Edit tour

Android Analysis Report
pinduoduo-6-49-0.apk

Overview

General Information

Sample Name:	pinduoduo-6-49-0.apk
Analysis ID:	824434
MD5:	6e02101d293e87e43788c809325fc974
SHA1:	72b835f10137df6d62f1f6e2aee941b3b34c62c7
SHA256:	ddaf85e8e86cf08a423629e9cd9ff59b42fd98d7b4dda74d09690544f0bccf35
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Removes its application launcher (likely to stay hidden)

Might try to detect if ADB is running

Tries to detect Android x86

Checks if app is currently debugged

Tries to detect XPosed instrumentation framework

Reads the serial number of the device

Checks if a SIM card is installed

Queries the SIM provider numeric MCC+MNC (mobile country code + mobile network code)

Queries list of running processes/tasks

Queries media storage location field

Has permission to read low-level log files (spy personal data)

May use Google Cloud Messaging (GCM) or Google's Cloud to Device Messaging (C2DM) services

Queries if audio routing to the Bluetooth headset is enabled

Queries the SIM provider name (SPN - Service Provider Name)

Obfuscates method names

Installs a new wake lock (to get activate on phone screen on)

Queries phone contact information

Found suspicious command strings (may be related to BOT commands)

Checks an internet connection is available

Queries list of installed packages

Has permission to record audio in the background

Requests potentially dangerous permissions

Has an unnatural receiver priority (often indicator for malware)

Requests root access

Has permission to take photos

Tries to detect Virtualbox

Queries the phones location (GPS)

Queries the network operator name

May access the Android keyguard (lock screen)

Checks if debugger is running

Has permissions to create, read or change account settings (inlcuding account password settings)

Lists and deletes files in the same context

Queries a list of installed applications

Has permission to read contacts

Requests permissions only permitted to signed APKs or APKs which are within the system image

Has functionalty to add an overlay to other apps

Has permission to draw over other applications or user interfaces

Queries stored mail and application accounts (e.g. Gmail or Whatsup)

Has permission to use bluetooth to discover and pair with other devices

Queries the unqiue device ID (IMEI, MEID or ESN)

Accesses /proc

Has permission to download files without notification

Has permission to read the phones state (phone number, device IDs, active call ect.)

Kills/terminates processes

Queries the SIM provider ISO country code

Accesses android OS build fields

Executes native commands

Queries the network MAC address

Installs an application shortcut on the screen

Has permission to change the WIFI configuration including connecting and disconnecting

Performs DNS lookups (Java API)

Queries camera information

Queries the network operator numeric MCC+MNC (mobile country code + mobile network code)

Queries several sensitive phone informations

Modifies the audio routing behavior

Checks CPU details

Queries the unique operating system id (ANDROID_ID)

Queries the WIFI MAC address

Has permission to execute code after phone reboot

Uses reflection

Classification

Yara Signatures

⊘No yara matches

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: com.xunmeng.pinduoduo.address.lbs.b.e;->h:209	API Call: android.location.Location.getLongitude
Source: com.xunmeng.pinduoduo.address.lbs.b.e;->h:212	API Call: android.location.Location.getLatitude
Source: com.xunmeng.pinduoduo.address.lbs.b.e;->h:240	API Call: android.location.Location.getLongitude
Source: com.xunmeng.pinduoduo.address.lbs.b.e;->h:243	API Call: android.location.Location.getLatitude
Source: com.xunmeng.pinduoduo.secure.d.a;->w:612	API Call: android.location.Location.getLongitude
Source: com.xunmeng.pinduoduo.secure.d.a;->w:614	API Call: android.location.Location.getLatitude
Source: com.xunmeng.pinduoduo.address.lbs.d.a;->e:142	API Call: android.location.Location.getLatitude
Source: com.xunmeng.pinduoduo.address.lbs.d.a;->e:143	API Call: android.location.Location.getLongitude
Source: com.xunmeng.pinduoduo.address.lbs.d.a;->e:149	API Call: android.location.Location.getLatitude
Source: com.xunmeng.pinduoduo.address.lbs.d.a;->e:151	API Call: android.location.Location.getLongitude

Source: Lcom/xunmeng/pinduoduo/basekit/commonutil/AppUtils;-><clinit>()V	Method string: "/system/xbin/su"
Source: Lcom/xunmeng/pinduoduo/basekit/commonutil/AppUtils;-><clinit>()V	Method string: "/system/bin/su"

Source: submitted apk

Request permission: android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

Source: submitted apk

Request permission: android.permission.CHANGE_WIFI_STATE

Source: com.xunmeng.pinduoduo.arch.foundation.a.q;->g:35	API Call: android.net.ConnectivityManager.getActiveNetworkInfo
Source: com.xunmeng.pinduoduo.network_diagnose.a.a;->a:6	API Call: android.net.NetworkInfo.isConnected
Source: com.xunmeng.pinduoduo.network_diagnose.a.a;->b:22	API Call: android.net.NetworkInfo.isAvailable
Source: com.xunmeng.pinduoduo.d.d;->h:85	API Call: android.net.ConnectivityManager.getActiveNetworkInfo
Source: com.xunmeng.pinduoduo.secure.e.b;->g:37	API Call: android.net.ConnectivityManager.getActiveNetworkInfo
Source: com.xunmeng.pinduoduo.sensitive_api_impl.e.a;->e:54	API Call: android.net.wifi.WifiManager.getConnectionInfo
Source: com.xunmeng.pinduoduo.sensitive_api.f.b$a;->a:7	API Call: android.net.wifi.WifiManager.getConnectionInfo

Source: com.xunmeng.pinduoduo.basekit.http.dns.HttpDns;->a:8	API Call: java.net.InetAddress.getByName (not executed)
Source: com.xunmeng.pinduoduo.glide.e.b;->d:87	API Call: java.net.InetAddress.getByName (not executed)
Source: com.xunmeng.pinduoduo.glide.e.b;->d:90	API Call: java.net.InetAddress.getByName (not executed)
Source: com.xunmeng.pinduoduo.glide.e.b;->d:93	API Call: java.net.InetAddress.getByName (not executed)
Source: com.xunmeng.pinduoduo.glide.e.b;->d:96	API Call: java.net.InetAddress.getByName (not executed)
Source: com.xunmeng.pinduoduo.glide.e.b;->m:231	API Call: java.net.InetAddress.getByName (not executed)

Source: com.xunmeng.pinduoduo.apm.common.d.c;->b:84	API Call: java.net.HttpURLConnection.connect
Source: com.xunmeng.pinduoduo.apm.common.d.b;->e:136	API Call: java.net.HttpURLConnection.connect
Source: com.xunmeng.pinduoduo.apm.common.d.c;->d:175	API Call: java.net.HttpURLConnection.connect
Source: com.xunmeng.pinduoduo.apm.common.d.c;->f:265	API Call: java.net.HttpURLConnection.connect

Source: android	String found in binary or memory: http://101.35.204.35/d?ttl=1&id=25196
Source: android	String found in binary or memory: http://101.35.212.35/d?ttl=1&id=25196
Source: android	String found in binary or memory: http://api-ipv6.pinduoduo.com
Source: android	String found in binary or memory: http://api-ipv6.yangkeduo.com
Source: android	String found in binary or memory: http://api.pinduoduo.com
Source: android	String found in binary or memory: http://api.yangkeduo.com
Source: android	String found in binary or memory: http://apiv2.hutaojie.com
Source: android	String found in binary or memory: http://mcdn.yangkeduo.com/app/lego/popup/2019-10-07/c3dcc289de2f42056fd10b7ce4232d78.png
Source: resources.arsc	String found in binary or memory: http://mobile.yangkeduo.com/wboauth_callback.html
Source: resources.arsc	String found in binary or memory: http://mobile.yangkeduo.com/wboauth_callback.html99http://pinduoduoimg.yangkeduo.com/avatar/default/
Source: resources.arsc	String found in binary or memory: http://pinduoduoimg.yangkeduo.com/avatar/default/%1$s.png
Source: resources.arsc	String found in binary or memory: http://pinduoduoimg.yangkeduo.com/base/logo.jpg
Source: android	String found in binary or memory: http://pinduoduoimg.yangkeduo.com/nation/rect/
Source: android	String found in binary or memory: http://pmmtk-a.pinduoduo.com/api/pmm/scene
Source: android	String found in binary or memory: http://pmmtk.htj.pdd.net
Source: android	String found in binary or memory: http://pmmtk.htj.pdd.net/api/pmm/scene
Source: eV.xml	String found in binary or memory: http://schemas.android.com/aapt
Source: zv.xml	String found in binary or memory: http://schemas.android.com/apk/res-auto
Source: zv.xml, android	String found in binary or memory: http://schemas.android.com/apk/res/android
Source: android	String found in binary or memory: http://skytk.htj.pdd.net/cmt/j.webp
Source: android	String found in binary or memory: https://api-ipv6.pinduoduo.com
Source: android	String found in binary or memory: https://api-ipv6.yangkeduo.com
Source: android	String found in binary or memory: https://api.pinduoduo.com
Source: android	String found in binary or memory: https://api.yangkeduo.com
Source: android	String found in binary or memory: https://cdl.pddpic.com
Source: android	String found in binary or memory: https://cdn.yangkeduo.com/cos_h5/js/vendor/eruda.js
Source: android	String found in binary or memory: https://cmtw.pinduoduo.com/api/cmt/zeus
Source: android	String found in binary or memory: https://commimg.pddpic.com/nemo_console/2021-05-25/09b08ff1-3d1a-4436-8d71-c28f49f08dfc.png
Source: android	String found in binary or memory: https://commimg.pddpic.com/upload/effect/beauty/962bd8c3-4db9-4a59-b6c9-6eb0ebe6cf34.png
Source: resources.arsc, android	String found in binary or memory: https://commimg.pddpic.com/upload/huaishi/0373c697-c5af-4771-bcae-596f304e78ce.png.slim.png
Source: resources.arsc	String found in binary or memory: https://commimg.pddpic.com/upload/huaishi/32a65df3-aa28-4e2a-991e-cf6fa18bfa82.png.slim.png
Source: resources.arsc	String found in binary or memory: https://commimg.pddpic.com/upload/huaishi/4ad4bd30-3cf6-472b-ae46-6bff4d635d56.png.slim.png
Source: android	String found in binary or memory: https://commimg.pddpic.com/upload/huaishi/84a811ce-e64b-4ae5-aa68-5c3f722194a0.png.slim.png
Source: android	String found in binary or memory: https://commimg.pddpic.com/upload/huaishi/8c6b6a3d-52be-41d5-a9dd-9c9d81516e36.png.slim.png
Source: resources.arsc	String found in binary or memory: https://commimg.pddpic.com/upload/huaishi/a6271914-34dd-486d-b427-e0340f7dbada.png.slim.png
Source: resources.arsc	String found in binary or memory: https://commimg.pddpic.com/upload/huaishi/b96c6917-b2a3-4b4f-a5a3-87fa787c89e1.png.slim.png
Source: resources.arsc	String found in binary or memory: https://commimg.pddpic.com/upload/huaishi/d23fadb9-77b3-4a80-9342-1ebc6df2d1c4.png.slim.png
Source: resources.arsc	String found in binary or memory: https://commimg.pddpic.com/upload/huaishi/d23fadb9-77b3-4a80-9342-1ebc6df2d1c4.png.slim.pngWWhttps:/
Source: android	String found in binary or memory: https://commimg.pddpic.com/upload/pxq/13041f6e-c03e-4333-8e3f-8d08db34493c.png.slim.png
Source: android	String found in binary or memory: https://commimg.pddpic.com/upload/pxq/2468a96c-a40c-4709-8c19-3eb8569ccfbe.png
Source: resources.arsc	String found in binary or memory: https://commimg.pddpic.com/upload/pxq/8c085f18-c9cd-411f-b447-e85b7deaff9a.png.slim.png
Source: android	String found in binary or memory: https://commimg.pddpic.com/upload/pxq/8f5f3155-aeb0-4b0b-b8bf-0e0c3f8d129b.png.slim.png
Source: android	String found in binary or memory: https://commimg.pddpic.com/upload/pxq/a742625e-f3c7-47ce-a7f6-721c3236c6fd.png.slim.png
Source: android	String found in binary or memory: https://commimg.pddpic.com/upload/pxq/cfc2739f-56f1-4b29-8c65-72bc6e40a7aa.png.slim.png
Source: android	String found in binary or memory: https://commimg.pddpic.com/upload/pxq/da796e5e-d1b3-4619-9351-f89209fa6e4e.png
Source: android	String found in binary or memory: https://commimg.pddpic.com/upload/pxq/ea134d0a-23c8-4209-a58d-6fbdeede9418.png.slim.png
Source: android	String found in binary or memory: https://commimg.pddpic.com/upload/pxq/f5167de4-bf7d-4642-9114-801ab8b06fdb.png.slim.png
Source: resources.arsc	String found in binary or memory: https://commimg.pddpic.com/upload/pxqgmv/15a88d08-8e3f-448b-a1aa-85f160c4af21.png.slim.png
Source: android	String found in binary or memory: https://commimg.pddpic.com/upload/pxqgmv/367da36a-bf13-4281-b403-380ec44620aa.png.slim.png
Source: resources.arsc	String found in binary or memory: https://commimg.pddpic.com/upload/pxqgmv/bcedd48d-8dc8-4228-9acc-f4a1779c7b37.png.slim.png
Source: resources.arsc	String found in binary or memory: https://commimg.pddpic.com/upload/pxqgmv/c5cb8e9a-b14d-4dbb-8fc6-320a26faa061.png.slim.png
Source: android	String found in binary or memory: https://commimg.pddpic.com/upload/pxqgmv/cd0a9809-e279-4063-899c-18a120d05776.png.slim.png
Source: android	String found in binary or memory: https://commimg.pddpic.com/upload/shake_red_packet/56181c35-2a1e-4db6-8efe-db17b63b8393.png.slim.png
Source: resources.arsc	String found in binary or memory: https://docs.pdd.net/pinbridge/sensitive_api/
Source: android	String found in binary or memory: https://funimg.pddpic.com/61c5954f-90d5-417a-8071-99c241736cdc.webp
Source: android	String found in binary or memory: https://funimg.pddpic.com/app/lego/fe8ac455-2fa2-46f8-bbdf-bc55e6805feb.png.slim.png
Source: android	String found in binary or memory: https://funimg.pddpic.com/app/wallet/ba5ba121-24a4-4f52-a23d-6ecb865e99d6.png
Source: android	String found in binary or memory: https://funimg.pddpic.com/app/wallet/ebfdc34b-7423-4b2c-93a4-4cf703e49ee2.png
Source: resources.arsc	String found in binary or memory: https://funimg.pddpic.com/b8398ef7-5058-4230-8428-a9defda98545.png
Source: android	String found in binary or memory: https://funimg.pddpic.com/c716aae9-a880-4719-af46-fc943aeb9492.png.slim.png
Source: android	String found in binary or memory: https://funimg.pddpic.com/common/app/lego/ae9df761-e110-44c7-9e86-de1c314177be.png.slim.png
Source: android	String found in binary or memory: https://funimg.pddpic.com/common/transac_subsidiary/863ff256-89b2-4b7b-906f-8e8c6b9e2b22.png.slim.pn
Source: resources.arsc	String found in binary or memory: https://funimg.pddpic.com/goods_detail/177aad3e-4f80-4636-9bbd-3b2104c340c5.png.slim.png
Source: resources.arsc	String found in binary or memory: https://funimg.pddpic.com/goods_detail/37df362c-a6db-438e-84ae-2327120590bf.png.slim.png
Source: resources.arsc	String found in binary or memory: https://funimg.pddpic.com/lego/73a9b547-0f76-4385-9589-6e6284da2e88.png
Source: android	String found in binary or memory: https://funimg.pddpic.com/pdd_app_login/0df351b9-0e48-48f5-9347-ac0ff822fd1c.png
Source: resources.arsc	String found in binary or memory: https://funimg.pddpic.com/pinxiaoquan/red_envelope_risk.png
Source: android	String found in binary or memory: https://funimg.pddpic.com/popup/520fcbfb-f558-4430-83cf-132f657085f7.png
Source: resources.arsc	String found in binary or memory: https://funimg.pddpic.com/pxq/2b5ea341-58ac-491f-816b-b82ffecc8b79.png.slim.png
Source: resources.arsc	String found in binary or memory: https://funimg.pddpic.com/pxq/3b5e5acd-84af-4daa-b510-3af2c57b024b.png.slim.png
Source: resources.arsc	String found in binary or memory: https://funimg.pddpic.com/pxq/606dc537-e1d2-4954-a670-ac14ffa4e08b.png.slim.png
Source: android	String found in binary or memory: https://funimg.pddpic.com/pxq/63585ff7-0d52-4beb-9bb6-82b6a2b130be.png.slim.png
Source: android	String found in binary or memory: https://funimg.pddpic.com/pxq/78a2e839-1f78-4b92-bc43-20057834ad4b.png.slim.png
Source: resources.arsc	String found in binary or memory: https://funimg.pddpic.com/pxq/9cbf6d61-d112-45e2-b76a-6a1b2a3e1694.png.slim.png
Source: resources.arsc	String found in binary or memory: https://funimg.pddpic.com/pxq/a168ad56-2344-46d5-b404-40ab037110d7.png.slim.png
Source: resources.arsc	String found in binary or memory: https://funimg.pddpic.com/pxq/a3c0c950-0155-4101-9966-92abba6f328e.png.slim.png
Source: android	String found in binary or memory: https://funimg.pddpic.com/pxq/c826c99a-484e-4d66-b629-7a82335815df.png.slim.png
Source: android	String found in binary or memory: https://funimg.pddpic.com/pxq/e69749da-82ed-471d-8713-bc24fb044f74.png.slim.png
Source: resources.arsc	String found in binary or memory: https://funimg.pddpic.com/pxq/xunzhang/cb8d76a8-6332-47a5-b0a5-633d1c80e5d0.png.slim.png
Source: android	String found in binary or memory: https://funimg.pddpic.com/super-star/redpacket/ec93d927-6c38-447c-929b-6a379eb0cde4.png
Source: android	String found in binary or memory: https://funimg.pddpic.com/transaction/48c4f68c-cb99-4ad5-b8e0-a2e3ad81ce12.png
Source: resources.arsc	String found in binary or memory: https://funimg.pddpic.com/transaction/65c20d18-68a7-4017-8ade-da1e76cd298b.png.slim.c1.png
Source: android	String found in binary or memory: https://img-test.pddpic.com/oms_img_ng/2020-11-12/d03d94ce-beb1-41f3-bf04-79f6ba89f3a6.png
Source: android	String found in binary or memory: https://img.pddpic.com/a/i/8f85c383-9578-4a61-9791-7ff36b460aaa.png.slim.png
Source: android	String found in binary or memory: https://img.pddpic.com/a/i/image_file_icon.png.slim.png
Source: android	String found in binary or memory: https://lego.pdd.com/
Source: android	String found in binary or memory: https://m.pinduoduo.net/sjs_blank_page.html
Source: android	String found in binary or memory: https://mapi.alipay.com/gateway.do?
Source: android	String found in binary or memory: https://meta.pinduoduo.com
Source: android	String found in binary or memory: https://meta.pinduoduo.com/api/app/v1/patch/batch/report
Source: android	String found in binary or memory: https://meta.pinduoduo.com/api/app/v1/patch/upgrade
Source: android	String found in binary or memory: https://meta.pinduoduo.com/api/app/v2/patch/upgrade
Source: android	String found in binary or memory: https://meta.pinduoduo.com/api/petrol/track
Source: resources.arsc	String found in binary or memory: https://mobile.yangkeduo.com/mkt_daily_to_login.html?_ex_pds_channel=hw&_oc_ads_channel=hw&_ex_pds_t
Source: resources.arsc	String found in binary or memory: https://pinduoduoimg.yangkeduo.com/cart/card_brand_on_sale_indicator.png
Source: android	String found in binary or memory: https://pinduoduoimg.yangkeduo.com/pinxiaoquan/smallhb.png
Source: resources.arsc	String found in binary or memory: https://promotion.pddpic.com/upload/timeline/1620d137-004a-4cb1-bff9-8c20828a9f9d.png.slim.png
Source: resources.arsc	String found in binary or memory: https://promotion.pddpic.com/upload/timeline/1620d137-004a-4cb1-bff9-8c20828a9f9d.png.slim.pngUUhttp
Source: resources.arsc	String found in binary or memory: https://promotion.pddpic.com/upload/timeline/440a5100-0c2c-406e-a3f6-35876ec4578a.zip
Source: android	String found in binary or memory: https://promotion.pddpic.com/upload/timeline/4c7bc7ac-766b-4706-a217-06a334eafe75.png.slim.png
Source: android	String found in binary or memory: https://promotion.pddpic.com/upload/timeline/52b900da-47e9-4625-b508-6a998aae7dd8.png.slim.png
Source: android	String found in binary or memory: https://promotion.pddpic.com/upload/timeline/79fb1d67-fd0c-4ed9-82c7-062b4e62c9e2.png.slim.png
Source: android	String found in binary or memory: https://promotion.pddpic.com/upload/timeline/a86b7d4d-4065-4140-afef-74bdd2b9b2f7.png.slim.png
Source: resources.arsc	String found in binary or memory: https://promotion.pddpic.com/upload/timeline/ed2247f1-6741-46f1-9a9e-48fd786d61fd.png.slim.png
Source: android	String found in binary or memory: https://skytk.htj.pdd.net/mmr.gif
Source: android	String found in binary or memory: https://skytk.pinduoduo.com/cmt/j.webp
Source: android	String found in binary or memory: https://skytk.pinduoduo.com/mmr.gif
Source: resources.arsc	String found in binary or memory: https://t13img.yangkeduo.com/upload/timeline/2020-04-21/0cafb296-6756-441d-9d56-e410684647e2.png
Source: resources.arsc	String found in binary or memory: https://t13img.yangkeduo.com/upload/timeline/2020-04-21/14c5cdc9-4401-4797-8bfb-4dd736f471cb.png
Source: resources.arsc	String found in binary or memory: https://t13img.yangkeduo.com/upload/timeline/2020-04-21/14c5cdc9-4401-4797-8bfb-4dd736f471cb.pngLLhu
Source: android	String found in binary or memory: https://video3.pddpic.com/pxq-qa-video/haoyou/1b79789e-4171-411e-b133-fdf0f7c4f664.png
Source: android	String found in binary or memory: https://video3.pddpic.com/pxq-qa-video/haoyou/7b04140f-48e0-4c42-92b4-2f46ea372a9c.png

Source: com.xunmeng.pinduoduo.chat.chatBiz.voiceChat.a.a;->f:130	API Call: android.media.AudioManager.isBluetoothA2dpOn
Source: com.xunmeng.pinduoduo.market_base_page.fragment.b;->o:131	API Call: android.media.AudioManager.isBluetoothA2dpOn

Source: submitted apk

Request permission: android.permission.RECORD_AUDIO

Source: submitted apk

Request permission: android.permission.CAMERA

Source: com.xunmeng.pinduoduo.chat.chatBiz.voiceChat.a.a;->b:60	API Call: android.media.AudioManager.setMode
Source: com.xunmeng.pinduoduo.chat.chatBiz.voiceChat.a.a;->d:99	API Call: android.media.AudioManager.setMode
Source: com.xunmeng.pinduoduo.market_base_page.fragment.b;->l:118	API Call: android.media.AudioManager.setMode
Source: com.xunmeng.pinduoduo.market_base_page.fragment.b;->v:210	API Call: android.media.AudioManager.setMode

Source: com.xunmeng.pinduoduo.permission.a.e;->b:12	API Call: android.media.AudioRecord.<init>
Source: com.xunmeng.pinduoduo.chat.chatBiz.chatDetail.Component.inputPanelComponent.b.a.c;->g:113	API Call: android.media.AudioRecord.<init>

Source: com.xunmeng.pinduoduo.jessie.a.a;->a:1

API Call: WindowManager.addView

Source: submitted apk

Request permission: com.xunmeng.pinduoduo.permission.C2D_MESSAGE

Source: com.xunmeng.pinduoduo.apm.crash.a.c;->l:717	API Calls in same method context: File.listFiles,File.delete
Source: com.xunmeng.pinduoduo.apm.a.d;->e:171	API Calls in same method context: File.listFiles,File.delete
Source: com.xunmeng.pinduoduo.apm.crash.a.g;->d:148	API Calls in same method context: File.listFiles,File.delete
Source: com.xunmeng.pinduoduo.apm.a.d;->g:244	API Calls in same method context: File.listFiles,File.delete

Source: android	String found in binary or memory: keyguard
Source: android	String found in binary or memory: logistics_dismiss_keyguard_5500
Source: android	String found in binary or memory: keyguard flag == false,do dissmissSelfAndSystem
Source: android	String found in binary or memory: ab_lmw_disable_unlock_keyguard_5410
Source: android	String found in binary or memory: isKeyguardSecure err:

Source: com.xunmeng.pinduoduo.ba.i;->b:10	API Call: android.os.PowerManager$WakeLock.acquire
Source: com.xunmeng.pinduoduo.ba.i;->c:13	API Call: android.os.PowerManager$WakeLock.acquire

Source: submitted apk	Request permission: android.permission.ACCESS_COARSE_LOCATION
Source: submitted apk	Request permission: android.permission.ACCESS_FINE_LOCATION
Source: submitted apk	Request permission: android.permission.AUTHENTICATE_ACCOUNTS
Source: submitted apk	Request permission: android.permission.BLUETOOTH
Source: submitted apk	Request permission: android.permission.BLUETOOTH_ADMIN
Source: submitted apk	Request permission: android.permission.CAMERA
Source: submitted apk	Request permission: android.permission.CHANGE_NETWORK_STATE
Source: submitted apk	Request permission: android.permission.CHANGE_WIFI_STATE
Source: submitted apk	Request permission: android.permission.INTERNET
Source: submitted apk	Request permission: android.permission.MANAGE_ACCOUNTS
Source: submitted apk	Request permission: android.permission.MODIFY_AUDIO_SETTINGS
Source: submitted apk	Request permission: android.permission.READ_CONTACTS
Source: submitted apk	Request permission: android.permission.READ_LOGS
Source: submitted apk	Request permission: android.permission.READ_PHONE_STATE
Source: submitted apk	Request permission: android.permission.RECORD_AUDIO
Source: submitted apk	Request permission: android.permission.SYSTEM_ALERT_WINDOW
Source: submitted apk	Request permission: android.permission.WAKE_LOCK
Source: submitted apk	Request permission: android.permission.WRITE_CALENDAR
Source: submitted apk	Request permission: android.permission.WRITE_EXTERNAL_STORAGE
Source: submitted apk	Request permission: android.permission.WRITE_SYNC_SETTINGS

Source: submitted apk

Request permission: android.permission.BIND_WALLPAPER

Source: com.xunmeng.pinduoduo.pdd_bandage.a.k;->a:34	API Call: android.os.Process.killProcess
Source: com.xunmeng.pinduoduo.volantis.d.a;->i:23	API Call: android.os.Process.killProcess
Source: com.xunmeng.pinduoduo.debug.a;->a:22	API Call: android.os.Process.killProcess
Source: com.xunmeng.pinduoduo.web.meepo.extension.MecoRenderProcessMonitorSubscriber;->lambda$onLoadUrl$0$MecoRenderProcessMonitorSubscriber:98	API Call: android.os.Process.killProcess

Source: com.xunmeng.pinduoduo.process_daemon.d.g;->a:34	API Call: java.lang.ProcessBuilder.start
Source: com.xunmeng.pinduoduo.process_daemon.d.e;->l:172	API Call: java.lang.Runtime.exec
Source: com.xunmeng.pinduoduo.sensitive_api.d.a;->a:7	API Call: java.lang.Runtime.exec
Source: com.xunmeng.pinduoduo.sensitive_api.d.a;->b:21	API Call: java.lang.Runtime.exec
Source: com.xunmeng.pinduoduo.sensitive_api.d.a;->c:35	API Call: java.lang.Runtime.exec
Source: com.xunmeng.pinduoduo.sensitive_api.d.a;->d:43	API Call: java.lang.Runtime.exec
Source: com.xunmeng.pinduoduo.sensitive_api.d.a;->e:51	API Call: java.lang.Runtime.exec
Source: com.xunmeng.pinduoduo.sensitive_api.d.a;->f:59	API Call: java.lang.Runtime.exec
Source: com.xunmeng.pinduoduo.deviceinfo.e;->w:103	API Call: java.lang.ProcessBuilder.start
Source: com.xunmeng.pinduoduo.deviceinfo.e;->x:124	API Call: java.lang.ProcessBuilder.start

Source: com.xunmeng.pinduoduo.appstartup.app.AppInitialization;->q:153	API Call: android.content.SharedPreferences.getBoolean
Source: com.xunmeng.pinduoduo.apm.crash.b.b;->d:97	API Call: android.content.SharedPreferences.getString
Source: com.xunmeng.pinduoduo.alive.strategy.init.adapterImpl.c.c.a;->getAbKeyEnableRecentTaskOptimization:35	API Call: android.content.SharedPreferences.getBoolean
Source: com.xunmeng.pinduoduo.alive.strategy.init.adapterImpl.c.c.a;->getAbKeyEnableSetPullTimeByConfig:40	API Call: android.content.SharedPreferences.getBoolean
Source: com.xunmeng.pinduoduo.alive.strategy.init.adapterImpl.c.c.a;->getAbKeyEnableUseNewCode:45	API Call: android.content.SharedPreferences.getBoolean
Source: com.xunmeng.pinduoduo.alive.strategy.init.adapterImpl.c.c.a;->getLocalBlacklistActive:60	API Call: android.content.SharedPreferences.getBoolean
Source: com.xunmeng.pinduoduo.alive.strategy.init.adapterImpl.c.c.a;->isThisHourAlreadyDone:122	API Call: android.content.SharedPreferences.getString
Source: com.xunmeng.pinduoduo.d.k;->Q:169	API Call: android.content.SharedPreferences.getString
Source: com.xunmeng.pinduoduo.app_search_common.d.g;->getBoolean:35	API Call: android.content.SharedPreferences.getBoolean

Source: com.xunmeng.pinduoduo.chat.datasdk.sdk.orm.db.d;->l:79	API Call: android.database.sqlite.SQLiteDatabase.execSQL
Source: com.xunmeng.pinduoduo.chat.datasdk.sdk.orm.db.b.e;->l:79	API Call: com.tencent.wcdb.database.SQLiteDatabase.execSQL
Source: com.xunmeng.pinduoduo.v.b.b;->onCreate:9	API Call: android.database.sqlite.SQLiteDatabase.execSQL

Source: classification engine

Classification label: mal64.spyw.expl.evad.andAPK@0/255@0/0

Source: pinduoduo-6-49-0.apk

Total valid method names: 32%

Source: com.xunmeng.pinduoduo.l.a.a$1;->invoke:12	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.l.a.a;->c:6	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.shortcut.a.b;->b:16	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.shortcut.a.c;->b:21	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.badge.leolin.a.e;->f:34	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.badge.leolin.a.f;->e:17	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.floating_shortcut.a.n;->t:33	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.floating_shortcut.a.n;->t:41	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.floating_shortcut.a.n;->u:52	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.floating_shortcut.a.r;->A:26	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.floating_shortcut.a.r;->y:75	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.floating_shortcut.a.r;->y:83	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.floating_shortcut.a.r;->c:179	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.activity.a.a.b;->a:4	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.a.e;->h:7	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.a.e;->h:13	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.a.c;->a:17	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.a.e;->h:19	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.a.f;->g:3	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.a.c;->b:32	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.a.c;->c:56	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.a.c;->c:61	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.a.g;->g:12	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.a.g;->g:20	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.a.f;->a:55	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.activity.a.a.h;->b:13	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.activity.a.a.h;->b:21	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.process_priority_opt.a.b;->d:10	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.permission.a.a;->B:36	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.permission.a.a;->C:60	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.permission.a.a.i;->F:23	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.permission.a.a.i;->G:51	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.permission.a.a.i;->i:112	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.apm.crash.a.b;->z:418	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.app_widget.add_confirm.a.a;->invoke:33	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.app_widget.add_confirm.a.b;->a:11	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.app_widget.add_confirm.a.b;->a:16	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.app_widget.add_confirm.a.b;->a:23	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.app_widget.add_confirm.a.b;->b:36	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.p.a.a.b;->h:89	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.basekit.message.apm.a.b;->b:50	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.power.base.a.a;->a:15	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.base.activity.BaseFragmentActivity;->reflectGetReferrer:234	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.base.activity.BaseFragmentActivity;->refreshEventTrackInfoToPageContext:246	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.ad.a;->b:11	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.ad.a;->b:17	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.ad.b;->invoke:9	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.ad.b;->invoke:16	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.aj.a;->d:45	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.aj.a;->d:50	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.android_ui_jsapi.PDDScreen;->getWindowSurface:35	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.android_ui_jsapi.PDDScreen;->getWindowSurface:39	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.number.api.a;->c:16	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.alive.strategy.biz.apollo.NA;->setName:31	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.service_hook.app.a;->g:52	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.service_hook.app.a;->g:56	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.service_hook.app.c;->b:10	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.service_hook.app.c;->b:15	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.app_push_base.h;->c:29	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.app_storage_base.c;->e:52	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.apm.avoid.MiscInlineFix;->g:53	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.apm.avoid.QueuedWorkANRAvoidHelper;->a:10	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.apm.avoid.QueuedWorkANRAvoidHelper;->a:15	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.apm.avoid.QueuedWorkANRAvoidHelper;->a:19	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.apm.avoid.QueuedWorkANRAvoidHelper;->b:40	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.apm.avoid.a;->a:20	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.secure.b.a$b;->f:15	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.activity.a.b.b;->a:22	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.b.c;->j:60	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.b.c;->j:65	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.b.d;->m:63	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.activity.a.b.d;->m:68	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.b.d;->m:73	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.b.d;->m:94	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.b.d;->m:99	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.b.g;->b:4	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.activity.a.b.g;->c:7	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.activity.a.b.h;->k:35	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.activity.a.b.h;->k:40	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.b.f;->g:63	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.activity.a.b.i;->a:5	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.b.i;->h:80	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.b.i;->h:84	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.b.j;->a:15	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.activity.a.b.j;->a:18	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.activity.a.b.j;->h:41	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.auth.pay.finshellpay.a.b.a;->e:30	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.apm.risk.b.a;->e:8	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.apm.risk.b.a;->f:21	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.apm.risk.b.a;->f:25	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.apm.risk.b.a;->g:37	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.apm.risk.b.a;->g:43	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.apm.risk.b.b;->invoke:85	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.apm.crash.b.d;->g:22	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.apm.crash.b.d;->h:29	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.apm.crash.b.d;->h:31	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.chat.datasdk.sdk.orm.db.b.a;->s:57	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.chat.datasdk.sdk.orm.db.b.a;->l:255	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.chat.datasdk.sdk.orm.db.b.g;->b:21	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.chat.datasdk.sdk.orm.db.b.g;->b:27	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.chat.datasdk.sdk.orm.db.b.g;->b:56	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.chat.datasdk.sdk.orm.db.b.g;->b:61	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.chat.datasdk.sdk.orm.db.b.g;->b:67	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.chat.datasdk.sdk.orm.db.b.g;->b:73	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.chat.datasdk.sdk.orm.db.b.g;->c:167	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.icon_widget.b.e;->a:23	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.icon_widget.b.e;->b:37	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.icon_widget.align.b.c;->f:137	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.b.c;->a:9	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.mini_widget.b.c;->x:298	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.ba.i;->m:72	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.wallet.common.base.WalletBaseFragmentActivity;->a:24	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.bg.a;->h:28	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.bot.a;->a:127	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.bs.b;->b:16	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.l.c.b;->a:14	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.l.c.b;->a:16	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.badge.leolin.c.a;->k:36	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.badge.leolin.c.a;->k:40	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.badge.leolin.c.a;->c:80	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.badge.leolin.c.a;->c:86	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.m.c.a;->e:6	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.m.c.a;->e:12	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.m.c.a;->a:18	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.m.c.b;->e:6	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.m.c.b;->e:14	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.m.c.b;->a:20	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.m.c.c;->e:7	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.m.c.c;->f:15	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.m.c.c;->f:21	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.m.c.c;->a:27	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.m.c.d;->e:7	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.m.c.d;->f:13	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.m.c.d;->f:20	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.m.c.d;->a:26	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.m.c.e;->f:9	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.m.c.e;->g:15	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.m.c.e;->h:20	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.m.c.e;->h:27	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.service_hook.c.a;->a:16	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.event.f.c.a;->k:45	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.permission_overlay.b.a.c.b;->c:53	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.permission_overlay.b.a.c.b;->d:65	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.permission_overlay.b.a.c.b;->d:75	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.c.c;->a:24	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.c.d;->d:65	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.c.d;->d:69	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.c.d;->d:75	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.c.d;->d:80	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.basekit.c.b;->q:71	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.apm.caton.m;->n:183	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.cdn_test.k;->l:19	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.floating_page.charge.ChargeManager;->l:122	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.social.common.cleaner.c;->a:29	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.apm.common.c;->c:7	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.apm.common.c;->c:10	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.basekit.commonutil.DeviceUtil;->getPhoneCount:75	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.basekit.commonutil.AppUtils;->i:191	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.basekit.commonutil.AppUtils;->i:195	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.basekit.commonutil.DeviceUtil;->getSystemPropertiesValue:194	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.lego.v8.component.x;->g:25	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.lego.v8.core.b;->f:45	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.cpu.c;->c:38	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.common.upload.d.f;->c:61	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.process_daemon.d.c;->i:34	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.process_daemon.d.c;->i:42	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.process_daemon.d.c;->i:45	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.process_daemon.d.c;->j:69	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.process_daemon.d.c;->j:75	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.process_daemon.d.c;->j:77	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.process_daemon.d.c;->m:95	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.process_daemon.d.c;->m:101	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.process_daemon.d.c;->n:114	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.process_daemon.d.c;->o:164	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.process_daemon.d.c;->p:180	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.process_daemon.d.c;->p:192	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.process_daemon.d.f;->a:13	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.process_daemon.d.f;->b:23	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.process_daemon.d.f;->k:62	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.process_daemon.d.f;->k:69	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.process_daemon.d.f;->l:82	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.clipboard.d.a;->h:21	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.secure.d.e;->A:25	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.secure.d.e;->A:26	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.secure.d.a;->y:688	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.chat.datasdk.sdk.orm.db.c;->e:10	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.chat.datasdk.sdk.orm.db.b;->s:57	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.chat.datasdk.sdk.orm.db.b;->l:255	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.app_widget.desk_shortcut.b;->w:479	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.k;->q:137	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.l;->ap:13	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.l;->aq:24	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.l;->aq:26	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.launcher_detect.detect.l;->aq:28	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.launcher_detect.detect.m;->an:94	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.l;->q:213	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.p;->af:6	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.p;->b:26	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.m;->U:196	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.m;->U:217	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.m;->U:219	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.p;->p:87	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.p;->p:93	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.p;->q:105	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.m;->q:261	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.r;->Y:12	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.q;->p:95	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.q;->p:102	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.launcher_detect.detect.q;->q:126	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.deviceinfo.g;->s:195	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.deviceinfo.g;->s:204	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.deviceinfo.g;->s:213	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.lego.e.e;->c:25	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.secure.e.b;->j:66	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.secure.e.b;->k:74	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.secure.e.g;->a:5	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.bj.e.a;->i:29	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.app_widget.add_confirm.e.g;->g:90	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.app_widget.add_confirm.e.g;->g:97	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.app_widget.add_confirm.e.a;->t:555	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.app_widget.add_confirm.e.a;->t:562	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.sensitive_api_impl.e.a;->b:13	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.sensitive_api_impl.e.a;->b:18	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.sensitive_api_impl.e.a;->d:45	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.sensitive_api_impl.e.a;->i:88	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.sensitive_api_impl.e.a;->i:95	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.sensitive_api_impl.e.a;->j:104	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.sensitive_api_impl.e.a;->j:111	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.meepo.core.event.a;->n:79	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.web.meepo.extension.DisableAccessibilitySubscriber;->onCreateView:16	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.service_hook.f.d$a;->l:33	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.service_hook.f.d$a;->m:53	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.meepo.core.f.a;->b:2	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.meepo.core.f.d$1;->run:5	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.meepo.core.f.e;->a:2	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.meepo.core.f.d;->a:5	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.android_pull_ability.f.b;->a:12	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.lock_screen_card.f.d;->a:8	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.fastjs.FastJS;->lambda$parallelRequestPreConnect$0$FastJS:149	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.effect.effect_ui.font.EffectFontEditText;->A:15	API Call: java.lang.reflect.Method.invoke
Source: com.xunmeng.pinduoduo.base.fragment.BaseFragment;->refreshEventTrackInfoToPageContext:390	API Call: java.lang.reflect.Field.get
Source: com.xunmeng.pinduoduo.base.fragment.BaseFragment;->refreshEventTrackInfoToPageContext:419	API Call: java.lang.reflect.Field.get

Source: com.xunmeng.pinduoduo.alive.strategy.biz.xin.a.a;->c:91

API Call: android.content.Intent.putExtra android.intent.extra.shortcut.INTENT

Source: com.xunmeng.pinduoduo.app.StartupThreadStat;->i:199	API Call: java.io.FileWriter.<init>
Source: com.xunmeng.pinduoduo.app.d;->c:27	API Call: java.io.FileWriter.<init>
Source: com.xunmeng.pinduoduo.process_daemon.b.c;->p:18	API Call: java.io.FileWriter.<init>
Source: com.xunmeng.pinduoduo.net_logger.b.a;->a:32	API Call: java.io.FileWriter.<init>
Source: com.xunmeng.pinduoduo.amui.cache.f;->w:16	API Call: java.io.FileWriter.<init>
Source: com.xunmeng.pinduoduo.basekit.cache.a;->m:205	API Call: java.io.FileWriter.<init>
Source: com.xunmeng.pinduoduo.basekit.cache.a;->p:277	API Call: java.io.FileWriter.<init>

Source: com.xunmeng.pinduoduo.ba.i;->a:2

API Call: android.os.PowerManager.newWakeLock

Source: submitted apk

Request permission: android.permission.RECEIVE_BOOT_COMPLETED

Hooking and other Techniques for Hiding and Protection

Removes its application launcher (likely to stay hidden)

Source: com.xunmeng.pinduoduo.app_widget.ad;->q:893	API Call: android.content.pm.PackageManager.setComponentEnabledSetting
Source: com.xunmeng.pinduoduo.alive.strategy.biz.b.b;->a:9	API Call: android.content.pm.PackageManager.setComponentEnabledSetting
Source: com.xunmeng.pinduoduo.alive.strategy.biz.b.a;->g:95	API Call: android.content.pm.PackageManager.setComponentEnabledSetting

Source: com.xunmeng.pinduoduo.apm.crash.a.b;->p:334	API Call: android.app.ActivityManager.getRunningAppProcesses
Source: com.xunmeng.pinduoduo.apm.crash.a.b;->z:403	API Call: android.app.ActivityManager.getRunningAppProcesses
Source: com.xunmeng.pinduoduo.app.ProcessNameUtil;->currentProcessName:15	API Call: android.app.ActivityManager.getRunningAppProcesses
Source: com.xunmeng.pinduoduo.basekit.commonutil.AppUtils;->a:111	API Call: android.app.ActivityManager.getRunningAppProcesses
Source: com.xunmeng.pinduoduo.basekit.commonutil.AppUtils;->b:121	API Call: android.app.ActivityManager.getRunningTasks
Source: com.xunmeng.pinduoduo.basekit.commonutil.AppUtils;->d:136	API Call: android.app.ActivityManager.getRunningAppProcesses
Source: com.xunmeng.pinduoduo.process_daemon.d.c;->o:133	API Call: android.app.ActivityManager.getRunningTasks
Source: com.xunmeng.pinduoduo.d.d;->i:91	API Call: android.app.ActivityManager.getRunningAppProcesses
Source: com.xunmeng.pinduoduo.arch.config.mango.d.g;->E:37	API Call: android.app.ActivityManager.getRunningAppProcesses

Source: submitted apk

Request permission: android.permission.SYSTEM_ALERT_WINDOW

Source: submitted apk

Request permission: android.permission.BLUETOOTH_ADMIN

Source: com.xunmeng.pinduoduo.number.a.d;->q:77	API Call: javax.crypto.Cipher.getInstance
Source: com.xunmeng.pinduoduo.number.a.d;->q:78	API Call: javax.crypto.Cipher.init
Source: com.xunmeng.pinduoduo.number.a.d;->q:80	API Call: javax.crypto.Cipher.doFinal
Source: com.xunmeng.pinduoduo.chat.unifylayer.dcenter.impl.datasdk.submsg.a.a.e;->h:26	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.chat.unifylayer.dcenter.impl.datasdk.submsg.a.a.e;->h:28	API Call: java.security.MessageDigest.update
Source: com.xunmeng.pinduoduo.chat.unifylayer.dcenter.impl.datasdk.submsg.a.a.e;->h:29	API Call: java.security.MessageDigest.digest
Source: com.xunmeng.pinduoduo.wallet.common.util.a.a;->m:28	API Call: javax.crypto.Cipher.getInstance
Source: com.xunmeng.pinduoduo.wallet.common.util.a.a;->m:29	API Call: javax.crypto.Cipher.init
Source: com.xunmeng.pinduoduo.wallet.common.util.a.a;->m:55	API Call: javax.crypto.Cipher.doFinal
Source: com.xunmeng.pinduoduo.vita.patch.b.b;->a:4	API Call: java.security.MessageDigest.update
Source: com.xunmeng.pinduoduo.vita.patch.b.b;->b:9	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.vita.patch.b.b;->b:11	API Call: java.security.MessageDigest.digest
Source: com.xunmeng.pinduoduo.lego.v8.c.e;->a:5	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.lego.v8.c.e;->a:6	API Call: java.security.MessageDigest.update
Source: com.xunmeng.pinduoduo.lego.v8.c.e;->a:7	API Call: java.security.MessageDigest.digest
Source: com.xunmeng.pinduoduo.common_upgrade.c.b;->a:2	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.common_upgrade.c.b;->a:5	API Call: java.security.MessageDigest.update
Source: com.xunmeng.pinduoduo.common_upgrade.c.b;->a:6	API Call: java.security.MessageDigest.digest
Source: com.xunmeng.pinduoduo.faceantispoofing.c.b;->b:12	API Call: javax.crypto.Cipher.getInstance
Source: com.xunmeng.pinduoduo.faceantispoofing.c.b;->b:14	API Call: javax.crypto.Cipher.init
Source: com.xunmeng.pinduoduo.basekit.http.dns.c.a$a;->a:13	API Call: javax.crypto.Cipher.getInstance
Source: com.xunmeng.pinduoduo.basekit.http.dns.c.a$a;->a:14	API Call: javax.crypto.Cipher.init
Source: com.xunmeng.pinduoduo.basekit.http.dns.c.a$a;->a:16	API Call: javax.crypto.Cipher.doFinal
Source: com.xunmeng.pinduoduo.basekit.http.dns.c.a$a;->b:34	API Call: javax.crypto.Cipher.getInstance
Source: com.xunmeng.pinduoduo.basekit.http.dns.c.a$a;->b:35	API Call: javax.crypto.Cipher.init
Source: com.xunmeng.pinduoduo.basekit.http.dns.c.a$a;->b:37	API Call: javax.crypto.Cipher.doFinal
Source: com.xunmeng.pinduoduo.cdn_test.v;->a:4	API Call: javax.crypto.KeyGenerator.generateKey
Source: com.xunmeng.pinduoduo.basekit.commonutil.AppUtils;->N:42	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.basekit.commonutil.AppUtils;->N:43	API Call: java.security.MessageDigest.digest
Source: com.xunmeng.pinduoduo.basekit.commonutil.MD5Utils;->digest:5	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.basekit.commonutil.MD5Utils;->digest:7	API Call: java.security.MessageDigest.digest
Source: com.xunmeng.pinduoduo.basekit.commonutil.MD5Utils;->digest:16	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.basekit.commonutil.MD5Utils;->digest:17	API Call: java.security.MessageDigest.update
Source: com.xunmeng.pinduoduo.basekit.commonutil.MD5Utils;->digest:18	API Call: java.security.MessageDigest.digest
Source: com.xunmeng.pinduoduo.basekit.commonutil.MD5Utils;->updateDigest:22	API Call: java.security.MessageDigest.update
Source: com.xunmeng.pinduoduo.common.upload.d.l;->a:10	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.common.upload.d.l;->a:13	API Call: java.security.MessageDigest.update
Source: com.xunmeng.pinduoduo.common.upload.d.l;->a:15	API Call: java.security.MessageDigest.digest
Source: com.xunmeng.pinduoduo.common.upload.d.l;->b:44	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.common.upload.d.l;->b:47	API Call: java.security.MessageDigest.update
Source: com.xunmeng.pinduoduo.common.upload.d.l;->b:50	API Call: java.security.MessageDigest.digest
Source: com.xunmeng.pinduoduo.lego.d.e;->u:13	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.lego.d.e;->u:15	API Call: java.security.MessageDigest.digest
Source: com.xunmeng.pinduoduo.bj.d.a;->h:20	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.bj.d.a;->h:21	API Call: java.security.MessageDigest.digest
Source: com.xunmeng.pinduoduo.secure.d.e;->n:590	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.secure.d.e;->n:591	API Call: java.security.MessageDigest.digest
Source: com.xunmeng.pinduoduo.event.f.d.a;->a:14	API Call: javax.crypto.Cipher.doFinal
Source: com.xunmeng.pinduoduo.event.f.d.c;->a:8	API Call: javax.crypto.Cipher.getInstance
Source: com.xunmeng.pinduoduo.event.f.d.c;->a:9	API Call: javax.crypto.Cipher.init
Source: com.xunmeng.pinduoduo.slark.d.g;->e:51	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.slark.d.g;->e:54	API Call: java.security.MessageDigest.update
Source: com.xunmeng.pinduoduo.slark.d.g;->e:70	API Call: java.security.MessageDigest.digest
Source: com.xunmeng.pinduoduo.arch.config.mango.d.g;->S:92	API Call: javax.crypto.Cipher.getInstance
Source: com.xunmeng.pinduoduo.arch.config.mango.d.g;->S:93	API Call: javax.crypto.Cipher.init
Source: com.xunmeng.pinduoduo.arch.config.mango.d.g;->S:94	API Call: javax.crypto.Cipher.doFinal
Source: com.xunmeng.pinduoduo.arch.config.mango.d.g;->g:230	API Call: javax.crypto.Cipher.getInstance
Source: com.xunmeng.pinduoduo.arch.config.mango.d.g;->g:231	API Call: javax.crypto.Cipher.init
Source: com.xunmeng.pinduoduo.arch.config.mango.d.g;->g:232	API Call: javax.crypto.Cipher.doFinal
Source: com.xunmeng.pinduoduo.arch.config.mango.d.g;->h:244	API Call: javax.crypto.Cipher.getInstance
Source: com.xunmeng.pinduoduo.arch.config.mango.d.g;->h:245	API Call: javax.crypto.Cipher.init
Source: com.xunmeng.pinduoduo.arch.config.mango.d.g;->h:246	API Call: javax.crypto.Cipher.doFinal
Source: com.xunmeng.pinduoduo.wallet.common.dc.b;->h:297	API Call: javax.crypto.Cipher.getInstance
Source: com.xunmeng.pinduoduo.wallet.common.dc.b;->h:298	API Call: javax.crypto.Cipher.init
Source: com.xunmeng.pinduoduo.wallet.common.dc.b;->h:317	API Call: javax.crypto.Cipher.doFinal
Source: com.xunmeng.pinduoduo.secure.e.f;->a:2	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.secure.e.f;->a:3	API Call: java.security.MessageDigest.update
Source: com.xunmeng.pinduoduo.secure.e.f;->a:4	API Call: java.security.MessageDigest.digest
Source: com.xunmeng.pinduoduo.secure.e.f;->c:10	API Call: java.security.MessageDigest.update
Source: com.xunmeng.pinduoduo.secure.e.f;->d:12	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.secure.e.f;->d:14	API Call: java.security.MessageDigest.digest
Source: com.xunmeng.pinduoduo.bj.e.a;->l:94	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.bj.e.a;->l:95	API Call: java.security.MessageDigest.digest
Source: com.xunmeng.pinduoduo.effectservice_cimpl.e.g;->c:28	API Call: java.security.MessageDigest.getInstance
Source: com.xunmeng.pinduoduo.effectservice_cimpl.e.g;->c:29	API Call: java.security.MessageDigest.update
Source: com.xunmeng.pinduoduo.effectservice_cimpl.e.g;->c:30	API Call: java.security.MessageDigest.digest

Malware Analysis System Evasion

Might try to detect if ADB is running

Source: Lcom/xunmeng/pinduoduo/secure/d/e;->c(Landroid/content/Context;Ljava/lang/String;Ljava/util/Map;)Ljava/lang/String;	Method string: adb_enabled
Source: Lcom/xunmeng/pinduoduo/secure/d/e;->c(Landroid/content/Context;Ljava/lang/String;Ljava/util/Map;)Ljava/lang/String;	Method string: adb_enabled=
Source: Lcom/xunmeng/pinduoduo/appstartup/a/f;->a(Ljava/util/Map;)V	Method string: adb_enabled
Source: Lcom/xunmeng/pinduoduo/permission/a/b;->a(Landroid/content/Context;)Ljava/util/Map;	Method string: adb_enabled
Source: Lcom/xunmeng/pinduoduo/af/j;->e()Z	Method string: adb_enabled
Source: Lcom/xunmeng/pinduoduo/permission/a/b;->d(Landroid/content/Context;)I	Method string: adb_enabled

Tries to detect Android x86

Source: Lcom/xunmeng/pinduoduo/basekit/c/d;->i()Lcom/xunmeng/pinduoduo/basekit/c/d$a;

Method string: "android sdk built for x86"

Tries to detect XPosed instrumentation framework

Source: Lcom/xunmeng/pinduoduo/volantis/kenithelper/b/c;->d(Ljava/lang/Throwable;)Z

Method string: de.robv.android.xposed.XposedBridge

Source: Lcom/xunmeng/pinduoduo/basekit/c/d;->g()Lcom/xunmeng/pinduoduo/basekit/c/d$a;

Method string: "vbox86"

Source: Lcom/xunmeng/pinduoduo/basekit/commonutil/AppUtils;->o(Landroid/content/Context;)J	Method string: "/proc/meminfo"
Source: Lcom/xunmeng/pinduoduo/secure/d/c;->c(I)Ljava/lang/String;	Method string: "/proc/"
Source: Lcom/xunmeng/pinduoduo/basekit/commonutil/DeviceUtil;->getKernelInfo()Ljava/lang/String;	Method string: "/proc/version"
Source: Lcom/xunmeng/pinduoduo/deviceinfo/a;->g()Ljava/lang/String;	Method string: "/proc/cpuinfo"
Source: Lcom/xunmeng/pinduoduo/secure/d/a;->C()Ljava/lang/String;	Method string: "/proc/stat"
Source: Lcom/xunmeng/pinduoduo/app/ProcessNameUtil;->getProcessName()Ljava/lang/String;	Method string: "/proc/%d/cmdline"
Source: Lcom/xunmeng/pinduoduo/secure/e/b;->i()J	Method string: "/proc/meminfo"
Source: Lcom/xunmeng/pinduoduo/secure/e/b;->h()Ljava/lang/String;	Method string: "/proc/version"

Source: com.xunmeng.pinduoduo.deprecated.chat.holder.shareholder.a.a;->b:20	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.app_storage.a.c;->b:66	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.v.a.c;->e:61	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.v.a.c;->e:64	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.v.a.c;->e:67	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.longlink.a.a;->b:23	Field Access: android.os.Build$VERSION.RELEASE
Source: com.xunmeng.pinduoduo.longlink.a.a;->b:27	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.longlink.a.a;->b:31	Field Access: android.os.Build.ID
Source: com.xunmeng.pinduoduo.auth.pay.finshellpay.a.a.c;->i:3	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.auth.pay.finshellpay.a.a.f;->i:6	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.process_priority_opt.a.b;->f:25	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.permission.a.e;->p:163	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.apm.a.d;->o:545	Field Access: android.os.Build.DISPLAY
Source: com.xunmeng.pinduoduo.apm.a.d;->o:546	Field Access: android.os.Build.CPU_ABI
Source: com.xunmeng.pinduoduo.apm.a.d;->o:547	Field Access: android.os.Build$VERSION.RELEASE
Source: com.xunmeng.pinduoduo.apm.a.d;->r:612	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.apm.crash.a.c;->i:553	Field Access: android.os.Build.DISPLAY
Source: com.xunmeng.pinduoduo.apm.crash.a.c;->i:554	Field Access: android.os.Build.CPU_ABI
Source: com.xunmeng.pinduoduo.apm.crash.a.c;->i:555	Field Access: android.os.Build$VERSION.RELEASE
Source: com.xunmeng.pinduoduo.apm.crash.a.c;->i:593	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.chat.base.a.a;->B:30	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.chat.base.a.a;->z:239	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.effect.foundation.a.a;->a:5	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.appstartup.a.a;->a:12	Field Access: android.os.Build$VERSION.RELEASE
Source: com.xunmeng.pinduoduo.appstartup.a.a;->a:27	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.appstartup.a.f;->a:68	Field Access: android.os.Build.BOARD
Source: com.xunmeng.pinduoduo.appstartup.a.f;->a:118	Field Access: android.os.Build.CPU_ABI
Source: com.xunmeng.pinduoduo.appstartup.a.f;->a:120	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.appstartup.a.f;->a:127	Field Access: android.os.Build.FINGERPRINT
Source: com.xunmeng.pinduoduo.appstartup.a.f;->a:298	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.appstartup.a.f;->a:340	Field Access: android.os.Build.TAGS
Source: com.xunmeng.pinduoduo.arch.foundation.a.q;->b:11	Field Access: android.os.Build$VERSION.RELEASE
Source: com.xunmeng.pinduoduo.arch.foundation.a.q;->c:12	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.arch.foundation.a.q;->d:13	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.base.activity.BaseActivity;->isMatex:283	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.base.activity.BaseActivity;->isMatexMulti:308	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.base.activity.BaseActivity;->isSuitForDarkMode:313	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.ui.activity.HomeActivity;->aC:37	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.ui.activity.HomeActivity;->aD:51	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.ui.activity.HomeActivity;->aw:496	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.activity.NewPageActivity;->ao:316	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.activity.NewPageActivity;->ao:318	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.popup.ae.e;->b:23	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.af.b;->a:16	Field Access: android.os.Build$VERSION.RELEASE
Source: com.xunmeng.pinduoduo.af.b;->a:20	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.af.b;->a:24	Field Access: android.os.Build.ID
Source: com.xunmeng.pinduoduo.af.j;->F:185	Field Access: android.os.Build$VERSION.RELEASE
Source: com.xunmeng.pinduoduo.af.j;->F:194	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.af.d;->o:343	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.ag.f;->f:13	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.mobile_ai.almighty.a;-><init>:5	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.app.e;->m:42	Field Access: android.os.Build$VERSION.RELEASE
Source: com.xunmeng.pinduoduo.app.e;->m:45	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.app.e;->m:48	Field Access: android.os.Build.ID
Source: com.xunmeng.pinduoduo.app.e;->n:54	Field Access: android.os.Build$VERSION.RELEASE
Source: com.xunmeng.pinduoduo.app.e;->n:58	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.app.e;->n:61	Field Access: android.os.Build.ID
Source: com.xunmeng.pinduoduo.app.s;->u:80	Field Access: android.os.Build$VERSION.RELEASE
Source: com.xunmeng.pinduoduo.app.s;->u:84	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.app.s;->u:88	Field Access: android.os.Build.ID
Source: com.xunmeng.pinduoduo.appstartup.app.AppInitialization;->n:58	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.appstartup.app.AppInitialization;->p:133	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.app_push_base.e;->d:51	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.app_push_base.g;->c:34	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.as.a;->h:18	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.as.a;->h:20	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.volantis.b.a;->b:57	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.volantis.b.a;->b:97	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.sku_checkout.checkout.b.c;->l:551	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.sku_checkout.checkout.b.c;->r:636	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.activity.a.b.b;->a:6	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.activity.a.b.b;->a:9	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.activity.a.b.c;->f:17	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.activity.a.b.c;->f:24	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.activity.a.b.d;->l:44	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.activity.a.b.d;->l:47	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.activity.a.b.f;->e:35	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.auth.pay.finshellpay.a.b.a;->a:2	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.auth.pay.finshellpay.a.b.a;->b:5	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.auth.pay.finshellpay.a.b.a;->c:14	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.process_priority_opt.b.e;->d:48	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.chat.unifylayer.dcenter.impl.datasdk.submsg.b.b;->w:81	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.chat.chatBiz.msgCardBiz.base.au;->i:211	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.base_pinbridge.AMApplication;->isValidManufactuer:4	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.base_pinbridge.AMApplication;->getManufactureName:56	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.base_pinbridge.AMDevice;->deviceInfo:71	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.base_pinbridge.AMDevice;->deviceInfo:83	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.base_pinbridge.AMDevice;->deviceInfo:113	Field Access: android.os.Build.CPU_ABI
Source: com.xunmeng.pinduoduo.base_pinbridge.d;->v:300	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.base_pinbridge.d;->v:301	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.bc.a;->getAppInfo:204	Field Access: android.os.Build.MANUFACTURER
Source: com.xunmeng.pinduoduo.bc.a;->getAppInfo:205	Field Access: android.os.Build.MODEL
Source: com.xunmeng.pinduoduo.bc.a;->getAppInfo:211	Field Access: android.os.Build.BRAND
Source: com.xunmeng.pinduoduo.bc.a;->getAppInfo:212	Field Access: android.os.Bui

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Android Analysis Report
pinduoduo-6-49-0.apk

Overview

General Information

Detection

Signatures

Classification

Yara Signatures

Snort Signatures

Joe Sandbox Signatures

Location Tracking

Privilege Escalation

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

E-Banking Fraud

Spam, unwanted Advertisements and Ransom Demands

Operating System Destruction

Change of System Appearance

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Android Analysis Report pinduoduo-6-49-0.apk

Overview

General Information

Detection

Signatures

Classification

Yara Signatures

Snort Signatures

Joe Sandbox Signatures

Location Tracking

Privilege Escalation

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

E-Banking Fraud

Spam, unwanted Advertisements and Ransom Demands

Operating System Destruction

Change of System Appearance

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Android Analysis Report
pinduoduo-6-49-0.apk