Android.RemoteCode.8163

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.RemoteCode.358.origin

Network activity:

Connects to:

UDP(DNS) <Google DNS>
UDP(DNS) 8####.8.4.4:53
TCP(HTTP/1.1) 1####.23.148.191:8802
TCP(HTTP/1.1) dy.cn.wildpet####.xyz:80
TCP(HTTP/1.1) 39.1####.143.44:8001
TCP(HTTP/1.1) api.mydians####.com:80
TCP(HTTP/1.1) newap####.math####.cn:80
TCP(HTTP/1.1) g3.l####.com:80
TCP(HTTP/1.1) tv.hub.dianshi####.com:80
TCP(HTTP/1.1) p####.api.math####.cn:80
TCP(HTTP/1.1) tra####.dians####.com:80
TCP(HTTP/1.1) cdn.api.dianshi####.com:80
TCP(HTTP/1.1) app.sn####.com.####.cn:80
TCP(HTTP/1.1) na61-####.wagbr####.ali####.####.com:80
TCP(HTTP/1.1) 1####.161.124.146:12340
TCP(HTTP/1.1) l####.b####.com:80
TCP(HTTP/1.1) ne####.dianshi####.com:80
TCP(HTTP/1.1) vod####.ip####.q####.####.com:80
TCP(HTTP/1.1) and####.b####.qq.com:80
TCP(HTTP/1.1) api.o####.ads####.cn:80
TCP(HTTP/1.1) adash####.man.aliy####.com:80
TCP(HTTP/1.1) 1####.23.148.191:8801
TCP(HTTP/1.1) api.dianshi####.com:80
TCP(HTTP/1.1) 39.1####.226.196:8801
TCP(HTTP/1.1) c####.dianshi####.com.####.com:80
TCP(HTTP/1.1) detec####.math####.cn:80
TCP(HTTP/1.1) co####.ssp.math####.cn:80
TCP(HTTP/1.1) 2####.107.1.1:80
TCP(HTTP/1.1) vsc.a####.miguv####.com:7114
TCP(HTTP/1.1) dd2.wuko####.com:80
TCP(HTTP/1.1) dsj-co####.oss-cn-####.aliy####.com:80
TCP(HTTP/1.1) wy.vod.dians####.####.com:80
TCP(HTTP/1.1) dy.cn.wildpet####.xyz:201
TCP(HTTP/1.1) t####.dians####.com:80
TCP(HTTP/1.1) 64.2####.164.94:80
TCP(TLS/1.0) 2####.107.1.97:443
TCP(TLS/1.0) rr9---s####.g####.com:443
TCP(TLS/1.0) rr2---s####.g####.com:443
TCP(TLS/1.0) p####.google####.com:443
TCP(TLS/1.0) to####.volceap####.com.####.com:443
TCP(TLS/1.0) pla####.google####.com:443
TCP(TLS/1.0) k####.volceap####.com.####.com:443
TCP(TLS/1.0) 64.2####.164.94:443
TCP(TLS/1.0) rr18---####.g####.com:443
TCP(TLS/1.0) d####.100u####.com.####.net:443
TCP(TLS/1.2) 64.2####.164.94:443
TCP(TLS/1.2) 1####.177.14.105:443
TCP(TLS/1.2) p####.google####.com:443
UDP as4.binst####.live:3923
UDP 1####.29.122.94:2433
TCP 1####.146.96.133:23429
UDP tm2.binst####.live:3923
TCP 1####.46.147.54:23429
UDP 1####.100.243.133:12715
UDP 1####.58.85.251:3088
TCP 1####.236.85.111:4010
TCP 1####.35.57.152:4010
TCP 1####.114.29.151:4010
TCP 73.1####.155.140:23429
UDP 1####.24.205.46:563
UDP 1####.229.76.19:2391
UDP as3.binst####.live:13
TCP 1####.94.220.225:38603
TCP 2####.155.192.186:4010
UDP tm1.binst####.live:3923
TCP 73.34.1####.157:4010
TCP 1####.194.16.40:23429
UDP as4.binst####.live:13
UDP as3.binst####.live:3924
TCP 1####.20.60.53:12354
UDP 39.1####.134.87:3479
TCP 61.1####.231.107:23429
TCP 4####.56.97.143:4010
TCP 60.22.2####.148:4010
TCP 1####.161.133.198:23429
TCP 1####.25.254.31:9998
TCP 1####.174.48.5:23429
UDP 39.1####.62.19:3478
UDP 1####.34.178.224:3463
TCP 36.25.2####.4:4683
UDP p####.google####.com:443
TCP 1####.116.63.232:23429
TCP 1####.136.180.9:23429
TCP 99.2####.224.120:4010
TCP 1####.221.78.189:37449
TCP 1####.150.216.252:4010
TCP 1####.126.221.68:4010
TCP 2####.147.192.209:4010
TCP 1####.64.251.53:23429
UDP tm1.binst####.live:13
TCP 1####.230.114.20:31942
TCP 1####.215.9.193:4010
UDP 2####.255.255.250:1900
UDP tm2.binst####.live:13
UDP tm2.binst####.live:3924
TCP 1####.86.72.63:4010
UDP 1####.0.3.254:4010

DNS requests:

a####.man.aliy####.com
and####.b####.qq.com
api.dianshi####.com
api.mydians####.com
api.o####.ads####.cn
app.sn####.com
as1.binst####.live
as2.binst####.live
as3.binst####.live
as4.binst####.live
c####.dianshi####.com
cdn.api.dianshi####.com
cdn.dianshi####.com
cha####.cdn.dianshi####.com
co####
co####.ssp.math####.cn
d####.100u####.com
dd2.wuko####.com
detec####.math####.cn
dsj-co####.oss-cn-####.aliy####.com
dy.cn.wildpet####.xyz
g####.dianshi####.com
g3.l####.com
h5####.g####.cmv####.cn
ip.ta####.com
k####.volceap####.com
l####.b####.com
m.miguv####.com
ne####.dianshi####.com
newap####.math####.cn
p####.api.math####.cn
p####.dianshi####.com
p####.google####.com
pla####.google####.com
pro.wildpet####.com
rr18---####.g####.com
rr2---s####.g####.com
rr9---s####.g####.com
t####.dians####.com
tm1.binst####.live
tm2.binst####.live
tm3.binst####.live
tm4.binst####.live
to####.volceap####.com
tra####.dians####.com
tv.hub.dianshi####.com
up####.liulian####.com
vsc.a####.miguv####.com
www.go####.com
wy.vod.dians####.com

HTTP GET requests:

api.dianshi####.com/
api.dianshi####.com/api/11519ac1c893737a/ahhXIFrwnvLa?info=####
api.dianshi####.com/api/509a4cb99bd39a5f/NbxvoKJywzYR?info=####
api.dianshi####.com/api/5cced51e11f51c6b/GWbxGoRACFqH?info=####
api.dianshi####.com/api/82210fa1213139c6/gYvYWuhVHLlz?info=####
api.dianshi####.com/api/9db0717922ba2f01/jbCmjVhdBhXP?info=####
api.dianshi####.com/api/cash/info
api.dianshi####.com/api/channel/v1/channelGroup/template
api.dianshi####.com/api/channel/v1/highFrag
api.dianshi####.com/api/channel/v1/newChannel
api.dianshi####.com/api/channel/v1/payed?userid=####&isBigVip=####
api.dianshi####.com/api/coin/info
api.dianshi####.com/api/config/deviceCompat?brand=####&model=####&osver=...
api.dianshi####.com/api/config/lookBack/list
api.dianshi####.com/api/config/prompt/list
api.dianshi####.com/api/config/shortVideo/list
api.dianshi####.com/api/config/v1/common/conf
api.dianshi####.com/api/config/v1/noSimpleMode/classConfig/query
api.dianshi####.com/api/f6d02ae2031b1d3f/NwrxDBcsZE2m?info=####
api.dianshi####.com/api/f6d02ae2031b1d3f/iYvkpRiKdfdW?info=####
api.dianshi####.com/api/pan/v1/config/promotional
api.dianshi####.com/api/pan/v3/ufile/list?type=####&page=####&size=####&...
api.dianshi####.com/api/point/v1/lookback/config
api.dianshi####.com/api/point/v1/retain/popup
api.dianshi####.com/api/programs/channel/bg
api.dianshi####.com/api/programs/exclusive/unlock
api.dianshi####.com/api/programs/logout/bg
api.dianshi####.com/api/redpack/info
api.dianshi####.com/api/song/get?page=####&size=####&tagCode=####
api.dianshi####.com/api/task/get?
api.dianshi####.com/api/tvSkin?menunum=####
api.dianshi####.com/api/user/familyAccount/user/getStatus
api.dianshi####.com/api/v1
api.dianshi####.com/api/v1/cloudConfig?ts=####
api.dianshi####.com/api/v1/play/control
api.dianshi####.com/api/v1/user/favorite/get
api.dianshi####.com/api/v19
api.dianshi####.com/api/v24/apiConfig
api.dianshi####.com/api/v5/offProgram
api.dianshi####.com/api/voice/v2/list
api.dianshi####.com/assets/tvTea.json
api.dianshi####.com/cfbqbczu?ts=####
api.dianshi####.com/config/channel/voice_mapping.json?t=####
api.dianshi####.com/ipInfo
api.mydians####.com/api/user/equity/condition
api.mydians####.com/api/user/v1/hlc/show
api.mydians####.com/api/v1/shin?injectConditions=####
api.mydians####.com/api/v1/tv/hkCategory/list
api.mydians####.com/api/v19
api.mydians####.com/ipInfo
app.sn####.com.####.cn/rjcapp.php
c####.dianshi####.com.####.com/static/plugin/0b0051120f30c552aa18d6542f7...
c####.dianshi####.com.####.com/static/plugin/4433709d41777b11ec8dba036a1...
c####.dianshi####.com.####.com/static/plugin/79ae1985938222dea8d24e5713d...
c####.dianshi####.com.####.com/static/plugin/7b2267f9f4f7d9e7c3a360950e3...
c####.dianshi####.com.####.com/static/plugin/d40623596b3f032f7d0d4546393...
cdn.api.dianshi####.com/api/programs?cid=####&date=####&tm=####
co####.ssp.math####.cn/api/v2/SDKCommonConfig?channelCode=####&version=#...
co####.ssp.math####.cn/api/v3/sdkTestConfig?send_ts=####
dd2.wuko####.com/tvclient/sdk?func=####&package=####
detec####.math####.cn/favicon.ico
detec####.math####.cn/images/sdk/detective.jpeg
detec####.math####.cn/js/finger20220224.js
detec####.math####.cn/sdk/checkCookie/httpClient?uniqueId=####&androidVe...
detec####.math####.cn/sdk/checkCookie/webview?uniqueId=####&androidVersi...
detec####.math####.cn/sdk/checkRedirect?uniqueId=####&androidVersion=###...
detec####.math####.cn/sdk/filterHeader/httpClient?uniqueId=####&androidV...
detec####.math####.cn/sdk/filterHeader/webview?uniqueId=####&androidVers...
detec####.math####.cn/sdk/openWebview?uniqueId=####&androidVersion=####&...
detec####.math####.cn/sdk/redirectHttpClientSecondPage?uniqueId=####&and...
detec####.math####.cn/sdk/redirectWebviewSecondPage?uniqueId=####&androi...
detec####.math####.cn/sdk/setCookie/httpClient?uniqueId=####&androidVers...
detec####.math####.cn/sdk/setCookie/webview?uniqueId=####&androidVersion...
detec####.math####.cn/sdk/validateCookie/httpClient?uniqueId=####&androi...
detec####.math####.cn/sdk/validateCookie/webview?uniqueId=####&androidVe...
dsj-co####.oss-cn-####.aliy####.com/config/update.json
g3.l####.com/r?format=####
k####.volceap####.com.####.com:443/service/2/app_alert_check/?os_api=###...
l####.b####.com/jquery/2.1.4/jquery.min.js
na61-####.wagbr####.ali####.####.com/service/getIpInfo.php?ip=####
ne####.dianshi####.com/
newap####.math####.cn/favicon.ico
newap####.math####.cn/ssp/mgm_test/webview_version?channelCode=####&vers...
p####.api.math####.cn/ip?send_ts=####
tra####.dians####.com/config?appid=####&uuid=####&cver=####
vod####.ip####.q####.####.com/api/channel/v1/template/detail?templateKey...
wy.vod.dians####.####.com/config/hoteProgramList.json

HTTP POST requests:

adash####.man.aliy####.com/man/api?ak=####&s=####
and####.b####.qq.com/rqd/async?aid=####
api.dianshi####.com/api/config/v1/pay/document
api.dianshi####.com/api/pay/documents
api.dianshi####.com/api/v2/device/info?duid=####&c=####&
api.dianshi####.com/api/v2/device/start/info
api.mydians####.com/api/v1/user_risk_device/getUserRiskUid
api.o####.ads####.cn/thirdparty/encsapi/enChn2
d####.100u####.com.####.net:443/reportcomp
dy.cn.wildpet####.xyz/dycn/update
dy.cn.wildpet####.xyz:201/proxy/get?e=####&r=####
k####.volceap####.com.####.com:443/service/2/device_register/?os_api=###...
newap####.math####.cn/titan/monitor/device_info
t####.dians####.com/v1/new_peer
to####.volceap####.com.####.com:443/service/2/app_log/?device_platform=#...
to####.volceap####.com.####.com:443/service/2/log_settings/?device_platf...
tv.hub.dianshi####.com/u
vsc.a####.miguv####.com:7114/EPG/VPE/PHONE/Authenticate

File system changes:

Creates the following files:

/data/data/####/.pylock
/data/data/####/0cdf16c8e9c7ec49_0
/data/data/####/0e627ae72e2cc942e2e392f26d13cada.0.tmp
/data/data/####/0e627ae72e2cc942e2e392f26d13cada.1.tmp
/data/data/####/1002
/data/data/####/1004
/data/data/####/14e5b06a2221057b8b675749037230bb.0
/data/data/####/14e5b06a2221057b8b675749037230bb.0.tmp
/data/data/####/14e5b06a2221057b8b675749037230bb.1
/data/data/####/14e5b06a2221057b8b675749037230bb.1.tmp
/data/data/####/168436@bd_tea_agent.db-journal
/data/data/####/1cba9979b2d36864387f3d4fe1447e74.0
/data/data/####/1cba9979b2d36864387f3d4fe1447e74.1
/data/data/####/1e6803d91ce9dd999608566f39994c3d.0.tmp
/data/data/####/1e6803d91ce9dd999608566f39994c3d.1
/data/data/####/1e6803d91ce9dd999608566f39994c3d.1.tmp
/data/data/####/1f85f809011a2aaa764e841c2ff79042.0.tmp
/data/data/####/1f85f809011a2aaa764e841c2ff79042.1
/data/data/####/1f85f809011a2aaa764e841c2ff79042.1.tmp
/data/data/####/20c2504aa3076aa1230fd4744ab9429b.0.tmp
/data/data/####/20c2504aa3076aa1230fd4744ab9429b.1
/data/data/####/20c2504aa3076aa1230fd4744ab9429b.1.tmp
/data/data/####/2221ba1260a95d28039abe83020c705b.0.tmp
/data/data/####/2221ba1260a95d28039abe83020c705b.1
/data/data/####/2221ba1260a95d28039abe83020c705b.1.tmp
/data/data/####/2d8b3a974771a653f6cc2ee5d88dc341
/data/data/####/318277675.dex
/data/data/####/318277675.dex.flock (deleted)
/data/data/####/318277675.jar
/data/data/####/318277675.jar.temp
/data/data/####/321ec9e85fd58cc7690da12f8925d33c.0.tmp
/data/data/####/321ec9e85fd58cc7690da12f8925d33c.1
/data/data/####/321ec9e85fd58cc7690da12f8925d33c.1.tmp
/data/data/####/379981f286d2e6e4b16c0c25c8a68734.0.tmp
/data/data/####/379981f286d2e6e4b16c0c25c8a68734.1
/data/data/####/379981f286d2e6e4b16c0c25c8a68734.1.tmp
/data/data/####/3980c7fb5baec570fb5f5133e58bf92b.0.tmp
/data/data/####/3980c7fb5baec570fb5f5133e58bf92b.1
/data/data/####/3980c7fb5baec570fb5f5133e58bf92b.1.tmp
/data/data/####/3b7371c07eefca10f31786447962b669
/data/data/####/46dfadf7049b74d8733d290eeb93bbdc.0.tmp
/data/data/####/46dfadf7049b74d8733d290eeb93bbdc.1
/data/data/####/46dfadf7049b74d8733d290eeb93bbdc.1.tmp
/data/data/####/4adc6fc6d3390c5878ae766bd69949b9.0.tmp
/data/data/####/4adc6fc6d3390c5878ae766bd69949b9.1
/data/data/####/4c149f56a2f37c4bc78ab80b0ba77450.0.tmp
/data/data/####/4c149f56a2f37c4bc78ab80b0ba77450.1
/data/data/####/4c149f56a2f37c4bc78ab80b0ba77450.1.tmp
/data/data/####/511a91d6a422c68db04d252d67d293aa.0.tmp
/data/data/####/511a91d6a422c68db04d252d67d293aa.1
/data/data/####/58095b0c6485c221_0
/data/data/####/58095b0c6485c221_1
/data/data/####/601fed44b8cc97f903b2146b86d31290.0.tmp
/data/data/####/601fed44b8cc97f903b2146b86d31290.1
/data/data/####/63cde9655e58a6bf5cd3fa408cabc928.0.tmp
/data/data/####/63cde9655e58a6bf5cd3fa408cabc928.1
/data/data/####/63cde9655e58a6bf5cd3fa408cabc928.1.tmp
/data/data/####/6b219deb5c2d6dd05cbd3c089d5ed2d8
/data/data/####/6eb68ea955d68f02_0
/data/data/####/70298c6eb6032706_0
/data/data/####/70298c6eb6032706_1
/data/data/####/705b4b56f751f7d8fe4044bfa442a8eb.0.tmp
/data/data/####/705b4b56f751f7d8fe4044bfa442a8eb.1
/data/data/####/705b4b56f751f7d8fe4044bfa442a8eb.1.tmp
/data/data/####/71aabc12ce4f8996_0
/data/data/####/7c043bd473f80c28896427247a603a1e.0.tmp
/data/data/####/7c043bd473f80c28896427247a603a1e.1
/data/data/####/7c043bd473f80c28896427247a603a1e.1.tmp
/data/data/####/7d547b80782fce05_0
/data/data/####/7e4b2e5ea35b4c8a96cee57dd5f7c945.0.tmp
/data/data/####/7e4b2e5ea35b4c8a96cee57dd5f7c945.1
/data/data/####/7e4b2e5ea35b4c8a96cee57dd5f7c945.1.tmp
/data/data/####/80523ba78a64d04aac756f25e9d5f750.0.tmp
/data/data/####/80523ba78a64d04aac756f25e9d5f750.1
/data/data/####/80523ba78a64d04aac756f25e9d5f750.1.tmp
/data/data/####/81b02692d6e9c790a85f08f4e48be0ce.0
/data/data/####/81b02692d6e9c790a85f08f4e48be0ce.0.tmp
/data/data/####/81b02692d6e9c790a85f08f4e48be0ce.1
/data/data/####/8883a79baa010ecc599a4fda824745b4.0.tmp
/data/data/####/8883a79baa010ecc599a4fda824745b4.1
/data/data/####/907e8eb71986c4efa82809d216c97011.0.tmp
/data/data/####/907e8eb71986c4efa82809d216c97011.1
/data/data/####/907e8eb71986c4efa82809d216c97011.1.tmp
/data/data/####/90fa889de6b696e137e1d89d8d82b136.0.tmp
/data/data/####/90fa889de6b696e137e1d89d8d82b136.1.tmp
/data/data/####/92926eacc676308d0819e18dd10ba7bc.0.tmp
/data/data/####/92926eacc676308d0819e18dd10ba7bc.1
/data/data/####/92926eacc676308d0819e18dd10ba7bc.1.tmp
/data/data/####/9355b41c6c12b9dd6f6be64517544d5c.0.tmp
/data/data/####/9355b41c6c12b9dd6f6be64517544d5c.1
/data/data/####/9355b41c6c12b9dd6f6be64517544d5c.1.tmp
/data/data/####/941584d6d6406b06e8076ac9e3dc5752.0.tmp
/data/data/####/941584d6d6406b06e8076ac9e3dc5752.1
/data/data/####/941584d6d6406b06e8076ac9e3dc5752.1.tmp
/data/data/####/970c2c5453e0184890cc63c59b9b337f.0.tmp
/data/data/####/970c2c5453e0184890cc63c59b9b337f.1
/data/data/####/970c2c5453e0184890cc63c59b9b337f.1.tmp
/data/data/####/9aeccc8ac824a7a9_0
/data/data/####/9c0e78f9e2e8fbe7_0
/data/data/####/Alvin2.xml
/data/data/####/CONFIG.xml
/data/data/####/CONFIG.xml.bak
/data/data/####/CUSTOM_CONFIG.xml
/data/data/####/ContextData.xml
/data/data/####/Cookies-journal
/data/data/####/DEVICE_INFO.xml
/data/data/####/DEVICE_INFO.xml.bak
/data/data/####/DOWNLOAD_END_AD.xml
/data/data/####/DOWNLOAD_START_AD.xml
/data/data/####/END_AD.xml
/data/data/####/END_AD_BOOT.xml
/data/data/####/EVENT_CONFIG.xml
/data/data/####/EVENT_CONFIG.xml.bak
/data/data/####/IpConfig.xml
/data/data/####/KEY_SP_NAME_RISK.xml
/data/data/####/LIVE_CONFIG.xml
/data/data/####/MessageStore.db-journal
/data/data/####/MsgLogStore.db-journal
/data/data/####/OFFLINE.xml
/data/data/####/PERMANENT_DATA.xml
/data/data/####/PERMANENT_DATA.xml.bak
/data/data/####/PHOTO_INFO.xml
/data/data/####/PLAY.xml
/data/data/####/PLAY_CONFIG.xml
/data/data/####/PLAY_CONFIG.xml.bak
/data/data/####/PROXYDATA.xml
/data/data/####/STREAM_CONFIG_V2.xml
/data/data/####/SWITCH_CONFIG.xml
/data/data/####/SWITCH_CONFIG.xml.bak
/data/data/####/SYSTEM_INFO.xml
/data/data/####/TEA.xml
/data/data/####/USER_INFO.xml
/data/data/####/USER_INFO.xml.bak
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/_global_cache.xml
/data/data/####/_global_cache.xml.bak
/data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.0.tmp
/data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.1
/data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.1.tmp
/data/data/####/a9fa7fb3cc87c845e8d2ada75f816f02.0.tmp
/data/data/####/a9fa7fb3cc87c845e8d2ada75f816f02.1
/data/data/####/api.prefs.xml
/data/data/####/api.prefs.xml.bak
/data/data/####/applog_stats.xml
/data/data/####/bb4fed2fb01c51846a78e15f3d0c29e7.0.tmp
/data/data/####/bb4fed2fb01c51846a78e15f3d0c29e7.1
/data/data/####/bb4fed2fb01c51846a78e15f3d0c29e7.1.tmp
/data/data/####/bc880a5046d64a76_0
/data/data/####/bdtracker_dr_migrate_detector.xml
/data/data/####/bugly_db_-journal
/data/data/####/c0968fa531339178b2ed07e203745184.0.tmp
/data/data/####/c0968fa531339178b2ed07e203745184.1
/data/data/####/c0968fa531339178b2ed07e203745184.1.tmp
/data/data/####/c6951e9702af6b6362d150ce081325e3.0.tmp
/data/data/####/c6951e9702af6b6362d150ce081325e3.1.tmp
/data/data/####/c6f69eba0b8c5457_0
/data/data/####/c89d2493e0b57d4e78abc11e68463250.0.tmp
/data/data/####/c89d2493e0b57d4e78abc11e68463250.1
/data/data/####/c89d2493e0b57d4e78abc11e68463250.1.tmp
/data/data/####/c95e8fe89978e95a87f3dc7734ccf9d8
/data/data/####/cache.json
/data/data/####/ccabc51e3be72d1f42c9dd205cc41d23
/data/data/####/cctv4.0
/data/data/####/cfc139fc5afc40671f52282f925fd4f4.0.tmp
/data/data/####/cfc139fc5afc40671f52282f925fd4f4.1
/data/data/####/cfc139fc5afc40671f52282f925fd4f4.1.tmp
/data/data/####/channels.data
/data/data/####/com.dianshijia.newlive.BETA_VALUES.xml
/data/data/####/com.dianshijia.newlive_preferences.xml
/data/data/####/conf.dat
/data/data/####/count_shop_tip.xml
/data/data/####/crashrecord.xml
/data/data/####/cuuid.xml
/data/data/####/d2ed5397160ed6516b6104a98841b262.0.tmp
/data/data/####/d2ed5397160ed6516b6104a98841b262.1
/data/data/####/d2ed5397160ed6516b6104a98841b262.1.tmp
/data/data/####/d8cdee0ca63e681f2f43b203f5065637.0.tmp
/data/data/####/d8cdee0ca63e681f2f43b203f5065637.1
/data/data/####/d8cdee0ca63e681f2f43b203f5065637.1.tmp
/data/data/####/dy_live.xml
/data/data/####/e53dfa405fea0315e2eee0b830dd5897.0.tmp
/data/data/####/e53dfa405fea0315e2eee0b830dd5897.1
/data/data/####/e53dfa405fea0315e2eee0b830dd5897.1.tmp
/data/data/####/epg-cctv1-20231007.json
/data/data/####/epg-cctv2-20231007.json
/data/data/####/epg-cctv3-20231007.json
/data/data/####/epg-cctv4-20231007.json
/data/data/####/epg-cctv5-20231007.json
/data/data/####/epg-cctv6-20231007.json
/data/data/####/epg-cctv7-20231007.json
/data/data/####/epg-cctv8-20231007.json
/data/data/####/epg-cctv9-20231007.json
/data/data/####/epg.dex
/data/data/####/epg.dex.flock (deleted)
/data/data/####/epg.jar
/data/data/####/epg.tmp
/data/data/####/event_db
/data/data/####/fb6af786f26a2595b3be0ff754fb377a.0.tmp
/data/data/####/fb6af786f26a2595b3be0ff754fb377a.1
/data/data/####/fb6af786f26a2595b3be0ff754fb377a.1.tmp
/data/data/####/header_custom.xml
/data/data/####/header_custom.xml.bak
/data/data/####/index
/data/data/####/inject_track.xml
/data/data/####/journal
/data/data/####/last_sp_session.xml
/data/data/####/local_crash_lock
/data/data/####/metrics_guid
/data/data/####/native_record_lock
/data/data/####/net_node.xml
/data/data/####/offline.data
/data/data/####/okhttp_prefs.xml
/data/data/####/package_infos.xml
/data/data/####/player_strategy.xml
/data/data/####/player_strategy.xml.bak
/data/data/####/plugin.dex
/data/data/####/plugin.dex.flock (deleted)
/data/data/####/plugin.tmp
/data/data/####/plugin_config.xml
/data/data/####/plugin_file.name
/data/data/####/pp.dex
/data/data/####/pp.dex.flock (deleted)
/data/data/####/pp.jar
/data/data/####/pp.tmp
/data/data/####/proc_auxv
/data/data/####/product_intercept.xml
/data/data/####/promote.dex
/data/data/####/promote.dex.flock (deleted)
/data/data/####/promote.tmp
/data/data/####/risk_infos.xml
/data/data/####/risk_infos.xml.bak
/data/data/####/risk_user_info.xml
/data/data/####/safe_mode_config.xml
/data/data/####/sce_config.xml
/data/data/####/security_info
/data/data/####/session_cache
/data/data/####/share_date.xml
/data/data/####/simple-main-msg.dat
/data/data/####/simple-main-req.dat
/data/data/####/skin_cache_name.xml
/data/data/####/snssdk_openudid.xml
/data/data/####/spider_prefs.xml
/data/data/####/spider_prefs.xml.bak
/data/data/####/stream_report.xml
/data/data/####/tencent.dex
/data/data/####/tencent.dex.flock (deleted)
/data/data/####/tencent.jar
/data/data/####/the-real-index
/data/data/####/total.log
/data/data/####/total_pay_documents.xml
/data/data/####/tvcore.tmp
/data/data/####/tvlive2.db-journal
/data/data/####/ua.db
/data/data/####/ua.db-journal
/data/data/####/ug_install_settings_pref.xml
/data/data/####/umeng_common_config.xml
/data/data/####/umeng_general_config.xml
/data/data/####/x_google_ad_s_id_123
/data/media/####/Alvin2.xml
/data/media/####/ContextData.xml
/data/media/####/ddev.data
/data/media/####/flag.data
/data/media/####/uuid.data
/data/misc/####/primary.prof

Miscellaneous:

Executes the following shell scripts:

/system/bin/cat /proc/cpuinfo
/system/bin/sh -c getprop
cat /sys/class/net/eth0/address
cat /sys/class/net/wlan0/address
chmod 777 /data/user/0/<Package>/files/.honor0
getprop
getprop ro.build.version.emui
getprop ro.letv.release.version
getprop ro.vivo.os.build.display.id
sh

Loads the following dynamic libraries:

libBugly
libc++_shared
libijkffmpeg
libijkplayer
libijksdl
libmmkv
libsce
libtvcore

Uses the following algorithms to encrypt data:

AES
AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-PKCS5Padding
AES-GCM-NoPadding
DES
RSA
RSA-ECB-PKCS1Padding

Uses the following algorithms to decrypt data:

AES
AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-PKCS5Padding
AES-GCM-NoPadding
DES
RSA-ECB-PKCS1Padding

Accesses the ITelephony private interface.

Gets information about location.

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Gets information about installed apps.

Gets information about running apps.

Displays its own windows over windows of other apps.

Requests the system alert window permission.

Technologies

Terminology

Training and education

Myths

Technical information

Curing recommendations

Free trial