Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.Siggen.Susp.63
Network activity:
Connects to:
- UDP(DNS) 8####.8.4.4:53
- TCP(HTTP/1.1) c####.dianshi####.com.####.com:80
- TCP(HTTP/1.1) tra####.dians####.com:80
- TCP(HTTP/1.1) g3.l####.com:80
- TCP(HTTP/1.1) chinaw####.c####.l####.####.com:80
- TCP(HTTP/1.1) adash####.man.aliy####.com:80
- TCP(HTTP/1.1) dd2.wuko####.com:80
- TCP(HTTP/1.1) 1####.161.124.146:12340
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) pay.dianshi####.com:80
- TCP(HTTP/1.1) detec####.math####.cn:80
- TCP(HTTP/1.1) 2####.107.1.65:80
- TCP(HTTP/1.1) we####.miguv####.com:80
- TCP(HTTP/1.1) 39.1####.143.44:8001
- TCP(HTTP/1.1) d####.100u####.com.####.net:80
- TCP(HTTP/1.1) api.mydians####.com:80
- TCP(HTTP/1.1) m.cdn.cmv####.cn:80
- TCP(HTTP/1.1) t####.dians####.com:80
- TCP(HTTP/1.1) cdn.api.dianshi####.com:80
- TCP(HTTP/1.1) co####.ssp.math####.cn:80
- TCP(HTTP/1.1) im.dianshi####.com:80
- TCP(HTTP/1.1) 1####.28.228.62:14305
- TCP(HTTP/1.1) vsc.a####.miguv####.com:7114
- TCP(HTTP/1.1) 2####.107.1.1:80
- TCP(HTTP/1.1) api.dianshi####.com:80
- TCP(HTTP/1.1) p####.api.math####.cn:80
- TCP(HTTP/1.1) l####.b####.com:80
- TCP(HTTP/1.1) newap####.math####.cn:80
- TCP(HTTP/1.1) off####.dianshi####.com:80
- TCP(HTTP/1.1) ne####.dianshi####.com:80
- TCP(HTTP/1.1) hub.dianshi####.com:80
- TCP(HTTP/1.1) cdn.dianshi####.com:80
- TCP(TLS/1.0) plb####.u####.com:443
- TCP(TLS/1.0) 2####.107.1.97:443
- TCP(TLS/1.0) u####.u####.com:443
- TCP(TLS/1.0) h5####.g####.cmv####.cn:443
- TCP(TLS/1.0) to####.volceap####.com.####.com:443
- TCP(TLS/1.0) hlsmgsp####.miguv####.com:443
- TCP(TLS/1.0) md####.google####.com:443
- TCP(TLS/1.0) pos.zblqo####.com:8657
- TCP(TLS/1.0) rr13---####.g####.com:443
- TCP(TLS/1.2) 64.2####.161.94:443
- TCP(TLS/1.2) md####.google####.com:443
- TCP(TLS/1.2) 1####.194.222.113:443
- TCP(TLS/1.2) 64.2####.165.102:443
- UDP 1####.82.117.41:2625
- TCP 1####.238.241.46:4010
- UDP tm4.binst####.live:3923
- UDP 1####.41.17.138:1136
- UDP 1####.18.111.38:1585
- UDP 1####.0.9.254:4010
- TCP zb-cent####.m.ta####.com:443
- TCP 1####.112.47.8:4010
- UDP as2.binst####.live:13
- TCP 1####.96.255.215:4702
- UDP 39.1####.134.87:3479
- TCP 1####.4.174.213:4010
- TCP 1####.75.240.13:4010
- TCP 6####.15.26.112:4010
- TCP 1####.211.149.218:4010
- UDP tm1.binst####.live:3924
- TCP 1####.166.28.114:4010
- UDP as3.binst####.live:13
- UDP 1####.116.133.67:3497
- TCP 1####.3.220.211:4010
- UDP 1####.100.243.133:11869
- TCP openj####.m.ta####.com:80
- UDP md####.google####.com:443
- TCP 2####.187.188.123:4010
- TCP 1####.97.68.225:12351
- UDP 3####.42.94.63:2755
- TCP 6####.18.64.208:4010
- TCP 1####.229.177.206:4010
- TCP 2####.229.212.67:4703
- UDP 1####.112.113.157:1317
- TCP 1####.24.62.231:4010
- TCP 1####.94.125.241:4010
- TCP 1####.224.219.18:31831
- UDP tm1.binst####.live:3925
- UDP 60.1####.154.124:2472
- TCP 1####.11.103.90:4010
- UDP 2####.73.201.246:3475
- UDP 1####.17.113.104:1147
- UDP 1####.37.125.114:3948
- TCP 42.4.1####.124:4010
- UDP 1####.127.27.73:1480
- UDP 39.1####.197.71:1385
- TCP 2####.40.78.51:4010
- UDP 1####.231.235.87:2654
- UDP 2####.68.117.238:1872
- TCP 2####.17.42.158:4010
- TCP 2####.8.223.236:4010
- UDP 1####.192.28.198:2086
- UDP 1####.228.246.173:2019
- TCP 1####.224.39.225:4010
- TCP 1####.255.254.69:4010
- TCP 24.1####.64.194:4010
- UDP 1####.199.53.203:3496
- UDP as2.binst####.live:3923
- UDP 2####.255.255.250:1900
- UDP 1####.8.35.27:1025
- TCP 1####.155.64.53:4010
- UDP hs9.hangzho####.com:16000
- TCP 1####.118.134.91:4010
- UDP 2####.241.47.247:3656
- TCP 1####.133.101.104:4010
- TCP 1####.237.138.4:4010
- UDP 39.1####.62.19:3478
- TCP 1####.117.46.221:20482
- UDP 2####.116.224.74:3616
- TCP 60.21.2####.173:4010
- TCP 39.73.1####.117:4010
- UDP tm4.binst####.live:3925
- TCP 1####.23.131.115:4010
- TCP 42.6.2####.250:4010
- TCP 1####.114.92.12:4010
- TCP 4####.7.75.133:4010
DNS requests:
- a####.man.aliy####.com
- amdc####.m.ta####.com
- and####.b####.qq.com
- api.dianshi####.com
- api.mydians####.com
- as1.binst####.live
- as2.binst####.live
- as3.binst####.live
- as4.binst####.live
- c####.dianshi####.com
- cdn.api.dianshi####.com
- cdn.dianshi####.com
- cha####.cdn.dianshi####.com
- co####
- co####.8.8.####.8
- co####.ssp.math####.cn
- d####.100u####.com
- dd2.wuko####.com
- detec####.math####.cn
- g####.dianshi####.com
- g3.l####.com
- h5####.g####.cmv####.cn
- hlsmgsp####.miguv####.com
- hs9.hangzho####.com
- hub.dianshi####.com
- im.dianshi####.com
- k####.volceap####.com
- l####.b####.com
- m####.go####.com
- m.miguv####.com
- md####.google####.com
- ne####.dianshi####.com
- newap####.math####.cn
- off####.dianshi####.com
- p####.api.math####.cn
- p####.dianshi####.com
- pay.dianshi####.com
- plb####.u####.com
- pos.zblqo####.com
- rr13---####.g####.com
- t####.dians####.com
- tm1.binst####.live
- tm2.binst####.live
- tm3.binst####.live
- tm4.binst####.live
- to####.volceap####.com
- tra####.dians####.com
- u####.u####.com
- umen####.m.ta####.com
- umengj####.m.ta####.com
- vsc.a####.miguv####.com
- we####.miguv####.com
- yk.miguv####.com
- yk.miguv####.com.####.8
HTTP GET requests:
- api.dianshi####.com/api/v24/apiConfig
- api.mydians####.com/api/programs/exclusive/unlock
- api.mydians####.com/api/push/token?channel=####&token=####&type=####
- api.mydians####.com/api/user/equity/condition
- api.mydians####.com/api/user/v1/hlc/show
- api.mydians####.com/api/v1/plugin?module=####&verCode=####&sdk=####&aver...
- api.mydians####.com/api/v1/shin?injectConditions=####
- api.mydians####.com/api/v1/tv/hkCategory/list
- api.mydians####.com/api/v1/tv/powerBoot/image
- api.mydians####.com/api/v19/ad/config?type=####&ts=####
- api.mydians####.com/api/v2/sport/list?catId=####
- api.mydians####.com/ipInfo
- c####.dianshi####.com.####.com/static/ad/18f759157732644516c2d33c5a39882...
- c####.dianshi####.com.####.com/static/ad/2eb313bd03f0186f43c1d6d601601b2...
- c####.dianshi####.com.####.com/static/ad/d6b96de57624488d83e5d1dd6c0f9bb...
- c####.dianshi####.com.####.com/static/plugin/01f41a829659f80e9566717f8ee...
- c####.dianshi####.com.####.com/static/plugin/1004d6088a7c04c6bf7bfbf4112...
- c####.dianshi####.com.####.com/static/plugin/343f88522e562dc57be54cb8f01...
- c####.dianshi####.com.####.com/static/plugin/5f9f59f64fdf2e69791ecf2b8fd...
- c####.dianshi####.com.####.com/static/plugin/7b2267f9f4f7d9e7c3a360950e3...
- c####.dianshi####.com.####.com/static/plugin/bae7dc6701bc8e540ba4f4902dd...
- cdn.api.dianshi####.com/api/programs?cid=####&date=####&tm=####
- cdn.dianshi####.com/assets/mobile/random/randomconfig.json?ts=####
- cdn.dianshi####.com/assets/mobile/temp/ts_cf.json?ts=####
- cdn.dianshi####.com/assets/tvTea.json
- cdn.dianshi####.com/config/channel/voice_mapping.json?t=####
- chinaw####.c####.l####.####.com/api/channel/v1/template/detail?templateK...
- co####.ssp.math####.cn/api/v2/SDKCommonConfig?channelCode=####&version=#...
- co####.ssp.math####.cn/api/v3/sdkTestConfig?send_ts=####
- dd2.wuko####.com/tvclient/sdk?func=####&package=####
- detec####.math####.cn/favicon.ico
- detec####.math####.cn/images/sdk/detective.jpeg
- detec####.math####.cn/js/finger20220224.js
- detec####.math####.cn/sdk/checkCookie/httpClient?uniqueId=####&androidVe...
- detec####.math####.cn/sdk/checkCookie/webview?uniqueId=####&androidVersi...
- detec####.math####.cn/sdk/checkRedirect?uniqueId=4ae26d8e7fbf9c1b9396d4d...
- detec####.math####.cn/sdk/filterHeader/httpClient?uniqueId=####&androidV...
- detec####.math####.cn/sdk/filterHeader/webview?uniqueId=####&androidVers...
- detec####.math####.cn/sdk/openWebview?uniqueId=4ae26d8e7fbf9c1b9396d4d4e...
- detec####.math####.cn/sdk/redirectHttpClientSecondPage?uniqueId=####&and...
- detec####.math####.cn/sdk/redirectWebviewSecondPage?uniqueId=####&androi...
- detec####.math####.cn/sdk/setCookie/httpClient?uniqueId=####&androidVers...
- detec####.math####.cn/sdk/setCookie/webview?uniqueId=####&androidVersion...
- detec####.math####.cn/sdk/validateCookie/httpClient?uniqueId=####&androi...
- detec####.math####.cn/sdk/validateCookie/webview?uniqueId=####&androidVe...
- detec####.math####.cn/sdk/webviewBasic?uniqueId=4ae26d8e7fbf9c1b9396d4d4...
- g3.l####.com/r?format=####
- h5####.g####.cmv####.cn:443/envivo_x/2018/SD/cctv13/1000/index.m3u8?msis...
- im.dianshi####.com/ws/v2
- l####.b####.com/jquery/2.1.4/jquery.min.js
- m.cdn.cmv####.cn/playurl/v1/play/playurlh5?contId=####&rateType=####
- ne####.dianshi####.com/
- newap####.math####.cn/favicon.ico
- newap####.math####.cn/ssp/mgm_test/webview_version?channelCode=####&vers...
- off####.dianshi####.com/api/11519ac1c893737a/ahhXIFrwnvLa?info=JE####
- off####.dianshi####.com/api/509a4cb99bd39a5f/NbxvoKJywzYR?info=####
- off####.dianshi####.com/api/82210fa1213139c6/gYvYWuhVHLlz?info=jx####
- off####.dianshi####.com/api/f6d02ae2031b1d3f/iYvkpRiKdfdW?info=u7####
- off####.dianshi####.com/api/v24/apiConfig
- off####.dianshi####.com/api/v4/offProgram
- p####.api.math####.cn/ip?send_ts=####
- pay.dianshi####.com/api/5cced51e11f51c6b/GWbxGoRACFqH?info=####
- pay.dianshi####.com/api/channel/v1/channelGroup/template
- pay.dianshi####.com/api/channel/v1/newChannel
- pay.dianshi####.com/api/coin/info
- pay.dianshi####.com/api/config/deviceCompat?brand=####&model=####&osver=...
- pay.dianshi####.com/api/config/v1/common/conf
- pay.dianshi####.com/api/config/v1/tvMenu/listV2
- pay.dianshi####.com/api/pan/v1/config/promotional
- pay.dianshi####.com/api/pan/v3/ufile/list?type=####&page=####&size=####&...
- pay.dianshi####.com/api/payorder/equity?deviceId=####&equityType=####&si...
- pay.dianshi####.com/api/programs/channel/bg
- pay.dianshi####.com/api/programs/logout/bg
- pay.dianshi####.com/api/redpack/info
- pay.dianshi####.com/api/song/get?page=####&size=####&tagCode=####
- pay.dianshi####.com/api/task/get?
- pay.dianshi####.com/api/tvSkin?menunum=####
- pay.dianshi####.com/api/v1/cloudConfig?ts=####
- pay.dianshi####.com/api/v1/play/control
- pay.dianshi####.com/api/v1/tv/channelRecommend/list?channelId=####
- pay.dianshi####.com/api/v19/ad/config?type=####&ts=####
- pay.dianshi####.com/api/v2/banner/menu/config
- pay.dianshi####.com/api/v2/user/wx/helplogin
- pay.dianshi####.com/ipInfo
- pay.dianshi####.com/time?ts=####
- to####.volceap####.com.####.com:443/service/2/app_alert_check/?os_api=##...
- tra####.dians####.com/config?appid=####&uuid=####&cver=####
- we####.miguv####.com/gateway/playurl/v3/play/playurl?contId=####&rateTyp...
HTTP POST requests:
- adash####.man.aliy####.com/man/api?ak=####&s=####
- and####.b####.qq.com/rqd/async?aid=####
- api.mydians####.com/api/v1/user_risk_device/getUserRiskUid
- d####.100u####.com.####.net/reportcomp
- hub.dianshi####.com/u
- newap####.math####.cn/titan/monitor/device_info
- off####.dianshi####.com/api/v2/device/info?duid=####&c=####&
- pay.dianshi####.com/api/config/v1/pay/document
- pay.dianshi####.com/api/pay/documents
- pay.dianshi####.com/api/v2/device/start/info
- plb####.u####.com:443/umpx_internal
- plb####.u####.com:443/umpx_push_launch
- plb####.u####.com:443/umpx_push_register
- pos.zblqo####.com:8657/config?&st=####
- t####.dians####.com/v1/new_peer
- to####.volceap####.com.####.com:443/service/2/app_log/?device_platform=#...
- to####.volceap####.com.####.com:443/service/2/device_register/?os_api=##...
- to####.volceap####.com.####.com:443/service/2/log_settings/?device_platf...
- u####.u####.com:443/unify_logs
- vsc.a####.miguv####.com:7114/EPG/VPE/PHONE/Authenticate
File system changes:
Creates the following files:
- /data/data/####/.imprint
- /data/data/####/052528caee96d8abb81fc3fc408731c9.0.tmp
- /data/data/####/052528caee96d8abb81fc3fc408731c9.1
- /data/data/####/0556258365f2ca27_0
- /data/data/####/0c691ae70e56a3b8bba1ea29cb8b8daf.0.tmp
- /data/data/####/0c691ae70e56a3b8bba1ea29cb8b8daf.1
- /data/data/####/0c691ae70e56a3b8bba1ea29cb8b8daf.1.tmp
- /data/data/####/0e627ae72e2cc942e2e392f26d13cada.0.tmp
- /data/data/####/0e627ae72e2cc942e2e392f26d13cada.1.tmp
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/14e5b06a2221057b8b675749037230bb.0.tmp
- /data/data/####/14e5b06a2221057b8b675749037230bb.1
- /data/data/####/14e5b06a2221057b8b675749037230bb.1.tmp
- /data/data/####/168436@bd_tea_agent.db-journal
- /data/data/####/1ca5df7916234a74_0
- /data/data/####/1d22abcfcb0d6de41fe782e32267e02a.0.tmp
- /data/data/####/1d22abcfcb0d6de41fe782e32267e02a.1
- /data/data/####/1d22abcfcb0d6de41fe782e32267e02a.1.tmp
- /data/data/####/1f85f809011a2aaa764e841c2ff79042.0.tmp
- /data/data/####/1f85f809011a2aaa764e841c2ff79042.1.tmp
- /data/data/####/28a0dee0f6d836c41541374c85b867dd.0.tmp
- /data/data/####/28a0dee0f6d836c41541374c85b867dd.1
- /data/data/####/28a0dee0f6d836c41541374c85b867dd.1.tmp
- /data/data/####/34df98c88f18d4d5_0
- /data/data/####/34f29242548533c5e549a133578b0b4a.0.tmp
- /data/data/####/34f29242548533c5e549a133578b0b4a.1
- /data/data/####/46dfadf7049b74d8733d290eeb93bbdc.0.tmp
- /data/data/####/46dfadf7049b74d8733d290eeb93bbdc.1
- /data/data/####/46dfadf7049b74d8733d290eeb93bbdc.1.tmp
- /data/data/####/4af7e7108671beab_0
- /data/data/####/4c149f56a2f37c4bc78ab80b0ba77450.0.tmp
- /data/data/####/4c149f56a2f37c4bc78ab80b0ba77450.1
- /data/data/####/4d6956e96315aa59fa74fc04c1876e90.0.tmp
- /data/data/####/4d6956e96315aa59fa74fc04c1876e90.1
- /data/data/####/4d6956e96315aa59fa74fc04c1876e90.1.tmp
- /data/data/####/511a91d6a422c68db04d252d67d293aa.0.tmp
- /data/data/####/511a91d6a422c68db04d252d67d293aa.1
- /data/data/####/511a91d6a422c68db04d252d67d293aa.1.tmp
- /data/data/####/540253d8a1da72b7_0
- /data/data/####/58095b0c6485c221_0
- /data/data/####/58095b0c6485c221_1
- /data/data/####/5b274235a6b15d26de5de29ed30668fa.0.tmp
- /data/data/####/5b274235a6b15d26de5de29ed30668fa.1
- /data/data/####/5b274235a6b15d26de5de29ed30668fa.1.tmp
- /data/data/####/601fed44b8cc97f903b2146b86d31290.0.tmp
- /data/data/####/601fed44b8cc97f903b2146b86d31290.1
- /data/data/####/601fed44b8cc97f903b2146b86d31290.1.tmp
- /data/data/####/62866d86986c860c8857cd5a66cb146b.0.tmp
- /data/data/####/62866d86986c860c8857cd5a66cb146b.1
- /data/data/####/62866d86986c860c8857cd5a66cb146b.1.tmp
- /data/data/####/63cde9655e58a6bf5cd3fa408cabc928.0.tmp
- /data/data/####/63cde9655e58a6bf5cd3fa408cabc928.1
- /data/data/####/6a5b24be31bc1efc94c811b25815d3a1.0.tmp
- /data/data/####/6a5b24be31bc1efc94c811b25815d3a1.1
- /data/data/####/6a5b24be31bc1efc94c811b25815d3a1.1.tmp
- /data/data/####/6eb68ea955d68f02_0
- /data/data/####/70298c6eb6032706_0
- /data/data/####/70298c6eb6032706_1
- /data/data/####/705b4b56f751f7d8fe4044bfa442a8eb.0.tmp
- /data/data/####/705b4b56f751f7d8fe4044bfa442a8eb.1
- /data/data/####/7d547b80782fce05_0
- /data/data/####/80523ba78a64d04aac756f25e9d5f750.0.tmp
- /data/data/####/80523ba78a64d04aac756f25e9d5f750.1
- /data/data/####/80523ba78a64d04aac756f25e9d5f750.1.tmp
- /data/data/####/81b02692d6e9c790a85f08f4e48be0ce.0
- /data/data/####/81b02692d6e9c790a85f08f4e48be0ce.1
- /data/data/####/8883a79baa010ecc599a4fda824745b4.0.tmp
- /data/data/####/8883a79baa010ecc599a4fda824745b4.1
- /data/data/####/8883a79baa010ecc599a4fda824745b4.1.tmp
- /data/data/####/8acf7512ea710e6e_0
- /data/data/####/90fa889de6b696e137e1d89d8d82b136.0.tmp
- /data/data/####/90fa889de6b696e137e1d89d8d82b136.1
- /data/data/####/90fa889de6b696e137e1d89d8d82b136.1.tmp
- /data/data/####/94aae1fde1427b27e7d3d85f069c5c05a644232ea2307fe....0.tmp
- /data/data/####/94aae1fde1427b27e7d3d85f069c5c05a644232ea2307fe...2d3e.0
- /data/data/####/ACCS_BINDumeng;5912cd5f1061d264c8000455.xml
- /data/data/####/ACCS_SDK.xml
- /data/data/####/ACCS_SDK_CHANNEL.xml
- /data/data/####/ACCS_SDK_CHANNEL.xml.bak
- /data/data/####/AGOO_BIND.xml
- /data/data/####/Agoo_AppStore.xml
- /data/data/####/Alvin2.xml
- /data/data/####/CONFIG.xml
- /data/data/####/CONFIG.xml.bak
- /data/data/####/CUSTOM_CONFIG.xml
- /data/data/####/ContextData.xml
- /data/data/####/Cookies-journal
- /data/data/####/DEVICE_INFO.xml
- /data/data/####/DEVICE_INFO.xml.bak
- /data/data/####/DOWNLOAD_END_AD.xml
- /data/data/####/DOWNLOAD_START_AD.xml
- /data/data/####/DRAINAGE.xml
- /data/data/####/END_AD.xml
- /data/data/####/END_AD_BOOT.xml
- /data/data/####/EVENT_CONFIG.xml
- /data/data/####/IpConfig.xml
- /data/data/####/KEY_SP_NAME_RISK.xml
- /data/data/####/LIVE_CONFIG.xml
- /data/data/####/MessageStore.db-journal
- /data/data/####/MsgLogStore.db-journal
- /data/data/####/OFFLINE.xml
- /data/data/####/PERMANENT_DATA.xml
- /data/data/####/PHOTO_INFO.xml
- /data/data/####/PLAY.xml
- /data/data/####/PLAY_CONFIG.xml
- /data/data/####/PLAY_CONFIG.xml.bak
- /data/data/####/STREAM_CONFIG_V2.xml
- /data/data/####/SWITCH_CONFIG.xml
- /data/data/####/SWITCH_CONFIG.xml.bak
- /data/data/####/SYSTEM_INFO.xml
- /data/data/####/TEA.xml
- /data/data/####/TEA.xml.bak
- /data/data/####/UM_PROBE_DATA.xml
- /data/data/####/WebViewChromiumPrefs.xml
- /data/data/####/_global_cache.xml
- /data/data/####/_global_cache.xml.bak
- /data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.0.tmp
- /data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.1.tmp
- /data/data/####/a==8.1.3&&3.10.9_1686195217525_envelope.log
- /data/data/####/aa67597a9395d61987bb0d8f3056aabd.0
- /data/data/####/aa67597a9395d61987bb0d8f3056aabd.1
- /data/data/####/accs.db-journal
- /data/data/####/ad91cc5c65d9cc05_0
- /data/data/####/agoo.pid
- /data/data/####/api.prefs.xml
- /data/data/####/api.prefs.xml.bak
- /data/data/####/applog_stats.xml
- /data/data/####/applog_stats.xml.bak (deleted)
- /data/data/####/b4427419e7945751_0
- /data/data/####/bdtracker_dr_migrate_detector.xml
- /data/data/####/bugly_db_-journal
- /data/data/####/c0968fa531339178b2ed07e203745184.0.tmp
- /data/data/####/c0968fa531339178b2ed07e203745184.1
- /data/data/####/c0968fa531339178b2ed07e203745184.1.tmp
- /data/data/####/c53450b5a4d12fe8_0
- /data/data/####/c6951e9702af6b6362d150ce081325e3.0.tmp
- /data/data/####/c6951e9702af6b6362d150ce081325e3.1
- /data/data/####/c6951e9702af6b6362d150ce081325e3.1.tmp
- /data/data/####/c6f69eba0b8c5457_0
- /data/data/####/c95e8fe89978e95a87f3dc7734ccf9d8
- /data/data/####/cctv13.0
- /data/data/####/cctv13.0 (deleted)
- /data/data/####/cd49457f232026f9_0
- /data/data/####/channels.data
- /data/data/####/com.dianshijia.newlive.BETA_VALUES.xml
- /data/data/####/com.dianshijia.newlive_preferences.xml
- /data/data/####/conf.dat
- /data/data/####/crashrecord.xml
- /data/data/####/cuuid.xml
- /data/data/####/d0e5f92f9dbea347b518d1f15cd71515.0.tmp
- /data/data/####/d0e5f92f9dbea347b518d1f15cd71515.1
- /data/data/####/d0e5f92f9dbea347b518d1f15cd71515.1.tmp
- /data/data/####/d2ed5397160ed6516b6104a98841b262.0.tmp
- /data/data/####/d2ed5397160ed6516b6104a98841b262.1
- /data/data/####/d2ed5397160ed6516b6104a98841b262.1.tmp
- /data/data/####/d71b93d0dbf5c293ee626e7ed28ae9a1.0.tmp
- /data/data/####/d71b93d0dbf5c293ee626e7ed28ae9a1.1
- /data/data/####/d71b93d0dbf5c293ee626e7ed28ae9a1.1.tmp
- /data/data/####/d89c9bb0c4ddbd64c4cdf1234ff107ec.0.tmp
- /data/data/####/d89c9bb0c4ddbd64c4cdf1234ff107ec.1
- /data/data/####/d89c9bb0c4ddbd64c4cdf1234ff107ec.1.tmp
- /data/data/####/dW1weF9pbnRlcm5hbF8xNjg2MTk1MjA2OTg1;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNjg2MTk1MjAyNzk0;
- /data/data/####/dW1weF9wdXNoX2xhdW5jaF8xNjg2MTk1MjE5ODgz;
- /data/data/####/dW1weF9wdXNoX3JlZ2lzdGVyXzE2ODYxOTUyMDk4Nzc=;
- /data/data/####/download_splash.xml
- /data/data/####/download_splash.xml.bak
- /data/data/####/e6b0a7313c01713979b89211b22fc490.0.tmp
- /data/data/####/e6b0a7313c01713979b89211b22fc490.1.tmp
- /data/data/####/epg-cctv1-20230608.json
- /data/data/####/epg-cctv12-20230608.json
- /data/data/####/epg-cctv13-20230608.json
- /data/data/####/epg-cctv14-20230608.json
- /data/data/####/epg-cctv2-20230608.json
- /data/data/####/epg-cctv3-20230608.json
- /data/data/####/epg-cctv4-20230608.json
- /data/data/####/epg-cctv5-20230608.json
- /data/data/####/epg-cctv6-20230608.json
- /data/data/####/epg-cctv7-20230608.json
- /data/data/####/epg-cctv8-20230608.json
- /data/data/####/epg.dex
- /data/data/####/epg.dex.flock (deleted)
- /data/data/####/epg.tmp
- /data/data/####/event_db
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f3534d73381ae19d9253a067aeaef911.0.tmp
- /data/data/####/f3534d73381ae19d9253a067aeaef911.1
- /data/data/####/f3534d73381ae19d9253a067aeaef911.1.tmp
- /data/data/####/f7f1052328059de22ef8e0b161a5b8dd2b0659a96189efe....0.tmp
- /data/data/####/f7f1052328059de22ef8e0b161a5b8dd2b0659a96189efe...0aca.0
- /data/data/####/faa09cfb3efe120858e9d9154f83b3df.0.tmp
- /data/data/####/faa09cfb3efe120858e9d9154f83b3df.1
- /data/data/####/faa09cfb3efe120858e9d9154f83b3df.1.tmp
- /data/data/####/fb6af786f26a2595b3be0ff754fb377a.0.tmp
- /data/data/####/fb6af786f26a2595b3be0ff754fb377a.1
- /data/data/####/fb6af786f26a2595b3be0ff754fb377a.1.tmp
- /data/data/####/header_custom.xml
- /data/data/####/header_custom.xml.bak
- /data/data/####/httpdns_config_cache.xml
- /data/data/####/httpdns_config_cache.xml.bak
- /data/data/####/i==1.2.0&&3.10.9_1686195202840_envelope.log
- /data/data/####/i==1.2.0&&3.10.9_1686195207479_envelope.log
- /data/data/####/index
- /data/data/####/info.xml
- /data/data/####/inject_track.xml
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/last_sp_session.xml
- /data/data/####/launcher_ad.data
- /data/data/####/libztvb321.2.2.2.so
- /data/data/####/local_crash_lock
- /data/data/####/message_accs_db
- /data/data/####/message_accs_db-journal
- /data/data/####/metrics_guid
- /data/data/####/native_record_lock
- /data/data/####/net_node.xml
- /data/data/####/offline.data
- /data/data/####/okhttp_prefs.xml
- /data/data/####/package_infos.xml
- /data/data/####/package_infos.xml.bak
- /data/data/####/pid.txt
- /data/data/####/player_strategy.xml
- /data/data/####/plugin.dex
- /data/data/####/plugin.dex.flock (deleted)
- /data/data/####/plugin.tmp
- /data/data/####/plugin_config.xml
- /data/data/####/pp.dex
- /data/data/####/pp.dex.flock (deleted)
- /data/data/####/pp.jar
- /data/data/####/proc_auxv
- /data/data/####/promote.dex
- /data/data/####/promote.dex.flock (deleted)
- /data/data/####/promote.jar
- /data/data/####/risk_infos.xml
- /data/data/####/risk_user_info.xml
- /data/data/####/safe_mode_config.xml
- /data/data/####/sce.tmp
- /data/data/####/sce_config.xml
- /data/data/####/security_info
- /data/data/####/session_cache
- /data/data/####/skin_cache_name.xml
- /data/data/####/snssdk_openudid.xml
- /data/data/####/snssdk_openudid.xml.bak
- /data/data/####/sp_key_stream.xml
- /data/data/####/spider_prefs.xml
- /data/data/####/spider_prefs.xml.bak (deleted)
- /data/data/####/tencent.dex
- /data/data/####/tencent.dex.flock (deleted)
- /data/data/####/tencent.tmp
- /data/data/####/the-real-index
- /data/data/####/total.log
- /data/data/####/total_pay_documents.xml
- /data/data/####/tvcore.tmp
- /data/data/####/tvlive2.db-journal
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/ug_install_settings_pref.xml
- /data/data/####/um_pri.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_general_config.xml.bak
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_message_state.xml
- /data/data/####/unknown.xml
- /data/data/####/x_google_ad_s_id_123
- /data/media/####/21cf1702e7928d01e6c2c0db7d8e03d1
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/ddev.data
- /data/media/####/deviceToken
- /data/media/####/dvc
- /data/media/####/flag.data
- /data/media/####/sysid.dat
- /data/media/####/uuid.data
- /data/misc/####/primary.prof
Miscellaneous:
Executes the following shell scripts:
- /system/bin/cat /proc/cpuinfo
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop
- cat /sys/class/net/wlan0/address
- chmod 777 /data/user/0/<Package>/files/.honor0
- getprop
- getprop ro.build.version.emui
- getprop ro.letv.release.version
- getprop ro.vivo.os.build.display.id
- ls /
- ls /sys/class/thermal
- sh
Loads the following dynamic libraries:
- libBugly
- libc++_shared
- libijkffmpeg
- libijkplayer
- libijksdl
- libmmkv
- libtnet-3.1.14
- libtvcore
- libztvb321.2.2.2
Uses the following algorithms to encrypt data:
- AES
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
Uses the following algorithms to decrypt data:
- AES
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
Accesses the ITelephony private interface.
Gets information about location.
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Gets information about installed apps.
Gets information about running apps.
Adds tasks to the system scheduler.
Displays its own windows over windows of other apps.
Requests the system alert window permission.
