Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.RemoteCode.358.origin
Network activity:
Connects to:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) api.mydians####.com:80
- TCP(HTTP/1.1) p####.api.math####.cn:80
- TCP(HTTP/1.1) g3.l####.com:80
- TCP(HTTP/1.1) dd2.wuko####.com:80
- TCP(HTTP/1.1) na61-####.wagbr####.ali####.####.com:80
- TCP(HTTP/1.1) 1####.23.148.191:8801
- TCP(HTTP/1.1) 1####.161.124.146:12340
- TCP(HTTP/1.1) ne####.dianshi####.com:80
- TCP(HTTP/1.1) c####.dianshi####.com.####.com:80
- TCP(HTTP/1.1) 39.1####.143.44:8001
- TCP(HTTP/1.1) adash####.man.aliy####.com:80
- TCP(HTTP/1.1) t####.dians####.com:80
- TCP(HTTP/1.1) tv.hub.dianshi####.com:80
- TCP(HTTP/1.1) dy.cn.wildpet####.xyz:201
- TCP(HTTP/1.1) cdn.api.dianshi####.com:80
- TCP(HTTP/1.1) chinawe####.c####.l####.####.com:80
- TCP(HTTP/1.1) l####.b####.com:80
- TCP(HTTP/1.1) cdn.dianshi####.com:80
- TCP(HTTP/1.1) dsj-co####.oss-cn-####.aliy####.com:80
- TCP(HTTP/1.1) newap####.math####.cn:80
- TCP(HTTP/1.1) 39.1####.226.196:8801
- TCP(HTTP/1.1) api.o####.ads####.cn:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) 1####.23.148.191:8802
- TCP(HTTP/1.1) tj####.a####.ads####.cn:80
- TCP(HTTP/1.1) 1####.92.208.64:80
- TCP(HTTP/1.1) dy.cn.wildpet####.xyz:80
- TCP(HTTP/1.1) api.dianshi####.com:80
- TCP(HTTP/1.1) co####.ssp.math####.cn:80
- TCP(HTTP/1.1) 2####.107.1.1:80
- TCP(HTTP/1.1) detec####.math####.cn:80
- TCP(HTTP/1.1) p####.dianshi####.com:80
- TCP(TLS/1.0) 2####.107.1.97:443
- TCP(TLS/1.0) to####.volceap####.com.####.com:443
- TCP(TLS/1.0) pla####.google####.com:443
- TCP(TLS/1.0) k####.volceap####.com.####.com:443
- TCP(TLS/1.0) 64.2####.164.94:443
- TCP(TLS/1.0) rr9---s####.g####.com:443
- TCP(TLS/1.0) p####.google####.com:443
- TCP(TLS/1.0) plb####.u####.com:443
- TCP(TLS/1.0) rr18---####.g####.com:443
- TCP(TLS/1.0) u####.u####.com:443
- TCP(TLS/1.0) g.cn.miao####.com:443
- TCP(TLS/1.0) rr2---s####.g####.com:443
- TCP(TLS/1.0) d####.100u####.com.####.net:443
- TCP(TLS/1.0) msg.umengc####.com:443
- TCP(TLS/1.2) p####.google####.com:443
- TCP(TLS/1.2) 64.2####.164.94:443
- TCP(TLS/1.2) 1####.177.14.100:443
- UDP 39.1####.62.19:3478
- UDP 1####.18.166.102:1088
- TCP 1####.175.70.129:23429
- TCP 1####.20.60.53:12354
- UDP tm3.binst####.live:3924
- UDP 2####.155.196.6:2519
- UDP 39.1####.134.87:3479
- TCP 71.2####.172.25:4010
- TCP 4####.57.71.17:4010
- UDP 39.1####.181.213:2353
- UDP tm4.binst####.live:3923
- TCP 1####.9.114.36:4010
- TCP 60.2####.107.122:4010
- UDP as2.binst####.live:3923
- UDP 60.11.2####.87:3864
- TCP 1####.0.2.254:35744
- UDP tm4.binst####.live:13
- UDP tm1.binst####.live:3923
- UDP 1####.0.2.254:4010
- TCP 1####.139.229.114:23429
- TCP 1####.188.56.211:4010
- TCP 42.5.1####.30:4010
- UDP 1####.229.208.101:3358
- TCP 36.25.2####.4:4686
- UDP 1.6####.2.127:1979
- TCP 1####.245.214.197:4010
- TCP 6####.22.86.87:4010
- UDP 1####.36.45.189:1449
- UDP 2####.255.255.250:1900
- TCP 1####.20.118.81:4010
- UDP 3####.49.27.32:1531
- TCP 1####.236.48.199:23429
- UDP as2.binst####.live:13
- UDP 1####.231.208.75:1723
- TCP ms####.m.u####.com:443
- UDP tm3.binst####.live:13
- TCP 1####.80.187.135:23429
- UDP 1####.40.218.28:2786
- UDP 2####.74.228.194:2942
- TCP 1####.211.158.36:23429
- TCP 1####.168.154.186:4010
- TCP 1####.189.23.102:23429
- TCP 1####.25.254.31:9998
- UDP 42.93.1####.160:1028
- UDP as2.binst####.live:3924
- TCP 2####.220.220.157:23429
- UDP p####.google####.com:443
- UDP tm1.binst####.live:13
DNS requests:
- a####.man.aliy####.com
- acc####.m.ta####.com
- amdc####.m.ta####.com
- and####.b####.qq.com
- api.dianshi####.com
- api.mydians####.com
- api.o####.ads####.cn
- as1.binst####.live
- as2.binst####.live
- as3.binst####.live
- as4.binst####.live
- c####.dianshi####.com
- cdn.api.dianshi####.com
- cdn.dianshi####.com
- cha####.cdn.dianshi####.com
- co####.ssp.math####.cn
- d####.100u####.com
- dd2.wuko####.com
- detec####.math####.cn
- digital####.google####.com
- dsj-co####.oss-cn-####.aliy####.com
- dy.cn.wildpet####.xyz
- g####.dianshi####.com
- g.cn.miao####.com
- g3.l####.com
- ip.ta####.com
- k####.volceap####.com
- l####.b####.com
- md####.google####.com
- msg.umengc####.com
- ne####.dianshi####.com
- newap####.math####.cn
- p####.api.math####.cn
- p####.dianshi####.com
- p####.google####.com
- pla####.google####.com
- plb####.u####.com
- pro.wildpet####.com
- rr18---####.g####.com
- rr2---s####.g####.com
- rr9---s####.g####.com
- t####.dians####.com
- tj####.a####.ads####.cn
- tm1.binst####.live
- tm2.binst####.live
- tm3.binst####.live
- tm4.binst####.live
- to####.volceap####.com
- tv.hub.dianshi####.com
- u####.u####.com
- umen####.m.ta####.com
- up####.liulian####.com
HTTP GET requests:
- api.dianshi####.com/api/11519ac1c893737a/ahhXIFrwnvLa?info=####
- api.dianshi####.com/api/5cced51e11f51c6b/GWbxGoRACFqH?info=####
- api.dianshi####.com/api/82210fa1213139c6/gYvYWuhVHLlz?info=####
- api.dianshi####.com/api/9db0717922ba2f01/jbCmjVhdBhXP?info=####
- api.dianshi####.com/api/ad/carousel
- api.dianshi####.com/api/channel/v1/channelGroup/template
- api.dianshi####.com/api/channel/v1/config
- api.dianshi####.com/api/channel/v1/highFrag
- api.dianshi####.com/api/channel/v1/newChannel
- api.dianshi####.com/api/channel/v1/payed?userid=####&isBigVip=####
- api.dianshi####.com/api/coin/info
- api.dianshi####.com/api/config/deviceCompat?brand=####&model=####&osver=...
- api.dianshi####.com/api/config/lookBack/list
- api.dianshi####.com/api/config/payToTry?
- api.dianshi####.com/api/config/prompt/list
- api.dianshi####.com/api/config/selfStart/config
- api.dianshi####.com/api/config/shortVideo/list
- api.dianshi####.com/api/config/surprise
- api.dianshi####.com/api/config/v1/channelQrcode/list
- api.dianshi####.com/api/config/v1/common/conf
- api.dianshi####.com/api/config/v1/vipTryWatchLive/list
- api.dianshi####.com/api/config/vipTryWatch/list?
- api.dianshi####.com/api/f6d02ae2031b1d3f/NwrxDBcsZE2m?info=####
- api.dianshi####.com/api/f6d02ae2031b1d3f/iYvkpRiKdfdW?info=####
- api.dianshi####.com/api/pan/v1/config/promotional
- api.dianshi####.com/api/pan/v3/ufile/list?type=####&page=####&size=####&...
- api.dianshi####.com/api/point/v1/lookback/config
- api.dianshi####.com/api/point/v1/retain/popup
- api.dianshi####.com/api/programs/channel/bg
- api.dianshi####.com/api/programs/exclusive/unlock
- api.dianshi####.com/api/programs/logout/bg
- api.dianshi####.com/api/redpack/info
- api.dianshi####.com/api/song/get?page=####&size=####&tagCode=####
- api.dianshi####.com/api/task/get?
- api.dianshi####.com/api/tvSkin?menunum=####
- api.dianshi####.com/api/user/familyAccount/user/getStatus
- api.dianshi####.com/api/v1/ad/highDefinitionSource/query
- api.dianshi####.com/api/v1/ad/tvConfig
- api.dianshi####.com/api/v1/cloudConfig?ts=####
- api.dianshi####.com/api/v1/play/control
- api.dianshi####.com/api/v1/tv/channelRecommend/list?channelId=####
- api.dianshi####.com/api/v1/user/favorite/get
- api.dianshi####.com/api/v2/banner/menu/config
- api.dianshi####.com/api/v2/banner/menu/configNew
- api.dianshi####.com/api/v5/offProgram
- api.dianshi####.com/api/voice/v2/list
- api.dianshi####.com/assets/tvTea.json
- api.dianshi####.com/cfbqbczu?ts=####
- api.dianshi####.com/ipInfo
- api.mydians####.com/api/push/token?channel=####&token=####&type=####
- api.mydians####.com/api/user/equity/condition
- api.mydians####.com/api/user/v1/hlc/show
- api.mydians####.com/api/v1/plugin?module=####&verCode=####&sdk=####&aver...
- api.mydians####.com/api/v1/shin?injectConditions=####
- api.mydians####.com/api/v1/tv/hkCategory/list
- api.mydians####.com/api/v1/tv/powerBoot/image
- c####.dianshi####.com.####.com/config/channel/voice_mapping.json?t=####
- c####.dianshi####.com.####.com/static/ad/18f759157732644516c2d33c5a39882...
- c####.dianshi####.com.####.com/static/ad/4c15d6a052a20b87ae03a0fe5eae169...
- c####.dianshi####.com.####.com/static/channel/poster/cctv13.jpg
- c####.dianshi####.com.####.com/static/plugin/66ab1dbfe10de8b9dfc51b5eeba...
- c####.dianshi####.com.####.com/static/plugin/79ae1985938222dea8d24e5713d...
- c####.dianshi####.com.####.com/static/plugin/7b2267f9f4f7d9e7c3a360950e3...
- c####.dianshi####.com.####.com/static/plugin/d40623596b3f032f7d0d4546393...
- c####.dianshi####.com.####.com/static/plugin/e33a9fc34866819a72c33de6e90...
- cdn.api.dianshi####.com/api/programs?cid=####&date=####&tm=####
- cdn.dianshi####.com/assets/mobile/temp/ts_cf.json?ts=####
- cdn.dianshi####.com/config/channel/voice_mapping.json?t=####
- cdn.dianshi####.com/pkg/tv3.0/image/gw_time.txt
- cdn.dianshi####.com/pkg/tv3.0/image/hdlogo.png
- cdn.dianshi####.com/pkg/tv3.0/image/normallogo.png
- chinawe####.c####.l####.####.com/api/channel/v1/template/detail?template...
- co####.ssp.math####.cn/api/v2/SDKCommonConfig?channelCode=####&version=#...
- co####.ssp.math####.cn/api/v3/sdkTestConfig?send_ts=####
- dd2.wuko####.com/tvclient/sdk?func=####&package=####
- detec####.math####.cn/favicon.ico
- detec####.math####.cn/images/sdk/detective.jpeg
- detec####.math####.cn/js/finger20220224.js
- detec####.math####.cn/sdk/checkCookie/httpClient?uniqueId=####&androidVe...
- detec####.math####.cn/sdk/checkCookie/webview?uniqueId=####&androidVersi...
- detec####.math####.cn/sdk/checkRedirect?uniqueId=####&androidVersion=###...
- detec####.math####.cn/sdk/filterHeader/httpClient?uniqueId=####&androidV...
- detec####.math####.cn/sdk/filterHeader/webview?uniqueId=####&androidVers...
- detec####.math####.cn/sdk/openWebview?uniqueId=####&androidVersion=####&...
- detec####.math####.cn/sdk/redirectHttpClientSecondPage?uniqueId=####&and...
- detec####.math####.cn/sdk/redirectWebviewSecondPage?uniqueId=####&androi...
- detec####.math####.cn/sdk/setCookie/httpClient?uniqueId=####&androidVers...
- detec####.math####.cn/sdk/setCookie/webview?uniqueId=####&androidVersion...
- detec####.math####.cn/sdk/validateCookie/httpClient?uniqueId=####&androi...
- detec####.math####.cn/sdk/validateCookie/webview?uniqueId=####&androidVe...
- detec####.math####.cn/sdk/webviewBasic?uniqueId=####&androidVersion=####...
- dsj-co####.oss-cn-####.aliy####.com/config/update.json
- g3.l####.com/r?format=####
- k####.volceap####.com.####.com:443/service/2/app_alert_check/?os_api=###...
- l####.b####.com/jquery/2.1.4/jquery.min.js
- na61-####.wagbr####.ali####.####.com/service/getIpInfo.php?ip=####
- ne####.dianshi####.com/
- newap####.math####.cn/favicon.ico
- newap####.math####.cn/ssp/mgm_test/webview_version?channelCode=####&vers...
- p####.api.math####.cn/ip?send_ts=####
- p####.dianshi####.com/api/509a4cb99bd39a5f/NbxvoKJywzYR?info=####
- p####.dianshi####.com/api/9db0717922ba2f01/jbCmjVhdBhXP?info=####
- p####.dianshi####.com/api/f6d02ae2031b1d3f/NwrxDBcsZE2m?info=####
- p####.dianshi####.com/api/f6d02ae2031b1d3f/iYvkpRiKdfdW?info=####
- p####.dianshi####.com/api/v24/apiConfig
- tj####.a####.ads####.cn/thirdparty/sapi/callback?cid=####&adspaceid=####...
HTTP POST requests:
- adash####.man.aliy####.com/man/api?ak=####&s=####
- and####.b####.qq.com/rqd/async?aid=####
- api.dianshi####.com/api/config/v1/pay/document
- api.dianshi####.com/api/pay/documents
- api.dianshi####.com/api/v2/device/info?duid=####&c=####&
- api.dianshi####.com/api/v2/device/start/info
- api.mydians####.com/api/v1/user_risk_device/getUserRiskUid
- api.o####.ads####.cn/thirdparty/encsapi/enChn2
- dy.cn.wildpet####.xyz/dycn/update
- dy.cn.wildpet####.xyz:201/proxy/get?e=####&r=####
- k####.volceap####.com.####.com:443/service/2/device_register/?os_api=###...
- msg.umengc####.com:443/tag/add
- newap####.math####.cn/titan/monitor/device_info
- p####.dianshi####.com/api/v2/device/info?duid=####&c=####&
- plb####.u####.com:443/umpx_internal
- plb####.u####.com:443/umpx_push_launch
- plb####.u####.com:443/umpx_push_register
- t####.dians####.com/v1/new_peer
- t####.dians####.com/v1/peer_status
- to####.volceap####.com.####.com:443/service/2/app_log/?device_platform=#...
- to####.volceap####.com.####.com:443/service/2/log_settings/?device_platf...
- tv.hub.dianshi####.com/u
- u####.u####.com:443/unify_logs
File system changes:
Creates the following files:
- /data/data/####/.imprint
- /data/data/####/.pylock
- /data/data/####/032ef2bf9275e358173be6cc695f1014.0
- /data/data/####/032ef2bf9275e358173be6cc695f1014.1
- /data/data/####/0cdf16c8e9c7ec49_0
- /data/data/####/0e627ae72e2cc942e2e392f26d13cada.0
- /data/data/####/0e627ae72e2cc942e2e392f26d13cada.1
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/124997fdaf3ed0f786a82c27b0549806.0.tmp
- /data/data/####/124997fdaf3ed0f786a82c27b0549806.1
- /data/data/####/124997fdaf3ed0f786a82c27b0549806.1.tmp
- /data/data/####/142672fc648cdd12fa5487cce7849c45.0.tmp
- /data/data/####/142672fc648cdd12fa5487cce7849c45.1
- /data/data/####/142672fc648cdd12fa5487cce7849c45.1.tmp
- /data/data/####/14e5b06a2221057b8b675749037230bb.0.tmp
- /data/data/####/14e5b06a2221057b8b675749037230bb.1
- /data/data/####/14e5b06a2221057b8b675749037230bb.1.tmp
- /data/data/####/168436@bd_tea_agent.db-journal
- /data/data/####/1697220778849.ts
- /data/data/####/1e6803d91ce9dd999608566f39994c3d.0.tmp
- /data/data/####/1e6803d91ce9dd999608566f39994c3d.1
- /data/data/####/1e6803d91ce9dd999608566f39994c3d.1.tmp
- /data/data/####/1f85f809011a2aaa764e841c2ff79042.0.tmp
- /data/data/####/1f85f809011a2aaa764e841c2ff79042.1
- /data/data/####/1f85f809011a2aaa764e841c2ff79042.1.tmp
- /data/data/####/205826693447a6e6347fb101fd3a72fb.0.tmp
- /data/data/####/205826693447a6e6347fb101fd3a72fb.1
- /data/data/####/205826693447a6e6347fb101fd3a72fb.1.tmp
- /data/data/####/20c2504aa3076aa1230fd4744ab9429b.0.tmp
- /data/data/####/20c2504aa3076aa1230fd4744ab9429b.1
- /data/data/####/20c2504aa3076aa1230fd4744ab9429b.1.tmp
- /data/data/####/2221ba1260a95d28039abe83020c705b.0.tmp
- /data/data/####/2221ba1260a95d28039abe83020c705b.1.tmp
- /data/data/####/28a0dee0f6d836c41541374c85b867dd.0.tmp
- /data/data/####/28a0dee0f6d836c41541374c85b867dd.1
- /data/data/####/28a0dee0f6d836c41541374c85b867dd.1.tmp
- /data/data/####/2d8b3a974771a653f6cc2ee5d88dc341
- /data/data/####/2ef4f85a54546f22d4fef524785f853f.0.tmp
- /data/data/####/2ef4f85a54546f22d4fef524785f853f.1
- /data/data/####/2ef4f85a54546f22d4fef524785f853f.1.tmp
- /data/data/####/318277675.dex
- /data/data/####/318277675.dex.flock (deleted)
- /data/data/####/318277675.jar
- /data/data/####/318277675.jar.temp
- /data/data/####/321ec9e85fd58cc7690da12f8925d33c.0.tmp
- /data/data/####/321ec9e85fd58cc7690da12f8925d33c.1
- /data/data/####/321ec9e85fd58cc7690da12f8925d33c.1.tmp
- /data/data/####/374f28aeaeb79c5854998e830f974845.0.tmp
- /data/data/####/374f28aeaeb79c5854998e830f974845.1
- /data/data/####/374f28aeaeb79c5854998e830f974845.1.tmp
- /data/data/####/379981f286d2e6e4b16c0c25c8a68734.0.tmp
- /data/data/####/379981f286d2e6e4b16c0c25c8a68734.1
- /data/data/####/379981f286d2e6e4b16c0c25c8a68734.1.tmp
- /data/data/####/3980c7fb5baec570fb5f5133e58bf92b.0.tmp
- /data/data/####/3980c7fb5baec570fb5f5133e58bf92b.1
- /data/data/####/3980c7fb5baec570fb5f5133e58bf92b.1.tmp
- /data/data/####/3b7371c07eefca10f31786447962b669
- /data/data/####/46dfadf7049b74d8733d290eeb93bbdc.0.tmp
- /data/data/####/46dfadf7049b74d8733d290eeb93bbdc.1
- /data/data/####/46dfadf7049b74d8733d290eeb93bbdc.1.tmp
- /data/data/####/4adc6fc6d3390c5878ae766bd69949b9.0.tmp
- /data/data/####/4adc6fc6d3390c5878ae766bd69949b9.1
- /data/data/####/4adc6fc6d3390c5878ae766bd69949b9.1.tmp
- /data/data/####/4c149f56a2f37c4bc78ab80b0ba77450.0.tmp
- /data/data/####/4c149f56a2f37c4bc78ab80b0ba77450.1
- /data/data/####/4c149f56a2f37c4bc78ab80b0ba77450.1.tmp
- /data/data/####/4d5b08d3bcdd7411397fc8f4a7c35804.0.tmp
- /data/data/####/4d5b08d3bcdd7411397fc8f4a7c35804.1
- /data/data/####/4d5b08d3bcdd7411397fc8f4a7c35804.1.tmp
- /data/data/####/511a91d6a422c68db04d252d67d293aa.0.tmp
- /data/data/####/511a91d6a422c68db04d252d67d293aa.1
- /data/data/####/511a91d6a422c68db04d252d67d293aa.1.tmp
- /data/data/####/54fdf49dff9a9c963faaa62934daf940.0
- /data/data/####/54fdf49dff9a9c963faaa62934daf940.1
- /data/data/####/58095b0c6485c221_0
- /data/data/####/58095b0c6485c221_1
- /data/data/####/5891d96be8793ce4e3251d552f837b3e.0
- /data/data/####/5891d96be8793ce4e3251d552f837b3e.1
- /data/data/####/601fed44b8cc97f903b2146b86d31290.0
- /data/data/####/601fed44b8cc97f903b2146b86d31290.1
- /data/data/####/63cde9655e58a6bf5cd3fa408cabc928.0
- /data/data/####/63cde9655e58a6bf5cd3fa408cabc928.1
- /data/data/####/6609de9a79fb952512e70415776ca65c.0.tmp
- /data/data/####/6609de9a79fb952512e70415776ca65c.1
- /data/data/####/6b219deb5c2d6dd05cbd3c089d5ed2d8
- /data/data/####/6ca76fb91ed1137a0fdb912ccc25cffa.0.tmp
- /data/data/####/6ca76fb91ed1137a0fdb912ccc25cffa.1
- /data/data/####/6eb68ea955d68f02_0
- /data/data/####/70298c6eb6032706_0
- /data/data/####/70298c6eb6032706_1
- /data/data/####/705b4b56f751f7d8fe4044bfa442a8eb.0.tmp
- /data/data/####/705b4b56f751f7d8fe4044bfa442a8eb.1
- /data/data/####/705b4b56f751f7d8fe4044bfa442a8eb.1.tmp
- /data/data/####/71aabc12ce4f8996_0
- /data/data/####/7b13f3887be17e1b27cbb0558208371f.0.tmp
- /data/data/####/7b13f3887be17e1b27cbb0558208371f.1
- /data/data/####/7b13f3887be17e1b27cbb0558208371f.1.tmp
- /data/data/####/7c043bd473f80c28896427247a603a1e.0
- /data/data/####/7c043bd473f80c28896427247a603a1e.1
- /data/data/####/7d547b80782fce05_0
- /data/data/####/80523ba78a64d04aac756f25e9d5f750.0.tmp
- /data/data/####/80523ba78a64d04aac756f25e9d5f750.1
- /data/data/####/80523ba78a64d04aac756f25e9d5f750.1.tmp
- /data/data/####/81b02692d6e9c790a85f08f4e48be0ce.0.tmp
- /data/data/####/81b02692d6e9c790a85f08f4e48be0ce.1
- /data/data/####/8883a79baa010ecc599a4fda824745b4.0
- /data/data/####/8883a79baa010ecc599a4fda824745b4.1
- /data/data/####/907e8eb71986c4efa82809d216c97011.0
- /data/data/####/907e8eb71986c4efa82809d216c97011.1
- /data/data/####/90fa889de6b696e137e1d89d8d82b136.0.tmp
- /data/data/####/90fa889de6b696e137e1d89d8d82b136.1
- /data/data/####/90fa889de6b696e137e1d89d8d82b136.1.tmp
- /data/data/####/92926eacc676308d0819e18dd10ba7bc.0
- /data/data/####/92926eacc676308d0819e18dd10ba7bc.0.tmp
- /data/data/####/92926eacc676308d0819e18dd10ba7bc.1
- /data/data/####/92926eacc676308d0819e18dd10ba7bc.1.tmp
- /data/data/####/941584d6d6406b06e8076ac9e3dc5752.0.tmp
- /data/data/####/941584d6d6406b06e8076ac9e3dc5752.1
- /data/data/####/941584d6d6406b06e8076ac9e3dc5752.1.tmp
- /data/data/####/970c2c5453e0184890cc63c59b9b337f.0.tmp
- /data/data/####/970c2c5453e0184890cc63c59b9b337f.1
- /data/data/####/970c2c5453e0184890cc63c59b9b337f.1.tmp
- /data/data/####/9aeccc8ac824a7a9_0
- /data/data/####/ACCS_BINDumeng;637d8d2df8fb1344680d1a7d.xml
- /data/data/####/ACCS_SDK.xml
- /data/data/####/ACCS_SDK_CHANNEL.xml
- /data/data/####/ACCS_SDK_CHANNEL.xml.bak
- /data/data/####/AGOO_BIND.xml
- /data/data/####/Agoo_AppStore.xml
- /data/data/####/Alvin2.xml
- /data/data/####/CONFIG.xml
- /data/data/####/CONFIG.xml.bak
- /data/data/####/CUSTOM_CONFIG.xml
- /data/data/####/ContextData.xml
- /data/data/####/Cookies-journal
- /data/data/####/DEVICE_INFO.xml
- /data/data/####/DOWNLOAD_END_AD.xml
- /data/data/####/END_AD.xml
- /data/data/####/END_AD.xml.bak (deleted)
- /data/data/####/END_AD_BOOT.xml
- /data/data/####/EVENT_CONFIG.xml
- /data/data/####/EVENT_CONFIG.xml.bak
- /data/data/####/IpConfig.xml
- /data/data/####/KEY_SP_NAME_RISK.xml
- /data/data/####/LIVE_CONFIG.xml
- /data/data/####/LIVE_CONFIG.xml.bak
- /data/data/####/MessageStore.db-journal
- /data/data/####/MsgLogStore.db-journal
- /data/data/####/OFFLINE.xml
- /data/data/####/PERMANENT_DATA.xml
- /data/data/####/PHOTO_INFO.xml
- /data/data/####/PLAY.xml
- /data/data/####/PLAY_CONFIG.xml
- /data/data/####/PLAY_CONFIG.xml.bak
- /data/data/####/PROXYDATA.xml
- /data/data/####/PROXYDATA.xml.bak
- /data/data/####/STREAM_CONFIG_V2.xml
- /data/data/####/SWITCH_CONFIG.xml
- /data/data/####/SWITCH_CONFIG.xml.bak
- /data/data/####/SYSTEM_INFO.xml
- /data/data/####/TAG_URL_SPEC_STREAM_IMAGE_NO_VIP_temp.jpg
- /data/data/####/TAG_URL_SPEC_STREAM_IMAGE_VIP.jpg
- /data/data/####/TEA.xml
- /data/data/####/UM_PROBE_DATA.xml
- /data/data/####/USER_INFO.xml
- /data/data/####/USER_INFO.xml.bak
- /data/data/####/WebViewChromiumPrefs.xml
- /data/data/####/_global_cache.xml
- /data/data/####/_global_cache.xml.bak
- /data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.0
- /data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.0.tmp
- /data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.1
- /data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.1.tmp
- /data/data/####/aa67597a9395d61987bb0d8f3056aabd.0.tmp
- /data/data/####/aa67597a9395d61987bb0d8f3056aabd.1
- /data/data/####/aa67597a9395d61987bb0d8f3056aabd.1.tmp
- /data/data/####/accs.db-journal
- /data/data/####/agoo.pid
- /data/data/####/api.prefs.xml
- /data/data/####/api.prefs.xml.bak
- /data/data/####/applog_stats.xml
- /data/data/####/b915d95d75de0a7591e1be125e674cb1.0
- /data/data/####/b915d95d75de0a7591e1be125e674cb1.0.tmp
- /data/data/####/b915d95d75de0a7591e1be125e674cb1.1
- /data/data/####/b915d95d75de0a7591e1be125e674cb1.1.tmp
- /data/data/####/bab82fd1d99513a11f32ed15d6beddeb.0.tmp
- /data/data/####/bab82fd1d99513a11f32ed15d6beddeb.1
- /data/data/####/bab82fd1d99513a11f32ed15d6beddeb.1.tmp
- /data/data/####/bc880a5046d64a76_0
- /data/data/####/bdtracker_dr_migrate_detector.xml
- /data/data/####/bugly_db_-journal
- /data/data/####/c02a67064e122b1ce0de30fca4d6d030.0.tmp
- /data/data/####/c02a67064e122b1ce0de30fca4d6d030.1
- /data/data/####/c02a67064e122b1ce0de30fca4d6d030.1.tmp
- /data/data/####/c0968fa531339178b2ed07e203745184.0.tmp
- /data/data/####/c0968fa531339178b2ed07e203745184.1
- /data/data/####/c0968fa531339178b2ed07e203745184.1.tmp
- /data/data/####/c2bad3572aef1317_0
- /data/data/####/c3db06f2eea7121efdbc9566c205557d.0.tmp
- /data/data/####/c3db06f2eea7121efdbc9566c205557d.1
- /data/data/####/c3db06f2eea7121efdbc9566c205557d.1.tmp
- /data/data/####/c6951e9702af6b6362d150ce081325e3.0.tmp
- /data/data/####/c6951e9702af6b6362d150ce081325e3.1
- /data/data/####/c6951e9702af6b6362d150ce081325e3.1.tmp
- /data/data/####/c6f69eba0b8c5457_0
- /data/data/####/cache_flow_count.xml
- /data/data/####/cache_flow_count.xml.bak
- /data/data/####/ccabc51e3be72d1f42c9dd205cc41d23
- /data/data/####/cctv13.0
- /data/data/####/cctv13.0 (deleted)
- /data/data/####/channels.data
- /data/data/####/com.dsj.pj.BETA_VALUES.xml
- /data/data/####/com.dsj.pj_preferences.xml
- /data/data/####/com.dsj.pj_preferences.xml.bak
- /data/data/####/conf.dat
- /data/data/####/count_shop_tip.xml
- /data/data/####/crashrecord.xml
- /data/data/####/cuuid.xml
- /data/data/####/cuuid.xml.bak
- /data/data/####/d1999028a5653df7011b0c99a38da37f.0.tmp
- /data/data/####/d1999028a5653df7011b0c99a38da37f.1
- /data/data/####/d1d53c06ecdfb9c1_0 (deleted)
- /data/data/####/d2ed5397160ed6516b6104a98841b262.0.tmp
- /data/data/####/d2ed5397160ed6516b6104a98841b262.1
- /data/data/####/d2ed5397160ed6516b6104a98841b262.1.tmp
- /data/data/####/d5bdf84fbacd68c2_0
- /data/data/####/d6b07bb3308ff5cf72b33dfd637bdfeb
- /data/data/####/dW1weF9pbnRlcm5hbF8xNjk3MjIwNzQ0MDM4;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNjk3MjIwNzUwNjU4;
- /data/data/####/dW1weF9wdXNoX2xhdW5jaF8xNjk3MjIwNzU5NDUy;
- /data/data/####/dW1weF9wdXNoX3JlZ2lzdGVyXzE2OTcyMjA3NTExNjA=;
- /data/data/####/download_splash.xml
- /data/data/####/download_splash.xml.bak
- /data/data/####/dy_live.xml
- /data/data/####/e08320ef5792381f2f7751a75601b765.0.tmp
- /data/data/####/e08320ef5792381f2f7751a75601b765.1
- /data/data/####/e08320ef5792381f2f7751a75601b765.1.tmp
- /data/data/####/e5150db47a5e9ff8_0
- /data/data/####/e53dfa405fea0315e2eee0b830dd5897.0.tmp
- /data/data/####/e53dfa405fea0315e2eee0b830dd5897.1
- /data/data/####/e53dfa405fea0315e2eee0b830dd5897.1.tmp
- /data/data/####/ef909429a92464c9886aacd0a476e619.0.tmp
- /data/data/####/ef909429a92464c9886aacd0a476e619.1
- /data/data/####/ef909429a92464c9886aacd0a476e619.1.tmp
- /data/data/####/epg-cctv1-20231013.json
- /data/data/####/epg-cctv12-20231013.json
- /data/data/####/epg-cctv13-20231013.json
- /data/data/####/epg-cctv14-20231013.json
- /data/data/####/epg-cctv2-20231013.json
- /data/data/####/epg-cctv3-20231013.json
- /data/data/####/epg-cctv4-20231013.json
- /data/data/####/epg-cctv5-20231013.json
- /data/data/####/epg-cctv6-20231013.json
- /data/data/####/epg-cctv7-20231013.json
- /data/data/####/epg-cctv8-20231013.json
- /data/data/####/epg-cctv9-20231013.json
- /data/data/####/epg.dex
- /data/data/####/epg.dex.flock (deleted)
- /data/data/####/epg.jar
- /data/data/####/epg.tmp
- /data/data/####/event_db
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/faa09cfb3efe120858e9d9154f83b3df.0.tmp
- /data/data/####/faa09cfb3efe120858e9d9154f83b3df.1
- /data/data/####/faa09cfb3efe120858e9d9154f83b3df.1.tmp
- /data/data/####/fb6af786f26a2595b3be0ff754fb377a.0.tmp
- /data/data/####/fb6af786f26a2595b3be0ff754fb377a.1
- /data/data/####/fc998cc78d282345_0
- /data/data/####/fcb56015e550d043f3ffb01d3e3e95fbb33a8d9721c7bee....0.tmp
- /data/data/####/fcb56015e550d043f3ffb01d3e3e95fbb33a8d9721c7bee...a4ac.0
- /data/data/####/header_custom.xml
- /data/data/####/header_custom.xml.bak
- /data/data/####/i==1.2.0&&3.10.25_1697220744138_envelope.log
- /data/data/####/i==1.2.0&&3.10.25_1697220750885_envelope.log
- /data/data/####/index
- /data/data/####/info.xml
- /data/data/####/inject_track.xml
- /data/data/####/journal
- /data/data/####/last_sp_session.xml
- /data/data/####/libtvcore.so
- /data/data/####/local_crash_lock
- /data/data/####/local_crash_lock (deleted)
- /data/data/####/message_accs_db
- /data/data/####/message_accs_db-journal
- /data/data/####/metrics_guid
- /data/data/####/native_record_lock
- /data/data/####/native_record_lock (deleted)
- /data/data/####/net_node.xml
- /data/data/####/offline.data
- /data/data/####/okhttp_prefs.xml
- /data/data/####/package_infos.xml
- /data/data/####/package_infos.xml.bak
- /data/data/####/player_strategy.xml
- /data/data/####/plugin.dex
- /data/data/####/plugin.dex.flock (deleted)
- /data/data/####/plugin.jar
- /data/data/####/plugin.tmp (deleted)
- /data/data/####/plugin_config.xml
- /data/data/####/plugin_file.name
- /data/data/####/pp.dex
- /data/data/####/pp.dex.flock (deleted)
- /data/data/####/pp.jar
- /data/data/####/pp.tmp
- /data/data/####/proc_auxv
- /data/data/####/product_intercept.xml
- /data/data/####/promote.dex
- /data/data/####/promote.dex.flock (deleted)
- /data/data/####/promote.jar
- /data/data/####/promote.tmp (deleted)
- /data/data/####/risk_infos.xml
- /data/data/####/risk_infos.xml.bak
- /data/data/####/risk_user_info.xml
- /data/data/####/safe_mode_config.xml
- /data/data/####/sce.tmp
- /data/data/####/sce_config.xml
- /data/data/####/security_info
- /data/data/####/session_cache
- /data/data/####/share_date.xml
- /data/data/####/simple-other-msg.dat
- /data/data/####/simple-other-req.dat
- /data/data/####/skin_cache_name.xml
- /data/data/####/snssdk_openudid.xml
- /data/data/####/snssdk_openudid.xml.bak
- /data/data/####/sp_key_stream.xml
- /data/data/####/spider_prefs.xml
- /data/data/####/spider_prefs.xml.bak
- /data/data/####/stream_report.xml
- /data/data/####/t==8.1.3&&3.10.25_1697220745977_envelope.log
- /data/data/####/tencent.dex
- /data/data/####/tencent.dex.flock (deleted)
- /data/data/####/tencent.jar
- /data/data/####/the-real-index
- /data/data/####/total.log
- /data/data/####/total_pay_documents.xml
- /data/data/####/tvlive2.db-journal
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/ug_install_settings_pref.xml
- /data/data/####/um_pri.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_general_config.xml.bak (deleted)
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_message_state.xml
- /data/data/####/x_google_ad_s_id_123
- /data/media/####/21cf1702e7928d01e6c2c0db7d8e03d1
- /data/media/####/6135a7b46c73610339e9a47d137e4918.mp3
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/ddev.data
- /data/media/####/deviceToken
- /data/media/####/flag.data
- /data/media/####/sysid.dat
- /data/media/####/uuid.data
- /data/misc/####/primary.prof
Miscellaneous:
Executes the following shell scripts:
- /system/bin/cat /proc/cpuinfo
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop
- cat /sys/class/net/eth0/address
- cat /sys/class/net/wlan0/address
- chmod 777 /data/user/0/<Package>/files/.honor0
- getprop
- getprop ro.build.version.emui
- getprop ro.letv.release.version
- getprop ro.vivo.os.build.display.id
- ls /
- ls /sys/class/thermal
- sh
Loads the following dynamic libraries:
- libBugly
- libc++_shared
- libffavc
- libmmkv
- libsce
- libtnet-3.1.14
- libtvcore
Uses the following algorithms to encrypt data:
- AES
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- DES
- RSA
- RSA-ECB-PKCS1Padding
Uses the following algorithms to decrypt data:
- AES
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- DES
- RSA-ECB-PKCS1Padding
Accesses the ITelephony private interface.
Gets information about location.
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Gets information about installed apps.
Gets information about running apps.
Adds tasks to the system scheduler.
Displays its own windows over windows of other apps.
Requests the system alert window permission.