Android.Siggen.Susp.69

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Siggen.Susp.63

Network activity:

Connects to:

UDP(DNS) 8####.8.4.4:53
TCP(HTTP/1.1) 39.1####.143.44:8001
TCP(HTTP/1.1) adash####.man.aliy####.com:80
TCP(HTTP/1.1) c####.dianshi####.com.####.com:80
TCP(HTTP/1.1) l####.b####.com:80
TCP(HTTP/1.1) 1####.161.124.146:12340
TCP(HTTP/1.1) tra####.dians####.com:80
TCP(HTTP/1.1) im.dianshi####.com:80
TCP(HTTP/1.1) co####.ssp.math####.cn:80
TCP(HTTP/1.1) cdn.dianshi####.com:80
TCP(HTTP/1.1) hub.dianshi####.com:80
TCP(HTTP/1.1) detec####.math####.cn:80
TCP(HTTP/1.1) wy.vod.dians####.####.com:80
TCP(HTTP/1.1) d####.100u####.com.####.net:80
TCP(HTTP/1.1) and####.b####.qq.com:80
TCP(HTTP/1.1) dd2.wuko####.com:80
TCP(HTTP/1.1) card####.k####.com.####.com:80
TCP(HTTP/1.1) cdn.api.dianshi####.com:80
TCP(HTTP/1.1) api.dianshi####.com:80
TCP(HTTP/1.1) idc####.k####.com:80
TCP(HTTP/1.1) 8.1####.173.195:3918
TCP(HTTP/1.1) 1####.56.125.184:80
TCP(HTTP/1.1) 1####.28.228.62:14305
TCP(HTTP/1.1) g3.l####.com:80
TCP(HTTP/1.1) p####.api.math####.cn:80
TCP(HTTP/1.1) vsc.a####.miguv####.com:7114
TCP(HTTP/1.1) m.cdn.cmv####.cn:80
TCP(HTTP/1.1) newap####.math####.cn:80
TCP(TLS/1.0) hlsmgsp####.miguv####.com:443
TCP(TLS/1.0) 64.2####.163.95:443
TCP(TLS/1.0) pla####.google####.com:443
TCP(TLS/1.0) plb####.u####.com:443
TCP(TLS/1.0) 1####.194.73.95:443
TCP(TLS/1.0) u####.u####.com:443
TCP(TLS/1.0) msg.umengc####.com:443
TCP(TLS/1.0) idc####.k####.com:443
TCP(TLS/1.0) h5####.g####.cmv####.cn:443
TCP(TLS/1.0) to####.ctobsn####.com.####.net:443
TCP(TLS/1.0) sk.ts####.xyz:8642
TCP(TLS/1.0) and####.a####.go####.com:443
TCP(TLS/1.0) 2####.107.1.97:443
TCP(TLS/1.0) card####.k####.com.####.com:443
TCP(TLS/1.2) 64.2####.163.95:443
TCP(TLS/1.2) 1####.194.73.95:443
TCP(TLS/1.2) 64.2####.161.94:443
UDP 39.1####.134.87:3479
UDP 2####.255.255.250:1900
TCP 1####.20.71.60:7597
TCP 1####.139.196.32:26454
TCP 1####.10.36.68:26454
UDP 1####.8.115.39:3049
UDP 2####.107.235.81:2739
UDP 1####.0.2.254:4010
UDP 36.2####.201.104:2005
TCP 1####.164.224.111:4010
UDP 39.1####.62.19:3478
UDP tm4.binst####.live:3923
TCP 9####.51.83.67:4010
UDP 2####.89.77.241:3069
UDP 2####.102.160.80:2891
UDP 42.94.2####.183:1278
TCP 1####.123.139.125:4010
TCP 1####.2.49.9:4010
UDP 1####.228.239.141:2206
UDP tm1.binst####.live:3923
TCP 1####.141.222.28:4010
TCP 1####.240.39.111:4010
UDP as2.binst####.live:3923
TCP 50.1####.88.85:4010
UDP 1####.135.21.115:1210
UDP tm1.binst####.live:13
TCP 36.1####.102.4:4081
TCP 1####.241.192.60:4010
UDP 1####.239.247.143:3716
TCP 1####.102.43.246:4010
TCP 1####.77.107.80:4010
UDP tm3.binst####.live:13
TCP 1.1####.175.83:32395
UDP tm3.binst####.live:3923
TCP 71.9.1####.247:4010
TCP 1####.2.152.252:4010
TCP 2####.208.80.81:4010
TCP 1####.76.108.228:4010
TCP 1####.148.6.49:4010
UDP 64.2####.163.95:443
UDP 1####.159.35.113:3473
UDP 2####.90.117.35:2457
TCP 1####.1.251.156:4010
TCP 59.62.2####.175:4010
TCP 1####.164.186.225:4010
TCP 1####.222.133.4:4010
TCP 1####.171.6.4:4010
TCP 1####.60.247.137:4010
TCP 2####.122.65.46:4010
UDP 1####.138.165.29:3432
TCP 1####.224.27.59:24139
TCP 1.7####.11.135:4010
UDP 1####.152.131.216:1762
TCP 1####.195.196.57:4010
TCP 5####.17.59.84:4010
TCP zb-cent####.m.ta####.com:443
TCP 1####.25.59.169:4010
TCP 1####.228.239.141:2206
TCP 1####.237.28.3:4010
TCP 58.2####.168.52:4339
TCP 1####.218.197.230:4010
TCP 1####.139.104.124:4010
TCP 60.23.1####.102:4010
UDP as2.binst####.live:13
TCP 1####.222.112.206:4010
TCP 1####.198.35.20:4010
TCP 2####.209.97.10:4010
TCP 1####.50.147.106:4010
UDP 39.1####.77.24:2333
UDP 14.2####.114.17:2487
TCP 27.2####.166.246:4010
UDP 1####.199.150.121:894
TCP 1####.97.68.244:12351
TCP 1####.122.163.17:20688
TCP 1####.232.24.28:4010
TCP 60.11.1####.90:4010
UDP 1####.150.244.44:1849
UDP 39.1####.144.26:3180
TCP 1####.109.106.225:4010
TCP 1####.119.126.19:4010
TCP 1####.181.162.134:4010
TCP 27.1####.217.140:4010
TCP 1####.31.197.170:4010
TCP 2####.141.79.203:4010
TCP 74.64.2####.48:4010
UDP 1####.102.118.48:1395
TCP 2####.11.253.124:4010

DNS requests:

a####.man.aliy####.com
acc####.m.ta####.com
ad-temp####.k####.com
amdc####.m.ta####.com
and####.a####.go####.com
and####.b####.qq.com
api.dianshi####.com
as1.binst####.live
as2.binst####.live
as3.binst####.live
as4.binst####.live
ask.log.k####.com
c####.dianshi####.com
card####.k####.com
cdn.api.dianshi####.com
cdn.cha####.dianshi####.com
cdn.dianshi####.com
co####
co####.8.8.####.8
co####.ssp.math####.cn
d####.100u####.com
dd2.wuko####.com
detec####.math####.cn
g3.l####.com
h5####.g####.cmv####.cn
hlsmgsp####.miguv####.com
hub.dianshi####.com
i####.k####.com
idc####.k####.com
im.dianshi####.com
l####.b####.com
m.miguv####.com
msg.umengc####.com
newap####.math####.cn
off####.dianshi####.com
p####.api.math####.cn
p####.dianshi####.com
pla####.google####.com
plb####.u####.com
sk.ts####.xyz
t####.k####.com
tm1.binst####.live
tm2.binst####.live
tm3.binst####.live
tm4.binst####.live
to####.ctobsn####.com
tra####.dians####.com
u####.u####.com
umen####.m.ta####.com
vsc.a####.miguv####.com
wy.vod.dians####.com

HTTP GET requests:

api.dianshi####.com/api/cash/info
api.dianshi####.com/api/channel/v1/channelGroup/template
api.dianshi####.com/api/coin/info
api.dianshi####.com/api/config/deviceCompat?brand=####&model=####&osver=...
api.dianshi####.com/api/config/v1/common/conf
api.dianshi####.com/api/kuyun/list
api.dianshi####.com/api/pan/v1/config/global
api.dianshi####.com/api/pan/v2/space/report?actType=####
api.dianshi####.com/api/pan/v2/ufile/list?type=####&page=####&size=####&...
api.dianshi####.com/api/redpack/info
api.dianshi####.com/api/task/get?
api.dianshi####.com/api/tv/v1/hotchannels?type=####
api.dianshi####.com/api/tvSkin?menunum=####
api.dianshi####.com/api/update/new_version
api.dianshi####.com/api/v1/cloudConfig?ts=####
api.dianshi####.com/api/v1/play/control
api.dianshi####.com/api/v1/plugin?module=####&verCode=####&aver=####&tm=...
api.dianshi####.com/api/v2/song/remind?type=####
api.dianshi####.com/api/v2/user/wx/helplogin
api.dianshi####.com/api/v24/apiConfig
api.dianshi####.com/api/v3/offProgram
api.dianshi####.com/api/v6/channels?ts=####
api.dianshi####.com/gslb/channel/stream?region=####&isp=####&tm=####&uui...
api.dianshi####.com/ipInfo
api.dianshi####.com/time?ts=####
c####.dianshi####.com.####.com/static/plugin/01f41a829659f80e9566717f8ee...
c####.dianshi####.com.####.com/static/plugin/33bcaa6df34bea8b058f19ca44b...
c####.dianshi####.com.####.com/static/plugin/343f88522e562dc57be54cb8f01...
c####.dianshi####.com.####.com/static/plugin/7b2267f9f4f7d9e7c3a360950e3...
c####.dianshi####.com.####.com/static/plugin/923ac7fb0f83cde79ad5fd559b9...
c####.dianshi####.com.####.com/static/plugin/fa202c3a3557b1241c9cd100590...
card####.k####.com.####.com/pro/ad/sdk/jar/2020/11/25/10/46/37272382_160...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-139024...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-140312...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-148402...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-158550...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-176448...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-202767...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-205390...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-236052...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-256750...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-277945...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-278250...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-345083...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-359755...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-416863...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-422576...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-425249...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-439790...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-448347...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-451317...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-454985...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-463030...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-464934...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-471156...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-489720...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-490507...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-517590...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-571809...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-602069...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-610312...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-617474...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-632091...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-651542...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-665842...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-713990...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-723553...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-730361...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-758226...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-782431...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-783288...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-785732...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-792197...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-851301...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-878196...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-884637...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-887774...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-888283...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-900637...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-952251...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/1003791...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/1726809...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/1764009...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/1989657...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/2059538...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/2109561...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/2127753...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/2267573...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/2311110...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/2613034...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/2825871...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/2899414...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/3045523...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/3364926...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/3418887...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/3603608...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/3742599...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/3786895...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/3941938...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/4124031...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/4351071...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/4641279...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/4648147...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/4962826...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/4963621...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/5095667...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/5898925...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/6092042...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/6213390...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/6633863...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/6774764...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/6796928...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/7127538...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/7464087...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/7617410...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/7758766...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/7833536...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/8345377...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/8477834...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/8569432...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/8848779...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/8997021...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/9004618...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/9013130...
card####.k####.com.####.com:443/pro/protocol/2021/7/27/10/17/29/16273522...
card####.k####.com.####.com:443/pro/protocol/2022/11/7/11/39/48/16677923...
cdn.api.dianshi####.com/api/channel/v1/template/detail?templateKey=####
cdn.api.dianshi####.com/api/programs?cid=####&date=####&tm=####
cdn.dianshi####.com/api/config/hotChannelTvTypeOne
cdn.dianshi####.com/assets/mobile/random/randomconfig.json?ts=####
cdn.dianshi####.com/assets/mobile/temp/ts_cf.json?ts=####
cdn.dianshi####.com/assets/tvTea.json
cdn.dianshi####.com/config/channel/voice_mapping.json
co####.ssp.math####.cn/api/v2/SDKCommonConfig?channelCode=####&version=#...
co####.ssp.math####.cn/api/v3/sdkTestConfig?send_ts=####
dd2.wuko####.com/tvclient/sdk?func=####&package=####
detec####.math####.cn/favicon.ico
detec####.math####.cn/images/sdk/detective.jpeg
detec####.math####.cn/js/finger20220224.js
detec####.math####.cn/sdk/checkCookie/httpClient?uniqueId=####&androidVe...
detec####.math####.cn/sdk/checkCookie/webview?uniqueId=####&androidVersi...
detec####.math####.cn/sdk/checkRedirect?uniqueId=4ae26d8e7fbf9c1b9396d4d...
detec####.math####.cn/sdk/filterHeader/httpClient?uniqueId=####&androidV...
detec####.math####.cn/sdk/filterHeader/webview?uniqueId=####&androidVers...
detec####.math####.cn/sdk/openWebview?uniqueId=4ae26d8e7fbf9c1b9396d4d4e...
detec####.math####.cn/sdk/redirectHttpClientSecondPage?uniqueId=####&and...
detec####.math####.cn/sdk/redirectWebviewSecondPage?uniqueId=####&androi...
detec####.math####.cn/sdk/setCookie/httpClient?uniqueId=####&androidVers...
detec####.math####.cn/sdk/setCookie/webview?uniqueId=####&androidVersion...
detec####.math####.cn/sdk/validateCookie/httpClient?uniqueId=####&androi...
detec####.math####.cn/sdk/validateCookie/webview?uniqueId=####&androidVe...
detec####.math####.cn/sdk/webviewBasic?uniqueId=4ae26d8e7fbf9c1b9396d4d4...
g3.l####.com/r?format=####
h5####.g####.cmv####.cn:443/wd_r2/cctv/cctv1hd/600/index.m3u8?msisdn=###...
idc####.k####.com/check.do?pid=####&thread_id=####&copyright_id=####&mac...
idc####.k####.com:443/?wlan0=####&eth0=####&bssid=####&imei=####&version...
idc####.k####.com:443/api/tvsdk/config?ltu=####&bssid=####&sign=####&p_m...
idc####.k####.com:443/api/tvsdk/prepare?sign=####&request_id=####&mac=##...
idc####.k####.com:443/api/tvsdk/update?sign=####&mac=####&app_id=####&ti...
im.dianshi####.com/ws/v2
l####.b####.com/jquery/2.1.4/jquery.min.js
m.cdn.cmv####.cn/playurl/v1/play/playurlh5?contId=####&rateType=####
newap####.math####.cn/ssp/mgm_test/webview_version?channelCode=####&vers...
p####.api.math####.cn/ip?send_ts=####
to####.ctobsn####.com.####.net:443/service/2/app_alert_check/?aid=####&t...
tra####.dians####.com/config?appid=####&uuid=####&cver=####
wy.vod.dians####.####.com/config/hoteProgramList.json

HTTP POST requests:

adash####.man.aliy####.com/man/api?ak=####&s=####
and####.b####.qq.com/rqd/async?aid=####
api.dianshi####.com/api/pay/documents
api.dianshi####.com/api/v2/device/info?duid=####&c=####&
api.dianshi####.com/api/v2/device/start/info
d####.100u####.com.####.net/reportcomp
hub.dianshi####.com/u
idc####.k####.com/template/check/0/00:00:00:00:00:02/0/1001
msg.umengc####.com:443/tag/add
newap####.math####.cn/titan/monitor/device_info
plb####.u####.com:443/umpx_internal
plb####.u####.com:443/umpx_push_launch
sk.ts####.xyz:8642/config?&st=####
to####.ctobsn####.com.####.net:443/service/2/abtest_config/?&os_api=####...
to####.ctobsn####.com.####.net:443/service/2/app_log/?device_platform=##...
to####.ctobsn####.com.####.net:443/service/2/device_register/?aid=####&t...
to####.ctobsn####.com.####.net:443/service/2/log_settings/?device_platfo...
u####.u####.com:443/unify_logs
vsc.a####.miguv####.com:7114/EPG/VPE/PHONE/Authenticate
vsc.a####.miguv####.com:7114/VSP/V3/PlayChannel

File system changes:

Creates the following files:

/data/data/####/-1390241014516485436
/data/data/####/-1403120548448229713
/data/data/####/-1484021606445496065
/data/data/####/-1585506774570403603
/data/data/####/-1764488294652839668
/data/data/####/-2027670920120851445
/data/data/####/-2053909911382187111
/data/data/####/-2360527842604846113
/data/data/####/-2567506579635691599
/data/data/####/-2779458653746106773
/data/data/####/-2782509233210736291
/data/data/####/-3450835224303568293
/data/data/####/-359755718962771323
/data/data/####/-4168632796275416192
/data/data/####/-4225762185600194776
/data/data/####/-4252495578215449663
/data/data/####/-439790676336129937
/data/data/####/-4483478159438962104
/data/data/####/-4513172892946266962
/data/data/####/-4549854609998114390
/data/data/####/-4630301526464700692
/data/data/####/-4649340208529423183
/data/data/####/-4711563819388476794
/data/data/####/-489720828702396827
/data/data/####/-4905070542848589656
/data/data/####/-5175908989786608244
/data/data/####/-5718096519348345315
/data/data/####/-6020694002225834822
/data/data/####/-6103123208112159877
/data/data/####/-6174742324800409447
/data/data/####/-6320918871514750160
/data/data/####/-6515428158716504371
/data/data/####/-6658420895094508129
/data/data/####/-7139907709653249367
/data/data/####/-7235537338366940681
/data/data/####/-7303615889051445811
/data/data/####/-7582264611536754158
/data/data/####/-7824319792825378401
/data/data/####/-7832888132778724752
/data/data/####/-7857323045930740017
/data/data/####/-792197412951866060
/data/data/####/-8513013884315180474
/data/data/####/-8781960053040659290
/data/data/####/-8846377557548208030
/data/data/####/-8877748838519959376
/data/data/####/-8882839899078944900
/data/data/####/-9006376523811804064
/data/data/####/-952251455018835225
/data/data/####/.imprint
/data/data/####/05389e90b03b9299123935c43c928d54.0.tmp
/data/data/####/05389e90b03b9299123935c43c928d54.1
/data/data/####/05389e90b03b9299123935c43c928d54.1.tmp
/data/data/####/0556258365f2ca27_0
/data/data/####/1002
/data/data/####/1003791146754054467
/data/data/####/1004
/data/data/####/1726809046011110284
/data/data/####/176400957899233657
/data/data/####/1989657326684718685
/data/data/####/1ca5df7916234a74_0
/data/data/####/1cba9979b2d36864387f3d4fe1447e74.0
/data/data/####/1cba9979b2d36864387f3d4fe1447e74.1
/data/data/####/2059538034628281017
/data/data/####/2109561654975774341
/data/data/####/2127753616029418468
/data/data/####/22675730969876703
/data/data/####/2311110364336563354
/data/data/####/2613034610621365560
/data/data/####/2825871115815874541
/data/data/####/2899414546027012798
/data/data/####/29e25c8a028d792a9037f72a8d011cfd.0.tmp
/data/data/####/29e25c8a028d792a9037f72a8d011cfd.1
/data/data/####/3045523881701790778
/data/data/####/325dd77e835cecff2003329b751b13bd.0.tmp
/data/data/####/325dd77e835cecff2003329b751b13bd.1
/data/data/####/325dd77e835cecff2003329b751b13bd.1.tmp
/data/data/####/3364926852705066041
/data/data/####/3418887685467444975
/data/data/####/34df98c88f18d4d5_0
/data/data/####/35f9b9432c52e0a0a2d41af56a14a733.0
/data/data/####/35f9b9432c52e0a0a2d41af56a14a733.0.tmp
/data/data/####/35f9b9432c52e0a0a2d41af56a14a733.1
/data/data/####/3603608924545035124
/data/data/####/3742599084346579240
/data/data/####/3786895347329580716
/data/data/####/3941938169960817622
/data/data/####/3cca0aaaf8c244e3936178a6c99f1a7f.0.tmp
/data/data/####/3cca0aaaf8c244e3936178a6c99f1a7f.1
/data/data/####/3cca0aaaf8c244e3936178a6c99f1a7f.1.tmp
/data/data/####/3e2cedf644511bfaeb925ec47dfc850f.0.tmp
/data/data/####/3e2cedf644511bfaeb925ec47dfc850f.1
/data/data/####/3e2cedf644511bfaeb925ec47dfc850f.1.tmp
/data/data/####/4124031839102193201
/data/data/####/421563956e4461b88c4860f73d5c4795.0.tmp
/data/data/####/421563956e4461b88c4860f73d5c4795.1
/data/data/####/421563956e4461b88c4860f73d5c4795.1.tmp
/data/data/####/4351071184899779741
/data/data/####/4641279066204522231
/data/data/####/4648147226416150418
/data/data/####/496282649169392034
/data/data/####/4963621418090626305
/data/data/####/4af7e7108671beab_0 (deleted)
/data/data/####/5095667175309288282
/data/data/####/518fd22e8cc4fa15e023507e5a779d5a.0
/data/data/####/518fd22e8cc4fa15e023507e5a779d5a.1
/data/data/####/540253d8a1da72b7_0
/data/data/####/56a5c25b6c7f92fb587aa5a1b7fda0c4.0.tmp
/data/data/####/56a5c25b6c7f92fb587aa5a1b7fda0c4.1
/data/data/####/58095b0c6485c221_0
/data/data/####/58095b0c6485c221_1
/data/data/####/5898925938765017802
/data/data/####/6092042815823847451
/data/data/####/60d58df2fd0bc8be21ce8b4ec7cb5551.0.tmp
/data/data/####/60d58df2fd0bc8be21ce8b4ec7cb5551.1
/data/data/####/60d58df2fd0bc8be21ce8b4ec7cb5551.1.tmp
/data/data/####/6213390636667818500
/data/data/####/63cde9655e58a6bf5cd3fa408cabc928.0.tmp
/data/data/####/63cde9655e58a6bf5cd3fa408cabc928.1
/data/data/####/63cde9655e58a6bf5cd3fa408cabc928.1.tmp
/data/data/####/663386348935160383
/data/data/####/67747649981461236
/data/data/####/6796928213870279378
/data/data/####/6b2535890159595521bb1a76a8fdaa0d.0
/data/data/####/6b2535890159595521bb1a76a8fdaa0d.1
/data/data/####/6c87898cf0655e649c286a5de353e8a3.0
/data/data/####/6c87898cf0655e649c286a5de353e8a3.1
/data/data/####/6eb68ea955d68f02_0
/data/data/####/70298c6eb6032706_0
/data/data/####/70298c6eb6032706_1
/data/data/####/7127538727636090419
/data/data/####/7464087012018890470
/data/data/####/7617410326505878471
/data/data/####/7758766030555865856
/data/data/####/7833536051975789934
/data/data/####/79f56bfdbab87eae36d3bda940ffb3e2.0.tmp
/data/data/####/79f56bfdbab87eae36d3bda940ffb3e2.1
/data/data/####/7c31bc24e91f48da9200ad1a250acba6.0.tmp
/data/data/####/7c31bc24e91f48da9200ad1a250acba6.1.tmp
/data/data/####/7d547b80782fce05_0
/data/data/####/81b02692d6e9c790a85f08f4e48be0ce.0
/data/data/####/81b02692d6e9c790a85f08f4e48be0ce.1
/data/data/####/8345377518449511059
/data/data/####/8477834817395690825
/data/data/####/856943213885603438
/data/data/####/88487793246609439
/data/data/####/8997021685772166254
/data/data/####/8acf7512ea710e6e_0
/data/data/####/8e47c0575e134826ab32dccb3c996008.0
/data/data/####/8e47c0575e134826ab32dccb3c996008.1
/data/data/####/9004618549724580216
/data/data/####/9013130122430068679
/data/data/####/ACCS_BINDumeng;5912cd5f1061d264c8000455.xml
/data/data/####/ACCS_SDK.xml
/data/data/####/ACCS_SDK_CHANNEL.xml
/data/data/####/AGOO_BIND.xml
/data/data/####/Agoo_AppStore.xml
/data/data/####/Alvin2.xml
/data/data/####/BOOT_AD_CONFIG.xml
/data/data/####/CONFIG.xml
/data/data/####/CONFIG.xml.bak
/data/data/####/CUSTOM_CONFIG.xml
/data/data/####/CUSTOM_CONFIG.xml.bak
/data/data/####/ContextData.xml
/data/data/####/Cookies-journal
/data/data/####/DEVICE_INFO.xml
/data/data/####/DEVICE_INFO.xml.bak
/data/data/####/DOWNLOAD_END_AD.xml
/data/data/####/DRAINAGE.xml
/data/data/####/END_AD.xml
/data/data/####/END_AD.xml.bak
/data/data/####/END_AD_BOOT.xml
/data/data/####/EVENT_CONFIG.xml
/data/data/####/LIVE_CONFIG.xml
/data/data/####/LIVE_CONFIG.xml.bak
/data/data/####/MessageStore.db-journal
/data/data/####/MsgLogStore.db-journal
/data/data/####/PERMANENT_DATA.xml
/data/data/####/PHOTO_INFO.xml
/data/data/####/PLAY.xml
/data/data/####/PLAY_CONFIG.xml
/data/data/####/PLAY_CONFIG.xml.bak
/data/data/####/STREAM_CONFIG_V2.xml
/data/data/####/SWITCH_CONFIG.xml
/data/data/####/SYSTEM_INFO.xml
/data/data/####/TEA.xml
/data/data/####/TEA.xml.bak
/data/data/####/UM_PROBE_DATA.xml
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.0.tmp
/data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.1
/data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.1.tmp
/data/data/####/ac097ee01ec28da3786f911e494ec4d6.0.tmp
/data/data/####/ac097ee01ec28da3786f911e494ec4d6.1
/data/data/####/ac097ee01ec28da3786f911e494ec4d6.1.tmp
/data/data/####/accs.db-journal
/data/data/####/ad91cc5c65d9cc05_0
/data/data/####/ad_templates_1001.xml
/data/data/####/ad_templates_1001.xml.bak
/data/data/####/ad_u_1001.xml
/data/data/####/agoo.pid
/data/data/####/agreement.xml
/data/data/####/agreement.xml.bak
/data/data/####/api.prefs.xml
/data/data/####/api.prefs.xml.bak
/data/data/####/applog_stats.xml
/data/data/####/b4427419e7945751_0
/data/data/####/b4fd029fb389fec7311445366f1fcd9e.0.tmp
/data/data/####/b4fd029fb389fec7311445366f1fcd9e.1
/data/data/####/bd_tea_agent.db-journal
/data/data/####/bugly_db_-journal
/data/data/####/c0968fa531339178b2ed07e203745184.0.tmp
/data/data/####/c0968fa531339178b2ed07e203745184.1
/data/data/####/c0968fa531339178b2ed07e203745184.1.tmp
/data/data/####/c0c421fa5c1fa0348142cac69090b622.0.tmp
/data/data/####/c0c421fa5c1fa0348142cac69090b622.1
/data/data/####/c0c421fa5c1fa0348142cac69090b622.1.tmp
/data/data/####/c44ce545231f3b204f8bc8acab635cda.0.tmp
/data/data/####/c44ce545231f3b204f8bc8acab635cda.1
/data/data/####/c44ce545231f3b204f8bc8acab635cda.1.tmp
/data/data/####/c53450b5a4d12fe8_0
/data/data/####/c95e8fe89978e95a87f3dc7734ccf9d8
/data/data/####/cache.json
/data/data/####/cctv1.0
/data/data/####/cd49457f232026f9_0
/data/data/####/channels.data
/data/data/####/com.dianshijia.newlive.BETA_VALUES.xml
/data/data/####/com.dianshijia.newlive_preferences.xml
/data/data/####/conf.dat
/data/data/####/crashrecord.xml
/data/data/####/cuuid.xml
/data/data/####/cuuid.xml.bak
/data/data/####/d2c665f0216f89bd2e61364fb2d31a47.0.tmp
/data/data/####/d2c665f0216f89bd2e61364fb2d31a47.1
/data/data/####/d2c665f0216f89bd2e61364fb2d31a47.1.tmp
/data/data/####/dW1weF9pbnRlcm5hbF8xNjgwOTMzNDE1MTQ3;
/data/data/####/dW1weF9pbnRlcm5hbF8xNjgwOTMzNDExNzEw;
/data/data/####/dW1weF9wdXNoX2xhdW5jaF8xNjgwOTMzNDQ4Mzc0;
/data/data/####/device_identification_info.xml
/data/data/####/device_identification_info.xml.bak
/data/data/####/device_preference_1001.xml
/data/data/####/epg-cctv1-20230408.json
/data/data/####/epg-cctv2-20230408.json
/data/data/####/epg-cctv3-20230408.json
/data/data/####/epg-cctv4-20230408.json
/data/data/####/epg-cctv5-20230408.json
/data/data/####/epg-cctv6-20230408.json
/data/data/####/epg-cctv7-20230408.json
/data/data/####/epg-cctv8-20230408.json
/data/data/####/epg-zj-yanxi-zc-20230408.json
/data/data/####/epg.dex
/data/data/####/epg.dex.flock (deleted)
/data/data/####/epg.tmp
/data/data/####/event_db
/data/data/####/exchangeIdentity.json
/data/data/####/exid.dat
/data/data/####/f281a751299edbf070d3b8d580bee1d4.0.tmp
/data/data/####/f281a751299edbf070d3b8d580bee1d4.1
/data/data/####/fb6af786f26a2595b3be0ff754fb377a.0.tmp
/data/data/####/fb6af786f26a2595b3be0ff754fb377a.1.tmp
/data/data/####/header_custom.xml
/data/data/####/httpdns_config_cache.xml
/data/data/####/i==1.2.0&&3.6.0_1680933411741_envelope.log
/data/data/####/index
/data/data/####/info.xml
/data/data/####/inject_track.xml
/data/data/####/journal
/data/data/####/kuyun.apk.tmp
/data/data/####/kuyun.dex
/data/data/####/kuyun.dex.flock (deleted)
/data/data/####/kuyun_sdk.xml
/data/data/####/last_sp_session.xml
/data/data/####/launch.log
/data/data/####/launcher_ad.data
/data/data/####/libsce.so.temp
/data/data/####/libsce.so.upgrade
/data/data/####/libztvb321.2.2.2.so
/data/data/####/local_crash_lock
/data/data/####/log_manager.xml
/data/data/####/material_break_point_info.xml
/data/data/####/message_accs_db
/data/data/####/message_accs_db-journal
/data/data/####/metrics_guid
/data/data/####/native_record_lock
/data/data/####/native_record_lock (deleted)
/data/data/####/net_node.xml
/data/data/####/okhttp_prefs.xml
/data/data/####/package_infos.xml
/data/data/####/pid.txt
/data/data/####/player_strategy.xml
/data/data/####/player_strategy.xml.bak
/data/data/####/plugin.dex
/data/data/####/plugin.dex.flock (deleted)
/data/data/####/plugin.tmp
/data/data/####/plugin_break_point_info.xml
/data/data/####/plugin_config.xml
/data/data/####/pp.dex
/data/data/####/pp.dex.flock (deleted)
/data/data/####/pp.jar
/data/data/####/pp.tmp
/data/data/####/privacy_agreement
/data/data/####/proc_auxv
/data/data/####/promote.dex
/data/data/####/promote.dex.flock (deleted)
/data/data/####/promote.jar
/data/data/####/risk_infos.xml
/data/data/####/risk_infos.xml.bak
/data/data/####/risk_user_info.xml
/data/data/####/safe_mode_config.xml
/data/data/####/safe_mode_config.xml.bak
/data/data/####/sce_config.xml
/data/data/####/sce_config.xml.bak
/data/data/####/security_info
/data/data/####/session_cache
/data/data/####/skin_cache_name.xml
/data/data/####/snssdk_openudid.xml
/data/data/####/snssdk_openudid.xml.bak
/data/data/####/sp_key_stream.xml
/data/data/####/spider_prefs.xml
/data/data/####/t==8.1.3&&3.6.0_1680933415938_envelope.log
/data/data/####/the-real-index
/data/data/####/tv_name_id_map.xml
/data/data/####/tvcore.tmp
/data/data/####/tvlive2.db-journal
/data/data/####/ua.db
/data/data/####/ua.db-journal
/data/data/####/um_pri.xml
/data/data/####/umeng_common_config.xml
/data/data/####/umeng_common_location.xml
/data/data/####/umeng_general_config.xml
/data/data/####/umeng_it.cache
/data/data/####/umeng_message_state.xml
/data/data/####/unknown.xml
/data/data/####/user.xml
/data/data/####/user_agreement
/data/data/####/x_google_ad_s_id_123
/data/media/####/Alvin2.xml
/data/media/####/ContextData.xml
/data/media/####/ddev.data
/data/media/####/deviceToken
/data/media/####/device_parameters.dat
/data/media/####/dvc
/data/media/####/flag.data
/data/media/####/uuid.data
/data/misc/####/primary.prof

Miscellaneous:

Executes the following shell scripts:

/system/bin/cat /proc/cpuinfo
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
/system/bin/sh -c getprop
cat /sys/class/net/wlan0/address
chmod 777 /data/user/0/<Package>/files/.honor0
getprop
getprop ro.build.version.emui
getprop ro.letv.release.version
getprop ro.vivo.os.build.display.id
ls /
ls /sys/class/thermal
sh

Loads the following dynamic libraries:

libBugly
libEncryptorP
libc++_shared
libmmkv
libsce
libtnet-3.1.14
libtvcore
libztvb321.2.2.2

Uses the following algorithms to encrypt data:

AES
AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-GCM-NoPadding
DES
RSA-ECB-PKCS1Padding

Uses the following algorithms to decrypt data:

AES
AES-ECB-PKCS5Padding
AES-GCM-NoPadding
DES

Accesses the ITelephony private interface.

Gets information about location.

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Gets information about installed apps.

Gets information about running apps.

Adds tasks to the system scheduler.

Displays its own windows over windows of other apps.

Requests the system alert window permission.

Технологии

Термины

Обучение и просвещение

Мифы

Technical information

Рекомендации по лечению

Демо бесплатно на 14 дней