MuMu Player Pro (NetEase) silently runs 17 system reconnaissance commands every 30 minutes on macOS · GitHub Skip to content Search Gists Search Gists Sign in Sign up You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert Instantly share code, notes, and snippets. interpiduser5 / news.md Created February 20, 2026 01:28 Show Gist options Download ZIP Star 1 ( 1 ) You must be signed in to star a gist Fork 0 ( 0 ) You must be signed in to fork a gist Embed Select an option Embed Embed this gist in your website. Share Copy sharable link for this gist. Clone via HTTPS Clone using the web URL. No results found Learn more about clone URLs Clone this repository at <script src="https://gist.github.com/interpiduser5/547d8a7baec436f24b7cce89dd4ae1ea.js"></script> Save interpiduser5/547d8a7baec436f24b7cce89dd4ae1ea to your computer and use it in GitHub Desktop. Embed Select an option Embed Embed this gist in your website. Share Copy sharable link for this gist. Clone via HTTPS Clone using the web URL. No results found Learn more about clone URLs Clone this repository at <script src="https://gist.github.com/interpiduser5/547d8a7baec436f24b7cce89dd4ae1ea.js"></script> Save interpiduser5/547d8a7baec436f24b7cce89dd4ae1ea to your computer and use it in GitHub Desktop. Download ZIP MuMu Player Pro (NetEase) silently runs 17 system reconnaissance commands every 30 minutes on macOS Raw news.md Summary MuMu Player Pro for macOS (by NetEase) executes a comprehensive system data collection routine every 30 minutes while the emulator is running. This includes enumerating all devices on your local network, capturing every running process with full command-line arguments, inventorying all installed applications, reading your hosts file, and dumping kernel parameters — all tied to your Mac’s serial number via SensorsData analytics. None of this is disclosed in MuMu’s privacy policy. None of it is necessary for an Android emulator to function. Environment App: MuMu Player Pro for macOS (v1.8.5) Bundle ID: com.netease.mumu.nemux-global macOS version: 26.3 (Apple Silicon) What it collects Every 30 minutes, MuMu creates a timestamped directory under: ~/Library/Application Support/com.netease.mumu.nemux-global/logs/ Each directory (e.g. 20260220-071645 ) contains the output of the following commands, all executed automatically in the background: File Command executed What it captures arpAll.txt arp -a Every device on your local network (IPs + MAC addresses) ifconfig.txt ifconfig All network interfaces, MAC addresses, IP addresses, VPN tunnels networkDNS.txt scutil –dns Full DNS resolver configuration networkProxy.txt scutil –proxy Proxy settings catHosts.txt cat /etc/hosts Your entire hosts file (exposes custom domains, dev environments) netstat.txt

Source: Hacker News | Original Link