://www.synacktiv.com
  • https://www.synacktiv.com/posts/exploit/kinibi-tee-trusted-application-exploitation.html\nhttps
  • https://www.t-mobile.com
  • https://www.t-mobile.com/support/coverage/wi-fi-calling-from-t-mobile\nVoLTE/IMS
  • https://www.techradar.com
  • https://www.techradar.com/news/phone-and-communications/mobile-phones/the-samsung-game-hub-explained-1143450\n
  • https://www.techrepublic.com
  • https://www.techrepublic.com/blog/asian-technology/japanese-government-warns-baidu-ime-is-spying-on-users/\nArchive
  • https://www.techrepublic.com/blog/asian-technology/japanese-government-warns-baidu-ime-is-spying-on-users/\nNOTE
  • https://www.telecomhall.net
  • https://www.telecomhall.net/t/parameter-timing-advance-ta/6390\n
  • https://www.telenav.com
  • https://www.telenav.com/legal/policies-privacy-policy\n
  • https://www.tempow.com
  • https://www.tempow.com/tap\nNOTE
  • https://www.theinquirer.net
  • https://www.theinquirer.net/inquirer/news/2328363/samsung-context-service-will-collect-user-data-to-share-with-developers\nContent
  • https://www.theverge.com
  • https://www.theverge.com/2018/9/19/17877970/xiaomi-ads-settings-menu-android-phones\n
  • https://www.trustonic.com
  • https://www.trustonic.com/news/blog/benefits-trusted-user-interface/\nhttps
  • https://www.ubergizmo.com
  • https://www.ubergizmo.com/2017/03/galaxy-s8-facial-unlock-photograph/\nhttps
  • https://www.ucssolutions.com
  • https://www.ucssolutions.com/blog/samsung-knox/\nI
  • https://www.vice.com
  • https://www.vice.com/en_us/article/qjdkq7/avast-antivirus-sells-user-browsing-data-investigation\n
  • https://www.vice.com/en_us/article/qjdkq7/avast-antivirus-sells-user-browsing-data-investigation\nhttps
  • https://www.virustotal.com
  • https://www.virustotal.com/gui/file/048ead2be8d18bbe2b05651380069b3740dd05703e9bd66630da986026518398/details\nNOTE
  • https://www.virustotal.com/gui/file/70400d0055e1924966fb8367cafddc175dee914bbdc227342c9dd86fb3aa829f/details\nIt
  • https://www.virustotal.com/gui/file/a978d90f27d5947dca33ed59b73bd8efbac67253f9ef7a343beb9197c8913d1a/details
  • https://www.whitepages.com
  • https://www.whitepages.com/
  • https://www.wps.com
  • https://www.wps.com/privacy-policy\n
  • https://www.xda-developers.com
  • https://www.xda-developers.com/android-project-mainline-modules-explanation/
  • https://www.xda-developers.com/android-project-mainline-modules-explanation/\nhttps
  • https://www.xda-developers.com/appgallery-huawei-alternative-google-play-store-android/\n
  • https://www.xda-developers.com/xiaomi-mi-web-browser-pro-mint-collecting-browsing-data-incognito-mode/\n
  • https://www.xda-developers.com/xiaomi-mi-web-browser-pro-mint-collecting-browsing-data-incognito-mode/\n\nNote
  • https://www.zdnet.com
  • https://www.zdnet.com/article/googles-instant-apps-goes-live-now-you-can-try-android-apps-before-installing-them/\n
  • https://www.zdnet.com/article/new-sim-card-attack-disclosed-similar-to-simjacker/
  • https://www.zdnet.com/article/samsung-huawei-lg-and-sony-phones-vulnerable-to-rogue-provisioning-messages/
  • https://www.zdnet.com/article/samsung-huawei-lg-and-sony-phones-vulnerable-to-rogue-provisioning-messages/\n
  • https://www.zdnet.fr
  • https://www.zdnet.fr/actualites/les-smartphones-samsung-huawei-lg-et-sony-vulnerables-a-des-attaques-par-provisioning-39890045.htm\nhttps
  • https://wysdom.ai
  • huawei.com
  • hybrid-analysis.com
  • ifstudies.org
  • inprocess.cn
  • ironsrc.com
  • itmunch.com
  • jibe.google.com
  • justaskgemalto.com
  • kaspersky.com
  • knowledge.protektoid.com
  • kp-cdn.samsungknox.com
  • ldplayer.net
  • libredd.it
  • lightreading.com
  • linkedin.com
  • logmeinrescue.com
  • m.att.com
  • ma.android.com
  • medium.com
  • mi-pay.com
  • milankragujevic.com
  • mindorks.com
  • mirrorlink.com
  • mobeam.com
  • mobile.com
  • mobile.softpedia.com
  • mobile.spectrum.com
  • mobilefun.co.uk
  • mobileinternist.com
  • motorola-global-portal.custhelp.com
  • motorola.com
  • ms.samsungapps.com
  • mylivebox.fr
  • nakedsecurity.sophos.com
  • naver.com
  • nelenkov.blogspot.com
  • neowin.net
  • networkstack.cn
  • networkstack.inprocess.cn
  • news.ycombinator.com
  • newsbreak.com
  • nextradioapp.com
  • nflgamecenter.us
  • nikkei.com
  • nitter.42l.fr
  • nitter.net
  • nokia.com
  • nowsms.com
  • nuance.com
  • nvd.nist.gov
  • nypost.com
  • odmoverlay.com
  • oneplus.com
  • oneplus.commonoverlay.com
  • oneplus.commonoverlay.com.android.networkstack.inprocess.cn
  • oneplus.commonoverlay.com.google.android.networkstack.cn
  • oneplus.odmoverlay.com
  • oneplus.productoverlay.com
  • onezero.medium.com
  • openssl.org
  • orange.fr
  • orange.mail.fr
  • orange.mylivebox.fr
  • patents.google.com
  • pcmag.com
  • phonearena.com
  • phones.nokia.com
  • pinsightmedia.com
  • pithus.org
  • play.google.com
  • playphone.com
  • pocketnow.com
  • portal.custhelp.com
  • privacy.eu.org
  • privateinternetaccess.com
  • productoverlay.com
  • programmersought.com
  • protektoid.com
  • qti.qualcomm.com
  • qualcomm.com
  • quarkslab.com
  • quicinc.com
  • quora.com
  • raw.githubusercontent.com
  • realvnc.com
  • reddit.com
  • reporting.qti.qualcomm.com
  • reports.exodus-privacy.eu.org
  • repricerexpress.com
  • research.checkpoint.com
  • reuters.com
  • ro-che.info
  • sammobile.com
  • samsung.android.bixby.es
  • samsung.android.net
  • samsung.com
  • samsung.vvm.se
  • samsungapps.com
  • samsunggeeks.com
  • samsungknox.com
  • scoutgps.com
  • scripts.sil.org
  • searchstorage.techtarget.com
  • sec.svoice.lang.it
  • security.stackexchange.com
  • sharpcorner.com
  • shopping.naver.com
  • softpedia.com
  • sonymobile.com
  • sophos.com
  • source.android.com
  • source.codeaurora.org
  • spectrum.com
  • sprint.com
  • stackexchange.com
  • stackoverflow.com
  • stg-dc.dqa.samsung.com
  • support.google.com
  • support.motorola.com
  • support.samsungknox.com
  • support.sonymobile.com
  • support.t-mobile.com
  • support.vodafone.co.uk
  • svoice.lang.it
  • swe.quicinc.com
  • synacktiv.com
  • t-mobile.com
  • tamingthedroid.com
  • techcrunch.com
  • techradar.com
  • techrepublic.com
  • techtarget.com
  • telecomhall.net
  • telemetry.swe.quicinc.com
  • telenav.com
  • tempow.com
  • thatoneprivacysite.net
  • thehackernews.com
  • theinquirer.net
  • theverge.com
  • thijsbroenink.com
  • thoughtarama.wordpress.com
  • tls.telemetry.swe.quicinc.com
  • trustonic.com
  • tutsplus.com
  • typoland.com
  • ubergizmo.com
  • ucssolutions.com
  • uk.linkedin.com
  • usejournal.com
  • vas.samsungapps.com
  • videotron.tmtx.ca
  • virustotal.com
  • vodafone.co.uk
  • wallabag.org
  • web.archive.org
  • whitepages.com
  • wikipedia.org
  • wordpress.com
  • www.3gpp.org
  • www.allaboutcircuits.com
  • www.android.com
  • www.androidauthority.com
  • www.androidcentral.com
  • www.androidexplained.com
  • www.androidpit.com
  • www.androidpolice.com
  • www.aptilo.com
  • www.att.com
  • www.bleepingcomputer.com
  • www.bromite.org
  • www.buzzfeednews.com
  • www.c-sharpcorner.com
  • www.cacert.org
  • www.catcert.net
  • www.cequint.com
  • www.chrisdcmoore.co.uk
  • www.comparitech.com
  • www.cordcuttersnews.com
  • www.csoonline.com
  • www.deviantart.com
  • www.digitalinformationworld.com
  • www.digitaltrends.com
  • www.droid-life.com
  • www.eff.org
  • www.ekahau.com
  • www.entrust.net
  • www.eteknix.com
  • www.fairphone.com
  • www.felicanetworks.co.jp
  • www.fiercewireless.com
  • www.financialmirror.com
  • www.freecodecamp.org
  • www.freepatentsonline.com
  • www.freshpatents.com
  • www.gadgetguy.com.au
  • www.geekwire.com
  • www.gizchina.com
  • www.google.com
  • www.gpsworld.com
  • www.greenbot.com
  • www.howtogeek.com
  • www.huawei.com
  • www.hybrid-analysis.com
  • www.ironsrc.com
  • www.justaskgemalto.com
  • www.kaspersky.com
  • www.lg.com
  • www.lightreading.com
  • www.logmeinrescue.com
  • www.mi-pay.com
  • www.mi.com
  • www.mobilefun.co.uk
  • www.neowin.net
  • www.newsbreak.com
  • www.nowsms.com
  • www.nuance.com
  • www.pcmag.com
  • www.phonearena.com
  • www.playphone.com
  • www.privateinternetaccess.com
  • www.programmersought.com
  • www.qualcomm.com
  • www.quora.com
  • www.realvnc.com
  • www.reddit.com
  • www.repricerexpress.com
  • www.reuters.com
  • www.sammobile.com
  • www.samsung.com
  • www.samsunggeeks.com
  • www.samsungknox.com
  • www.scoutgps.com
  • www.sonymobile.com
  • www.sprint.com
  • www.synacktiv.com
  • www.t-mobile.com
  • www.techradar.com
  • www.techrepublic.com
  • www.telecomhall.net
  • www.telenav.com
  • www.tempow.com
  • www.theinquirer.net
  • www.theverge.com
  • www.trustonic.com
  • www.typoland.com
  • www.ubergizmo.com
  • www.ucssolutions.com
  • www.vice.com
  • www.virustotal.com
  • www.whitepages.com
  • www.wps.com
  • www.xda-developers.com
  • www.zdnet.com
  • www.zdnet.fr
  • xda-developers.com
  • ycombinator.com
  • zdnet.com
  • zdnet.fr
  • zzhc.vnet.cn
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Uses constants related to SHA256
Uses constants related to SHA512
Uses constants related to RC5 or RC6
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
  • LoadLibraryA
Functions which can be used for anti-debugging purposes:
  • SwitchToThread
Possibly launches other programs:
  • CreateProcessW
Leverages the raw socket API to access the Internet:
  • connect
  • recv
  • send
  • ioctlsocket
  • WSASend
  • WSARecv
  • bind
  • getpeername
  • closesocket
  • WSASocketW
  • WSAGetLastError
  • getaddrinfo
  • WSACleanup
  • listen
  • freeaddrinfo
  • getsockname
  • accept
  • getsockopt
  • select
  • setsockopt
  • WSAStartup
Reads the contents of the clipboard:
  • GetClipboardData
Suspicious VirusTotal score: 2/72 (Scanned on 2025-03-01 10:24:30) Google: Detected
Ikarus: Trojan.Win64.Manjusaka

Hashes

MD5 4da58ccd0b84f65d4a40969049412668
SHA1 07ec856dc217badcf77158bcb11830a8278aace6
SHA256 166d4b074870e194b17c507d11f92e4348cf0b7c756b3f829311acbd87e96fe6
SHA3 2472f90d252e27afd29772b08a5b57664bc9ac1a0253189f714b5a5ed5c7b27d
SSDeep 98304:hbCwwpyEdhwtPV3GsMEJgH04JAQ/wWsizFWjJelve+:FCvwD4o2QL
Imports Hash 191914b162effb4620cb27be3f89e8e4

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x108

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2022-Apr-03 00:17:19
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x3f7800
SizeOfInitializedData 0x2ec800
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00000000003CC528 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x6e9000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 ddb3679990abb56214ede8a88a827345
SHA1 9d19a24834cd14e9231b047178079305c63c6e48
SHA256 a371ebce7bc6a0091319dc0042cc3d46cc0d0de7f7f7598b30c2f0361a17699b
SHA3 778064d068a0ff6fa123a1af2b12c6b5c7c8166c5fff97b5b3d0efd66e79be4b
VirtualSize 0x3f7670
VirtualAddress 0x1000
SizeOfRawData 0x3f7800
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.33081

.rdata

MD5 c109ddcce5bab60bfefed02348cfdf69
SHA1 d7f8cb96fc2d48d04030bfe3fd261a373ddf8f16
SHA256 11afca51f5941c63637fde2499710eec20f91e742fd909bb05a1ae305aa1fc52
SHA3 befb3cd25eb4375d2d3876f0c1a3e793b983aa5d70ea286f4a6c33089ec38c7f
VirtualSize 0x2b31b4
VirtualAddress 0x3f9000
SizeOfRawData 0x2b3200
PointerToRawData 0x3f7c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.95516

.data

MD5 37449967daf34756dcd4ad330c91f8b9
SHA1 6d22fbfac62d15e09c9bf8c15266b55980db3913
SHA256 276d9fe9596db0b6fa265597fc6097f9795375a5897d3cb58914c4762add62c6
SHA3 c2b91e3263f3e08d8344ecbf4cd607f10c0b2a1112efc688009573db3f5e87d9
VirtualSize 0x25d0
VirtualAddress 0x6ad000
SizeOfRawData 0xc00
PointerToRawData 0x6aae00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.12607

.pdata

MD5 0e03561c9bd3b952827a5bc610c2ed2b
SHA1 90de249e1c3cf4891d6f6abc7288eaf6daba9671
SHA256 af40c38b882202fbb29f74d0a09892098d3b160860ab6e2ebed5c1d020d0c392
SHA3 b3159745169e106e5ee1ee7b1856c36efa76b6cd4f68ddd4b3e1605126defee8
VirtualSize 0x2aaec
VirtualAddress 0x6b0000
SizeOfRawData 0x2ac00
PointerToRawData 0x6aba00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.53778

_RDATA

MD5 e88aba1a9843dc3bd67ba5ae7954962a
SHA1 094c0355aaf2fd39ce1dfe9711ceb42921b4853a
SHA256 01580d5e22833999cfcf387037a8ec012d876ccb4e9537bb71d5130c6fa69e0b
SHA3 ef47821c16b6af057011d52737b15aa06ce3c5adb5111a7defb6a3400d1770bd
VirtualSize 0x15c
VirtualAddress 0x6db000
SizeOfRawData 0x200
PointerToRawData 0x6d6600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.31328

.reloc

MD5 6ddc4f6bfda6a0cc267dd58d019861ff
SHA1 82c7266699b7acd4f5465ce815809adf543bc21f
SHA256 ec0a154778db415bd83acc84c706b4bf821c520edb81ca9449170d5686b5d4dd
SHA3 f5d5694f2ec5a704ee4217e3e2dd577e9588a74ac6c71415eaff51446ec41b45
VirtualSize 0xc168
VirtualAddress 0x6dc000
SizeOfRawData 0xc200
PointerToRawData 0x6d6800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.46238

Imports

bcrypt.dll BCryptGenRandom
ADVAPI32.dll SystemFunction036
D3DCOMPILER_47.dll D3DCompile
dwmapi.dll DwmEnableBlurBehindWindow
GDI32.dll DeleteObject
GetDeviceCaps
CreateRectRgn
KERNEL32.dll GetConsoleOutputCP
HeapFree
HeapAlloc
GetProcessHeap
HeapReAlloc
SetThreadErrorMode
FreeLibrary
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GetTimeZoneInformation
GetLastError
GlobalFree
GlobalUnlock
GetProcAddress
LoadLibraryExW
lstrlenW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
SwitchToThread
CloseHandle
Sleep
GetModuleHandleA
GetSystemInfo
SleepConditionVariableSRW
WakeConditionVariable
WakeAllConditionVariable
TryEnterCriticalSection
GetStdHandle
GetConsoleMode
WriteFile
WriteConsoleW
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
GetCurrentProcess
ReleaseMutex
SetLastError
GetEnvironmentVariableW
RtlLookupFunctionEntry
GetModuleHandleW
FormatMessageW
SetEnvironmentVariableW
GetModuleFileNameW
CreateFileW
GetFileInformationByHandle
DeviceIoControl
ReadFile
GetFullPathNameW
SetFilePointerEx
CreateDirectoryW
InitializeCriticalSection
SetHandleInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringOrdinal
GetFileAttributesW
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
GetCurrentProcessId
CreateNamedPipeW
DuplicateHandle
WaitForMultipleObjects
GetOverlappedResult
WaitForSingleObject
GetExitCodeProcess
CreateEventW
CancelIo
ExitProcess
QueryPerformanceFrequency
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentDirectoryW
GetCurrentThread
RtlCaptureContext
AcquireSRWLockShared
ReleaseSRWLockShared
CreateThread
SetThreadStackGuarantee
CreateEventA
GetCurrentThreadId
AddVectoredExceptionHandler
SetConsoleMode
MoveFileExW
DeleteFileW
GetCommandLineW
RemoveVectoredExceptionHandler
GlobalLock
GlobalSize
WideCharToMultiByte
MultiByteToWideChar
GlobalAlloc
RtlVirtualUnwind
RtlPcToFileHeader
FlushFileBuffers
HeapSize
LCMapStringW
CompareStringW
FlsFree
RtlUnwindEx
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
GetCommandLineA
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
RaiseException
ole32.dll CoInitializeEx
OleInitialize
CoTaskMemFree
RevokeDragDrop
CoCreateInstance
CoUninitialize
RegisterDragDrop
SHELL32.dll SHGetKnownFolderPath
DragFinish
DragQueryFileW
USER32.dll GetWindowLongW
ClientToScreen
GetCursorPos
GetMonitorInfoW
MsgWaitForMultipleObjectsEx
OpenClipboard
GetClipboardData
CloseClipboard
EmptyClipboard
SetClipboardData
ShowWindow
SendMessageW
SetWindowLongW
GetActiveWindow
ShowCursor
GetClipCursor
ClipCursor
DestroyIcon
GetMenu
AdjustWindowRectEx
SystemParametersInfoA
ChangeDisplaySettingsExW
SetWindowPlacement
GetWindowPlacement
ReleaseCapture
RegisterWindowMessageA
GetKeyboardLayout
GetKeyState
ToUnicodeEx
GetKeyboardState
TrackMouseEvent
ScreenToClient
LoadCursorW
IsProcessDPIAware
SetForegroundWindow
SendInput
MapVirtualKeyW
GetDC
RegisterTouchWindow
GetSystemMetrics
GetUpdateRect
PeekMessageW
PostThreadMessageW
ValidateRect
GetRawInputData
DefWindowProcW
GetWindowLongPtrW
DestroyWindow
InvalidateRgn
SetWindowPos
DispatchMessageW
TranslateMessage
MonitorFromPoint
RegisterRawInputDevices
GetMessageW
SetWindowLongPtrW
CreateWindowExW
RegisterClassExW
PostMessageW
MonitorFromWindow
SetWindowTextW
RedrawWindow
GetClientRect
CloseTouchInputHandle
GetTouchInputInfo
MapVirtualKeyA
SetCapture
SetCursor
MonitorFromRect
UxTheme.dll SetWindowTheme
WINMM.dll timeBeginPeriod
timeGetDevCaps
timeEndPeriod
WS2_32.dll connect
recv
send
ioctlsocket
WSASend
WSARecv
bind
getpeername
closesocket
WSASocketW
WSAGetLastError
getaddrinfo
WSACleanup
listen
freeaddrinfo
getsockname
accept
getsockopt
select
setsockopt
WSAStartup

Delayed Imports

Version Info

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2022-Apr-03 00:17:19
Version 0.0
SizeofData 1020
AddressOfRawData 0x625c14
PointerToRawData 0x624814

TLS Callbacks

StartAddressOfRawData 0x140626030
EndAddressOfRawData 0x1406261b8
AddressOfIndex 0x1406ae420
AddressOfCallbacks 0x1403f9928
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_8BYTES
Callbacks 0x000000014017ED70

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x1406ad150

RICH Header

XOR Key 0x85d4f45
Unmarked objects 0
ASM objects (29395) 8
C++ objects (29395) 142
C objects (29395) 25
C++ objects (VS 2015-2022 runtime 30818) 41
C objects (VS 2015-2022 runtime 30818) 16
ASM objects (VS 2015-2022 runtime 30818) 9
Imports (29395) 25
Total imports 257
C objects (VS2022 Update 1 (17.1.0-1) compiler 31104) 12
Unmarked objects (#2) 13
Linker (VS2022 Update 1 (17.1.0-1) compiler 31104) 1

Errors