Strange app listed in WiFi data usage overview - Security Discussion

I'm using a unrooted Galaxy S20 (SM-G981B) and a few days ago I found a folder at my storage named "****". I never created this folder, but the timestamp and it's creation date was similar with the time where I tried some timelapse apps from the play store. After some research I also found out that there is a library for java (+ I guess android) called ****-Storage-Access-Framework (Link on Github: ****-Storage-Access-Framework) which seems to try helping developers to handle all the data file handling. So I was a bit more calmed, as I guess some of those timelaps apps might used this library and named the folder "****" because of this (not very professional but possible I guess).
Although I was somewhat calmed I was still warned and more attentive than usual. Yesterday I checked my WiFi Data usage (Connections->Data usage->WiFi data usage) and found a very strange app, called "10463". This App is listed nowhere else (also not in mobile data usage). I have no clue what app this could be or if it is connected to the "****" folder case a few days ago. But now I'm worried.
Beside this two cases nothing else strange happened on my phone.
Does someone has any idea what this app could be?
EDIT: When I print a list of all packages wie adb command "adb shell pm list packages", there is also no package with "10463" included.
Pictures:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Older timespan:

Related

what is using all my main storage memory??!

im down to 8.46mb free on main storage on my tytn ii..
im not sure whats eaten it all up as im using 110.71mb.
cleared ie and opera cache, have tomtom on there but maps on sd card.
google maps is on the sd..
ive run sk tools also... cant work out whats using the space? is there a simple way to free up 10 or 20 mb?
could it be my email account or something??
do you have a "deblogger" folder on your main storage?
solution:
http://forum.xda-developers.com/showpost.php?p=4588489&postcount=14
Is there any app which can show the running apps and the storage taken by some apps like Program Manager on PC?
Mobile Monger:
http://wss.boman.biz/Pages/MobileMonger.aspx
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
I was just over at ppckitchen, and read about mxip_notify.vol growing out of control if you get a ton of email notifications. Check to see if you have any databases that are out of whack (use total commander and view hidden files). SK Tools is also helpful for clearing storage memory.
i found it in the end... it was some opera downloads that is whacks in its own folder...
took ages to find but used something called spacefinder plus that only has a trial until november..
TheRem said:
Mobile Monger:
http://wss.boman.biz/Pages/MobileMonger.aspx
Click to expand...
Click to collapse
God, it's really a big earthquake when people like me who have a phobia on serried objects see the pic in it. But-thank you very much for help and it's a nice and interesting app.

[Q] Looking for basic Keylogger apk

I cant find any anywhere. I remember there used to be decent ones a couple years ago but where did they go? I want to track all my keystrokes. Anyone have a lead? This is legit -- its just for myself only as I do it on WhatPulse http://whatpulse.org/ at work and at home so i want to add it to my devices so I can find out just how many buttons I push all day in a week, month, etc.
I can also do this via a script, but Id rather do it with a clean apk that logs just strokes.
Haha, very misleading title ;-).
You are rather looking for keyboard statistics?
Those need to be offered from the keyboard apps itself else it would really be a keylogger.
I'm using SwiftKey and this is the statistic it offers, maybe it is enough?
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
androidcues said:
I cant find any anywhere. I remember there used to be decent ones a couple years ago but where did they go? I want to track all my keystrokes. Anyone have a lead? This is legit -- its just for myself only as I do it on WhatPulse http://whatpulse.org/ at work and at home so i want to add it to my devices so I can find out just how many buttons I push all day in a week, month, etc.
I can also do this via a script, but Id rather do it with a clean apk that logs just strokes.
Click to expand...
Click to collapse
You can download one again and get a keylogger apk. There is a lot of keyloggers available on the Internet now. For android, you can try ikeymonitor, which is currently free to download. ikeymonitor.com/download

[APP][2.0+] Pegasus - Location Based Profiles

This app allows a user to automatically change his phone profile based on current position. For example,
it can turn the phone to silent mode when entering the workplace.
It is open source (github link below) and I am open for any suggestions.
Pictures
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Download
(No market link as I don't have an account, maybe at some point in the future).
Source Code
Great.... I'll test and report it back
Sent from my HTC Desire
Updated! New Features:
- Added per Area settings with options for Bluetooth and Wifi
There is already WhereRing: http://code.google.com/p/wherering/ , though it is licensed under GPLv3. That works with FINE_LOCATION, which is very nice for freetards who don't use Google Network Location or NOGAPPs. Of course the battery takes a bigger hit , but he did a fair bit of optimization.
dabl8 said:
There is already WhereRing: http://code.google.com/p/wherering/ , though it is licensed under GPLv3. That works with FINE_LOCATION, which is very nice for freetards who don't use Google Network Location or NOGAPPs. Of course the battery takes a bigger hit , but he did a fair bit of optimization.
Click to expand...
Click to collapse
Well this app doesn't need any Google APIs either, just accessing cell IDs (although I thought of adding Google APIs for a future version).
Crashes on Epic 4G Touch

Some app named System tries to connect various IPs...need help in figuring it out

I got a Moto G phone running Oreo. I have a firewall installed, and its logs show an app with the name "System" trying to connect to various AWS hosted addresses. The phone is not rooted. I am trying to find out which process this System actually is, and what is its purpose. I am trying to somehow capture some traffic and find something.
If anyone knows what exactly this is and whether I should be worried or not, please let me know.
Here are some of them:
server-52-222-149-174.fra53.r.cloudfront.net:443
server-52-222-149-128.fra53.r.cloudfront.net:443
server-52-222-149-139.fra53.r.cloudfront.net:443
server-52-222-149-89.fra53.r.cloudfront.net:443
server-52-222-149-54u.fra53.r.cloudfront.net:443
server-52-222-149-143.fra53.r.cloudfront.net:443
server-52-222-149-206.fra53.r.cloudfront.net:443
server-52-222-149-99.fra53.r.cloudfront.net:443
server-54-230-93-53.fra2.r.cloudfront.net:443
server-54-230-93-231.fra2.r.cloudfront.net:443
server-54-230-93-238.fra2.r.cloudfront.net:443
server-54-230-93-128.fra2.r.cloudfront.net:443
server-54-230-93-148.fra2.r.cloudfront.net:443
server-54-230-93-236.fra2.r.cloudfront.net:443
server-54-230-93-37.fra2.r.cloudfront.net:443
server-54-230-93-198.fra2.r.cloudfront.net:443
server-54-230-93-211.fra2.r.cloudfront.net:443
server-54-230-93-54.fra2.r.cloudfront.net:443
server-54-230-93-207.fra2.r.cloudfront.net:443
server-54-230-8-80.lhr3.r.cloudfront.net:443
server-54-230-8-118.lhr3.r.cloudfront.net:443
server-54-230-8-51.lhr3.r.cloudfront.net:443
server-54-230-8-31.lhr3.r.cloudfront.net:443
server-54-230-8-199.lhr3.r.cloudfront.net:443
server-54-230-8-29.lhr3.r.cloudfront.net:443
server-54-230-8-87.lhr3.r.cloudfront.net:443
server-54-230-8-156.lhr3.r.cloudfront.net:443
server-54-230-8-122.lhr3.r.cloudfront.net:443
server-54-230-8-12.lhr3.r.cloudfront.net:443
server-54-230-8-6.lhr3.r.cloudfront.net:443
server-54-230-8-98.lhr3.r.cloudfront.net:443
server-54-230-8-53.lhr3.r.cloudfront.net:443
server-13-32-158-252.fra56.r.cloudfront.net:443
server-13-32-158-222.fra56.r.cloudfront.net:443
server-13-32-158-26.fra56.r.cloudfront.net:443
server-13-32-158-38.fra56.r.cloudfront.net:443
server-13-32-158-107.fra56.r.cloudfront.net:443
server-13-32-158-254.fra56.r.cloudfront.net:443
server-13-32-123-5.lhr4.r.cloudfront.net
server-13-32-123-73.lhr4.r.cloudfront.net
server-13-32-123-75.lhr4.r.cloudfront.net
server-143-204-181-81.lhr50.r.cloudfront.net:443
server-143-204-181-49.lhr50.r.cloudfront.net:443
server-143-204-181-63.lhr50.r.cloudfront.net:443
server-143-204-229-32.cdg3.r.cloudfront.net
server-143-204-229-114.cdg3.r.cloudfront.net
server-143-204-229-17.cdg3.r.cloudfront.net
server-143-204-229-102.cdg3.r.cloudfront.net
server-143-204-229-85.cdg3.r.cloudfront.net
server-143-204-229-71.cdg3.r.cloudfront.net
server-143-204-229-20.cdg3.r.cloudfront.net
server-143-204-15-118.mxp64.r.cloudfront.net
server-143-204-15-20.mxp64.r.cloudfront.net
server-143-204-15-40.mxp64.r.cloudfront.net
server-143-204-15-4.mxp64.r.cloudfront.net
server-143-204-15-18.mxp64.r.cloudfront.net
server-143-204-15-72.mxp64.r.cloudfront.net
server-143-204-15-68.mxp64.r.cloudfront.net
server-143-204-15-112.mxp64.r.cloudfront.net
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
-----------------------------------------------------------
I found some more information using logcat:
[ 10-19 17:12:33.467 1229: 1309 E/LocSvc_xtra2 ]
connect:204] connect to 54.230.93.211 failed
This is one of the IPs that System process is trying to connect. Some googling tells that this is Location Service being used probably. I have GPS turned off completely when I don't need it. I have also given access to GPS only to OpenMaps application which isn't running at the moment. All google apps are in disabled state.
I also noticed that these connection attempts happen every 5-6 minutes.
I cannot use strace as don't have root. I am trying to route the traffic from the phone through my PC to be able to capture network traffic.

Oppo A7 Keeps deleting the file automatically

My Oppo A7 has this kind of, like, phone manager or os system that keeps deleting my residual files and cache once every several days/overnight. I used system log to keep track of the processes involved. Well, I can only find the system UI in work during the same time my files were deleted. But, it was not in the process of deleting my files. But, when I was observing all the system apps i found some, like phone manager plugin that does not stop its process although i had disabled its usage access, where it keeps enabling itself back. My file always got deleted around 3 am. Disabling phone manager, having its self frequency off, or deleting related running process through developer options doesn't seem to work or just works for several days. Anyone has any idea how to stop my phone from rambling in the morning, deleting my files willy-nilly without my permission, only to wake up feeling raged? Here are the screenshots of the clean storage function on phone manager that i suspected deleting the files. I also think it has something to do with cheetah cleaning master.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Anyone ? I hope anyone here can tell me the package name, so I can delete it or method to delete it.
No one will help you since oppo is 1000 have tons of security patches no advance tech will be able to help you also they removed fast boot and rooting method and adb stuffs

Categories

Resources