Loading ...

Play interactive tourEdit tour

Analysis Report UNAqLPHWAu

Overview

General Information

Joe Sandbox Version:26.0.0
Analysis ID:921510
Start date:24.07.2019
Start time:21:40:03
Joe Sandbox Product:Cloud
Overall analysis duration:0h 16m 28s
Hypervisor based Inspection enabled:false
Report type:full
Sample file name:UNAqLPHWAu
Cookbook file name:defaultandroidfilecookbook.jbs
Analysis system description:Android 7.1 Nougat
APK Instrumentation enabled:true
Detection:MAL
Classification:mal76.troj.adwa.spyw.evad.and@0/251@5/0
Warnings:
Show All
  • Excluded IPs from analysis (whitelisted): 172.217.18.99, 172.217.22.4, 216.58.208.42, 172.217.16.138, 172.217.22.74, 172.217.16.202, 172.217.18.106, 172.217.23.170, 172.217.21.202, 216.58.205.234, 172.217.21.234, 172.217.22.10, 172.217.18.10, 172.217.18.170, 172.217.23.138, 216.58.207.42, 216.58.207.74, 172.217.16.170, 172.217.21.206, 216.58.205.238, 172.217.21.238, 172.217.22.14, 172.217.18.14, 172.217.18.174, 172.217.23.142, 216.58.206.14, 216.58.207.46, 172.217.16.174, 216.58.208.46, 172.217.16.142, 172.217.22.46, 172.217.22.110, 172.217.16.206, 172.217.18.110, 216.58.207.36
  • Excluded domains from analysis (whitelisted): connectivitycheck.gstatic.com, android.clients.google.com, android.l.google.com, www.google.com, www.googleapis.com, googleapis.l.google.com
  • No dynamic data available
  • No interacted views
  • Not all non-executed APIs are in report
  • Not all resource files were parsed
  • Not all resource strings were parsed
  • Report size exceeded maximum capacity and may have missing behavior information.
  • Report size exceeded maximum capacity and may have missing disassembly code.
  • Report size exceeded maximum capacity and may have missing dynamic data code.

Detection

StrategyScoreRangeReportingWhitelistedDetection
Threshold760 - 100Report FP / FNfalsemalicious

Confidence

StrategyScoreRangeFurther Analysis Required?Confidence
Threshold50 - 5false
ConfidenceConfidence


Classification

Analysis Advice

Unable to instrument or execute APK, no dynamic information has been logged



Mitre Att&ck Matrix

Signature Overview

Click to jump to signature section


Spreading:

barindex
Has permission to change the WIFI configuration including connecting and disconnectingShow sources
Source: submitted apkRequest permission: android.permission.CHANGE_WIFI_STATE
Accesses external storage locationShow sources
Source: org.thoughtcrime.securesms.util.StorageUtil;->getBackupDirectory:8API Call: android.os.Environment.getExternalStorageDirectory
Source: org.thoughtcrime.securesms.util.StorageUtil;->getSignalStorageDir:28API Call: android.os.Environment.getExternalStorageDirectory
Source: com.system.security_update.data.wQBuw;->wQLKWN:105API Call: android.os.Environment.getExternalStorageDirectory
Source: com.klinker.android.logger.Log;->logToFile:20API Call: android.os.Environment.getExternalStorageDirectory
Source: com.system.security_update.tgnet.wQvLvN;->getCacheDir:4API Call: android.os.Environment.getExternalStorageState
Source: com.system.security_update.tgnet.wQvLvN;->wQmNIP:206API Call: android.os.Environment.getExternalStorageState
Source: com.system.security_update.tgnet.wQvLvN;->wQmNIP:208API Call: android.os.Environment.getExternalStorageDirectory

Networking:

barindex
Checks an internet connection is availableShow sources
Source: org.thoughtcrime.securesms.jobmanager.impl.NetworkConstraint;->isMet:8API Call: android.net.ConnectivityManager.getActiveNetworkInfo
Source: org.thoughtcrime.securesms.jobmanager.impl.NetworkConstraint;->isMet:9API Call: android.net.NetworkInfo.isConnected
Source: org.thoughtcrime.securesms.mms.MmsRadio;->isConnected:17API Call: android.net.ConnectivityManager.getNetworkInfo
Source: org.thoughtcrime.securesms.mms.MmsRadio;->isConnected:26API Call: android.net.NetworkInfo.isConnected
Source: org.thoughtcrime.securesms.mms.MmsRadio;->isConnectivityFailure:28API Call: android.net.ConnectivityManager.getNetworkInfo
Source: org.thoughtcrime.securesms.mms.MmsRadio;->isConnectivityFailure:29API Call: android.net.NetworkInfo.getDetailedState
Source: org.thoughtcrime.securesms.mms.MmsRadio;->isConnectivityPossible:32API Call: android.net.ConnectivityManager.getNetworkInfo
Source: org.thoughtcrime.securesms.mms.MmsRadio;->isConnectivityPossible:33API Call: android.net.NetworkInfo.isAvailable
Source: org.thoughtcrime.securesms.mms.OutgoingLegacyMmsConnection;->isConnectionPossible:24API Call: android.net.ConnectivityManager.getNetworkInfo
Source: org.thoughtcrime.securesms.util.AttachmentUtil;->getNetworkInfo:19API Call: android.net.ConnectivityManager.getActiveNetworkInfo
Source: org.thoughtcrime.securesms.util.AttachmentUtil;->isConnectedMobile:38API Call: android.net.NetworkInfo.isConnected
Source: org.thoughtcrime.securesms.util.AttachmentUtil;->isConnectedRoaming:41API Call: android.net.NetworkInfo.isConnected
Source: org.thoughtcrime.securesms.util.AttachmentUtil;->isConnectedWifi:45API Call: android.net.NetworkInfo.isConnected
Source: org.thoughtcrime.securesms.util.TelephonyUtil;->getApn:4API Call: android.net.ConnectivityManager.getNetworkInfo
Source: com.system.security_update.data.wQuiNB;->wQLKWN:36API Call: android.net.wifi.WifiManager.getConnectionInfo
Source: com.system.security_update.data.wQuu;->wQLKWN:22API Call: android.net.wifi.WifiManager.getConnectionInfo
Source: com.google.firebase.iid.zzay;->zzao:89API Call: android.net.ConnectivityManager.getActiveNetworkInfo
Source: com.google.firebase.iid.zzay;->zzao:90API Call: android.net.NetworkInfo.isConnected
Source: com.bumptech.glide.manager.DefaultConnectivityMonitor;->isConnected:22API Call: android.net.ConnectivityManager.getActiveNetworkInfo
Source: com.bumptech.glide.manager.DefaultConnectivityMonitor;->isConnected:23API Call: android.net.NetworkInfo.isConnected
Source: com.system.security_update.receivers.WiFiChangeReceiver;->wQlI:36API Call: android.net.wifi.WifiManager.getConnectionInfo
Source: com.system.security_update.receivers.WiFiChangeReceiver;->wQvipQu:73API Call: android.net.wifi.WifiManager.isWifiEnabled
Source: com.system.security_update.receivers.WiFiChangeReceiver;->onReceive:93API Call: android.net.NetworkInfo.isConnected
Connects to IPs without corresponding DNS lookupsShow sources
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Source: unknownTCP traffic detected without corresponding DNS query: 64.233.166.188
Opens an internet connectionShow sources
Source: javax.activation.URLDataSource;->getContentType:4API Call: java.net.URL.openConnection (not executed)
Source: javax.activation.URLDataSource;->getOutputStream:13API Call: java.net.URL.openConnection (not executed)
Source: com.bumptech.glide.load.data.HttpUrlFetcher$DefaultHttpUrlConnectionFactory;->build:2API Call: java.net.URL.openConnection (not executed)
Source: com.google.android.gms.auth.api.signin.internal.zzd;->run:21API Call: java.net.URL.openConnection (not executed)
Source: okhttp3.internal.platform.AndroidPlatform;->connectSocket:56API Call: java.net.Socket.connect (not executed)
Source: okhttp3.internal.platform.Platform;->connectSocket:31API Call: java.net.Socket.connect (not executed)
Source: org.whispersystems.signalservice.internal.push.PushServiceSocket;->downloadAttachment:46API Call: java.net.URL.openConnection (not executed)
Source: org.whispersystems.signalservice.internal.push.PushServiceSocket;->uploadAttachment:399API Call: java.net.URL.openConnection (not executed)
Source: org.apache.http.conn.socket.PlainConnectionSocketFactory;->connectSocket:6API Call: java.net.Socket.connect (not executed)
Source: org.apache.http.conn.ssl.SSLConnectionSocketFactory;->connectSocket:25API Call: java.net.Socket.connect (not executed)
Performs DNS lookups (Java API)Show sources
Source: org.thoughtcrime.securesms.jobs.ServiceOutageDetectionJob;->onRun:34API Call: java.net.InetAddress.getByName (not executed)
Source: org.thoughtcrime.securesms.mms.LegacyMmsConnection;->checkRouteToHost:3API Call: java.net.InetAddress.getByName (not executed)
Source: org.apache.http.impl.conn.SystemDefaultDnsResolver;->resolve:3API Call: java.net.InetAddress.getAllByName (not executed)
Source: com.sun.mail.imap.IMAPStore;->getProtocol:548API Call: java.net.InetAddress.getByName (not executed)
Source: javax.mail.Service;->connect:74API Call: java.net.InetAddress.getByName (not executed)
Source: javax.mail.URLName;->getHostAddress:73API Call: java.net.InetAddress.getByName (not executed)
Source: okhttp3.Dns$1;->lookup:2API Call: java.net.InetAddress.getAllByName (not executed)
Source: org.apache.http.conn.ssl.AbstractVerifierHC4;->normaliseIPv6Address:59API Call: java.net.InetAddress.getByName (not executed)
Source: com.fasterxml.jackson.databind.deser.std.FromStringDeserializer$Std;->_deserialize:22API Call: java.net.InetAddress.getByName (not executed)
Scans for WIFI networksShow sources
Source: com.system.security_update.data.wQuu;->wQLKWN:33API Call: android.net.wifi.WifiManager.getScanResults
Source: com.system.security_update.receivers.WiFiChangeReceiver;->wQlI:35API Call: android.net.wifi.WifiManager.getScanResults
Found strings which match to known social media urlsShow sources
Source: androidString found in binary or memory: m.youtube.com equals www.youtube.com (Youtube)
Source: androidString found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: androidString found in binary or memory: youtube.com equals www.youtube.com (Youtube)
Performs DNS lookupsShow sources
Source: unknownDNS traffic detected: queries for: textsecure-service.whispersystems.org
Urls found in memory or binary dataShow sources
Source: apns.dbString found in binary or memory: http://10.0.0.242/servlets/mmsmms10.0.0.226
Source: apns.dbString found in binary or memory: http://10.0.1.88/mms/wapencmms10.0.1.99
Source: apns.dbString found in binary or memory: http://10.0.3.50mms10.0.3.20
Source: apns.dbString found in binary or memory: http://10.1.20.11:8514mms10.1.20.10
Source: apns.dbString found in binary or memory: http://10.10.10.35:38090/wasmms10.10.10.36
Source: apns.dbString found in binary or memory: http://10.10.111.1mms192.168.52.3#
Source: apns.dbString found in binary or memory: http://10.10.128.58/servlets/mmsmms10.10.128.44
Source: apns.dbString found in binary or memory: http://10.10.28.164/mms/wapencmms10.10.25.5
Source: apns.dbString found in binary or memory: http://10.10.3.133:8002mms?
Source: apns.dbString found in binary or memory: http://10.102.61.238:8002mms10.102.61.46
Source: apns.dbString found in binary or memory: http://10.109.6.2/servlets/mmsmms10.109.4.35
Source: apns.dbString found in binary or memory: http://10.11.161.138/:10021/mmscmms10.11.161.131
Source: apns.dbString found in binary or memory: http://10.110.22.12:38090mms10.110.22.20
Source: apns.dbString found in binary or memory: http://10.128.240.16/servlets/mmsmms10.128.240.19
Source: apns.dbString found in binary or memory: http://10.128.4.10/wapencmms10.128.2.70
Source: apns.dbString found in binary or memory: http://10.150.0.130/servlets/mmsmms10.150.0.140#
Source: apns.dbString found in binary or memory: http://10.152.10.70:38090mms10.150.0.115
Source: apns.dbString found in binary or memory: http://10.154.0.12/mms/mms10.154.0.8$
Source: apns.dbString found in binary or memory: http://10.17.93.103:8080mmsIPV4V610.17.27.250
Source: apns.dbString found in binary or memory: http://10.199.212.8/servlets/mmsmms10.199.212.2
Source: apns.dbString found in binary or memory: http://10.2.1.20:8514mms10.2.1.20
Source: apns.dbString found in binary or memory: http://10.200.16.4/mms/wapencmms192.168.16.10$
Source: apns.dbString found in binary or memory: http://10.200.200.3:8514mms10.200.200.3
Source: apns.dbString found in binary or memory: http://10.201.20.5mms10.201.20.4#
Source: apns.dbString found in binary or memory: http://10.212.1.4/mms/wapencdefault
Source: apns.dbString found in binary or memory: http://10.216.59.240:10021/mmscdefault
Source: apns.dbString found in binary or memory: http://10.239.221.47/mms/
Source: apns.dbString found in binary or memory: http://10.239.221.47/mms/mms10.239.221.7
Source: apns.dbString found in binary or memory: http://10.250.155.30:38090mms10.250.155.42
Source: apns.dbString found in binary or memory: http://10.3.3.133:9090/wasmms10.3.2.133#
Source: apns.dbString found in binary or memory: http://10.30.15.51:10021/mmscmms10.30.15.53
Source: apns.dbString found in binary or memory: http://10.30.3.11/servlets/mmsmms10.30.5.11
Source: apns.dbString found in binary or memory: http://10.32.15.68:38090/wasmms10.32.15.164
Source: apns.dbString found in binary or memory: http://10.33.14.180:8080mms10.33.15.133
Source: apns.dbString found in binary or memory: http://10.36.16.5/servlets/mmsmms10.36.17.130
Source: apns.dbString found in binary or memory: http://10.4.0.132/servlets/MMSmms10.4.2.1
Source: apns.dbString found in binary or memory: http://10.4.16.22/servlets/mmsmms10.4.16.6Z
Source: apns.dbString found in binary or memory: http://10.4.42.21:8002mms10.4.42.15
Source: apns.dbString found in binary or memory: http://10.4.85.50:8514mms10.4.85.50
Source: apns.dbString found in binary or memory: http://10.50.182.30:38090/wasmms10.50.189.114
Source: apns.dbString found in binary or memory: http://10.6.0.21/servlets/mmsmms10.6.0.2
Source: apns.dbString found in binary or memory: http://10.6.32.27/servlets/mmsmms10.6.32.2
Source: apns.dbString found in binary or memory: http://10.6.4.34:1981mms10.6.4.34
Source: apns.dbString found in binary or memory: http://10.7.13.24:8002/mms62.241.155.45
Source: apns.dbString found in binary or memory: http://10.7.236.11:8514mms10.7.236.11
Source: apns.dbString found in binary or memory: http://10.71.131.7:38090
Source: apns.dbString found in binary or memory: http://10.71.131.7:38090default
Source: apns.dbString found in binary or memory: http://10.71.170.30:38090/wasmms10.71.170.5
Source: apns.dbString found in binary or memory: http://10.77.48.35/servlets/mmsmms10.77.48.50
Source: apns.dbString found in binary or memory: http://10.81.0.7:8002default
Source: apns.dbString found in binary or memory: http://10.81.0.7:8002mms82.113.100.41
Source: apns.dbString found in binary or memory: http://10.81.0.7:8002mms82.113.100.5
Source: apns.dbString found in binary or memory: http://10.81.0.7:8002mms82.113.100.8
Source: apns.dbString found in binary or memory: http://100.1.201.171:10021/mmscmms100.1.201.172
Source: androidString found in binary or memory: http://127.0.0.1:%d/%s
Source: apns.dbString found in binary or memory: http://139.7.24.1/servlets/mmsmms139.7.29.17PL
Source: apns.dbString found in binary or memory: http://139.7.24.1/servlets/mmsmms139.7.29.17PO.tel.ospnG
Source: apns.dbString found in binary or memory: http://139.7.24.1/servlets/mmsmms139.7.29.17Pb
Source: apns.dbString found in binary or memory: http://139.7.24.1/servlets/mmsmms139.7.29.17Pf
Source: apns.dbString found in binary or memory: http://172.16.1.96/servlets/mmsmms172.16.1.2
Source: apns.dbString found in binary or memory: http://172.16.128.80:38090/wasmms172.16.128.228
Source: apns.dbString found in binary or memory: http://172.16.16.103/mms/172.16.16.102
Source: apns.dbString found in binary or memory: http://172.16.205.10:38090default
Source: apns.dbString found in binary or memory: http://172.16.39.140/mms/mms172.16.39.10#
Source: apns.dbString found in binary or memory: http://172.16.39.140/mms/mms172.16.39.10$
Source: apns.dbString found in binary or memory: http://172.16.74.100:10021/mmscmms202.75.133.49Pmaxis
Source: apns.dbString found in binary or memory: http://172.16.74.100:10021/mmscmms202.75.133.49Pmaxis202.75.133.49f
Source: apns.dbString found in binary or memory: http://172.17.3.7mms172.17.3.5
Source: apns.dbString found in binary or memory: http://172.17.81.2:8002mms172.17.81.2
Source: apns.dbString found in binary or memory: http://172.17.83.67/servlets/mms/mms172.17.83.69
Source: apns.dbString found in binary or memory: http://172.20.6.1/servlets/mmsmms172.20.4.33
Source: apns.dbString found in binary or memory: http://172.24.97.152:10021/mmscmms172.24.97.158
Source: apns.dbString found in binary or memory: http://172.25.49.9/servlets/mmsmms172.25.49.2
Source: apns.dbString found in binary or memory: http://172.26.5.132/servlets/mmsmms172.26.5.12
Source: apns.dbString found in binary or memory: http://176.0.0.21mms176.0.0.65
Source: apns.dbString found in binary or memory: http://192.168.0.3:19090/wasmms10.3.2.100#
Source: apns.dbString found in binary or memory: http://192.168.0.3:19090/wasmms192.168.0.2
Source: apns.dbString found in binary or memory: http://192.168.100.14
Source: apns.dbString found in binary or memory: http://192.168.100.14default
Source: apns.dbString found in binary or memory: http://192.168.107.10:19090/wasmms192.168.107.50
Source: apns.dbString found in binary or memory: http://192.168.111.12:19090/was
Source: apns.dbString found in binary or memory: http://192.168.140.164:38090mms192.168.141.25P
Source: apns.dbString found in binary or memory: http://192.168.151.3:8002mms192.168.151.2
Source: apns.dbString found in binary or memory: http://192.168.17.34/servlets/mmsmms192.168.17.2
Source: apns.dbString found in binary or memory: http://192.168.180.100/servlets/mmsmms10.0.5.19
Source: apns.dbString found in binary or memory: http://192.168.19.15mms192.168.19.15
Source: apns.dbString found in binary or memory: http://192.168.200.95/servlets/mmsmms192.168.200.11$
Source: apns.dbString found in binary or memory: http://192.168.210.103/operator/wap
Source: apns.dbString found in binary or memory: http://192.168.210.104/mmrelay.appmms192.168.210.104
Source: apns.dbString found in binary or memory: http://192.168.220.15/servlets/mmsdefault
Source: apns.dbString found in binary or memory: http://192.168.220.15/servlets/mmsmms
Source: apns.dbString found in binary or memory: http://192.168.23.4/wasmms192.168.23.7#DD
Source: apns.dbString found in binary or memory: http://192.168.24.10:38090mms192.168.23.85
Source: apns.dbString found in binary or memory: http://192.168.241.114:8002mms194.182.251.15
Source: apns.dbString found in binary or memory: http://192.168.36.10/servlets/mmsmms192.168.1.2Pr
Source: apns.dbString found in binary or memory: http://192.168.4.136/servlets/mmsmms192.168.4.136
Source: apns.dbString found in binary or memory: http://192.168.50.165mms192.168.50.163
Source: apns.dbString found in binary or memory: http://192.168.58.171:8002default
Source: apns.dbString found in binary or memory: http://192.168.97.1/mmscmms192.168.97.1
Source: apns.dbString found in binary or memory: http://192.40.100.22:10021/mmscmms203.177.42.214
Source: apns.dbString found in binary or memory: http://192.80.11.180mms192.80.7.133
Source: apns.dbString found in binary or memory: http://193.251.160.246/servlets/mmsmms10.0.0.10
Source: apns.dbString found in binary or memory: http://194.204.2.10mms194.204.2.6
Source: apns.dbString found in binary or memory: http://195.167.65.220:8002mms10.10.10.20
Source: apns.dbString found in binary or memory: http://200.222.42.204:8002/mms192.168.10.50
Source: apns.dbString found in binary or memory: http://203.162.21.114/mmscmms203.162.21.114
Source: apns.dbString found in binary or memory: http://208.083.080.131:40007P
Source: apns.dbString found in binary or memory: http://208.083.080.131:40007o
Source: apns.dbString found in binary or memory: http://217.31.233.18:6001/MM1Servletmms
Source: apns.dbString found in binary or memory: http://3gmms.nextel3g.net.brmms129.129.129.104
Source: apns.dbString found in binary or memory: http://3gmms.nexteldata.com.mxmms129.192.129.104
Source: apns.dbString found in binary or memory: http://3gmms.pccwmobile.com:8080/wasdefault
Source: apns.dbString found in binary or memory: http://62.240.62.180:80mms192.168.8.148
Source: apns.dbString found in binary or memory: http://69.8.34.146/mms/mms69.8.34.146$
Source: apns.dbString found in binary or memory: http://action.wataniya.commms194.126.53.64
Source: apns.dbString found in binary or memory: http://aliasredirect.net/proxy/koodo/mmscPdefault
Source: apns.dbString found in binary or memory: http://aliasredirect.net/proxy/koodo/mmscdefault
Source: apns.dbString found in binary or memory: http://aliasredirect.net/proxy/mb/mmscdefault
Source: apns.dbString found in binary or memory: http://aliasredirect.net/proxy/mmscdefault
Source: apns.dbString found in binary or memory: http://almadar.mms/servlets/mmsmms41.208.82.50
Source: apns.dbString found in binary or memory: http://aurorammsmms172.24.128.36
Source: apns.dbString found in binary or memory: http://benmmsmms10.10.10.11
Source: apns.dbString found in binary or memory: http://bsnlmmsc.in:8514
Source: apns.dbString found in binary or memory: http://claro/servlets/mmsmms192.168.231.30P
Source: censorship_fronting.storeString found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: censorship_fronting.storeString found in binary or memory: http://g.symcb.com/crls/gtglobal.crl0
Source: censorship_fronting.storeString found in binary or memory: http://g.symcd.com0
Source: apns.dbString found in binary or memory: http://imms.orange.skmms213.151.208.145
Source: apns.dbString found in binary or memory: http://jazztelmms.com/servlets/mmsmms37.132.0.10
Source: apns.dbString found in binary or memory: http://lifestyle.cw.comY
Source: apns.dbString found in binary or memory: http://lsmmsc.xtra.co.nzmms210.55.11.73
Source: apns.dbString found in binary or memory: http://lsmmsc.xtra.co.nzmms210.55.11.73Ph
Source: apns.dbString found in binary or memory: http://lsmmsc.xtra.co.nzmms210.55.11.73Pl
Source: apns.dbString found in binary or memory: http://lyca.mmsmvno.com/mms/wapencdefault
Source: apns.dbString found in binary or memory: http://m.numericable.frdefault
Source: androidString found in binary or memory: http://magic.google.com
Source: apns.dbString found in binary or memory: http://mci.irmms192.168.193.134
Source: apns.dbString found in binary or memory: http://media.videotron.com/default
Source: apns.dbString found in binary or memory: http://media.videotron.comdefault
Source: apns.dbString found in binary or memory: http://metropcs.mmsmvno.com/mms/wapencdefault
Source: apns.dbString found in binary or memory: http://mm.myboostmobile.commmsIPV4V66IPV4V6false68.28.31.7P
Source: apns.dbString found in binary or memory: http://mm.myboostmobile.comsupl
Source: apns.dbString found in binary or memory: http://mm.vor.promonte.commms192.168.246.5
Source: apns.dbString found in binary or memory: http://mm.vor.telenor.memms192.168.246.5
Source: apns.dbString found in binary or memory: http://mm/mms212.169.66.4
Source: apns.dbString found in binary or memory: http://mmc.digicelfr.com/servlets/mmsmms172.24.2.101
Source: apns.dbString found in binary or memory: http://mmc.digicelgy.com/servlets/mmsmms172.20.6.12
Source: apns.dbString found in binary or memory: http://mmc.digicelhaiti.com/servlets/mmsmms172.20.134.12
Source: apns.dbString found in binary or memory: http://mmc.digiceljamaica.com/servlets/mmsmms172.16.7.12
Source: apns.dbString found in binary or memory: http://mmc.digicelpanama.com/servlets/mmsmms172.27.99.99
Source: apns.dbString found in binary or memory: http://mmc.digicelsr.com/servlets/mmsmms172.20.6.12
Source: apns.dbString found in binary or memory: http://mmc.digiceltt.com/servlets/mmsmms172.20.6.12
Source: apns.dbString found in binary or memory: http://mmc.xl.net.id/servlets/mmsmms202.152.240.50
Source: apns.dbString found in binary or memory: http://mmcmms80.95.224.46#
Source: apns.dbString found in binary or memory: http://mme.digiceljamaica.com/servlets/mmsmms172.16.7.12
Source: apns.dbString found in binary or memory: http://mmr.orangewi.com/servlets/mmsmms172.16.126.70
Source: apns.dbString found in binary or memory: http://mms-tf.net
Source: apns.dbString found in binary or memory: http://mms.2degreesmobile.net.nz:48090mms118.148.1.118
Source: apns.dbString found in binary or memory: http://mms.412.com.ve/servlets/mmsmms10.99.0.10
Source: apns.dbString found in binary or memory: http://mms.8ta.com:38090/wasmms41.151.254.162
Source: apns.dbString found in binary or memory: http://mms.airfiremobile.com/
Source: apns.dbString found in binary or memory: http://mms.airtel.lkmms10.200.184.86
Source: apns.dbString found in binary or memory: http://mms.ais.co.thmms203.170.229.34
Source: apns.dbString found in binary or memory: http://mms.amazoniacelular.com.brmms200.192.230.142
Source: apns.dbString found in binary or memory: http://mms.amt.aland.fimms194.110.177.70
Source: apns.dbString found in binary or memory: http://mms.aster.plmms192.168.6.138
Source: apns.dbString found in binary or memory: http://mms.avea.com.tr/servlets/mmsmms213.161.151.201
Source: apns.dbString found in binary or memory: http://mms.azercell.com/cMMSC/postmms10.0.154.101
Source: apns.dbString found in binary or memory: http://mms.bakcell.com/mms/wapencdefault
Source: apns.dbString found in binary or memory: http://mms.bell.ca/mms/wapencPdefault
Source: apns.dbString found in binary or memory: http://mms.bell.ca/mms/wapencPweb.wireless.bell.caPweb.wireless.bell.ca
Source: apns.dbString found in binary or memory: http://mms.bell.ca/mms/wapencdefault
Source: apns.dbString found in binary or memory: http://mms.bhmobile.ba/cmmsc/postmms195.222.56.41
Source: apns.dbString found in binary or memory: http://mms.bmobile.com.bn/wasmms129.9.10.20
Source: apns.dbString found in binary or memory: http://mms.bornsip.fr:8191mmsL
Source: apns.dbString found in binary or memory: http://mms.bouyguestelecom.fr/mms/wapencdefault
Source: apns.dbString found in binary or memory: http://mms.bouyguestelecom.fr/mms/wapencmms62.201.129.226
Source: apns.dbString found in binary or memory: http://mms.bplmobile.com:8080mms10.0.0.10
Source: apns.dbString found in binary or memory: http://mms.brasiltelecom.com.br/mms200.96.8.29
Source: apns.dbString found in binary or memory: http://mms.catch.net.twPmms10.1.1.2P10.1.1.2g
Source: apns.dbString found in binary or memory: http://mms.catch.net.twmms10.1.1.2Ph
Source: apns.dbString found in binary or memory: http://mms.celcom.net.mymms10.128.1.242
Source: apns.dbString found in binary or memory: http://mms.cellcom.co.ilmms172.31.29.38
Source: apns.dbString found in binary or memory: http://mms.celloneet.com/servlets/mmsmms63.99.231.135
Source: apns.dbString found in binary or memory: http://mms.cellonenation.net/mms/mms204.181.155.195
Source: apns.dbString found in binary or memory: http://mms.cellular1.net/ecit/mms.php#
Source: apns.dbString found in binary or memory: http://mms.cellular1.net/ecit/mms.phpmms
Source: apns.dbString found in binary or memory: http://mms.chatrwireless.comPdefault
Source: apns.dbString found in binary or memory: http://mms.claro.com.brmms200.169.126.10
Source: apns.dbString found in binary or memory: http://mms.claro.svmms216.230.133.66
Source: apns.dbString found in binary or memory: http://mms.clarochile.clmms172.23.200.200
Source: apns.dbString found in binary or memory: http://mms.cmobile.co.za
Source: apns.dbString found in binary or memory: http://mms.cmobile.co.zamms196.31.116.250
Source: apns.dbString found in binary or memory: http://mms.coop.it/servlets/mmsmms213.230.130.89PCOOPspn
Source: apns.dbString found in binary or memory: http://mms.ctbccelular.com.br/wasmms172.29.7.70
Source: apns.dbString found in binary or memory: http://mms.ctimovil.com.armms170.51.255.240
Source: apns.dbString found in binary or memory: http://mms.ctimovil.com.pymms170.51.255.240
Source: apns.dbString found in binary or memory: http://mms.ctimovil.com.uymmsq
Source: apns.dbString found in binary or memory: http://mms.cvalley.net/mms/mms199.221.134.36
Source: apns.dbString found in binary or memory: http://mms.cyfrowypolsat.pl:8002mms79.171.2.33
Source: apns.dbString found in binary or memory: http://mms.dialog.lk:3130/mmscdefault
Source: apns.dbString found in binary or memory: http://mms.dialog.lk:3130/mmscmms192.168.122.2
Source: apns.dbString found in binary or memory: http://mms.dialog.lk:3130/mmscmms192.168.122.2f
Source: apns.dbString found in binary or memory: http://mms.digi.com.my/servlets/mmsmms203.92.128.160Pmms
Source: apns.dbString found in binary or memory: http://mms.digicelgroup.commms172.16.7.12
Source: apns.dbString found in binary or memory: http://mms.digicelgroup.commms172.26.5.12
Source: apns.dbString found in binary or memory: http://mms.digicelpacific.com:8990mms10.150.122.12
Source: apns.dbString found in binary or memory: http://mms.digicelpng.com:8990mms10.149.83.116
Source: apns.dbString found in binary or memory: http://mms.digicelsamoa.net:8990mms10.148.122.12
Source: apns.dbString found in binary or memory: http://mms.dst.com.bn/mmscmms10.100.6.101#
Source: apns.dbString found in binary or memory: http://mms.dtac.co.th:8002mms203.155.200.133
Source: apns.dbString found in binary or memory: http://mms.du.ae:8002mms10.19.18.4
Source: apns.dbString found in binary or memory: http://mms.edgemobile.net/mmscmms12.108.12.13
Source: apns.dbString found in binary or memory: http://mms.elisa.fimms213.161.41.57P
Source: apns.dbString found in binary or memory: http://mms.emome.net:8002mms10.1.1.1
Source: apns.dbString found in binary or memory: http://mms.emt.ee/servlets/mmsmms217.71.32.82
Source: apns.dbString found in binary or memory: http://mms.emt.ee/servlets/mmsmms?
Source: apns.dbString found in binary or memory: http://mms.era.pl/servlets/mmsmms213.158.194.226
Source: apns.dbString found in binary or memory: http://mms.eroskimovil.es/servlets/mmsmms212.73.32.10PEroski
Source: apns.dbString found in binary or memory: http://mms.etisalt.lk:8085mms192.168.104.4$
Source: apns.dbString found in binary or memory: http://mms.euskaltel.mobimms172.16.18.74
Source: apns.dbString found in binary or memory: http://mms.ezweb.ne.jp/MMSdefault
Source: apns.dbString found in binary or memory: http://mms.fastweb.it/mms/wapencdefault
Source: apns.dbString found in binary or memory: http://mms.fido.cadefault
Source: apns.dbString found in binary or memory: http://mms.fmgmobile.pl:8002/mms212.2.96.16
Source: apns.dbString found in binary or memory: http://mms.free.frmms
Source: apns.dbString found in binary or memory: http://mms.gadu-gadu.pl:8002/mms212.2.96.16
Source: apns.dbString found in binary or memory: http://mms.geocell.com.ge/cmmsc/postdefault
Source: apns.dbString found in binary or memory: http://mms.gloworld.com/mmscmms10.100.82.4
Source: apns.dbString found in binary or memory: http://mms.gocbw.com:8088/mmsPdefault
Source: apns.dbString found in binary or memory: http://mms.gprs.eronet.ba/mms/wapencmms10.12.3.11
Source: apns.dbString found in binary or memory: http://mms.gprs.rogers.comdefault
Source: apns.dbString found in binary or memory: http://mms.gprs.safaricom.comdefault
Source: apns.dbString found in binary or memory: http://mms.gprs.safaricom.commms172.22.2.38
Source: apns.dbString found in binary or memory: http://mms.gprsconnect.com/servlets/mmsmms212.183.137.12
Source: apns.dbString found in binary or memory: http://mms.gpsurf.net/servlets/mmsmms10.128.1.2
Source: apns.dbString found in binary or memory: http://mms.hk.chinamobile.com/mmsdefault
Source: apns.dbString found in binary or memory: http://mms.hkcsl.com:8002default
Source: apns.dbString found in binary or memory: http://mms.hotmobile.co.ilmmsPc
Source: apns.dbString found in binary or memory: http://mms.ideasclaro.com.do/mms/wapencmms
Source: apns.dbString found in binary or memory: http://mms.ideasclaro.com:8002mms216.230.133.66
Source: apns.dbString found in binary or memory: http://mms.immix.csky.us:6672/$
Source: apns.dbString found in binary or memory: http://mms.iot1.com/advantage/mms.phpmmsg
Source: apns.dbString found in binary or memory: http://mms.iot1.com/amarillo/mms.phpmmscell1mmsS
Source: apns.dbString found in binary or memory: http://mms.iot1.com/corr/mms.phpmms66.255.55.23P
Source: apns.dbString found in binary or memory: http://mms.iot1.com/kaplan/mms.phpmms10.10.0.97#
Source: apns.dbString found in binary or memory: http://mms.itelcel.com/servlets/mmsmms148.233.151.240
Source: apns.dbString found in binary or memory: http://mms.iusacell3g.com/mms
Source: apns.dbString found in binary or memory: http://mms.iusacell3g.com/mmsIUSACELLspnmmsiusacellgsmW
Source: apns.dbString found in binary or memory: http://mms.iusacell3g.com/mmsmmsiusacellgsm
Source: apns.dbString found in binary or memory: http://mms.iusacell3g.com/mmsmmsiusacellgsme%
Source: apns.dbString found in binary or memory: http://mms.iusacell3g.com/mmsmmsiusacellgsmj
Source: apns.dbString found in binary or memory: http://mms.iusacell3g.com/mmsmmsiusacellgsmk
Source: apns.dbString found in binary or memory: http://mms.iusacell3g.com/mmsmmsiusacellgsml
Source: apns.dbString found in binary or memory: http://mms.iusacell3g.com/mmsmmsiusacellgsmq
Source: apns.dbString found in binary or memory: http://mms.jawwal.ps/servlets/mmsmms213.244.118.129
Source: apns.dbString found in binary or memory: http://mms.jo.zain.commms192.168.55.10Pmmsd
Source: apns.dbString found in binary or memory: http://mms.kcell.kz/postmms195.47.255.7
Source: apns.dbString found in binary or memory: http://mms.kgtmms.net.tw/mms/wapencmms172.28.33.5
Source: apns.dbString found in binary or memory: http://mms.korektel.com/mms/wapencmms192.168.18.187
Source: apns.dbString found in binary or memory: http://mms.kyivstar.netmms10.10.10.10
Source: apns.dbString found in binary or memory: http://mms.lebara.co.uk/servlets/mmsmms212.183.137.12
Source: apns.dbString found in binary or memory: http://mms.lebaramobile.es/servlets/mmsmms212.73.32.10PLebaraspnwap
Source: apns.dbString found in binary or memory: http://mms.life.com.by/mmscmms10.10.10.20
Source: apns.dbString found in binary or memory: http://mms.life.com.ua/cmms/postmms212.58.162.230
Source: apns.dbString found in binary or memory: http://mms.lowi.omv.es/servlets/mmsmms212.73.32.10Pwap
Source: apns.dbString found in binary or memory: http://mms.manxpronto.net:8002mms195.10.99.41
Source: apns.dbString found in binary or memory: http://mms.manxpronto.net:8002mms195.10.99.46
Source: apns.dbString found in binary or memory: http://mms.meditel.ma:8088/mmsmms10.8.8.9
Source: apns.dbString found in binary or memory: http://mms.metropcs.net/mmscdefault
Source: apns.dbString found in binary or memory: http://mms.metropcs.net/servlets/mmscf
Source: apns.dbString found in binary or memory: http://mms.metropcs.net:3128/mmscdefault
Source: apns.dbString found in binary or memory: http://mms.metropcs.net:3128/mmscimsIP14IP
Source: apns.dbString found in binary or memory: http://mms.mic1.com.lbmms192.168.23.51#
Source: apns.dbString found in binary or memory: http://mms.mni.pl/mms192.168.6.135
Source: apns.dbString found in binary or memory: http://mms.mobeelife.net/mms/wapencmms192.168.77.5Pgprs
Source: apns.dbString found in binary or memory: http://mms.mobile.pl:8080mms212.2.96.16
Source: apns.dbString found in binary or memory: http://mms.mobilebysainsburys.co.uk/servlets/mmsmms212.183.137.12
Source: apns.dbString found in binary or memory: http://mms.mobilelife.co.thmms203.170.229.34
Source: apns.dbString found in binary or memory: http://mms.mobilesainsburys.co.uk/servltes/mmsdefault
Source: apns.dbString found in binary or memory: http://mms.mobilicity.netmms10.100.3.4
Source: apns.dbString found in binary or memory: http://mms.mobilking.pl/servlets/mmsmms213.158.194.226
Source: apns.dbString found in binary or memory: http://mms.mobitag.nc/mmsc/mms192.168.39.201
Source: apns.dbString found in binary or memory: http://mms.mobitel.com.kh/mmscmms203.144.95.98
Source: apns.dbString found in binary or memory: http://mms.moldcell.md/cmmsc/postmms10.0.10.10$
Source: apns.dbString found in binary or memory: http://mms.mova.pl:8002/mms212.2.96.16
Source: apns.dbString found in binary or memory: http://mms.movil.com.bo/servlets/mmsmms127.27.7.10
Source: apns.dbString found in binary or memory: http://mms.movistar.clmms172.17.8.10
Source: apns.dbString found in binary or memory: http://mms.movistar.com.armms200.68.32.239
Source: apns.dbString found in binary or memory: http://mms.movistar.com.comms192.168.222.7#)
Source: apns.dbString found in binary or memory: http://mms.movistar.com.comms198.228.90.228
Source: apns.dbString found in binary or memory: http://mms.movistar.com.ec:8088/mms/mms10.3.5.50#)
Source: apns.dbString found in binary or memory: http://mms.movistar.com.ec:8088/mms/mms10.3.5.50#)movistarl
Source: apns.dbString found in binary or memory: http://mms.movistar.com.ve:8088/mmsmms200.35.64.73#)V
Source: apns.dbString found in binary or memory: http://mms.movistar.crmms10.221.79.83P
Source: apns.dbString found in binary or memory: http://mms.movistar.gtmms10.12.22.1PmovistargtQ
Source: apns.dbString found in binary or memory: http://mms.movistar.gtmms10.12.22.1Pmovistargtj
Source: apns.dbString found in binary or memory: http://mms.movistar.mxmms10.2.20.1#
Source: apns.dbString found in binary or memory: http://mms.movistar.mxmms10.2.20.1P
Source: apns.dbString found in binary or memory: http://mms.movistar.nimms10.12.23.1P
Source: apns.dbString found in binary or memory: http://mms.movistar.pa/mms10.12.21.1Pmovistarpammsk
Source: apns.dbString found in binary or memory: http://mms.movistar.pa/mms10.12.21.1Pmovistarpammsl
Source: apns.dbString found in binary or memory: http://mms.movistar.pa/mms10.12.21.1Pmovistarpammsm
Source: apns.dbString found in binary or memory: http://mms.movistar.pa/mms10.12.21.1Pmovistarpammsn
Source: apns.dbString found in binary or memory: http://mms.movistar.svmms10.12.20.1PmovistarsvS
Source: apns.dbString found in binary or memory: http://mms.movistar.svmms10.12.20.1PmovistarsvY
Source: apns.dbString found in binary or memory: http://mms.movistar.vedefault
Source: apns.dbString found in binary or memory: http://mms.msg.eng.t-mobile.com/mms/wapencmmsIPV6IPr
Source: apns.dbString found in binary or memory: http://mms.mtn.ci/mms/wapencmms172.16.100.5#
Source: apns.dbString found in binary or memory: http://mms.mtn.com.cy/mmscmms172.24.97.1
Source: apns.dbString found in binary or memory: http://mms.mtn.sd/mmscmms172.24.97.20
Source: apns.dbString found in binary or memory: http://mms.mts064.telekom.rs/mms/wapencmms172.17.85.131
Source: apns.dbString found in binary or memory: http://mms.myblue.com/servlets/mmsmms63.99.231.135
Source: apns.dbString found in binary or memory: http://mms.mycricket.com/servlets/mms
Source: apns.dbString found in binary or memory: http://mms.mycricket.com/servlets/mmsdefault
Source: apns.dbString found in binary or memory: http://mms.mycricket.com/servlets/mmsfotaIP14IP
Source: apns.dbString found in binary or memory: http://mms.mycricket.com/servlets/mmsfotaIP14IPs
Source: apns.dbString found in binary or memory: http://mms.mycricket.com/servlets/mmsfotaIP14IPz
Source: apns.dbString found in binary or memory: http://mms.mymeteor.iemms10.85.85.85
Source: apns.dbString found in binary or memory: http://mms.myq.grmms192.168.80.134
Source: apns.dbString found in binary or memory: http://mms.natel.ch:8079mms192.168.210.2
Source: apns.dbString found in binary or memory: http://mms.net.sa:8002mms10.1.1.1#
Source: apns.dbString found in binary or memory: http://mms.nextel.pemms
Source: apns.dbString found in binary or memory: http://mms.nextel.pemmsg
Source: apns.dbString found in binary or memory: http://mms.nwn.nomms188.149.250.10PL
Source: apns.dbString found in binary or memory: http://mms.o2active.cz:8002mms160.218.160.218
Source: apns.dbString found in binary or memory: http://mms.o2world.sk:8002mms10.97.1.11
Source: apns.dbString found in binary or memory: http://mms.ola.com.comms190.102.206.48
Source: apns.dbString found in binary or memory: http://mms.ola.com.comms200.58.228.81#
Source: apns.dbString found in binary or memory: http://mms.omnitel.net:8002/mms194.176.32.149
Source: apns.dbString found in binary or memory: http://mms.onetouch.com.gh/mmscmms172.24.97.1
Source: apns.dbString found in binary or memory: http://mms.ono.commms10.126.0.50
Source: apns.dbString found in binary or memory: http://mms.orange.cmmms192.168.122.101
Source: apns.dbString found in binary or memory: http://mms.orange.co.uk/mms192.168.224.10
Source: apns.dbString found in binary or memory: http://mms.orange.com.do/servlets/mmsmms172.16.126.70
Source: apns.dbString found in binary or memory: http://mms.orange.esmms172.22.188.25
Source: apns.dbString found in binary or memory: http://mms.orange.fr/mms192.168.10.200
Source: apns.dbString found in binary or memory: http://mms.orange.frmms192.168.10.200
Source: apns.dbString found in binary or memory: http://mms.orange.ludefault
Source: apns.dbString found in binary or memory: http://mms.orange.nl:8002default
Source: apns.dbString found in binary or memory: http://mms.orange.nl:8002mms10.250.255.183
Source: apns.dbString found in binary or memory: http://mms.orange.plmms192.168.6.104
Source: apns.dbString found in binary or memory: http://mms.orange.remms192.168.10.200
Source: apns.dbString found in binary or memory: http://mms.pepephone.com/servlets/mmsmms212.73.32.10PPepephonespnwap
Source: apns.dbString found in binary or memory: http://mms.personal.commms172.25.7.31
Source: apns.dbString found in binary or memory: http://mms.plspictures.commmsIPV4V6IPV4V668.28.31.7Pu
Source: apns.dbString found in binary or memory: http://mms.plspictures.comsupl
Source: apns.dbString found in binary or memory: http://mms.plusgsm.pl:8002mms212.2.96.16
Source: apns.dbString found in binary or memory: http://mms.postemobile.it/servlets/mmsmms10.128.224.10PPosteMobilespn
Source: apns.dbString found in binary or memory: http://mms.qbmore.mobimms172.16.96.66
Source: apns.dbString found in binary or memory: http://mms.quam.com.armms200.68.32.239#
Source: apns.dbString found in binary or memory: http://mms.roshan.afmms172.31.37.16
Source: apns.dbString found in binary or memory: http://mms.sasktel.com/default
Source: apns.dbString found in binary or memory: http://mms.sasktel.comPmmsmig.sasktel.comPG
Source: apns.dbString found in binary or memory: http://mms.saunalahti.fi:8002/mms62.142.4.197
Source: apns.dbString found in binary or memory: http://mms.setar.awmms209.88.130.210
Source: apns.dbString found in binary or memory: http://mms.simi.is/servlets/mmsmms213.167.138.200
Source: apns.dbString found in binary or memory: http://mms.singtel.com:10021/mmscmms165.21.42.84
Source: apns.dbString found in binary or memory: http://mms.smartone.com.mo/dmog/mo
Source: apns.dbString found in binary or memory: http://mms.smartone.com/serverdefault
Source: apns.dbString found in binary or memory: http://mms.sonera.fi:8002mms195.156.25.33PD
Source: apns.dbString found in binary or memory: http://mms.song.fimms213.161.41.58PV
Source: apns.dbString found in binary or memory: http://mms.sonofon.dkmms212.88.64.8
Source: apns.dbString found in binary or memory: http://mms.springmobil.semms213.88.184.37
Source: apns.dbString found in binary or memory: http://mms.sprintpcs.comdefault
Source: apns.dbString found in binary or memory: http://mms.sprintpcs.commms68.28.31.7P
Source: apns.dbString found in binary or memory: http://mms.sprintpcs.commmsIPV4V66IPV4V6false68.28.31.7P
Source: apns.dbString found in binary or memory: http://mms.sprintpcs.comsupl
Source: apns.dbString found in binary or memory: http://mms.starhubgee.com.sg:8002/mms10.12.1.80P
Source: apns.dbString found in binary or memory: http://mms.suncom.net:8088/mmsmms66.150.33.125
Source: apns.dbString found in binary or memory: http://mms.surfmail.com/mmscmms212.9.19.199
Source: apns.dbString found in binary or memory: http://mms.t-mobile.com.mkmms62.162.155.227
Source: apns.dbString found in binary or memory: http://mms.t-mobile.de/servlets/mmsdefault
Source: apns.dbString found in binary or memory: http://mms.t-mobile.hr/servlets/mmsmms10.12.0.4
Source: apns.dbString found in binary or memory: http://mms.t-mobile.hu/servlets/mmsdefault
Source: apns.dbString found in binary or memory: http://mms.t-mobile.hu/servlets/mmsmms212.51.126.10
Source: apns.dbString found in binary or memory: http://mms.tal.is/servlets/mmsdefault
Source: apns.dbString found in binary or memory: http://mms.talkmobile.co.uk/servlets/mmsdefault
Source: apns.dbString found in binary or memory: http://mms.talkmobile.co.uk/servlets/mmsmms212.183.137.12
Source: apns.dbString found in binary or memory: http://mms.talktalk.co.uk/servlets/mms
Source: apns.dbString found in binary or memory: http://mms.tango.lumms212.66.75.3
Source: apns.dbString found in binary or memory: http://mms.tdc.se:8002mms194.182.251.15
Source: apns.dbString found in binary or memory: http://mms.tdcmobil.no:8002mms194.182.251.15
Source: apns.dbString found in binary or memory: http://mms.tele.gl/mms/wapencmms10.112.222.37
Source: apns.dbString found in binary or memory: http://mms.telecable.es/mms/mms212.89.0.84
Source: apns.dbString found in binary or memory: http://mms.telemigcelular.com.brmms200.192.230.142
Source: apns.dbString found in binary or memory: http://mms.telenor.dkmms212.88.64.8
Source: apns.dbString found in binary or memory: http://mms.telenor.rs/servlets/mmsmms217.65.192.33
Source: apns.dbString found in binary or memory: http://mms.telia.dkmms193.209.134.131
Source: apns.dbString found in binary or memory: http://mms.telia.dkmms193.209.134.131PA
Source: apns.dbString found in binary or memory: http://mms.telia.dkmms193.209.134.131PE
Source: apns.dbString found in binary or memory: http://mms.telkomsel.commms10.1.89.150
Source: apns.dbString found in binary or memory: http://mms.three.co.idmms10.4.0.10
Source: apns.dbString found in binary or memory: http://mms.three.com.mo:10021/mmscdefault
Source: apns.dbString found in binary or memory: http://mms.tim.brmms200.179.66.242
Source: apns.dbString found in binary or memory: http://mms.tim.it/servlets/mmsPmms213.230.130.89P213.230.130.89b
Source: apns.dbString found in binary or memory: http://mms.tim.it/servlets/mmsmms213.230.130.89Pg
Source: apns.dbString found in binary or memory: http://mms.tiscali.mobi/servlets/mmsmms213.230.130.89Pp
Source: apns.dbString found in binary or memory: http://mms.tmovil.cl/mms200.68.32.239#
Source: apns.dbString found in binary or memory: http://mms.tot3g.net:8002mms10.218.24.83
Source: apns.dbString found in binary or memory: http://mms.tracfone.com
Source: apns.dbString found in binary or memory: http://mms.tre.sedefault
Source: apns.dbString found in binary or memory: http://mms.trueh.com:8002mms10.4.7.39
Source: apns.dbString found in binary or memory: http://mms.trueworld.net:8002mms10.4.7.39
Source: apns.dbString found in binary or memory: http://mms.tubiedronka.pl/servlets.mmslmms213.158.194.226
Source: apns.dbString found in binary or memory: http://mms.turkcell.com.tr/servlets/mmsmms212.252.169.217
Source: apns.dbString found in binary or memory: http://mms.tusmobil.si:8002mms91.185.221.85
Source: apns.dbString found in binary or memory: http://mms.um.three.co.uk:10021/mmscmms217.171.129.2
Source: apns.dbString found in binary or memory: http://mms.um.three.com.hk:10021/mmscdefault
Source: apns.dbString found in binary or memory: http://mms.umniah.com/mms10.1.1.10#
Source: apns.dbString found in binary or memory: http://mms.unionwireless.commms
Source: apns.dbString found in binary or memory: http://mms.unionwireless.commmsh
Source: apns.dbString found in binary or memory: http://mms.velcom.by/servlets/mmsmms10.200.15.15
Source: apns.dbString found in binary or memory: http://mms.viero.commms10.168.3.23$
Source: apns.dbString found in binary or memory: http://mms.viettelmobile.com.vn/mms/wapencmms192.168.233.10
Source: apns.dbString found in binary or memory: http://mms.vinaphone.com.vnmms10.1.10.46
Source: apns.dbString found in binary or memory: http://mms.vipnet.hr/servlets/mmsmms212.91.99.91
Source: apns.dbString found in binary or memory: http://mms.virginmobile.co.uk:8002default
Source: apns.dbString found in binary or memory: http://mms.virginmobile.co.uk:8002mms193.30.166.2
Source: apns.dbString found in binary or memory: http://mms.virginmobile.co.zamms196.31.116.242
Source: apns.dbString found in binary or memory: http://mms.virginvibe.com.au:8002/
Source: apns.dbString found in binary or memory: http://mms.vivacell.am/mmscmms83.217.226.72
Source: apns.dbString found in binary or memory: http://mms.vodafone.co.uk/servlets/mmsdefault
Source: apns.dbString found in binary or memory: http://mms.vodafone.com.eg/servlets/mmsmms163.121.178.2
Source: apns.dbString found in binary or memory: http://mms.vodafone.com.qa/mmscP
Source: apns.dbString found in binary or memory: http://mms.vodafone.grmms213.249.19.49
Source: apns.dbString found in binary or memory: http://mms.vodafone.hu/servlets/mmsmms80.244.97.2
Source: apns.dbString found in binary or memory: http://mms.vodafone.it/servlets/mmsmms10.128.224.10Pl
Source: apns.dbString found in binary or memory: http://mms.vodafone.pt/servlets/mmsPdefault
Source: apns.dbString found in binary or memory: http://mms.vox.com.py/mmsc
Source: apns.dbString found in binary or memory: http://mms.vtext.com/s
Source: apns.dbString found in binary or memory: http://mms.vtext.com/servlets/mmscbs
Source: apns.dbString found in binary or memory: http://mms.vtext.com/servlets/mmsdefault
Source: apns.dbString found in binary or memory: http://mms.vzwreseller.com/servlets/mmscbs
Source: apns.dbString found in binary or memory: http://mms.vzwreseller.com/servlets/mmsdefault
Source: apns.dbString found in binary or memory: http://mms.wap.ctm.net:8002
Source: apns.dbString found in binary or memory: http://mms.wap.ctm.net:8002mms192.168.99.3
Source: apns.dbString found in binary or memory: http://mms.wcc.netPmms209.55.70.246P209.55.70.246
Source: apns.dbString found in binary or memory: http://mms.wind.itmms212.245.244.11
Source: apns.dbString found in binary or memory: http://mms.windmobile.camms74.115.197.70
Source: apns.dbString found in binary or memory: http://mms.zain.sdmms172.20.2.124P
Source: apns.dbString found in binary or memory: http://mms.zainmms176.0.0.65
Source: apns.dbString found in binary or memory: http://mms.zonamovil.com.pamms172.25.3.5
Source: apns.dbString found in binary or memory: http://mms/eplus/mms212.23.97.153
Source: apns.dbString found in binary or memory: http://mms/mms10.11.8.18
Source: apns.dbString found in binary or memory: http://mms/mms10.3.2.205
Source: apns.dbString found in binary or memory: http://mms/mms149.254.201.135
Source: apns.dbString found in binary or memory: http://mms/mms192.168.220.251
Source: apns.dbString found in binary or memory: http://mms/mms192.168.94.23
Source: apns.dbString found in binary or memory: http://mms/mmsmms192.168.127.125
Source: apns.dbString found in binary or memory: http://mms/servlets/mmsmms10.12.0.32
Source: apns.dbString found in binary or memory: http://mms/servlets/mmsmms213.158.194.226
Source: apns.dbString found in binary or memory: http://mms/servlets/mmsmms213.30.27.63
Source: apns.dbString found in binary or memory: http://mms1.live.vodafone.in/mms/$
Source: apns.dbString found in binary or memory: http://mms10.10.55.34
Source: apns.dbString found in binary or memory: http://mms1mms10.151.0.1
Source: apns.dbString found in binary or memory: http://mms2.dtac.co.th:8002mms10.10.10.10
Source: apns.dbString found in binary or memory: http://mms2.movilnet.com.ve/servlets/mmsmms192.168.16.12
Source: apns.dbString found in binary or memory: http://mms2.mymobiletxt.netdefault
Source: apns.dbString found in binary or memory: http://mms2.westlinkcom.com/mms/mms199.221.134.43
Source: apns.dbString found in binary or memory: http://mms65mms10.143.156.8
Source: apns.dbString found in binary or memory: http://mms65mms10.143.156.9
Source: apns.dbString found in binary or memory: http://mms68/mms10.143.156.11
Source: apns.dbString found in binary or memory: http://mms68mms10.143.156.11
Source: apns.dbString found in binary or memory: http://mms:8002/mms10.16.35.50
Source: apns.dbString found in binary or memory: http://mms:8002/mms172.29.11.12
Source: apns.dbString found in binary or memory: http://mms:8002mms10.131.26.138
Source: apns.dbString found in binary or memory: http://mms:8080/mms/mms192.168.4.103#
Source: apns.dbString found in binary or memory: http://mmsalize/servlets/mmsmms172.16.30.9
Source: apns.dbString found in binary or memory: http://mmsaut.at/sendmms212.95.31.50Pl
Source: apns.dbString found in binary or memory: http://mmsc.A1.netdefault
Source: apns.dbString found in binary or memory: http://mmsc.A1.netmms194.48.124.71
Source: apns.dbString found in binary or memory: http://mmsc.AXISmms10.8.3.8
Source: apns.dbString found in binary or memory: http://mmsc.a1.netmms194.48.124.71
Source: apns.dbString found in binary or memory: http://mmsc.aina.fimms10.1.10.2
Source: apns.dbString found in binary or memory: http://mmsc.aiowireless.netdefault
Source: apns.dbString found in binary or memory: http://mmsc.axismms10.8.3.8
Source: apns.dbString found in binary or memory: http://mmsc.base.be/mms217.72.235.1
Source: apns.dbString found in binary or memory: http://mmsc.base.bemms217.72.235.1
Source: apns.dbString found in binary or memory: http://mmsc.bemms217.72.235.1
Source: apns.dbString found in binary or memory: http://mmsc.bob.at
Source: apns.dbString found in binary or memory: http://mmsc.c10.fimms10.1.1.19
Source: apns.dbString found in binary or memory: http://mmsc.c1neaz.csky.us:6672mms209.4.229.94$
Source: apns.dbString found in binary or memory: http://mmsc.cingular.com/Pdefault
Source: apns.dbString found in binary or memory: http://mmsc.cingular.comPdefault
Source: apns.dbString found in binary or memory: http://mmsc.cingular.comdefault
Source: apns.dbString found in binary or memory: http://mmsc.cosmote.gr:8002mms10.10.10.20
Source: apns.dbString found in binary or memory: http://mmsc.ctc.csky.us:6672default
Source: apns.dbString found in binary or memory: http://mmsc.cyta.com.cydefault
Source: apns.dbString found in binary or memory: http://mmsc.cyta.com.cymms
Source: apns.dbString found in binary or memory: http://mmsc.dicame.fimms10.1.1.15
Source: apns.dbString found in binary or memory: http://mmsc.dnafinland.fi/mms10.1.1.2
Source: apns.dbString found in binary or memory: http://mmsc.dnafinland.fimms10.1.1.2
Source: apns.dbString found in binary or memory: http://mmsc.dnapro.fimms10.1.1.21
Source: apns.dbString found in binary or memory: http://mmsc.entelpcs.clmms10.99.0.10
Source: apns.dbString found in binary or memory: http://mmsc.gci.csky.us:6672/mms209.4.229.92#
Source: apns.dbString found in binary or memory: http://mmsc.golantelecom.co.ilmms10.224.228.81P
Source: apns.dbString found in binary or memory: http://mmsc.golantelecom.co.ilmms10.224.228.81PU
Source: apns.dbString found in binary or memory: http://mmsc.gomobile.fimms10.1.1.11
Source: apns.dbString found in binary or memory: http://mmsc.gprs.cw.com/mms10.0.3.101P
Source: apns.dbString found in binary or memory: http://mmsc.gprs.cw.com/mms10.0.3.101PR
Source: apns.dbString found in binary or memory: http://mmsc.gprs.cw.com/mms10.0.3.101Pb
Source: apns.dbString found in binary or memory: http://mmsc.gsm-suomi.fimms
Source: apns.dbString found in binary or memory: http://mmsc.guamcell.csky.us:6672/#
Source: apns.dbString found in binary or memory: http://mmsc.indosat.commms10.19.19.19
Source: apns.dbString found in binary or memory: http://mmsc.invianet.commms10.1.2.3
Source: apns.dbString found in binary or memory: http://mmsc.iwireless.dataonair.net:6672#
Source: apns.dbString found in binary or memory: http://mmsc.iwireless.dataonair.net:6672mms209.4.229.32$
Source: apns.dbString found in binary or memory: http://mmsc.iwireless.datonair.net:6672default
Source: apns.dbString found in binary or memory: http://mmsc.ktfwing.com:9082Pdefault
Source: apns.dbString found in binary or memory: http://mmsc.kymp.netmms10.1.1.17
Source: apns.dbString found in binary or memory: http://mmsc.mediamessaging.co.uk:8002default
Source: apns.dbString found in binary or memory: http://mmsc.mms.ancelutil.com.uy
Source: apns.dbString found in binary or memory: http://mmsc.mms.ancelutil.com.uymms200.40.246.2
Source: apns.dbString found in binary or memory: http://mmsc.mms.o2.co.uk:10021/mmsc
Source: apns.dbString found in binary or memory: http://mmsc.mms.o2.co.uk:8002
Source: apns.dbString found in binary or memory: http://mmsc.mms.o2.co.uk:8002/
Source: apns.dbString found in binary or memory: http://mmsc.mms.o2.co.uk:8002default
Source: apns.dbString found in binary or memory: http://mmsc.mms.o2.co.uk:8002mms193.113.200.195
Source: apns.dbString found in binary or memory: http://mmsc.mms.o2.ie:8002
Source: apns.dbString found in binary or memory: http://mmsc.mms.vodafone.nl
Source: apns.dbString found in binary or memory: http://mmsc.mms.vodafone.nlmms192.168.251.150
Source: apns.dbString found in binary or memory: http://mmsc.mobile.att.net/default
Source: apns.dbString found in binary or memory: http://mmsc.mobile.att.netdefault
Source: apns.dbString found in binary or memory: http://mmsc.mobistar.bemms212.65.63.143
Source: apns.dbString found in binary or memory: http://mmsc.monternet.comPmms10.0.0.172P10.0.0.172
Source: apns.dbString found in binary or memory: http://mmsc.movistar.com.uymms10.0.2.29
Source: apns.dbString found in binary or memory: http://mmsc.mtel.ba/mms/wapencmms192.168.61.11
Source: apns.dbString found in binary or memory: http://mmsc.mtpcs.csky.us:6672/mms209.4.229.229#
Source: apns.dbString found in binary or memory: http://mmsc.myuni.com.cnmms10.0.0.172PS
Source: apns.dbString found in binary or memory: http://mmsc.myuni.com.cnmms10.0.0.172Pq
Source: apns.dbString found in binary or memory: http://mmsc.nova.ismms10.10.2.60
Source: apns.dbString found in binary or memory: http://mmsc.nwmobility.com:8002mms192.168.111.1
Source: apns.dbString found in binary or memory: http://mmsc.omanmobile.om:10021/mmscmms192.168.203.35
Source: apns.dbString found in binary or memory: http://mmsc.optus.com.au:8002/mms61.88.190.10
Source: apns.dbString found in binary or memory: http://mmsc.orange.at/mms/wapencmms194.24.128.118
Source: apns.dbString found in binary or memory: http://mmsc.proximus.be/mmsmms10.55.14.75
Source: apns.dbString found in binary or memory: http://mmsc.pt.lu
Source: apns.dbString found in binary or memory: http://mmsc.setera.fimms10.1.11.2
Source: apns.dbString found in binary or memory: http://mmsc.sunrise.chmms212.35.34.75
Source: apns.dbString found in binary or memory: http://mmsc.t-mobile.at/servlets/mmsdefault
Source: apns.dbString found in binary or memory: http://mmsc.t-mobile.at/servlets/mmsmms10.12.0.20P
Source: apns.dbString found in binary or memory: http://mmsc.tdc.dk:8002mms194.182.251.15
Source: apns.dbString found in binary or memory: http://mmsc.tdc.dk:8002mmsinetproxy.tdc.dk
Source: apns.dbString found in binary or memory: http://mmsc.tdc.fimms10.1.12.2
Source: apns.dbString found in binary or memory: http://mmsc.tele2.eemms193.12.40.6
Source: apns.dbString found in binary or memory: http://mmsc.tele2.hrdefault
Source: apns.dbString found in binary or memory: http://mmsc.tele2.lt/mms193.12.40.29
Source: apns.dbString found in binary or memory: http://mmsc.tele2.ltmms193.12.40.29
Source: apns.dbString found in binary or memory: http://mmsc.tele2.lv/mms193.12.40.38
Source: apns.dbString found in binary or memory: http://mmsc.tele2.nldefault
Source: apns.dbString found in binary or memory: http://mmsc.tele2.rumms193.12.40.65
Source: apns.dbString found in binary or memory: http://mmsc.tele2.semms130.244.202.30
Source: apns.dbString found in binary or memory: http://mmsc.telefonicamovistar.com.pe:8088/mms/mms200.4.196.118
Source: apns.dbString found in binary or memory: http://mmsc.telenet.bemms195.130.149.100Pk&
Source: apns.dbString found in binary or memory: http://mmsc.telenet.bemms195.130.149.100Pn$
Source: apns.dbString found in binary or memory: http://mmsc.telenor.hu/mms84.225.255.1
Source: apns.dbString found in binary or memory: http://mmsc.telstra.com:8002Pdefault
Source: apns.dbString found in binary or memory: http://mmsc.telstra.com:8002mms10.1.1.180Pa
Source: apns.dbString found in binary or memory: http://mmsc.telstra.com:8002mms10.1.1.180Ph
Source: apns.dbString found in binary or memory: http://mmsc.telstra.com:8002mms10.1.1.180Pl
Source: apns.dbString found in binary or memory: http://mmsc.telstra.com:8002mms10.1.1.180Pm
Source: apns.dbString found in binary or memory: http://mmsc.three.net.au:10021/mmscdefault
Source: apns.dbString found in binary or memory: http://mmsc.tigo.com.gh:19090mms10.4.1.7
Source: apns.dbString found in binary or memory: http://mmsc.vipmobile.rsmms212.15.182.82
Source: apns.dbString found in binary or memory: http://mmsc.vipoperator.com.mkmms78.40.0.1
Source: apns.dbString found in binary or memory: http://mmsc.vivacom.bgmms192.168.123.123
Source: apns.dbString found in binary or memory: http://mmsc.vmobl.com:8088/mms?mms205.239.233.136Qh
Source: apns.dbString found in binary or memory: http://mmsc.vmobl.com:8088/mms?mms205.239.233.136Qi
Source: apns.dbString found in binary or memory: http://mmsc.vmobl.com:8088/mms?supl
Source: apns.dbString found in binary or memory: http://mmsc.vmobl.com:8088mmsIPV4V66IPV4V6false68.28.31.2Pf
Source: apns.dbString found in binary or memory: http://mmsc.vnet.mobiPdefault
Source: apns.dbString found in binary or memory: http://mmsc.vntc.ru/wasmms80.243.64.68
Source: apns.dbString found in binary or memory: http://mmsc.vodacom4me.co.zamms196.6.128.13
Source: apns.dbString found in binary or memory: http://mmsc.vodafone.almms10.0.9.2
Source: apns.dbString found in binary or memory: http://mmsc.vodafone.es/servlets/mmsmms212.73.32.10P
Source: apns.dbString found in binary or memory: http://mmsc.vodafone.es/servlets/mmsmms212.73.32.10Pwap
Source: apns.dbString found in binary or memory: http://mmsc.vodafone.ismms10.22.0.10
Source: apns.dbString found in binary or memory: http://mmsc.westlinkcom.com/servlets/mmsmms63.99.231.135
Source: apns.dbString found in binary or memory: http://mmsc/mms10.10.10.11
Source: apns.dbString found in binary or memory: http://mmsc/mms10.124.26.94
Source: apns.dbString found in binary or memory: http://mmsc/mms10.150.0.33
Source: apns.dbString found in binary or memory: http://mmsc/mmsmms10.10.17.2
Source: apns.dbString found in binary or memory: http://mmsc/servlets/mmsmms192.168.150.2
Source: apns.dbString found in binary or memory: http://mmsc/wasmms10.10.0.10
Source: apns.dbString found in binary or memory: http://mmsc1.g-mms.com/mms/wapencIPV6IP31026097IMSInone
Source: apns.dbString found in binary or memory: http://mmsc1.mms.cosmote.ro:8002mms10.252.1.62
Source: apns.dbString found in binary or memory: http://mmsc1.mms.globul.bg:8002mms192.168.87.11
Source: apns.dbString found in binary or memory: http://mmsc1.mms.telenor.bg:8002mms192.168.87.11
Source: apns.dbString found in binary or memory: http://mmsc1.uscc.net/mmsc/MMSPmmsP
Source: apns.dbString found in binary or memory: http://mmsc1.uscc.net/mmsc/MMSdefault
Source: apns.dbString found in binary or memory: http://mmsc2.mts.net/default
Source: apns.dbString found in binary or memory: http://mmsc:10021/mmscmms62.169.66.5
Source: apns.dbString found in binary or memory: http://mmsc:8002/mms10.64.164.10
Source: apns.dbString found in binary or memory: http://mmsc:8002/mms192.168.10.10
Source: apns.dbString found in binary or memory: http://mmsc:8002mms10.10.10.10
Source: apns.dbString found in binary or memory: http://mmsc:8002mms172.24.121.5
Source: apns.dbString found in binary or memory: http://mmsc:8002mms192.168.10.10
Source: apns.dbString found in binary or memory: http://mmscenter.suncellular.com.phmms202.138.159.78
Source: apns.dbString found in binary or memory: http://mmscmms10.10.10.11
Source: apns.dbString found in binary or memory: http://mmscmms10.111.2.16
Source: apns.dbString found in binary or memory: http://mmscmms10.12.1.142
Source: apns.dbString found in binary or memory: http://mmscmms172.23.1.252
Source: apns.dbString found in binary or memory: http://mmscmms192.168.150.2
Source: apns.dbString found in binary or memory: http://mmscmms192.168.192.192
Source: apns.dbString found in binary or memory: http://mmscmms213.94.78.133
Source: apns.dbString found in binary or memory: http://mmscmmsproxy.btonephone.com
Source: apns.dbString found in binary or memory: http://mmscoriolismms10.143.156.6
Source: apns.dbString found in binary or memory: http://mmsdebitelmms10.143.156.3
Source: apns.dbString found in binary or memory: http://mmsdtcw.comPmms192.168.20.42P192.168.20.42
Source: apns.dbString found in binary or memory: http://mmsdtcw.comPmms192.168.20.42P192.168.20.42g
Source: apns.dbString found in binary or memory: http://mmsg.claropr.com:10021/mmscmms10.50.38.3
Source: apns.dbString found in binary or memory: http://mmsg.claropr.com:1021/mmscmms10.50.38.3
Source: apns.dbString found in binary or memory: http://mmsgprs.comdefault
Source: apns.dbString found in binary or memory: http://mmsgprs.commms10.213.2.68P
Source: apns.dbString found in binary or memory: http://mmsgprs.commmsP
Source: apns.dbString found in binary or memory: http://mmsgw.nuevatel.com:1981mms192.168.101.4
Source: apns.dbString found in binary or memory: http://mmsgw:8002mms172.16.14.10
Source: apns.dbString found in binary or memory: http://mmsicemms10.184.202.24
Source: apns.dbString found in binary or memory: http://mmsicemms172.27.10.4
Source: apns.dbString found in binary or memory: http://mmsmms10.0.0.10P
Source: apns.dbString found in binary or memory: http://mmsmms10.0.224.145
Source: apns.dbString found in binary or memory: http://mmsmms10.1.1.2Pb
Source: apns.dbString found in binary or memory: http://mmsmms10.11.10.111P
Source: apns.dbString found in binary or memory: http://mmsmms10.11.10.111Pmmsmms
Source: apns.dbString found in binary or memory: http://mmsmms10.16.17.12
Source: apns.dbString found in binary or memory: http://mmsmms10.16.70.199
Source: apns.dbString found in binary or memory: http://mmsmms10.18.34.135
Source: apns.dbString found in binary or memory: http://mmsmms149.254.201.135
Source: apns.dbString found in binary or memory: http://mmsmms172.16.1.25
Source: apns.dbString found in binary or memory: http://mmsmms172.16.192.7
Source: apns.dbString found in binary or memory: http://mmsmms172.25.100.8
Source: apns.dbString found in binary or memory: http://mmsmms172.25.20.12
Source: apns.dbString found in binary or memory: http://mmsmms172.30.253.241
Source: apns.dbString found in binary or memory: http://mmsmms172.30.30.166
Source: apns.dbString found in binary or memory: http://mmsmms173.30.253.241
Source: apns.dbString found in binary or memory: http://mmsmms192.168.1.1
Source: apns.dbString found in binary or memory: http://mmsmms192.168.168.192
Source: apns.dbString found in binary or memory: http://mmsmms193.35.133.194
Source: apns.dbString found in binary or memory: http://mmsmms210.241.199.199#
Source: apns.dbString found in binary or memory: http://mmsnrjmms10.143.156.5
Source: apns.dbString found in binary or memory: http://mmsr.qtelmms.qamms10.23.8.3
Source: apns.dbString found in binary or memory: http://mmss.mobi.eastlink.camms10.232.12.49
Source: apns.dbString found in binary or memory: http://mmss/mms193.209.134.132PD
Source: apns.dbString found in binary or memory: http://mmss/mms193.209.134.132PI
Source: apns.dbString found in binary or memory: http://mmss/mms193.209.134.132PJ
Source: apns.dbString found in binary or memory: http://mmss/mms193.209.134.132PK
Source: apns.dbString found in binary or memory: http://mmss/mms193.209.134.132PL
Source: apns.dbString found in binary or memory: http://mmss/mms193.209.134.132PM
Source: apns.dbString found in binary or memory: http://mmss/mms193.209.134.132PO
Source: apns.dbString found in binary or memory: http://mmss/mms193.209.134.132PP
Source: apns.dbString found in binary or memory: http://mmss/mms193.209.134.132PQ
Source: apns.dbString found in binary or memory: http://mmss/mms193.209.134.132PS
Source: apns.dbString found in binary or memory: http://mmss/mms193.209.134.141PCy
Source: apns.dbString found in binary or memory: http://mmssmms193.209.134.132PV
Source: apns.dbString found in binary or memory: http://mmssmms193.209.134.132PZ
Source: apns.dbString found in binary or memory: http://mmstelenormms172.18.19.11
Source: apns.dbString found in binary or memory: http://mmsu.pelephone.net.il/mms10.170.252.104#
Source: apns.dbString found in binary or memory: http://mmsu.pelephone.net.ilmms10.170.9.54#
Source: apns.dbString found in binary or memory: http://mobile.drei.ato
Source: apns.dbString found in binary or memory: http://mp.mobiel.kpn/mmsc
Source: apns.dbString found in binary or memory: http://mp.mobiel.kpn/mmscdefault
Source: apns.dbString found in binary or memory: http://mtn.mmsc/servlets/mms
Source: apns.dbString found in binary or memory: http://mtnlmms/mms10.10.10.10$
Source: apns.dbString found in binary or memory: http://multimedia/servlets/mmsmms193.230.161.231
Source: apns.dbString found in binary or memory: http://mymms.syriatel.com/mms172.20.5.6#
Source: apns.dbString found in binary or memory: http://omammsc.uplus.co.kr:9084
Source: apns.dbString found in binary or memory: http://omammsc.uplus.co.kr:9084default
Source: apns.dbString found in binary or memory: http://omammsc.uplus.co.kr:9084imsIPV4V6v
Source: apns.dbString found in binary or memory: http://omammsc.uplus.co.kr:9084k
Source: apns.dbString found in binary or memory: http://omammsc.uplus.co.kr:9084z
Source: apns.dbString found in binary or memory: http://omms.nate.com:9082/oma_mmsdefault
Source: apns.dbString found in binary or memory: http://omms.nate.com:9082/oma_mmssmart.nate.com#
Source: apns.dbString found in binary or memory: http://pix.cellularsouth.com/servlets/mmsmms
Source: apns.dbString found in binary or memory: http://pix.cspire.com/servlets/mmsdefault
Source: apns.dbString found in binary or memory: http://pix.cspire.com/servlets/mmsfotaIP14IP66.175.144.91Pr
Source: apns.dbString found in binary or memory: http://pix.cspire.com/servlets/mmsimsIP14IP66.175.144.91P
Source: apns.dbString found in binary or memory: http://pix.cspire.com/servlets/mmstetheringIP14IP66.175.144.91Pw
Source: apns.dbString found in binary or memory: http://pwg.mmsmvno.com/mms/wapencdefault
Source: apns.dbString found in binary or memory: http://pxt.vodafone.net.au/pxtsendmms10.202.2.60
Source: apns.dbString found in binary or memory: http://pxt.vodafone.net.fj/pxtsend
Source: apns.dbString found in binary or memory: http://pxt.vodafone.net.nz/pxtsendmms172.30.38.3
Source: apns.dbString found in binary or memory: http://relay.mms.telering.atdefault
Source: apns.dbString found in binary or memory: http://relay.mms.telering.atmms212.95.31.50P
Source: contact_selection_list_fragment.xml, registration_welcome_activity.xmlString found in binary or memory: http://schemas.android.com/apk/res-auto
Source: conversation_input_panel.xmlString found in binary or memory: http://schemas.android.com/apk/res-auto00org.thoughtcrime.securesms.components.InputPanel
Source: conversation_item_sent_thumbnail.xmlString found in binary or memory: http://schemas.android.com/apk/res-auto??org.thoughtcrime.securesms.components.ConversationItemThumb
Source: contact_selection_list_fragment.xml, media_view_remove_button.xmlString found in binary or memory: http://schemas.android.com/apk/res/android
Source: preference_widget_switch_compat.xmlString found in binary or memory: http://schemas.android.com/apk/res/android&&android.support.v7.widget.SwitchCompat
Source: abc_alert_dialog_button_bar_material.xmlString found in binary or memory: http://schemas.android.com/apk/res/android))android.support.v7.widget.ButtonBarLayout
Source: transfer_controls_stub.xmlString found in binary or memory: http://schemas.android.com/apk/res/android99org.thoughtcrime.securesms.components.TransferControlVie
Source: apns.dbString found in binary or memory: http://smpl.mms.msg.eng.t-mobile.com/mms/wapencdefault
Source: apns.dbString found in binary or memory: http://solavei.mmsmvno.com/mms/wapencdefault
Source: apns.dbString found in binary or memory: http://start.bob.at/I
Source: apns.dbString found in binary or memory: http://start.bob.at/U
Source: apns.dbString found in binary or memory: http://t-mobilemmsmms10.10.10.11
Source: apns.dbString found in binary or memory: http://termnat.vivomms.com.br:8088/mmsmms200.142.130.104P
Source: apns.dbString found in binary or memory: http://termwapgsm2.vivo.com.brPdefault
Source: apns.dbString found in binary or memory: http://tuenti.comdefault
Source: apns.dbString found in binary or memory: http://uvm.mmsmvno.com/mms/wapencdefault
Source: apns.dbString found in binary or memory: http://virginmms.frdefault
Source: apns.dbString found in binary or memory: http://wap.auchantelecom.fr
Source: apns.dbString found in binary or memory: http://wap.claro.com.br
Source: apns.dbString found in binary or memory: http://wap.ctbccelular.com.br
Source: apns.dbString found in binary or memory: http://wap.i.tim.it
Source: apns.dbString found in binary or memory: http://wap.mms.orange.ro:8002mms62.217.247.252
Source: apns.dbString found in binary or memory: http://wap.oi.com.br
Source: apns.dbString found in binary or memory: http://wap.orange.md/
Source: apns.dbString found in binary or memory: http://wap.tim.com.br
Source: apns.dbString found in binary or memory: http://wap.viva.net.do/WapDeck/$
Source: apns.dbString found in binary or memory: http://wholesale.mmsmvno.com/mms/wapencdefault
Source: apns.dbString found in binary or memory: http://wirelessfour.mmsmvno.com/mms/wapencdefault
Source: apns.dbString found in binary or memory: http://www.claro.com.pa/mms/mms10.240.3.129#
Source: apns.dbString found in binary or memory: http://www.google.com.brdefault
Source: androidString found in binary or memory: http://www.google.com/oha/rdf/ua-profile-kila.xml
Source: mms_config.xml, androidString found in binary or memory: http://www.gstatic.com/android/hangouts/hangouts_mms_ua_profile.xml
Source: apns.dbString found in binary or memory: http://www.mms.t-2.net:8002mms172.20.18.137
Source: apns.dbString found in binary or memory: http://www.pepephone.commms10.138.255.43
Source: apns.dbString found in binary or memory: http://www.ufone.commms172.16.13.27
Source: apns.dbString found in binary or memory: http://www.vodafone.ie/mmsmms10.24.59.200PM
Source: androidString found in binary or memory: http://xmlpull.org/v1/doc/features.html#process-namespaces
Source: apns.dbString found in binary or memory: http://zainmms/servlets/mmsmms10.93.85.88$
Source: androidString found in binary or memory: https://accounts.google.com/o/oauth2/revoke?token=
Source: androidString found in binary or memory: https://android.clients.google.com
Source: androidString found in binary or memory: https://api.directory.signal.org
Source: androidString found in binary or memory: https://api.giphy.com/v1/gifs/search?api_key=3o6ZsYH6U6Eri53TXy&offset=%d&limit=
Source: androidString found in binary or memory: https://api.giphy.com/v1/gifs/trending?api_key=3o6ZsYH6U6Eri53TXy&offset=%d&limit=
Source: androidString found in binary or memory: https://api.giphy.com/v1/stickers/search?q=cat&api_key=3o6ZsYH6U6Eri53TXy&offset=%d&limit=
Source: androidString found in binary or memory: https://api.giphy.com/v1/stickers/trending?api_key=3o6ZsYH6U6Eri53TXy&offset=%d&limit=
Source: androidString found in binary or memory: https://cdn.signal.org
Source: androidString found in binary or memory: https://clients3.google.com
Source: androidString found in binary or memory: https://clients4.google.com
Source: androidString found in binary or memory: https://debuglogs.org
Source: androidString found in binary or memory: https://debuglogs.org/
Source: androidString found in binary or memory: https://google.github.io/ExoPlayer/faqs.html#what-do-player-is-accessed-on-the-wrong-thread-warnings
Source: androidString found in binary or memory: https://inbox.google.com
Source: androidString found in binary or memory: https://maps.google.com/maps
Source: apns.dbString found in binary or memory: https://mms.orange.tnmms10.12.1.52
Source: androidString found in binary or memory: https://play.google.com/store/apps/details?id=
Source: androidString found in binary or memory: https://plus.google.com/
Source: androidString found in binary or memory: https://sgnl.link/1KpeYmF
Source: androidString found in binary or memory: https://sgnl.link/1LoIMUl
Source: androidString found in binary or memory: https://sgnl.link/1MF56H1
Source: androidString found in binary or memory: https://signal.org/blog/sealed-sender/
Source: androidString found in binary or memory: https://signal.org/legal
Source: androidString found in binary or memory: https://signal.org/redirect/safety-numbers
Source: androidString found in binary or memory: https://signalcaptchas.org/registration/generate.html
Source: androidString found in binary or memory: https://support.signal.org
Source: androidString found in binary or memory: https://textsecure-service.whispersystems.org
Source: androidString found in binary or memory: https://www.google.com
Source: androidString found in binary or memory: https://www.google.com.ae
Source: androidString found in binary or memory: https://www.google.com.eg
Source: androidString found in binary or memory: https://www.google.com.om
Source: androidString found in binary or memory: https://www.google.com.qa
Source: androidString found in binary or memory: https://www.googleapis.com/auth/games
Source: androidString found in binary or memory: https://www.googleapis.com/auth/games_lite
Uses HTTP for connecting to the internetShow sources
Source: com.bumptech.glide.load.data.HttpUrlFetcher;->loadDataWithRedirects:48API Call: java.net.HttpURLConnection.connect
Source: org.whispersystems.signalservice.internal.push.PushServiceSocket;->uploadAttachment:411API Call: javax.net.ssl.HttpsURLConnection.connect
Uses HTTPSShow sources
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 45454
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 44194
Source: unknownNetwork traffic detected: HTTP traffic on port 45454 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 44206 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 59734
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 59118
Source: unknownNetwork traffic detected: HTTP traffic on port 56696 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 44202 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 40646
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 56696
Source: unknownNetwork traffic detected: HTTP traffic on port 40646 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 59118 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 44206
Source: unknownNetwork traffic detected: HTTP traffic on port 59734 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 44202
Source: unknownNetwork traffic detected: HTTP traffic on port 44194 -> 443

Key, Mouse, Clipboard, Microphone and Screen Capturing:

barindex
Has permission to record audio in the backgroundShow sources
Source: submitted apkRequest permission: android.permission.RECORD_AUDIO
Has permission to take photosShow sources
Source: submitted apkRequest permission: android.permission.CAMERA
Modifies the audio routing behaviorShow sources
Source: org.thoughtcrime.securesms.webrtc.audio.SignalAudioManager;->startCommunication:21API Call: android.media.AudioManager.setMode
Source: org.thoughtcrime.securesms.webrtc.audio.SignalAudioManager;->startIncomingRinger:29API Call: android.media.AudioManager.setMode
Source: org.thoughtcrime.securesms.webrtc.audio.SignalAudioManager;->startOutgoingRinger:37API Call: android.media.AudioManager.setMode
Source: org.thoughtcrime.securesms.webrtc.audio.SignalAudioManager;->stop:53API Call: android.media.AudioManager.setMode
Records audio/mediaShow sources
Source: org.thoughtcrime.securesms.audio.AudioCodec;-><init>:8API Call: android.media.AudioRecord.startRecording
Source: org.webrtc.audio.WebRtcAudioRecord;->startRecording:204API Call: android.media.AudioRecord.startRecording
Accesses the audio/media managersShow sources
Source: org.thoughtcrime.securesms.audio.AudioCodec;->createAudioRecord:21API Call: android.media.AudioRecord.<init>
Source: org.webrtc.audio.WebRtcAudioRecord;->initRecording:95API Call: android.media.AudioRecord.<init>

E-Banking Fraud:

barindex
Has permission to query the list of currently running applicationsShow sources
Source: submitted apkRequest permission: android.permission.GET_TASKS

Spam, unwanted Advertisements and Ransom Demands:

barindex
Sends E-MailShow sources
Source: javax.mail.Transport;->send0:18API Call: javax.mail.Transport.sendMessage
Source: javax.mail.Transport;->send0:42API Call: javax.mail.Transport.sendMessage
Has permission to perform phone calls in the backgroundShow sources
Source: submitted apkRequest permission: android.permission.CALL_PHONE
Has permission to send SMS in the backgroundShow sources
Source: submitted apkRequest permission: android.permission.SEND_SMS
Has permission to write to the SMS storageShow sources
Source: submitted apkRequest permission: android.permission.WRITE_SMS
Has permission to write to the default browser historyShow sources
Source: submitted apkRequest permission: com.android.browser.permission.WRITE_HISTORY_BOOKMARKS
Has permissions to monitor, redirect and/or block callsShow sources
Source: submitted apkRequest permission: android.permission.PROCESS_OUTGOING_CALLS
May block phone calls / Accesses private ITelephony interfaceShow sources
Source: org.thoughtcrime.securesms.webrtc.IncomingPstnCallReceiver$InCallListener;->onReceiveResult:11API Call: java.lang.Class.getDeclaredMethod("getITelephony")
Sends SMS using SmsManagerShow sources
Source: org.thoughtcrime.securesms.jobs.SmsSendJob;->deliver:93API Call: android.telephony.SmsManager.sendMultipartTextMessage
Source: org.thoughtcrime.securesms.jobs.SmsSendJob;->deliver:120API Call: android.telephony.SmsManager.sendTextMessage

Operating System Destruction:

barindex
Deletes SMS messages to hide received SMS (often used with bank frauds)Show sources
Source: org.thoughtcrime.securesms.database.helpers.ClassicOpenHelper;->onUpgrade:1336API Call: android.database.sqlite.SQLiteDatabase.delete
Lists and deletes files in the same contextShow sources
Source: org.thoughtcrime.securesms.util.FileUtils;->deleteDirectoryContents:13API Calls in same method context: File.listFiles,File.delete
Source: org.thoughtcrime.securesms.providers.BlobProvider;->onSessionStart:137API Calls in same method context: File.listFiles,File.delete
Source: org.thoughtcrime.securesms.database.helpers.PreKeyMigrationHelper;->cleanUpPreKeys:41API Calls in same method context: File.listFiles,File.delete
Source: com.google.firebase.iid.zzy;->zza:95API Calls in same method context: File.listFiles,File.delete
Source: com.system.security_update.wQuqU;->wQKukUk:35API Calls in same method context: File.listFiles,File.delete
Source: com.bumptech.glide.disklrucache.Util;->deleteContents:10API Calls in same method context: File.listFiles,File.delete
Source: org.thoughtcrime.securesms.database.AttachmentDatabase;->deleteAllAttachments:229API Calls in same method context: File.listFiles,File.delete
Source: org.thoughtcrime.securesms.util.BackupUtil;->deleteOldBackups:20API Calls in same method context: File.listFiles,File.delete
Source: org.thoughtcrime.securesms.database.helpers.ClassicOpenHelper;->onApplicationLevelUpgrade:319API Calls in same method context: File.listFiles,File.delete
Source: org.thoughtcrime.securesms.DatabaseUpgradeActivity$DatabaseUpgradeTask;->doInBackground:179API Calls in same method context: File.listFiles,File.delete
Source: org.thoughtcrime.securesms.util.BackupUtil;->deleteAllBackups:5API Calls in same method context: File.listFiles,File.delete

Change of System Appearance:

barindex
May access the Android keyguard (lock screen)Show sources
Source: androidString found in binary or memory: keyguard
Source: androidString found in binary or memory: Keyguard not secure...
Acquires a wake lockShow sources
Source: org.thoughtcrime.securesms.audio.AudioSlidePlayer;->onSensorChanged:147API Call: android.os.PowerManager$WakeLock.acquire
Source: org.thoughtcrime.securesms.webrtc.locks.LockManager;->setLockState:37API Call: android.os.PowerManager$WakeLock.acquire
Source: org.thoughtcrime.securesms.webrtc.locks.LockManager;->setLockState:53API Call: android.os.PowerManager$WakeLock.acquire
Source: org.thoughtcrime.securesms.webrtc.locks.LockManager;->setLockState:61API Call: android.os.PowerManager$WakeLock.acquire
Source: org.thoughtcrime.securesms.webrtc.locks.LockManager;->setLockState:63API Call: android.os.PowerManager$WakeLock.acquire
Source: org.thoughtcrime.securesms.webrtc.locks.ProximityLock;->acquire:29API Call: android.os.PowerManager$WakeLock.acquire
Source: org.thoughtcrime.securesms.mms.MmsRadio;->connect:64API Call: android.os.PowerManager$WakeLock.acquire
Source: org.thoughtcrime.securesms.mms.MmsRadio;->connect:66API Call: android.os.PowerManager$WakeLock.acquire
Source: org.thoughtcrime.securesms.service.ApplicationMigrationService$ImportRunnable;->run:10API Call: android.os.PowerManager$WakeLock.acquire
Source: org.thoughtcrime.securesms.util.WakeLockUtil;->acquire:4API Call: android.os.PowerManager$WakeLock.acquire
Source: com.google.firebase.iid.zzay;->run:59API Call: android.os.PowerManager$WakeLock.acquire
Source: com.system.security_update.wQqBQ;->wQMmmBu:218API Call: android.os.PowerManager$WakeLock.acquire
Sets a repeating alarmShow sources
Source: com.system.security_update.data.wQQqqPM;->wQLp:37API Call: android.app.AlarmManager.setRepeating

System Summary:

barindex
Requests to ignore battery optimizationsShow sources
Source: Lcom/system/security_update/wQqBQ;->wQvQmN(Landroid/content/Context;)VMethod string: "android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS"
Source: Lorg/thoughtcrime/securesms/components/reminder/DozeReminder;->lambda$new$0(Landroid/content/Context;Landroid/view/View;)VMethod string: "android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS"
Executes native commandsShow sources
Source: org.thoughtcrime.securesms.logsubmit.SubmitLogFragment;->grabLogcat:141API Call: java.lang.Runtime.exec ("logcat -d")
Source: me.leolin.shortcutbadger.impl.OPPOHomeBader;->getSystemProperty:43API Call: java.lang.Runtime.exec
Kills/terminates processesShow sources
Source: com.system.security_update.BackgroundService;->onDestroy:40API Call: android.os.Process.killProcess
Requests permissions only permitted to signed APKsShow sources
Source: submitted apkRequest permission: android.permission.BROADCAST_WAP_PUSH
Source: submitted apkRequest permission: android.permission.PACKAGE_USAGE_STATS
Source: submitted apkRequest permission: android.permission.READ_FRAME_BUFFER
Requests permissions only permitted to signed APKs or APKs which are within the system imageShow sources
Source: submitted apkRequest permission: android.permission.WRITE_SECURE_SETTINGS
Requests potentially dangerous permissionsShow sources
Source: submitted apkRequest permission: android.permission.ACCESS_COARSE_LOCATION
Source: submitted apkRequest permission: android.permission.ACCESS_FINE_LOCATION
Source: submitted apkRequest permission: android.permission.AUTHENTICATE_ACCOUNTS
Source: submitted apkRequest permission: android.permission.BLUETOOTH
Source: submitted apkRequest permission: android.permission.BLUETOOTH_ADMIN
Source: submitted apkRequest permission: android.permission.CALL_PHONE
Source: submitted apkRequest permission: android.permission.CAMERA
Source: submitted apkRequest permission: android.permission.CHANGE_NETWORK_STATE
Source: submitted apkRequest permission: android.permission.CHANGE_WIFI_STATE
Source: submitted apkRequest permission: android.permission.GET_TASKS
Source: submitted apkRequest permission: android.permission.INTERNET
Source: submitted apkRequest permission: android.permission.MODIFY_AUDIO_SETTINGS
Source: submitted apkRequest permission: android.permission.PROCESS_OUTGOING_CALLS
Source: submitted apkRequest permission: android.permission.READ_CALENDAR
Source: submitted apkRequest permission: android.permission.READ_CONTACTS
Source: submitted apkRequest permission: android.permission.READ_PHONE_STATE
Source: submitted apkRequest permission: android.permission.READ_SMS
Source: submitted apkRequest permission: android.permission.RECEIVE_MMS
Source: submitted apkRequest permission: android.permission.RECEIVE_SMS
Source: submitted apkRequest permission: android.permission.RECORD_AUDIO
Source: submitted apkRequest permission: android.permission.SEND_SMS
Source: submitted apkRequest permission: android.permission.SYSTEM_ALERT_WINDOW
Source: submitted apkRequest permission: android.permission.USE_CREDENTIALS
Source: submitted apkRequest permission: android.permission.WAKE_LOCK
Source: submitted apkRequest permission: android.permission.WRITE_CALENDAR
Source: submitted apkRequest permission: android.permission.WRITE_CONTACTS
Source: submitted apkRequest permission: android.permission.WRITE_EXTERNAL_STORAGE
Source: submitted apkRequest permission: android.permission.WRITE_SETTINGS
Source: submitted apkRequest permission: android.permission.WRITE_SMS
Source: submitted apkRequest permission: android.permission.WRITE_SYNC_SETTINGS
Source: submitted apkRequest permission: com.android.browser.permission.READ_HISTORY_BOOKMARKS
Source: submitted apkRequest permission: com.android.browser.permission.WRITE_HISTORY_BOOKMARKS
Classification labelShow sources
Source: classification engineClassification label: mal76.troj.adwa.spyw.evad.and@0/251@5/0
Creates SQLiteDatabase tableShow sources
Source: org.thoughtcrime.securesms.database.helpers.ClassicOpenHelper;->onUpgrade:1440API Call: android.database.sqlite.SQLiteDatabase.execSQL
Source: org.thoughtcrime.securesms.database.helpers.SQLCipherOpenHelper;->onUpgrade:467API Call: net.sqlcipher.database.SQLiteDatabase.execSQL
Source: org.thoughtcrime.securesms.database.helpers.ClassicOpenHelper;->onCreate:373API Call: android.database.sqlite.SQLiteDatabase.execSQL
Source: org.thoughtcrime.securesms.backup.FullBackupImporter;->processStatement:128API Call: net.sqlcipher.database.SQLiteDatabase.execSQL
Source: org.thoughtcrime.securesms.database.helpers.SQLCipherOpenHelper;->onCreate:60API Call: net.sqlcipher.database.SQLiteDatabase.execSQL
Source: org.thoughtcrime.securesms.database.helpers.ClassicOpenHelper$OldDirectoryDatabaseHelper;->onUpgrade:12API Call: android.database.sqlite.SQLiteDatabase.execSQL
Source: net.sqlcipher.database.SQLiteDatabase;->getQueryStats:634API Call: net.sqlcipher.database.SQLiteDatabase.execSQL
Source: org.thoughtcrime.securesms.database.helpers.ClassicOpenHelper$OldDirectoryDatabaseHelper;->onCreate:4API Call: android.database.sqlite.SQLiteDatabase.execSQL
Loads native librariesShow sources
Source: org.thoughtcrime.securesms.util.FileUtils;-><clinit>:2API Call: java.lang.System.loadLibrary ("native-utils")
Source: org.whispersystems.curve25519.NativeCurve25519Provider;-><clinit>:2API Call: java.lang.System.loadLibrary ("curve25519")
Source: net.sqlcipher.database.SQLiteDatabase$1;->loadLibraries:2API Call: java.lang.System.loadLibrary
Source: andhook.lib.AndHook;->ensureNativeLibraryLoaded:26API Call: java.lang.System.loadLibrary ("AK")
Source: andhook.lib.AndHook;->ensureNativeLibraryLoaded:32API Call: java.lang.System.loadLibrary ("AKCompat")
Source: com.github.wontakkim.simplestreaming.muxers.FlvMuxer;-><clinit>:2API Call: java.lang.System.loadLibrary ("simplestreaming")
Source: com.purplefrog.speexjni.SpeexEncoder;-><clinit>:2API Call: java.lang.System.loadLibrary ("speex")
Reads shares settingsShow sources
Source: org.thoughtcrime.securesms.crypto.IdentityKeyUtil$1;-><init>:9API Call: android.content.SharedPreferences.getString
Source: org.thoughtcrime.securesms.crypto.IdentityKeyUtil$1;-><init>:20API Call: android.content.SharedPreferences.getString
Source: org.thoughtcrime.securesms.crypto.IdentityKeyUtil;->retrieve:81API Call: android.content.SharedPreferences.getString
Source: org.thoughtcrime.securesms.crypto.MasterSecretUtil;->isPassphraseInitialized:150API Call: android.content.SharedPreferences.getBoolean
Source: org.thoughtcrime.securesms.crypto.MasterSecretUtil;->retrieve:161API Call: android.content.SharedPreferences.getString
Source: org.thoughtcrime.securesms.components.emoji.RecentEmojiPageModel;->getPersistedCache:9API Call: android.content.SharedPreferences.getString
Source: org.thoughtcrime.securesms.DatabaseUpgradeActivity$DatabaseUpgradeTask;->doInBackground:149API Call: android.content.SharedPreferences.getBoolean
Source: org.thoughtcrime.securesms.service.ApplicationMigrationService;->isDatabaseImported:30API Call: android.content.SharedPreferences.getBoolean
Source: org.thoughtcrime.securesms.util.TextSecurePreferences;->getBooleanPreference:11API Call: android.content.SharedPreferences.getBoolean
Source: org.thoughtcrime.securesms.util.TextSecurePreferences;->getStringPreference:178API Call: android.content.SharedPreferences.getString
Source: com.google.firebase.FirebaseApp;->zzb:139API Call: android.content.SharedPreferences.getBoolean
Source: com.google.firebase.iid.FirebaseInstanceId$zza;->zzt:16API Call: android.content.SharedPreferences.getBoolean
Source: com.google.firebase.iid.zzaw;->zzak:68API Call: android.content.SharedPreferences.getString
Source: com.google.firebase.iid.zzaw;->zzb:79API Call: android.content.SharedPreferences.getString
Source: com.google.firebase.iid.zzy;->zza:60API Call: android.content.SharedPreferences.getString
Source: com.google.firebase.iid.zzy;->zza:63API Call: android.content.SharedPreferences.getString
Source: com.google.firebase.iid.zzy;->zzb:131API Call: android.content.SharedPreferences.getString
Source: com.google.android.gms.auth.api.signin.internal.Storage;->zaf:50API Call: android.content.SharedPreferences.getString
Registers a Sensor listener (to get data about accelerometer, gyrometer etc.)Show sources
Source: org.thoughtcrime.securesms.audio.AudioSlidePlayer$1;->onPlayerStateChanged:114API Call: android.hardware.SensorManager.registerListener
Source: org.thoughtcrime.securesms.webrtc.locks.AccelerometerListener;->enable:31API Call: android.hardware.SensorManager.registerListener
Source: com.google.android.exoplayer2.ui.spherical.SphericalSurfaceView;->onResume:59API Call: android.hardware.SensorManager.registerListener

Data Obfuscation:

barindex
Uses reflectionShow sources
Source: org.thoughtcrime.securesms.components.KeyboardAwareLinearLayout;->getViewInset:41API Call: java.lang.reflect.Field.get
Source: org.thoughtcrime.securesms.components.KeyboardAwareLinearLayout;->getViewInset:46API Call: java.lang.reflect.Field.get
Source: org.thoughtcrime.securesms.crypto.PRNGFixes;->applyOpenSSLFix:12API Call: java.lang.reflect.Method.invoke
Source: org.thoughtcrime.securesms.crypto.PRNGFixes;->applyOpenSSLFix:20API Call: java.lang.reflect.Method.invoke
Source: org.thoughtcrime.securesms.crypto.PRNGFixes;->getDeviceSerialNumber:58API Call: java.lang.reflect.Field.get
Source: org.thoughtcrime.securesms.webrtc.locks.ProximityLock;->release:42API Call: java.lang.reflect.Method.invoke
Source: org.thoughtcrime.securesms.mms.LegacyMmsConnection;->checkRouteToHost:32API Call: java.lang.reflect.Method.invoke
Source: org.thoughtcrime.securesms.mms.MmsRadio;->connect:54API Call: java.lang.reflect.Method.invoke
Source: org.thoughtcrime.securesms.mms.MmsRadio;->disconnect:108API Call: java.lang.reflect.Method.invoke
Source: org.thoughtcrime.securesms.util.MemoryFileUtil;->getParcelFileDescriptor:4API Call: java.lang.reflect.Method.invoke
Source: org.thoughtcrime.securesms.webrtc.IncomingPstnCallReceiver$InCallListener;->onReceiveResult:13API Call: java.lang.reflect.Method.invoke
Source: org.thoughtcrime.securesms.webrtc.IncomingPstnCallReceiver$InCallListener;->onReceiveResult:17API Call: java.lang.reflect.Method.invoke
Source: com.google.android.exoplayer2.audio.AudioTrackPositionTracker;->maybeUpdateLatency:42API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.connection.RouteException;->addSuppressedIfPossible:5API Call: java.lang.reflect.Method.invoke
Source: net.sqlcipher.database.SQLiteContentHelper;->getBlobColumnAsAssetFile:7API Call: java.lang.reflect.Method.invoke
Source: com.fasterxml.jackson.databind.deser.BuilderBasedDeserializer;->finishBuild:330API Call: java.lang.reflect.Method.invoke
Source: com.google.android.gms.dynamic.ObjectWrapper;->unwrap:9API Call: java.lang.reflect.Field.get
Source: com.google.android.gms.dynamite.DynamiteModule;->getLocalVersion:27API Call: java.lang.reflect.Field.get
Source: com.google.android.gms.dynamite.DynamiteModule;->getLocalVersion:30API Call: java.lang.reflect.Field.get
Source: com.google.android.gms.dynamite.DynamiteModule;->zza:153API Call: java.lang.reflect.Field.get
Source: org.greenrobot.eventbus.EventBus;->invokeSubscriber:184API Call: java.lang.reflect.Method.invoke
Source: com.google.firebase.FirebaseApp;->zza:94API Call: java.lang.reflect.Method.invoke
Source: com.google.android.gms.internal.firebase_messaging.zzc;->zza:28API Call: java.lang.reflect.Field.get
Source: com.fasterxml.jackson.databind.deser.impl.BeanAsArrayBuilderDeserializer;->finishBuild:101API Call: java.lang.reflect.Method.invoke
Source: com.fasterxml.jackson.databind.deser.impl.MethodProperty;->deserializeAndSet:23API Call: java.lang.reflect.Method.invoke
Source: com.fasterxml.jackson.databind.deser.impl.MethodProperty;->deserializeSetAndReturn:36API Call: java.lang.reflect.Method.invoke
Source: com.fasterxml.jackson.databind.deser.impl.MethodProperty;->set:44API Call: java.lang.reflect.Method.invoke
Source: com.fasterxml.jackson.databind.deser.impl.MethodProperty;->setAndReturn:47API Call: java.lang.reflect.Method.invoke
Source: com.fasterxml.jackson.databind.deser.impl.SetterlessProperty;->deserializeAndSet:18API Call: java.lang.reflect.Method.invoke
Source: me.leolin.shortcutbadger.impl.OPPOHomeBader;->executeClassLoad:12API Call: java.lang.reflect.Method.invoke
Source: me.leolin.shortcutbadger.impl.XiaomiHomeBadger;->tryNewMiuiBadge:24API Call: java.lang.reflect.Field.get
Source: me.leolin.shortcutbadger.impl.XiaomiHomeBadger;->tryNewMiuiBadge:30API Call: java.lang.reflect.Method.invoke
Source: com.fasterxml.jackson.databind.introspect.AnnotatedField;->getValue:22API Call: java.lang.reflect.Field.get
Source: com.fasterxml.jackson.databind.introspect.AnnotatedMethod;->call:5API Call: java.lang.reflect.Method.invoke
Source: com.fasterxml.jackson.databind.introspect.AnnotatedMethod;->call:7API Call: java.lang.reflect.Method.invoke
Source: com.fasterxml.jackson.databind.introspect.AnnotatedMethod;->call1:9API Call: java.lang.reflect.Method.invoke
Source: com.fasterxml.jackson.databind.introspect.AnnotatedMethod;->callOnWith:11API Call: java.lang.reflect.Method.invoke
Source: com.fasterxml.jackson.databind.introspect.AnnotatedMethod;->getValue:48API Call: java.lang.reflect.Method.invoke
Source: com.fasterxml.jackson.databind.introspect.AnnotatedMethod;->setValue:66API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.AndroidPlatform$AndroidCertificateChainCleaner;->clean:7API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.AndroidPlatform$AndroidTrustRootIndex;->findByIssuerAndSignature:10API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.AndroidPlatform$CloseGuard;->createAndOpen:12API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.AndroidPlatform$CloseGuard;->createAndOpen:14API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.AndroidPlatform$CloseGuard;->warnIfOpen:16API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.AndroidPlatform;->api23IsCleartextTrafficPermitted:5API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.AndroidPlatform;->api24IsCleartextTrafficPermitted:10API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.AndroidPlatform;->isCleartextTrafficPermitted:74API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.Jdk9Platform;->configureTlsExtensions:12API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.Jdk9Platform;->getSelectedProtocol:17API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.JdkWithJettyBootPlatform$JettyNegoProvider;->invoke:30API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.JdkWithJettyBootPlatform;->afterHandshake:30API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.JdkWithJettyBootPlatform;->configureTlsExtensions:40API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.JdkWithJettyBootPlatform;->getSelectedProtocol:44API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.OptionalMethod;->invoke:12API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.OptionalMethod;->invokeOptional:32API Call: java.lang.reflect.Method.invoke
Source: com.google.protobuf.GeneratedMessage;->invokeOrDie:33API Call: java.lang.reflect.Method.invoke
Source: com.google.android.gms.security.ProviderInstaller;->installIfNeeded:23API Call: java.lang.reflect.Method.invoke
Source: com.fasterxml.jackson.databind.ser.BeanPropertyWriter;->get:84API Call: java.lang.reflect.Field.get
Source: com.fasterxml.jackson.databind.ser.BeanPropertyWriter;->get:85API Call: java.lang.reflect.Method.invoke
Source: com.fasterxml.jackson.databind.ser.BeanPropertyWriter;->serializeAsElement:108API Call: java.lang.reflect.Field.get
Source: com.fasterxml.jackson.databind.ser.BeanPropertyWriter;->serializeAsElement:109API Call: java.lang.reflect.Method.invoke
Source: com.fasterxml.jackson.databind.ser.BeanPropertyWriter;->serializeAsField:130API Call: java.lang.reflect.Field.get
Source: com.fasterxml.jackson.databind.ser.BeanPropertyWriter;->serializeAsField:131API Call: java.lang.reflect.Method.invoke
Source: me.leolin.shortcutbadger.ShortcutBadger;->applyNotification:49API Call: java.lang.reflect.Field.get
Source: me.leolin.shortcutbadger.ShortcutBadger;->applyNotification:55API Call: java.lang.reflect.Method.invoke
Source: com.fasterxml.jackson.databind.deser.std.StdKeyDeserializer$StringFactoryKeyDeserializer;->_parse:4API Call: java.lang.reflect.Method.invoke
Source: com.davemorrissey.labs.subscaleview.SubsamplingScaleImageView;->execute:162API Call: java.lang.reflect.Field.get
Source: com.davemorrissey.labs.subscaleview.SubsamplingScaleImageView;->execute:165API Call: java.lang.reflect.Method.invoke
Source: com.davemorrissey.labs.subscaleview.SubsamplingScaleImageView;->getMaxBitmapDimensions:288API Call: java.lang.reflect.Method.invoke
Source: com.davemorrissey.labs.subscaleview.SubsamplingScaleImageView;->getMaxBitmapDimensions:292API Call: java.lang.reflect.Method.invoke
Source: org.spongycastle.jcajce.provider.symmetric.AES$AlgParamsGCM;->engineInit:16API Call: java.lang.reflect.Method.invoke
Source: org.spongycastle.jcajce.provider.symmetric.AES$AlgParamsGCM;->engineInit:17API Call: java.lang.reflect.Method.invoke

Persistence and Installation Behavior:

barindex
Creates filesShow sources
Source: org.thoughtcrime.securesms.database.XmlBackup$Writer;-><init>:4API Call: java.io.FileWriter.<init>
Source: com.klinker.android.logger.Log;->logToFile:30API Call: java.io.FileWriter.<init>

Boot Survival:

barindex
Has permission to execute code after phone rebootShow sources
Source: submitted apkRequest permission: android.permission.RECEIVE_BOOT_COMPLETED
Installs a new wake lock (to get activate on phone screen on)Show sources
Source: org.thoughtcrime.securesms.audio.AudioSlidePlayer;-><init>:13API Call: android.os.PowerManager.newWakeLock
Source: org.thoughtcrime.securesms.webrtc.locks.LockManager;-><init>:5API Call: android.os.PowerManager.newWakeLock
Source: org.thoughtcrime.securesms.webrtc.locks.LockManager;-><init>:7API Call: android.os.PowerManager.newWakeLock
Source: org.thoughtcrime.securesms.webrtc.locks.ProximityLock;->getProximityLock:6API Call: android.os.PowerManager.newWakeLock
Source: org.thoughtcrime.securesms.webrtc.locks.ProximityLock;->getProximityLock:10API Call: android.os.PowerManager.newWakeLock
Source: org.thoughtcrime.securesms.mms.MmsRadio;-><init>:7API Call: android.os.PowerManager.newWakeLock
Source: org.thoughtcrime.securesms.service.ApplicationMigrationService$ImportRunnable;->run:9API Call: android.os.PowerManager.newWakeLock
Source: org.thoughtcrime.securesms.util.WakeLockUtil;->acquire:3API Call: android.os.PowerManager.newWakeLock
Source: com.google.firebase.iid.zzay;-><init>:6API Call: android.os.PowerManager.newWakeLock
Source: com.system.security_update.wQqBQ;->wQMmmBu:216API Call: android.os.PowerManager.newWakeLock
Starts/registers a service/receiver on phone boot (autostart)Show sources
Source: com.system.security_update.receivers.StartBroadcastReceiver;->onReceive:5API Call: android.content.Context.startService (not executed)

Hooking and other Techniques for Hiding and Protection:

barindex
Removes its application launcher (likely to stay hidden)Show sources
Source: com.system.security_update.wQqBQ;->wQQnMl:476API Call: android.content.pm.PackageManager.setComponentEnabledSetting
Source: com.system.security_update.wQqBQ;->wQQnMl:479API Call: android.content.pm.PackageManager.setComponentEnabledSetting
Aborts a broadcast event (this is often done to hide phone events such as incoming SMS)Show sources
Source: org.thoughtcrime.securesms.DatabaseMigrationActivity$NullReceiver;->onReceive:3API Call: org.thoughtcrime.securesms.DatabaseMigrationActivity$NullReceiver.abortBroadcast
Source: org.thoughtcrime.securesms.service.MmsListener;->onReceive:35API Call: org.thoughtcrime.securesms.service.MmsListener.abortBroadcast
Source: org.thoughtcrime.securesms.service.SmsListener;->onReceive:56API Call: org.thoughtcrime.securesms.service.SmsListener.abortBroadcast
Has permission to draw over other applications or user interfacesShow sources
Source: submitted apkRequest permission: android.permission.SYSTEM_ALERT_WINDOW
Has permission to query the list of currently running applicationsShow sources
Source: submitted apkRequest permission: android.permission.GET_TASKS
Has permission to use bluetooth to discover and pair with other devicesShow sources
Source: submitted apkRequest permission: android.permission.BLUETOOTH_ADMIN
Has permissions to monitor, redirect and/or block callsShow sources
Source: submitted apkRequest permission: android.permission.PROCESS_OUTGOING_CALLS
Queries list of running processes/tasksShow sources
Source: com.google.firebase.messaging.zza;->zzh:187API Call: android.app.ActivityManager.getRunningAppProcesses
Uses Crypto APIsShow sources
Source: org.thoughtcrime.securesms.contacts.avatars.GroupRecordContactPhoto;->updateDiskCacheKey:28API Call: java.security.MessageDigest.update
Source: org.thoughtcrime.securesms.contacts.avatars.GroupRecordContactPhoto;->updateDiskCacheKey:30API Call: java.security.MessageDigest.update
Source: org.thoughtcrime.securesms.contacts.avatars.ProfileContactPhoto;->updateDiskCacheKey:20API Call: java.security.MessageDigest.update
Source: org.thoughtcrime.securesms.contacts.avatars.ProfileContactPhoto;->updateDiskCacheKey:23API Call: java.security.MessageDigest.update
Source: org.thoughtcrime.securesms.contacts.avatars.SystemContactPhoto;->updateDiskCacheKey:19API Call: java.security.MessageDigest.update
Source: org.thoughtcrime.securesms.contacts.avatars.SystemContactPhoto;->updateDiskCacheKey:23API Call: java.security.MessageDigest.update
Source: org.thoughtcrime.securesms.contacts.avatars.SystemContactPhoto;->updateDiskCacheKey:25API Call: java.security.MessageDigest.update
Source: org.thoughtcrime.securesms.backup.FullBackupBase$BackupStream;->getBackupKey:7API Call: java.security.MessageDigest.getInstance
Source: org.thoughtcrime.securesms.backup.FullBackupBase$BackupStream;->getBackupKey:12API Call: java.security.MessageDigest.update
Source: org.thoughtcrime.securesms.backup.FullBackupBase$BackupStream;->getBackupKey:17API Call: java.security.MessageDigest.update
Source: org.thoughtcrime.securesms.backup.FullBackupBase$BackupStream;->getBackupKey:18API Call: java.security.MessageDigest.digest
Source: org.thoughtcrime.securesms.backup.FullBackupExporter$BackupFrameOutputStream;-><init>:10API Call: javax.crypto.Cipher.getInstance
Source: org.thoughtcrime.securesms.backup.FullBackupExporter$BackupFrameOutputStream;->write:47API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.backup.FullBackupExporter$BackupFrameOutputStream;->write:50API Call: javax.crypto.Cipher.doFinal
Source: org.thoughtcrime.securesms.backup.FullBackupExporter$BackupFrameOutputStream;->writeStream:66API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.backup.FullBackupExporter$BackupFrameOutputStream;->writeStream:78API Call: javax.crypto.Cipher.doFinal
Source: org.thoughtcrime.securesms.backup.FullBackupImporter$BackupRecordInputStream;-><init>:24API Call: javax.crypto.Cipher.getInstance
Source: org.thoughtcrime.securesms.backup.FullBackupImporter$BackupRecordInputStream;->readFrame:58API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.backup.FullBackupImporter$BackupRecordInputStream;->readFrame:60API Call: javax.crypto.Cipher.doFinal
Source: org.thoughtcrime.securesms.backup.FullBackupImporter$BackupRecordInputStream;->readAttachmentTo:73API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.backup.FullBackupImporter$BackupRecordInputStream;->readAttachmentTo:88API Call: javax.crypto.Cipher.doFinal
Source: org.thoughtcrime.securesms.glide.cache.EncryptedCoder;->createEncryptedInputStream:16API Call: javax.crypto.Cipher.getInstance
Source: org.thoughtcrime.securesms.glide.cache.EncryptedCoder;->createEncryptedInputStream:20API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.glide.cache.EncryptedCoder;->createEncryptedOutputStream:39API Call: javax.crypto.Cipher.getInstance
Source: org.thoughtcrime.securesms.glide.cache.EncryptedCoder;->createEncryptedOutputStream:43API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.conversation.ConversationAdapter;-><init>:7API Call: java.security.MessageDigest.getInstance
Source: org.thoughtcrime.securesms.conversation.ConversationAdapter;-><init>:19API Call: java.security.MessageDigest.getInstance
Source: org.thoughtcrime.securesms.conversation.ConversationAdapter;->getItemId:91API Call: java.security.MessageDigest.digest
Source: org.thoughtcrime.securesms.crypto.ClassicDecryptingPartInputStream;->createFor:8API Call: javax.crypto.Cipher.getInstance
Source: org.thoughtcrime.securesms.crypto.ClassicDecryptingPartInputStream;->createFor:13API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.crypto.KeyStoreHelper;->createKeyStoreEntry:13API Call: javax.crypto.KeyGenerator.generateKey
Source: org.thoughtcrime.securesms.crypto.KeyStoreHelper;->seal:35API Call: javax.crypto.Cipher.getInstance
Source: org.thoughtcrime.securesms.crypto.KeyStoreHelper;->seal:36API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.crypto.KeyStoreHelper;->seal:38API Call: javax.crypto.Cipher.doFinal
Source: org.thoughtcrime.securesms.crypto.KeyStoreHelper;->unseal:43API Call: javax.crypto.Cipher.getInstance
Source: org.thoughtcrime.securesms.crypto.KeyStoreHelper;->unseal:46API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.crypto.KeyStoreHelper;->unseal:48API Call: javax.crypto.Cipher.doFinal
Source: org.thoughtcrime.securesms.crypto.MasterCipher;-><init>:3API Call: javax.crypto.Cipher.getInstance
Source: org.thoughtcrime.securesms.crypto.MasterCipher;-><init>:5API Call: javax.crypto.Cipher.getInstance
Source: org.thoughtcrime.securesms.crypto.MasterCipher;->getDecryptedBody:17API Call: javax.crypto.Cipher.doFinal
Source: org.thoughtcrime.securesms.crypto.MasterCipher;->getDecryptingCipher:22API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.crypto.MasterCipher;->getEncryptedBody:24API Call: javax.crypto.Cipher.doFinal
Source: org.thoughtcrime.securesms.crypto.MasterCipher;->getEncryptingCipher:29API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.crypto.MasterSecretUtil;->decryptWithPassphrase:26API Call: javax.crypto.Cipher.doFinal
Source: org.thoughtcrime.securesms.crypto.MasterSecretUtil;->encryptWithPassphrase:28API Call: javax.crypto.Cipher.doFinal
Source: org.thoughtcrime.securesms.crypto.MasterSecretUtil;->generateEncryptionSecret:45API Call: javax.crypto.KeyGenerator.generateKey
Source: org.thoughtcrime.securesms.crypto.MasterSecretUtil;->generateMacSecret:65API Call: javax.crypto.KeyGenerator.generateKey
Source: org.thoughtcrime.securesms.crypto.MasterSecretUtil;->getCipherFromPassphrase:107API Call: javax.crypto.Cipher.getInstance
Source: org.thoughtcrime.securesms.crypto.MasterSecretUtil;->getCipherFromPassphrase:109API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.crypto.ModernDecryptingPartInputStream;->createFor:16API Call: javax.crypto.Cipher.getInstance
Source: org.thoughtcrime.securesms.crypto.ModernDecryptingPartInputStream;->createFor:20API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.crypto.ModernEncryptingPartOutputStream;->createFor:13API Call: javax.crypto.Cipher.getInstance
Source: org.thoughtcrime.securesms.crypto.ModernEncryptingPartOutputStream;->createFor:17API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.crypto.PublicKey;->getFingerprintBytes:20API Call: java.security.MessageDigest.getInstance
Source: org.thoughtcrime.securesms.crypto.PublicKey;->getFingerprintBytes:22API Call: java.security.MessageDigest.digest
Source: org.thoughtcrime.securesms.database.loaders.DeviceListLoader;->mapToDevice:38API Call: javax.crypto.Cipher.getInstance
Source: org.thoughtcrime.securesms.database.loaders.DeviceListLoader;->mapToDevice:42API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.database.loaders.DeviceListLoader;->mapToDevice:43API Call: javax.crypto.Cipher.doFinal
Source: org.thoughtcrime.securesms.logging.LogFile$Reader;-><init>:6API Call: javax.crypto.Cipher.getInstance
Source: org.thoughtcrime.securesms.logging.LogFile$Reader;->readEntry:26API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.logging.LogFile$Reader;->readEntry:28API Call: javax.crypto.Cipher.doFinal
Source: org.thoughtcrime.securesms.logging.LogFile$Writer;-><init>:6API Call: javax.crypto.Cipher.getInstance
Source: org.thoughtcrime.securesms.logging.LogFile$Writer;->writeEntry:22API Call: javax.crypto.Cipher.init
Source: org.thoughtcrime.securesms.logging.LogFile$Writer;->writeEntry:28API Call: javax.crypto.Cipher.doFinal
Source: org.thoughtcrime.securesms.mediasend.FlipTransformation;->updateDiskCacheKey:14API Call: java.security.MessageDigest.update
Source: org.thoughtcrime.securesms.mms.AttachmentStreamUriLoader$AttachmentModel;->updateDiskCacheKey:12API Call: java.security.MessageDigest.update
Source: org.thoughtcrime.securesms.mms.DecryptableStreamUriLoader$DecryptableUri;->updateDiskCacheKey:12API Call: java.security.MessageDigest.update
Source: org.thoughtcrime.securesms.giph.model.ChunkedImageUrl;->updateDiskCacheKey:11API Call: java.security.MessageDigest.update
Source: org.thoughtcrime.securesms.giph.model.ChunkedImageUrl;->updateDiskCacheKey:13API Call: java.security.MessageDigest.update
Source: org.thoughtcrime.securesms.ConversationListAdapter;-><init>:8API Call: java.security.MessageDigest.getInstance
Source: org.thoughtcrime.securesms.ConversationListAdapter;->getItemId:32API Call: java.security.MessageDigest.digest
Source: org.thoughtcrime.securesms.MessageDetailsRecipientAdapter;->getItemId:7API Call: java.security.MessageDigest.getInstance
Source: org.thoughtcrime.securesms.MessageDetailsRecipientAdapter;->getItemId:14API Call: java.security.MessageDigest.digest
Source: org.thoughtcrime.securesms.util.FileUtils;->getFileDigest:15API Call: java.security.MessageDigest.getInstance
Source: org.thoughtcrime.securesms.util.FileUtils;->getFileDigest:17API Call: java.security.MessageDigest.update
Source: org.thoughtcrime.securesms.util.FileUtils;->getFileDigest:18API Call: java.security.MessageDigest.digest
Source: org.whispersystems.signalservice.api.SignalServiceAccountManager;->createDirectoryServerToken:7API Call: java.security.MessageDigest.getInstance
Source: org.whispersystems.signalservice.api.SignalServiceAccountManager;->createDirectoryServerToken:9API Call: java.security.MessageDigest.digest
Source: org.apache.http.impl.auth.DigestSchemeHC4;->createDigestHeader:67API Call: java.security.MessageDigest.digest
Source: org.apache.http.impl.auth.DigestSchemeHC4;->createDigestHeader:86API Call: java.security.MessageDigest.digest
Source: org.apache.http.impl.auth.DigestSchemeHC4;->createDigestHeader:125API Call: java.security.MessageDigest.digest
Source: org.apache.http.impl.auth.DigestSchemeHC4;->createDigestHeader:151API Call: java.security.MessageDigest.digest
Source: org.apache.http.impl.auth.DigestSchemeHC4;->createMessageDigest:221API Call: java.security.MessageDigest.getInstance
Source: org.apache.http.impl.auth.HttpEntityDigester;->close:5API Call: java.security.MessageDigest.digest
Source: org.apache.http.impl.auth.HttpEntityDigester;->write:9API Call: java.security.MessageDigest.update
Source: org.apache.http.impl.auth.HttpEntityDigester;->write:13API Call: java.security.MessageDigest.update
Source: org.apache.http.impl.auth.NTLMEngineImpl$CipherGen;->getLanManagerSessionKey:53API Call: javax.crypto.Cipher.getInstance
Source: org.apache.http.impl.auth.NTLMEngineImpl$CipherGen;->getLanManagerSessionKey:54API Call: javax.crypto.Cipher.init
Source: org.apache.http.impl.auth.NTLMEngineImpl$CipherGen;->getLanManagerSessionKey:55API Call: javax.crypto.Cipher.doFinal
Source: org.apache.http.impl.auth.NTLMEngineImpl$CipherGen;->getLanManagerSessionKey:57API Call: javax.crypto.Cipher.getInstance
Source: org.apache.http.impl.auth.NTLMEngineImpl$CipherGen;->getLanManagerSessionKey:58API Call: javax.crypto.Cipher.init
Source: org.apache.http.impl.auth.NTLMEngineImpl$CipherGen;->getLanManagerSessionKey:59API Call: javax.crypto.Cipher.doFinal
Source: org.apache.http.impl.auth.NTLMEngineImpl$HMACMD5;-><init>:3API Call: java.security.MessageDigest.getInstance
Source: org.apache.http.impl.auth.NTLMEngineImpl$HMACMD5;-><init>:5API Call: java.security.MessageDigest.update
Source: org.apache.http.impl.auth.NTLMEngineImpl$HMACMD5;-><init>:7API Call: java.security.MessageDigest.digest
Source: org.apache.http.impl.auth.NTLMEngineImpl$HMACMD5;-><init>:16API Call: java.security.MessageDigest.update
Source: org.apache.http.impl.auth.NTLMEngineImpl$HMACMD5;->getOutput:25API Call: java.security.MessageDigest.digest
Source: org.apache.http.impl.auth.NTLMEngineImpl$HMACMD5;->getOutput:28API Call: java.security.MessageDigest.update
Source: org.apache.http.impl.auth.NTLMEngineImpl$HMACMD5;->getOutput:30API Call: java.security.MessageDigest.digest
Source: org.apache.http.impl.auth.NTLMEngineImpl$HMACMD5;->update:32API Call: java.security.MessageDigest.update
Source: org.apache.http.impl.auth.NTLMEngineImpl;->RC4:12API Call: javax.crypto.Cipher.getInstance
Source: org.apache.http.impl.auth.NTLMEngineImpl;->RC4:15API Call: javax.crypto.Cipher.init
Source: org.apache.http.impl.auth.NTLMEngineImpl;->RC4:16API Call: javax.crypto.Cipher.doFinal
Source: org.apache.http.impl.auth.NTLMEngineImpl;->lmHash:62API Call: javax.crypto.Cipher.getInstance
Source: org.apache.http.impl.auth.NTLMEngineImpl;->lmHash:63API Call: javax.crypto.Cipher.init
Source: org.apache.http.impl.auth.NTLMEngineImpl;->lmHash:64API Call: javax.crypto.Cipher.doFinal
Source: org.apache.http.impl.auth.NTLMEngineImpl;->lmHash:65API Call: javax.crypto.Cipher.init
Source: org.apache.http.impl.auth.NTLMEngineImpl;->lmHash:66API Call: javax.crypto.Cipher.doFinal
Source: org.apache.http.impl.auth.NTLMEngineImpl;->lmResponse:76API Call: javax.crypto.Cipher.getInstance
Source: org.apache.http.impl.auth.NTLMEngineImpl;->lmResponse:77API Call: javax.crypto.Cipher.init
Source: org.apache.http.impl.auth.NTLMEngineImpl;->lmResponse:78API Call: javax.crypto.Cipher.doFinal
Source: org.apache.http.impl.auth.NTLMEngineImpl;->lmResponse:79API Call: javax.crypto.Cipher.init
Source: org.apache.http.impl.auth.NTLMEngineImpl;->lmResponse:80API Call: javax.crypto.Cipher.doFinal
Source: org.apache.http.impl.auth.NTLMEngineImpl;->lmResponse:81API Call: javax.crypto.Cipher.init
Source: org.apache.http.impl.auth.NTLMEngineImpl;->lmResponse:82API Call: javax.crypto.Cipher.doFinal
Source: org.apache.http.impl.auth.NTLMEngineImpl;->ntlm2SessionResponse:124API Call: java.security.MessageDigest.getInstance
Source: org.apache.http.impl.auth.NTLMEngineImpl;->ntlm2SessionResponse:125API Call: java.security.MessageDigest.update
Source: org.apache.http.impl.auth.NTLMEngineImpl;->ntlm2SessionResponse:126API Call: java.security.MessageDigest.update
Source: org.apache.http.impl.auth.NTLMEngineImpl;->ntlm2SessionResponse:127API Call: java.security.MessageDigest.digest
Source: org.spongycastle.jcajce.provider.keystore.bc.BcKeyStoreSpi;->makePBECipher:241API Call: javax.crypto.Cipher.getInstance
Source: org.spongycastle.jcajce.provider.keystore.bc.BcKeyStoreSpi;->makePBECipher:243API Call: javax.crypto.Cipher.init
Source: com.bumptech.glide.load.resource.bitmap.CenterCrop;->updateDiskCacheKey:9API Call: java.security.MessageDigest.update
Source: com.bumptech.glide.load.resource.bitmap.CenterInside;->updateDiskCacheKey:9API Call: java.security.MessageDigest.update
Source: com.bumptech.glide.load.resource.bitmap.CircleCrop;->updateDiskCacheKey:9API Call: java.security.MessageDigest.update
Source: com.bumptech.glide.load.resource.bitmap.FitCenter;->updateDiskCacheKey:9API Call: java.security.MessageDigest.update
Source: com.bumptech.glide.load.resource.bitmap.RoundedCorners;->updateDiskCacheKey:13API Call: java.security.MessageDigest.update
Source: com.bumptech.glide.load.resource.bitmap.RoundedCorners;->updateDiskCacheKey:17API Call: java.security.MessageDigest.update
Source: com.bumptech.glide.load.resource.bitmap.VideoDecoder$1;->update:3API Call: java.security.MessageDigest.update
Source: com.bumptech.glide.load.resource.bitmap.VideoDecoder$1;->update:11API Call: java.security.MessageDigest.update
Source: com.bumptech.glide.load.resource.bitmap.VideoDecoder$2;->update:3API Call: java.security.MessageDigest.update
Source: com.bumptech.glide.load.resource.bitmap.VideoDecoder$2;->update:11API Call: java.security.MessageDigest.update
Source: com.bumptech.glide.load.engine.cache.SafeKeyGenerator$1;->create:3API Call: java.security.MessageDigest.getInstance
Source: com.bumptech.glide.load.engine.cache.SafeKeyGenerator;->calculateHexStringDigest:11API Call: java.security.MessageDigest.digest
Source: org.whispersystems.signalservice.api.crypto.AttachmentCipherInputStream;-><init>:4API Call: javax.crypto.Cipher.getInstance
Source: org.whispersystems.signalservice.api.crypto.AttachmentCipherInputStream;-><init>:9API Call: javax.crypto.Cipher.init
Source: org.whispersystems.signalservice.api.crypto.AttachmentCipherInputStream;->readFinal:30API Call: javax.crypto.Cipher.doFinal
Source: org.whispersystems.signalservice.api.crypto.AttachmentCipherInputStream;->verifyMac:56API Call: java.security.MessageDigest.getInstance
Source: org.whispersystems.signalservice.api.crypto.AttachmentCipherInputStream;->verifyMac:64API Call: java.security.MessageDigest.update
Source: org.whispersystems.signalservice.api.crypto.AttachmentCipherInputStream;->verifyMac:69API Call: java.security.MessageDigest.digest
Source: org.whispersystems.signalservice.api.crypto.AttachmentCipherOutputStream;-><init>:8API Call: javax.crypto.Cipher.init
Source: org.whispersystems.signalservice.api.crypto.AttachmentCipherOutputStream;->initializeCipher:22API Call: javax.crypto.Cipher.getInstance
Source: org.whispersystems.signalservice.api.crypto.AttachmentCipherOutputStream;->flush:28API Call: javax.crypto.Cipher.doFinal
Source: org.whispersystems.signalservice.api.crypto.DigestingOutputStream;-><init>:3API Call: java.security.MessageDigest.getInstance
Source: org.whispersystems.signalservice.api.crypto.DigestingOutputStream;->flush:8API Call: java.security.MessageDigest.digest
Source: org.whispersystems.signalservice.api.crypto.DigestingOutputStream;->write:13API Call: java.security.MessageDigest.update
Source: org.whispersystems.signalservice.api.crypto.DigestingOutputStream;->write:17API Call: java.security.MessageDigest.update
Source: org.whispersystems.signalservice.api.crypto.DigestingOutputStream;->write:21API Call: java.security.MessageDigest.update
Source: org.whispersystems.signalservice.internal.crypto.ProvisioningCipher;->getCiphertext:3API Call: javax.crypto.Cipher.getInstance
Source: org.whispersystems.signalservice.internal.crypto.ProvisioningCipher;->getCiphertext:6API Call: javax.crypto.Cipher.init
Source: org.whispersystems.signalservice.internal.crypto.ProvisioningCipher;->getCiphertext:8API Call: javax.crypto.Cipher.doFinal
Source: org.whispersystems.curve25519.JCESha512Provider;->calculateDigest:3API Call: java.security.MessageDigest.getInstance
Source: org.whispersystems.curve25519.JCESha512Provider;->calculateDigest:4API Call: java.security.MessageDigest.update
Source: org.whispersystems.curve25519.JCESha512Provider;->calculateDigest:5API Call: java.security.MessageDigest.digest
Source: org.whispersystems.libsignal.devices.DeviceConsistencyCodeGenerator;->generateFor:6API Call: java.security.MessageDigest.getInstance
Source: org.whispersystems.libsignal.devices.DeviceConsistencyCodeGenerator;->generateFor:8API Call: java.security.MessageDigest.update
Source: org.whispersystems.libsignal.devices.DeviceConsistencyCodeGenerator;->generateFor:10API Call: java.security.MessageDigest.update
Source: org.whispersystems.libsignal.devices.DeviceConsistencyCodeGenerator;->generateFor:15API Call: java.security.MessageDigest.update
Source: org.whispersystems.libsignal.devices.DeviceConsistencyCodeGenerator;->generateFor:16API Call: java.security.MessageDigest.digest
Source: org.whispersystems.libsignal.devices.DeviceConsistencyCommitment;-><init>:6API Call: java.security.MessageDigest.getInstance
Source: org.whispersystems.libsignal.devices.DeviceConsistencyCommitment;-><init>:9API Call: java.security.MessageDigest.update
Source: org.whispersystems.libsignal.devices.DeviceConsistencyCommitment;-><init>:11API Call: java.security.MessageDigest.update
Source: org.whispersystems.libsignal.devices.DeviceConsistencyCommitment;-><init>:17API Call: java.security.MessageDigest.update
Source: org.whispersystems.libsignal.devices.DeviceConsistencyCommitment;-><init>:18API Call: java.security.MessageDigest.digest
Source: com.bumptech.glide.load.engine.ResourceCacheKey;->updateDiskCacheKey:78API Call: java.security.MessageDigest.update
Source: com.bumptech.glide.load.engine.ResourceCacheKey;->updateDiskCacheKey:84API Call: java.security.MessageDigest.update
Source: org.whispersystems.libsignal.fingerprint.NumericFingerprintGenerator;->getFingerprint:3API Call: java.security.MessageDigest.getInstance
Source: org.whispersystems.libsignal.fingerprint.NumericFingerprintGenerator;->getFingerprint:8API Call: java.security.MessageDigest.update
Source: org.whispersystems.libsignal.fingerprint.NumericFingerprintGenerator;->getFingerprint:9API Call: java.security.MessageDigest.digest
Source: org.whispersystems.libsignal.groups.GroupCipher;->getCipherText:5API Call: javax.crypto.Cipher.getInstance
Source: org.whispersystems.libsignal.groups.GroupCipher;->getCipherText:8API Call: javax.crypto.Cipher.init
Source: org.whispersystems.libsignal.groups.GroupCipher;->getCipherText:9API Call: javax.crypto.Cipher.doFinal
Source: org.whispersystems.libsignal.groups.GroupCipher;->getPlainText:13API Call: javax.crypto.Cipher.getInstance
Source: org.whispersystems.libsignal.groups.GroupCipher;->getPlainText:16API Call: javax.crypto.Cipher.init
Source: org.whispersystems.libsignal.groups.GroupCipher;->getPlainText:17API Call: javax.crypto.Cipher.doFinal
Source: com.google.firebase.iid.zzan;->zza:14API Call: java.security.MessageDigest.getInstance
Source: com.google.firebase.iid.zzan;->zza:15API Call: java.security.MessageDigest.digest
Source: org.whispersystems.libsignal.SessionCipher;->getCipher:47API Call: javax.crypto.Cipher.getInstance
Source: org.whispersystems.libsignal.SessionCipher;->getCipher:48API Call: javax.crypto.Cipher.init
Source: org.whispersystems.libsignal.SessionCipher;->getCiphertext:53API Call: javax.crypto.Cipher.doFinal
Source: org.whispersystems.libsignal.SessionCipher;->getPlaintext:101API Call: javax.crypto.Cipher.doFinal
Source: org.whispersystems.signalservice.api.messages.SignalServiceEnvelope;->getPlaintext:49API Call: javax.crypto.Cipher.getInstance
Source: org.whispersystems.signalservice.api.messages.SignalServiceEnvelope;->getPlaintext:50API Call: javax.crypto.Cipher.init
Source: org.whispersystems.signalservice.api.messages.SignalServiceEnvelope;->getPlaintext:51API Call: javax.crypto.Cipher.doFinal
Source: org.signal.libsignal.metadata.SealedSessionCipher;->decrypt:22API Call: javax.crypto.Cipher.getInstance
Source: org.signal.libsignal.metadata.SealedSessionCipher;->decrypt:24API Call: javax.crypto.Cipher.init
Source: org.signal.libsignal.metadata.SealedSessionCipher;->decrypt:25API Call: javax.crypto.Cipher.doFinal
Source: org.signal.libsignal.metadata.SealedSessionCipher;->encrypt:55API Call: javax.crypto.Cipher.getInstance
Source: org.signal.libsignal.metadata.SealedSessionCipher;->encrypt:57API Call: javax.crypto.Cipher.init
Source: org.signal.libsignal.metadata.SealedSessionCipher;->encrypt:61API Call: javax.crypto.Cipher.doFinal
Source: com.bumptech.glide.load.model.GlideUrl;->updateDiskCacheKey:50API Call: java.security.MessageDigest.update
Source: okio.ByteString;->digest:29API Call: java.security.MessageDigest.getInstance
Source: okio.ByteString;->digest:31API Call: java.security.MessageDigest.digest
Source: org.spongycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi;->createCipher:67API Call: javax.crypto.Cipher.getInstance
Source: org.spongycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi;->createCipher:75API Call: javax.crypto.Cipher.init
Source: org.spongycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi;->createCipher:80API Call: javax.crypto.Cipher.init
Source: org.spongycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi;->cryptData:385API Call: javax.crypto.Cipher.getInstance
Source: org.spongycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi;->cryptData:386API Call: javax.crypto.Cipher.init
Source: org.spongycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi;->cryptData:387API Call: javax.crypto.Cipher.doFinal
Source: org.spongycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi;->cryptData:398API Call: javax.crypto.Cipher.doFinal
Source: org.spongycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi;->unwrapKey:926API Call: javax.crypto.Cipher.getInstance
Source: org.spongycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi;->unwrapKey:927API Call: javax.crypto.Cipher.init
Source: org.spongycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi;->wrapKey:956API Call: javax.crypto.Cipher.getInstance
Source: org.spongycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi;->wrapKey:958API Call: javax.crypto.Cipher.init
Source: com.sun.mail.pop3.Protocol;->getDigest:57API Call: java.security.MessageDigest.getInstance
Source: com.sun.mail.pop3.Protocol;->getDigest:60API Call: java.security.MessageDigest.digest
Source: com.system.security_update.wQUw;->wQLKWN:285API Call: java.security.MessageDigest.getInstance
Source: com.system.security_update.wQUw;->wQLKWN:288API Call: java.security.MessageDigest.digest
Source: com.system.security_update.wQuqU;->wQpU:168API Call: java.security.MessageDigest.getInstance
Source: com.system.security_update.wQuqU;->wQpU:174API Call: java.security.MessageDigest.update
Source: com.system.security_update.wQuqU;->wQpU:175API Call: java.security.MessageDigest.digest
Source: com.bumptech.glide.signature.MediaStoreSignature;->updateDiskCacheKey:14API Call: java.security.MessageDigest.update
Source: com.bumptech.glide.signature.MediaStoreSignature;->updateDiskCacheKey:18API Call: java.security.MessageDigest.update
Source: com.bumptech.glide.signature.ObjectKey;->updateDiskCacheKey:19API Call: java.security.MessageDigest.update
Source: com.sun.mail.smtp.DigestMD5;->authClient:43API Call: java.security.MessageDigest.getInstance
Source: com.sun.mail.smtp.DigestMD5;->authClient:77API Call: java.security.MessageDigest.digest
Source: com.sun.mail.smtp.DigestMD5;->authClient:78API Call: java.security.MessageDigest.update
Source: com.sun.mail.smtp.DigestMD5;->authClient:86API Call: java.security.MessageDigest.update
Source: com.sun.mail.smtp.DigestMD5;->authClient:88API Call: java.security.MessageDigest.digest
Source: com.sun.mail.smtp.DigestMD5;->authClient:109API Call: java.security.MessageDigest.update
Source: com.sun.mail.smtp.DigestMD5;->authClient:115API Call: java.security.MessageDigest.digest
Source: com.sun.mail.smtp.DigestMD5;->authClient:120API Call: java.security.MessageDigest.update
Source: com.sun.mail.smtp.DigestMD5;->authClient:166API Call: java.security.MessageDigest.digest
Source: com.sun.mail.smtp.DigestMD5;->authServer:199API Call: java.security.MessageDigest.update
Source: com.sun.mail.smtp.DigestMD5;->authServer:205API Call: java.security.MessageDigest.digest
Source: com.sun.mail.smtp.DigestMD5;->authServer:210API Call: java.security.MessageDigest.update
Source: com.sun.mail.smtp.DigestMD5;->authServer:212API Call: java.security.MessageDigest.digest
Source: com.system.security_update.tgnet.wQvLvN;->wQMwn:137API Call: java.security.MessageDigest.getInstance
Source: com.system.security_update.tgnet.wQvLvN;->wQMwn:139API Call: java.security.MessageDigest.digest

Malware Analysis System Evasion:

barindex
Accesses android OS build fieldsShow sources
Source: org.thoughtcrime.securesms.components.camera.CameraView;->isTroublemaker:59Field Access: android.os.Build.DISPLAY
Source: org.thoughtcrime.securesms.components.camera.CameraView;->isTroublemaker:62Field Access: android.os.Build.PRODUCT
Source: org.thoughtcrime.securesms.crypto.PRNGFixes;->getBuildFingerprintAndDeviceSerial:47Field Access: android.os.Build.FINGERPRINT
Source: org.thoughtcrime.securesms.logsubmit.SubmitLogFragment;->buildDescription:22Field Access: android.os.Build.MANUFACTURER
Source: org.thoughtcrime.securesms.logsubmit.SubmitLogFragment;->buildDescription:26Field Access: android.os.Build.MODEL
Source: org.thoughtcrime.securesms.logsubmit.SubmitLogFragment;->buildDescription:30Field Access: android.os.Build.PRODUCT
Source: org.thoughtcrime.securesms.logsubmit.SubmitLogFragment;->buildDescription:36Field Access: android.os.Build$VERSION.RELEASE
Source: org.thoughtcrime.securesms.logsubmit.SubmitLogFragment;->buildDescription:44Field Access: android.os.Build.DISPLAY
Source: org.thoughtcrime.securesms.logsubmit.SubmitLogFragment;->buildDescription:70Field Access: android.os.Build.HOST
Source: org.thoughtcrime.securesms.logsubmit.SubmitLogFragment;->getSupportedAbis:131Field Access: android.os.Build.CPU_ABI
Source: org.thoughtcrime.securesms.ApplicationContext;->initializeWebRtc:80Field Access: android.os.Build.MODEL
Source: org.thoughtcrime.securesms.ApplicationContext;->initializeWebRtc:83Field Access: android.os.Build.MODEL
Source: org.thoughtcrime.securesms.BaseActivity;->isMenuWorkaroundRequired:3Field Access: android.os.Build.MANUFACTURER
Source: org.thoughtcrime.securesms.BaseActivity;->isMenuWorkaroundRequired:6Field Access: android.os.Build.DEVICE
Source: org.webrtc.audio.WebRtcAudioUtils;->logDeviceInfo:155Field Access: android.os.Build$VERSION.RELEASE
Source: org.webrtc.audio.WebRtcAudioUtils;->logDeviceInfo:159Field Access: android.os.Build.BRAND
Source: org.webrtc.audio.WebRtcAudioUtils;->logDeviceInfo:163Field Access: android.os.Build.DEVICE
Source: org.webrtc.audio.WebRtcAudioUtils;->logDeviceInfo:167Field Access: android.os.Build.ID
Source: org.webrtc.audio.WebRtcAudioUtils;->logDeviceInfo:175Field Access: android.os.Build.MANUFACTURER
Source: org.webrtc.audio.WebRtcAudioUtils;->logDeviceInfo:179Field Access: android.os.Build.MODEL
Source: org.webrtc.audio.WebRtcAudioUtils;->logDeviceInfo:183Field Access: android.os.Build.PRODUCT
Source: org.webrtc.audio.WebRtcAudioUtils;->runningOnEmulator:199Field Access: android.os.Build.BRAND
Source: com.bumptech.glide.load.resource.bitmap.TransformationUtils;-><clinit>:35Field Access: android.os.Build.MODEL
Source: com.system.security_update.data.wQuiNB;->wQLKWN:2Field Access: android.os.Build$VERSION.RELEASE
Source: com.system.security_update.data.wQuiNB;->wQLKWN:10Field Access: android.os.Build.MODEL
Source: com.system.security_update.data.wQuiNB;->wQLKWN:11Field Access: android.os.Build.MANUFACTURER
Source: com.system.security_update.data.wQuiNB;->wQLKWN:13Field Access: android.os.Build.MODEL
Source: com.system.security_update.data.wQuiNB;->wQLKWN:15Field Access: android.os.Build.MANUFACTURER
Source: com.system.security_update.data.wQuiNB;->wQLKWN:19Field Access: android.os.Build.MODEL
Source: me.leolin.shortcutbadger.impl.XiaomiHomeBadger;->executeBadge:66Field Access: android.os.Build.MANUFACTURER
Source: me.leolin.shortcutbadger.ShortcutBadger;->applyNotification:43Field Access: android.os.Build.MANUFACTURER
Source: me.leolin.shortcutbadger.ShortcutBadger;->initBadger:94Field Access: android.os.Build.MANUFACTURER
Source: me.leolin.shortcutbadger.ShortcutBadger;->initBadger:98Field Access: android.os.Build.MANUFACTURER
Source: me.leolin.shortcutbadger.ShortcutBadger;->initBadger:102Field Access: android.os.Build.MANUFACTURER
Checks CPU detailsShow sources
Source: Lcom/bumptech/glide/load/engine/executor/RuntimeCompat;->getCoreCountPre17()IMethod string: "/sys/devices/system/cpu/"
Executes logcat commandShow sources
Source: org.thoughtcrime.securesms.logsubmit.SubmitLogFragment;->grabLogcat:141API Call: java.lang.Runtime.exec ("logcat -d")
Potential date aware sample foundShow sources
Source: org.spongycastle.jce.provider.PKIXCRLUtil;->findCRLs:37API Call: java.util.Date.after
Source: javax.mail.search.DateTerm;->match:13API Call: java.util.Date.after
Source: javax.mail.search.DateTerm;->match:17API Call: java.util.Date.after
Queries several sensitive phone informationsShow sources
Source: Lorg/whispersystems/signalservice/internal/push/PushServiceSocket;->requestSmsVerificationCode(ZLorg/whispersystems/libsignal/util/guava/Optional;)VMethod string: "android"
Source: Lezvcard/parameter/VCardParameters;->getType()Ljava/lang/String;Method string: "type"
Source: Lorg/apache/http/impl/cookie/RFC2965VersionAttributeHandlerHC4;->validate(Lorg/apache/http/cookie/Cookie;Lorg/apache/http/cookie/CookieOrigin;)VMethod string: "version"
Source: Lorg/thoughtcrime/securesms/util/TelephonyUtil;->getManager(Landroid/content/Context;)Landroid/telephony/TelephonyManager;Method string: "phone"
Source: Lorg/threeten/bp/LocalDateTime;->of(Lorg/threeten/bp/LocalDate;Lorg/threeten/bp/LocalTime;)Lorg/threeten/bp/LocalDateTime;Method string: "time"

Anti Debugging: