Android.Siggen.Susp.449

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Siggen.Susp.63

Network activity:

Connects to:

UDP(DNS) 8####.8.4.4:53
TCP(HTTP/1.1) off####.dianshi####.com:80
TCP(HTTP/1.1) d####.100u####.com.####.net:80
TCP(HTTP/1.1) p####.api.math####.cn:80
TCP(HTTP/1.1) cdn.cha####.dianshi####.com:80
TCP(HTTP/1.1) 1####.28.228.62:14305
TCP(HTTP/1.1) c####.dianshi####.com.####.com:80
TCP(HTTP/1.1) g3.l####.com:80
TCP(HTTP/1.1) 1####.161.124.146:12340
TCP(HTTP/1.1) hub.dianshi####.com:80
TCP(HTTP/1.1) card####.k####.com.####.com:80
TCP(HTTP/1.1) dd2.wuko####.com:80
TCP(HTTP/1.1) 2####.107.1.1:80
TCP(HTTP/1.1) api.mydians####.com:80
TCP(HTTP/1.1) 39.1####.143.44:8001
TCP(HTTP/1.1) adash####.man.aliy####.com:80
TCP(HTTP/1.1) cdn.dianshi####.com:80
TCP(HTTP/1.1) co####.ssp.math####.cn:80
TCP(HTTP/1.1) api.dianshi####.com:80
TCP(HTTP/1.1) tra####.dians####.com:80
TCP(HTTP/1.1) newap####.math####.cn:80
TCP(HTTP/1.1) detec####.math####.cn:80
TCP(HTTP/1.1) and####.b####.qq.com:80
TCP(HTTP/1.1) l####.b####.com:80
TCP(HTTP/1.1) wy.vod.dians####.####.com:80
TCP(HTTP/1.1) ad-temp####.k####.com:80
TCP(TLS/1.0) plb####.u####.com:443
TCP(TLS/1.0) ad-temp####.k####.com:443
TCP(TLS/1.0) card####.k####.com.####.com:443
TCP(TLS/1.0) k####.volceap####.com.####.com:443
TCP(TLS/1.0) pla####.google####.com:443
TCP(TLS/1.0) to####.volceap####.com.####.com:443
TCP(TLS/1.0) u####.u####.com:443
TCP(TLS/1.0) 2####.107.1.97:443
TCP(TLS/1.0) and####.google####.com:443
TCP(TLS/1.0) and####.a####.go####.com:443
TCP(TLS/1.0) 64.2####.162.94:443
TCP(TLS/1.0) rr13---####.g####.com:443
TCP(TLS/1.0) psd.ja####.com:8361
TCP(TLS/1.2) 64.2####.162.94:443
TCP(TLS/1.2) and####.google####.com:443
UDP 39.1####.62.19:3478
UDP as2.binst####.live:13
UDP 1####.100.243.133:12981
UDP tm1.binst####.live:13
UDP 2####.255.255.250:1900
UDP tm3.binst####.live:13
TCP 1####.97.68.166:12351
UDP tm4.binst####.live:13
UDP as2.binst####.live:3923
UDP hs9.hangzho####.com:16000
UDP tm1.binst####.live:3923
UDP tm3.binst####.live:3923
UDP 39.1####.134.87:3479
TCP zb-cent####.m.ta####.com:443
UDP tm4.binst####.live:3923
TCP openj####.m.ta####.com:80

DNS requests:

a####.man.aliy####.com
ad-temp####.k####.com
amdc####.m.ta####.com
and####.a####.go####.com
and####.b####.qq.com
and####.google####.com
api.dianshi####.com
api.mydians####.com
as1.binst####.live
as2.binst####.live
as3.binst####.live
as4.binst####.live
ask.log.k####.com
c####.dianshi####.com
card####.k####.com
cdn.cha####.dianshi####.com
cdn.dianshi####.com
co####
co####.8.8.####.8
co####.ssp.math####.cn
d####.100u####.com
dd2.wuko####.com
detec####.math####.cn
g3.l####.com
gmscomp####.google####.com
hs9.hangzho####.com
hub.dianshi####.com
i####.k####.com
k####.volceap####.com
l####.b####.com
newap####.math####.cn
off####.dianshi####.com
p####.api.math####.cn
p####.dianshi####.com
pla####.google####.com
plb####.u####.com
psd.ja####.com
rr13---####.g####.com
t####.k####.com
tm1.binst####.live
tm2.binst####.live
tm3.binst####.live
tm4.binst####.live
to####.volceap####.com
tra####.dians####.com
u####.u####.com
umen####.m.ta####.com
umengj####.m.ta####.com
www.google####.com
wy.vod.dians####.com

HTTP GET requests:

ad-temp####.k####.com/check.do?pid=####&thread_id=####&copyright_id=####...
ad-temp####.k####.com:443/api/tvsdk/config?ltu=####&bssid=####&sign=####...
ad-temp####.k####.com:443/api/tvsdk/prepare?sign=####&request_id=####&ma...
ad-temp####.k####.com:443/api/tvsdk/update?sign=####&mac=####&app_id=###...
api.dianshi####.com/api/5cced51e11f51c6b/GWbxGoRACFqH?info=####
api.dianshi####.com/api/channel/v1/channelGroup/template
api.dianshi####.com/api/coin/info
api.dianshi####.com/api/config/deviceCompat?brand=####&model=####&osver=...
api.dianshi####.com/api/config/v1/common/conf
api.dianshi####.com/api/pan/v1/config/promotional
api.dianshi####.com/api/pan/v3/ufile/list?type=####&page=####&size=####&...
api.dianshi####.com/api/programs/logout/bg
api.dianshi####.com/api/redpack/info
api.dianshi####.com/api/task/get?
api.dianshi####.com/api/tvSkin?menunum=####
api.dianshi####.com/api/user/familyAccount/user/getStatus
api.dianshi####.com/api/v1/cloudConfig?ts=####
api.dianshi####.com/api/v1/play/control
api.dianshi####.com/api/v1/user/favorite/get
api.dianshi####.com/api/v2/banner/menu/config
api.dianshi####.com/api/v24/apiConfig
api.dianshi####.com/ipInfo
api.dianshi####.com/time?ts=####
api.mydians####.com/api/programs/exclusive/unlock
api.mydians####.com/api/push/token?channel=####&token=####&type=####
api.mydians####.com/api/user/v1/hlc/show
api.mydians####.com/api/v1/plugin?module=####&verCode=####&sdk=####&aver...
api.mydians####.com/api/v1/shin?injectConditions=####
api.mydians####.com/api/v1/tv/hkCategory/list
api.mydians####.com/api/v1/tv/powerBoot/image
api.mydians####.com/ipInfo
c####.dianshi####.com.####.com/static/plugin/01f41a829659f80e9566717f8ee...
c####.dianshi####.com.####.com/static/plugin/343f88522e562dc57be54cb8f01...
c####.dianshi####.com.####.com/static/plugin/5f9f59f64fdf2e69791ecf2b8fd...
c####.dianshi####.com.####.com/static/plugin/7b2267f9f4f7d9e7c3a360950e3...
c####.dianshi####.com.####.com/static/plugin/923ac7fb0f83cde79ad5fd559b9...
c####.dianshi####.com.####.com/static/plugin/b4b0bca986c1cbeb97b22779c2d...
card####.k####.com.####.com/pro/ad/sdk/jar/2020/11/25/10/46/37272382_160...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-140312...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-148402...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-151663...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-183007...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-202767...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-205390...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-227829...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-236052...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-256750...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-277945...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-278250...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-313071...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-345083...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-356744...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-359755...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-422576...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-425249...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-448347...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-451317...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-454985...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-464934...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-471156...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-480752...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-489720...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-490507...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-533575...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-571809...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-610312...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-617474...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-632091...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-651542...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-713990...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-723553...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-730361...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-758226...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-780034...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-782431...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-785732...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-851301...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-884637...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-887774...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-888283...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-952251...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/1430392...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/1726809...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/1764009...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/1989657...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/2059538...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/2075142...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/2109561...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/2127753...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/2899414...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/3045523...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/3742599...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/3941938...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/4124031...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/4351071...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/4641279...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/4664043...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/4962826...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/4963621...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/5095667...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/5316456...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/5696204...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/5898925...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/6213390...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/6633863...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/6796928...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/7127538...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/7464087...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/7758766...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/7833536...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/8345377...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/8447794...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/8477834...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/8569432...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/8848779...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/8997021...
card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/9004618...
card####.k####.com.####.com:443/pro/protocol/2021/7/27/10/17/29/16273522...
card####.k####.com.####.com:443/pro/protocol/2022/11/7/11/39/48/16677923...
cdn.cha####.dianshi####.com/api/channel/v1/template/detail?templateKey=#...
cdn.dianshi####.com/assets/mobile/random/randomconfig.json?ts=####
cdn.dianshi####.com/assets/mobile/temp/ts_cf.json?ts=####
cdn.dianshi####.com/config/channel/voice_mapping.json?t=####
co####.ssp.math####.cn/api/v2/SDKCommonConfig?channelCode=####&version=#...
co####.ssp.math####.cn/api/v3/sdkTestConfig?send_ts=####
dd2.wuko####.com/tvclient/sdk?func=####&package=####
detec####.math####.cn/favicon.ico
detec####.math####.cn/images/sdk/detective.jpeg
detec####.math####.cn/js/finger20220224.js
detec####.math####.cn/sdk/checkCookie/httpClient?uniqueId=####&androidVe...
detec####.math####.cn/sdk/checkCookie/webview?uniqueId=####&androidVersi...
detec####.math####.cn/sdk/checkRedirect?uniqueId=4ae26d8e7fbf9c1b9396d4d...
detec####.math####.cn/sdk/filterHeader/httpClient?uniqueId=####&androidV...
detec####.math####.cn/sdk/filterHeader/webview?uniqueId=####&androidVers...
detec####.math####.cn/sdk/openWebview?uniqueId=4ae26d8e7fbf9c1b9396d4d4e...
detec####.math####.cn/sdk/redirectHttpClientSecondPage?uniqueId=####&and...
detec####.math####.cn/sdk/redirectWebviewSecondPage?uniqueId=####&androi...
detec####.math####.cn/sdk/setCookie/httpClient?uniqueId=####&androidVers...
detec####.math####.cn/sdk/setCookie/webview?uniqueId=####&androidVersion...
detec####.math####.cn/sdk/validateCookie/httpClient?uniqueId=####&androi...
detec####.math####.cn/sdk/validateCookie/webview?uniqueId=####&androidVe...
g3.l####.com/r?format=####
k####.volceap####.com.####.com:443/service/2/app_alert_check/?os_api=###...
l####.b####.com/jquery/2.1.4/jquery.min.js
off####.dianshi####.com/api/82210fa1213139c6/gYvYWuhVHLlz?info=jx####
off####.dianshi####.com/api/f6d02ae2031b1d3f/iYvkpRiKdfdW?info=u7####
off####.dianshi####.com/api/v4/offProgram
p####.api.math####.cn/ip?send_ts=####
tra####.dians####.com/config?appid=####&uuid=####&cver=####
wy.vod.dians####.####.com/config/hoteProgramList.json

HTTP POST requests:

ad-temp####.k####.com/template/check/0/00:00:00:00:00:06/0/1001
adash####.man.aliy####.com/man/api?ak=####&s=####
and####.b####.qq.com/rqd/async?aid=####
api.dianshi####.com/api/config/v1/pay/document
api.dianshi####.com/api/pay/documents
api.dianshi####.com/api/v2/device/start/info
api.mydians####.com/api/v1/user_risk_device/getUserRiskUid
d####.100u####.com.####.net/reportcomp
hub.dianshi####.com/u
k####.volceap####.com.####.com:443/service/2/device_register/?os_api=###...
newap####.math####.cn/titan/monitor/device_info
off####.dianshi####.com/api/v2/device/info?duid=####&c=####&
plb####.u####.com:443/umpx_internal
psd.ja####.com:8361/config?&st=####
to####.volceap####.com.####.com:443/service/2/app_log/?device_platform=#...
to####.volceap####.com.####.com:443/service/2/log_settings/?device_platf...
u####.u####.com:443/unify_logs

File system changes:

Creates the following files:

/data/data/####/-1403120548448229713
/data/data/####/-1484021606445496065
/data/data/####/-151663369471870715
/data/data/####/-1830074305893649652
/data/data/####/-2027670920120851445
/data/data/####/-2053909911382187111
/data/data/####/-2278291990166134047
/data/data/####/-2360527842604846113
/data/data/####/-2567506579635691599
/data/data/####/-2779458653746106773
/data/data/####/-2782509233210736291
/data/data/####/-3130717048806538194
/data/data/####/-3450835224303568293
/data/data/####/-3567442377955726570
/data/data/####/-359755718962771323
/data/data/####/-4225762185600194776
/data/data/####/-4252495578215449663
/data/data/####/-4483478159438962104
/data/data/####/-4513172892946266962
/data/data/####/-4549854609998114390
/data/data/####/-4649340208529423183
/data/data/####/-4711563819388476794
/data/data/####/-4807529098079340755
/data/data/####/-489720828702396827
/data/data/####/-4905070542848589656
/data/data/####/-5335757940728776334
/data/data/####/-5718096519348345315
/data/data/####/-6103123208112159877
/data/data/####/-6174742324800409447
/data/data/####/-6320918871514750160
/data/data/####/-6515428158716504371
/data/data/####/-7139907709653249367
/data/data/####/-7235537338366940681
/data/data/####/-7303615889051445811
/data/data/####/-7582264611536754158
/data/data/####/-7800341229994448166
/data/data/####/-7824319792825378401
/data/data/####/-7857323045930740017
/data/data/####/-8513013884315180474
/data/data/####/-8846377557548208030
/data/data/####/-8877748838519959376
/data/data/####/-8882839899078944900
/data/data/####/-952251455018835225
/data/data/####/.imprint
/data/data/####/1002
/data/data/####/1004
/data/data/####/1430392246785913002
/data/data/####/14e5b06a2221057b8b675749037230bb.0.tmp
/data/data/####/14e5b06a2221057b8b675749037230bb.1
/data/data/####/14e5b06a2221057b8b675749037230bb.1.tmp
/data/data/####/168436@bd_tea_agent.db-journal
/data/data/####/1726809046011110284
/data/data/####/176400957899233657
/data/data/####/1989657326684718685
/data/data/####/1ca5df7916234a74_0
/data/data/####/2059538034628281017
/data/data/####/2075142082425198475
/data/data/####/2109561654975774341
/data/data/####/2127753616029418468
/data/data/####/2899414546027012798
/data/data/####/28a0dee0f6d836c41541374c85b867dd.0.tmp
/data/data/####/28a0dee0f6d836c41541374c85b867dd.1.tmp
/data/data/####/3045523881701790778
/data/data/####/34df98c88f18d4d5_0
/data/data/####/34f29242548533c5e549a133578b0b4a.0.tmp
/data/data/####/34f29242548533c5e549a133578b0b4a.1
/data/data/####/34f29242548533c5e549a133578b0b4a.1.tmp
/data/data/####/3742599084346579240
/data/data/####/3854218364399ac1c1303c346beb6f46.0.tmp
/data/data/####/3854218364399ac1c1303c346beb6f46.1
/data/data/####/3854218364399ac1c1303c346beb6f46.1.tmp
/data/data/####/3941938169960817622
/data/data/####/4124031839102193201
/data/data/####/4351071184899779741
/data/data/####/4641279066204522231
/data/data/####/4664043220440190170
/data/data/####/496282649169392034
/data/data/####/4963621418090626305
/data/data/####/4adc6fc6d3390c5878ae766bd69949b9.0.tmp
/data/data/####/4adc6fc6d3390c5878ae766bd69949b9.1.tmp
/data/data/####/5095667175309288282
/data/data/####/511a91d6a422c68db04d252d67d293aa.0.tmp
/data/data/####/511a91d6a422c68db04d252d67d293aa.1
/data/data/####/511a91d6a422c68db04d252d67d293aa.1.tmp
/data/data/####/5316456293227244082
/data/data/####/540253d8a1da72b7_0
/data/data/####/5696204927416798673
/data/data/####/58095b0c6485c221_0
/data/data/####/58095b0c6485c221_1
/data/data/####/5898925938765017802
/data/data/####/601fed44b8cc97f903b2146b86d31290.0.tmp
/data/data/####/601fed44b8cc97f903b2146b86d31290.1
/data/data/####/601fed44b8cc97f903b2146b86d31290.1.tmp
/data/data/####/6213390636667818500
/data/data/####/63cde9655e58a6bf5cd3fa408cabc928.0.tmp
/data/data/####/63cde9655e58a6bf5cd3fa408cabc928.1
/data/data/####/63cde9655e58a6bf5cd3fa408cabc928.1.tmp
/data/data/####/663386348935160383
/data/data/####/6796928213870279378
/data/data/####/6eb68ea955d68f02_0
/data/data/####/70298c6eb6032706_0
/data/data/####/70298c6eb6032706_1
/data/data/####/7127538727636090419
/data/data/####/7464087012018890470
/data/data/####/7758766030555865856
/data/data/####/7833536051975789934
/data/data/####/7d547b80782fce05_0
/data/data/####/80523ba78a64d04aac756f25e9d5f750.0.tmp
/data/data/####/80523ba78a64d04aac756f25e9d5f750.1
/data/data/####/80523ba78a64d04aac756f25e9d5f750.1.tmp
/data/data/####/81b02692d6e9c790a85f08f4e48be0ce.0.tmp
/data/data/####/81b02692d6e9c790a85f08f4e48be0ce.1
/data/data/####/81b02692d6e9c790a85f08f4e48be0ce.1.tmp
/data/data/####/8345377518449511059
/data/data/####/83eae8ca17918a7bc694c9008a4df215.0.tmp
/data/data/####/8447794008194188610
/data/data/####/8477834817395690825
/data/data/####/856943213885603438
/data/data/####/88487793246609439
/data/data/####/8883a79baa010ecc599a4fda824745b4.0
/data/data/####/8883a79baa010ecc599a4fda824745b4.0.tmp
/data/data/####/8883a79baa010ecc599a4fda824745b4.1
/data/data/####/8997021685772166254
/data/data/####/9004618549724580216
/data/data/####/92926eacc676308d0819e18dd10ba7bc.0.tmp
/data/data/####/92926eacc676308d0819e18dd10ba7bc.1
/data/data/####/92926eacc676308d0819e18dd10ba7bc.1.tmp
/data/data/####/ACCS_BINDumeng;5912cd5f1061d264c8000455.xml
/data/data/####/ACCS_SDK.xml
/data/data/####/ACCS_SDK.xml.bak
/data/data/####/ACCS_SDK_CHANNEL.xml
/data/data/####/ACCS_SDK_CHANNEL.xml.bak
/data/data/####/AGOO_BIND.xml
/data/data/####/Agoo_AppStore.xml
/data/data/####/Alvin2.xml
/data/data/####/CUSTOM_CONFIG.xml
/data/data/####/ContextData.xml
/data/data/####/Cookies-journal
/data/data/####/DEVICE_INFO.xml
/data/data/####/DEVICE_INFO.xml.bak
/data/data/####/DOWNLOAD_END_AD.xml
/data/data/####/END_AD.xml
/data/data/####/END_AD.xml.bak
/data/data/####/END_AD_BOOT.xml
/data/data/####/EVENT_CONFIG.xml
/data/data/####/IpConfig.xml
/data/data/####/KEY_SP_NAME_RISK.xml
/data/data/####/LIVE_CONFIG.xml
/data/data/####/MessageStore.db-journal
/data/data/####/MsgLogStore.db-journal
/data/data/####/OFFLINE.xml
/data/data/####/PERMANENT_DATA.xml
/data/data/####/PHOTO_INFO.xml
/data/data/####/PLAY_CONFIG.xml
/data/data/####/PLAY_CONFIG.xml.bak
/data/data/####/SWITCH_CONFIG.xml
/data/data/####/SWITCH_CONFIG.xml.bak
/data/data/####/SYSTEM_INFO.xml
/data/data/####/UM_PROBE_DATA.xml
/data/data/####/USER_INFO.xml
/data/data/####/USER_INFO.xml.bak
/data/data/####/USER_INFO.xml.bak (deleted)
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/_global_cache.xml
/data/data/####/_global_cache.xml.bak
/data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.0.tmp
/data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.1
/data/data/####/accs.db-journal
/data/data/####/ad_templates_1001.xml
/data/data/####/ad_u_1001.xml
/data/data/####/agoo.pid
/data/data/####/agreement.xml
/data/data/####/agreement.xml.bak
/data/data/####/api.prefs.xml
/data/data/####/api.prefs.xml.bak
/data/data/####/applog_stats.xml
/data/data/####/b4427419e7945751_0
/data/data/####/bdtracker_dr_migrate_detector.xml
/data/data/####/bugly_db_-journal
/data/data/####/c0968fa531339178b2ed07e203745184.0.tmp
/data/data/####/c0968fa531339178b2ed07e203745184.1
/data/data/####/c0968fa531339178b2ed07e203745184.1.tmp
/data/data/####/c51cc440027266cf54f9a5bb6ed42dfa.0.tmp
/data/data/####/c51cc440027266cf54f9a5bb6ed42dfa.1
/data/data/####/c6951e9702af6b6362d150ce081325e3.0.tmp
/data/data/####/c6951e9702af6b6362d150ce081325e3.1
/data/data/####/c95e8fe89978e95a87f3dc7734ccf9d8
/data/data/####/cache.json
/data/data/####/ce8bedf5c4ded463b49d0d2b603ebe41.0.tmp
/data/data/####/ce8bedf5c4ded463b49d0d2b603ebe41.1
/data/data/####/ce8bedf5c4ded463b49d0d2b603ebe41.1.tmp
/data/data/####/com.dianshijia.newlive.BETA_VALUES.xml
/data/data/####/com.dianshijia.newlive_preferences.xml
/data/data/####/com.dianshijia.newlive_preferences.xml.bak
/data/data/####/conf.dat
/data/data/####/crashrecord.xml
/data/data/####/cuuid.xml
/data/data/####/d71b93d0dbf5c293ee626e7ed28ae9a1.0.tmp
/data/data/####/d71b93d0dbf5c293ee626e7ed28ae9a1.1
/data/data/####/d71b93d0dbf5c293ee626e7ed28ae9a1.1.tmp
/data/data/####/dW1weF9pbnRlcm5hbF8xNjgxOTA4ODc0NDAy;
/data/data/####/dW1weF9pbnRlcm5hbF8xNjgxOTA4ODc5MzU0;
/data/data/####/device_identification_info.xml
/data/data/####/device_preference_1001.xml
/data/data/####/download_splash.xml
/data/data/####/epg.dex
/data/data/####/epg.dex.flock (deleted)
/data/data/####/epg.jar
/data/data/####/exchangeIdentity.json
/data/data/####/exid.dat
/data/data/####/f7585bbc46545b154ff112f4ff2da3eb.0.tmp
/data/data/####/f7585bbc46545b154ff112f4ff2da3eb.1.tmp
/data/data/####/faa09cfb3efe120858e9d9154f83b3df.0.tmp
/data/data/####/faa09cfb3efe120858e9d9154f83b3df.1
/data/data/####/faa09cfb3efe120858e9d9154f83b3df.1.tmp
/data/data/####/fb6af786f26a2595b3be0ff754fb377a.0.tmp
/data/data/####/fb6af786f26a2595b3be0ff754fb377a.1
/data/data/####/fb6af786f26a2595b3be0ff754fb377a.1.tmp
/data/data/####/header_custom.xml
/data/data/####/header_custom.xml.bak
/data/data/####/httpdns_config_cache.xml
/data/data/####/httpdns_config_cache.xml.bak
/data/data/####/i==1.2.0&&3.10.15(ck)_1681908880073_envelope.log
/data/data/####/index
/data/data/####/info.xml
/data/data/####/inject_track.xml
/data/data/####/journal
/data/data/####/kuyun.apk.tmp
/data/data/####/kuyun.dex
/data/data/####/kuyun.dex.flock (deleted)
/data/data/####/kuyun_sdk.xml
/data/data/####/last_sp_session.xml
/data/data/####/libztvb321.2.2.2.so
/data/data/####/local_crash_lock
/data/data/####/log_manager.xml
/data/data/####/material_break_point_info.xml
/data/data/####/message_accs_db
/data/data/####/message_accs_db-journal
/data/data/####/metrics_guid
/data/data/####/native_record_lock
/data/data/####/native_record_lock (deleted)
/data/data/####/net_node.xml
/data/data/####/offline.data
/data/data/####/okhttp_prefs.xml
/data/data/####/package_infos.xml
/data/data/####/pid.txt
/data/data/####/player_strategy.xml
/data/data/####/player_strategy.xml.bak
/data/data/####/plugin.dex
/data/data/####/plugin.dex.flock (deleted)
/data/data/####/plugin.tmp
/data/data/####/plugin_break_point_info.xml
/data/data/####/plugin_break_point_info.xml.bak
/data/data/####/plugin_config.xml
/data/data/####/pp.dex
/data/data/####/pp.dex.flock (deleted)
/data/data/####/pp.jar
/data/data/####/privacy_agreement
/data/data/####/proc_auxv
/data/data/####/promote.dex
/data/data/####/promote.dex.flock (deleted)
/data/data/####/promote.tmp
/data/data/####/risk_infos.xml
/data/data/####/risk_infos.xml.bak
/data/data/####/risk_user_info.xml
/data/data/####/risk_user_info.xml.bak
/data/data/####/safe_mode_config.xml
/data/data/####/sce.tmp
/data/data/####/sce_config.xml
/data/data/####/security_info
/data/data/####/skin_cache_name.xml
/data/data/####/snssdk_openudid.xml
/data/data/####/sp_key_stream.xml
/data/data/####/spider_prefs.xml
/data/data/####/spider_prefs.xml.bak
/data/data/####/t==8.1.3&&3.10.15(ck)_1681908874415_envelope.log
/data/data/####/tencent.dex
/data/data/####/tencent.dex.flock (deleted)
/data/data/####/tencent.tmp
/data/data/####/the-real-index
/data/data/####/total_pay_documents.xml
/data/data/####/tv_name_id_map.xml
/data/data/####/tvcore.tmp
/data/data/####/tvlive2.db-journal
/data/data/####/ua.db
/data/data/####/ua.db-journal
/data/data/####/ug_install_settings_pref.xml
/data/data/####/um_pri.xml
/data/data/####/umeng_common_config.xml
/data/data/####/umeng_common_location.xml
/data/data/####/umeng_general_config.xml
/data/data/####/umeng_it.cache
/data/data/####/umeng_message_state.xml
/data/data/####/unknown.xml
/data/data/####/user.xml
/data/data/####/user_agreement
/data/data/####/x_google_ad_s_id_123
/data/media/####/Alvin2.xml
/data/media/####/ContextData.xml
/data/media/####/ddev.data
/data/media/####/deviceToken
/data/media/####/dvc
/data/media/####/flag.data
/data/media/####/uuid.data
/data/misc/####/primary.prof

Miscellaneous:

Executes the following shell scripts:

/system/bin/cat /proc/cpuinfo
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
/system/bin/sh -c getprop
cat /sys/class/net/wlan0/address
chmod 777 /data/user/0/<Package>/files/.honor0
getprop
getprop ro.build.version.emui
getprop ro.letv.release.version
getprop ro.vivo.os.build.display.id
ls /
ls /sys/class/thermal
sh

Loads the following dynamic libraries:

libBugly
libmmkv
libsce
libtnet-3.1.14
libtvcore
libztvb321.2.2.2

Uses the following algorithms to encrypt data:

AES
AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-PKCS5Padding
AES-GCM-NoPadding
RSA-ECB-PKCS1Padding

Uses the following algorithms to decrypt data:

AES
AES-CBC-PKCS7Padding
AES-ECB-PKCS5Padding
AES-GCM-NoPadding

Accesses the ITelephony private interface.

Gets information about location.

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Gets information about installed apps.

Adds tasks to the system scheduler.

Displays its own windows over windows of other apps.

Requests the system alert window permission.

Технологии

Термины

Обучение и просвещение

Мифы

Technical information

Рекомендации по лечению

Демо бесплатно на 14 дней