Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.RemoteCode.358.origin
Network activity:
Connects to:
- UDP(DNS) 8####.8.4.4:53
- TCP(HTTP/1.1) adash####.man.aliy####.com:80
- TCP(HTTP/1.1) dd2.wuko####.com:80
- TCP(HTTP/1.1) detec####.math####.cn:80
- TCP(HTTP/1.1) cdn.api.dianshi####.com:80
- TCP(HTTP/1.1) dy.cn.wildpet####.xyz:201
- TCP(HTTP/1.1) api.dianshi####.com:80
- TCP(HTTP/1.1) vsc.a####.miguv####.com:7114
- TCP(HTTP/1.1) i####.k####.com.####.com:80
- TCP(HTTP/1.1) newap####.math####.cn:80
- TCP(HTTP/1.1) 1####.161.124.146:12340
- TCP(HTTP/1.1) im.dianshi####.com:80
- TCP(HTTP/1.1) tv.hub.dianshi####.com:80
- TCP(HTTP/1.1) g3.l####.com:80
- TCP(HTTP/1.1) co####.ssp.math####.cn:80
- TCP(HTTP/1.1) t####.k####.com:80
- TCP(HTTP/1.1) vod####.ip####.q####.####.com:80
- TCP(HTTP/1.1) dy.cn.wildpet####.xyz:80
- TCP(HTTP/1.1) p####.api.math####.cn:80
- TCP(HTTP/1.1) l####.b####.com:80
- TCP(HTTP/1.1) tra####.dians####.com:80
- TCP(HTTP/1.1) 39.1####.143.44:8001
- TCP(HTTP/1.1) c####.dianshi####.com.####.com:80
- TCP(HTTP/1.1) t####.dians####.com:80
- TCP(HTTP/1.1) api.mydians####.com:80
- TCP(HTTP/1.1) api.o####.ads####.cn:80
- TCP(HTTP/1.1) cdn.dianshi####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(TLS/1.0) t####.k####.com:443
- TCP(TLS/1.0) plb####.u####.com:443
- TCP(TLS/1.0) rr9---s####.g####.com:443
- TCP(TLS/1.0) 64.2####.161.95:443
- TCP(TLS/1.0) u####.u####.com:443
- TCP(TLS/1.0) d####.100u####.com.####.net:443
- TCP(TLS/1.0) 1####.177.14.95:443
- TCP(TLS/1.0) rr18---####.g####.com:443
- TCP(TLS/1.0) to####.ctobsn####.com.####.com:443
- TCP(TLS/1.0) card####.k####.com.####.com:443
- TCP(TLS/1.0) cdn.m####.uli####.net:443
- TCP(TLS/1.0) 64.2####.161.94:443
- TCP(TLS/1.2) 74.1####.205.100:443
- TCP(TLS/1.2) 64.2####.161.94:443
- TCP(TLS/1.2) 64.2####.165.95:443
- UDP 1####.142.251.164:4010
- UDP 2####.255.255.250:1900
- UDP rr18---####.g####.com:443
- TCP 36.25.2####.4:4683
- TCP 42.1####.125.240:4010
- TCP 49.1####.102.161:4010
- UDP 4####.80.78.4:1532
- UDP 1####.0.4.254:4096
- UDP 1####.15.18.23:4010
- UDP 2####.193.231.87:4010
- UDP 62.1####.206.174:4010
- TCP 1####.147.58.118:23429
- TCP 1####.7.156.200:4010
- TCP 1####.116.11.160:36005
- TCP 1.57.1####.213:4010
- TCP 42.56.1####.168:23429
- UDP 49.5.2####.9:4010
- UDP as3.binst####.live:3923
- UDP 49.1####.102.161:4010
- TCP 1####.196.60.140:4010
- UDP 2####.73.93.79:4010
- UDP 42.2####.157.193:4010
- TCP 1####.20.60.53:12354
- TCP zb-cent####.m.ta####.com:443
- UDP as3.binst####.live:13
- TCP 1####.114.73.132:4010
- TCP 1####.147.200.206:23429
- UDP 1####.235.36.140:4010
- TCP 1####.7.34.199:23429
- UDP 1####.7.156.200:4010
- TCP 5####.92.12.207:4010
- TCP 71.1####.176.173:23429
- UDP 1####.211.187.54:4010
- UDP 1####.55.63.247:4010
- TCP 1####.173.142.169:23429
- TCP 2####.201.149.99:23429
- UDP as2.binst####.live:3923
- TCP 1####.184.221.30:4010
- UDP 60.2####.91.177:4010
- UDP 1####.203.13.120:4010
- TCP 2####.204.154.128:4010
- TCP 1####.50.246.115:4010
- TCP 1####.5.241.207:23429
- UDP 2####.166.45.36:4010
- UDP 27.10.2####.40:4010
- UDP 1####.146.14.43:1951
- UDP 1####.138.58.217:4010
- TCP 2####.8.132.180:23429
- UDP 1####.136.80.81:4010
- UDP 1####.0.4.254:4085
- TCP 1####.171.56.18:4010
- TCP 1.3####.39.62:23429
- UDP 2####.28.77.5:4010
- UDP 1####.0.4.254:4015
- UDP tm4.binst####.live:3923
- TCP 1####.51.9.84:4010
- UDP tm4.binst####.live:3924
- UDP as2.binst####.live:13
- UDP 1####.235.31.85:1748
- UDP 1####.196.116.235:4010
- UDP 1####.200.177.94:1762
- TCP 1####.235.36.140:4010
- TCP 1####.237.222.76:23429
- UDP 1####.0.4.254:4046
- UDP tm1.binst####.live:13
- TCP 1####.132.127.189:4010
- TCP 1####.0.4.254:35412
- UDP 1####.0.4.254:4102
- UDP 2####.101.70.49:1990
- TCP 75.1####.14.255:4010
- TCP 1####.120.228.236:23429
- UDP 1####.236.169.166:4010
- TCP 1.5####.70.123:23429
- UDP 39.1####.131.231:1299
- UDP 42.85.1####.147:2710
- UDP 1####.50.246.115:4010
- TCP 1####.8.20.135:4010
- TCP 1####.21.50.74:23429
- TCP 1####.136.80.81:4010
- UDP 1####.118.123.164:4010
- TCP 2####.141.176.101:23429
- UDP 1.63.1####.59:1856
- UDP 1####.239.73.165:4010
- TCP 1####.20.7.171:4010
- UDP 1####.47.243.74:4010
- TCP 1####.190.71.101:23429
- UDP 2####.73.26.33:2436
- TCP 1####.39.174.98:4010
- UDP 1####.239.32.11:4010
- UDP 1####.118.228.199:4010
- UDP 60.2####.211.128:4010
- UDP 1####.169.76.186:4010
- UDP 1####.198.211.234:1593
- UDP 39.1####.62.19:3478
- UDP 1####.238.148.28:4010
- TCP 60.14.1####.25:4010
- TCP 1####.238.28.242:37641
- TCP 68.1####.230.21:23429
- TCP 1####.48.231.62:23429
- UDP 1.8####.3.248:1686
- UDP 60.16.1####.3:4010
- TCP 1####.142.251.164:4010
- UDP 1####.141.174.61:4010
- TCP 1####.15.100.222:4010
- UDP 1####.24.254.122:2080
- TCP 2####.10.22.141:4010
- TCP 1####.99.25.27:23429
- UDP 36.2####.193.170:3360
- TCP 2####.193.231.87:4010
- TCP 1####.117.169.187:23429
- UDP 39.1####.134.87:3479
- UDP 1.57.1####.213:4010
- TCP 1####.48.217.141:38005
- UDP 1####.20.7.171:4010
- UDP 39.1####.55.215:1163
- UDP 2####.204.154.128:4010
- UDP 1####.196.60.140:4010
- TCP 1####.26.144.46:4010
- TCP 2####.8.42.128:4010
- TCP 1####.244.174.146:23429
- UDP 1####.39.174.98:4010
- TCP 42.1####.129.122:4010
- UDP 1####.194.163.20:443
- UDP 1####.163.77.194:2724
- UDP 1####.123.224.29:4010
- UDP 1####.35.15.198:1294
- TCP 1####.107.3.17:26706
- UDP 60.14.1####.25:4010
- TCP 62.1####.206.174:4010
- TCP 1####.236.139.176:4010
- UDP 39.65.2####.161:4010
- UDP 1####.89.111.167:4010
- TCP 1####.111.131.18:23429
- TCP 1####.191.238.248:4010
- TCP 60.1####.140.2:4010
- TCP 42.1####.217.225:23429
- TCP 6####.0.45.133:45106
- UDP 2####.10.22.141:4010
- TCP 2####.73.93.79:4010
- TCP openj####.m.ta####.com:443
- TCP 1####.40.197.61:23429
- UDP 1####.114.73.132:4010
- UDP 2####.115.224.101:4010
- UDP 1####.116.179.100:4010
- TCP 39.65.2####.161:4010
- TCP 1####.188.17.193:4010
- UDP 1####.40.56.11:3710
- TCP 66.22.1####.146:4010
- UDP 1####.72.21.75:4010
- UDP 1####.0.4.254:4041
- TCP 1####.116.179.100:4010
- TCP 60.16.1####.3:4010
- TCP 1####.0.164.200:23429
- UDP 1####.173.82.118:4010
- UDP 1####.132.127.189:4010
- UDP 1####.234.126.173:4010
- UDP 64.2####.161.95:443
- TCP 2####.166.45.36:4010
- UDP 1####.52.232.60:4010
- TCP 1####.175.203.227:4010
- UDP 1####.177.14.95:443
- UDP 1####.171.56.18:4010
- UDP 1####.234.0.239:4010
- UDP 1####.9.27.149:4010
- UDP 1####.51.9.84:4010
- TCP 1####.0.4.254:41316
- UDP 1####.8.20.135:4010
- UDP 1####.0.4.254:4033
- TCP 1####.55.63.247:4010
- TCP 2####.220.202.178:23429
- TCP 1####.4.96.60:4010
- UDP 1####.237.167.24:4010
- UDP tm1.binst####.live:3924
DNS requests:
- a####.man.aliy####.com
- act.dianshi####.com
- ad-temp####.k####.com
- amdc####.m.ta####.com
- and####.b####.qq.com
- api.dianshi####.com
- api.mydians####.com
- api.o####.ads####.cn
- as1.binst####.live
- as2.binst####.live
- as3.binst####.live
- as4.binst####.live
- ask.log.k####.com
- c####.dianshi####.com
- card####.k####.com
- cdn.api.dianshi####.com
- cdn.dianshi####.com
- cdn.m####.uli####.net
- cha####.cdn.dianshi####.com
- co####.ssp.math####.cn
- d####.100u####.com
- dd2.wuko####.com
- detec####.math####.cn
- dy.cn.wildpet####.xyz
- g3.l####.com
- hub.dianshi####.com
- i####.k####.com
- im.dianshi####.com
- l####.b####.com
- m####.go####.com
- newap####.math####.cn
- off####.dianshi####.com
- p####.api.math####.cn
- p####.dianshi####.com
- pay.dianshi####.com
- plb####.u####.com
- pro.wildpet####.com
- rr18---####.g####.com
- rr9---s####.g####.com
- t####.dians####.com
- t####.k####.com
- tm1.binst####.live
- tm2.binst####.live
- tm3.binst####.live
- tm4.binst####.live
- to####.ctobsn####.com
- tra####.dians####.com
- tv.hub.dianshi####.com
- u####.u####.com
- umen####.m.ta####.com
- umengj####.m.ta####.com
- vsc.a####.miguv####.com
HTTP GET requests:
- api.dianshi####.com/api/cash/info
- api.dianshi####.com/api/channel/v1/channelGroup/template
- api.dianshi####.com/api/coin/info
- api.dianshi####.com/api/config/deviceCompat?brand=####&model=####&osver=...
- api.dianshi####.com/api/config/v1/common/conf
- api.dianshi####.com/api/custom/checked
- api.dianshi####.com/api/kuyun/list
- api.dianshi####.com/api/pan/v1/config/promotional
- api.dianshi####.com/api/pan/v2/space/report?actType=####
- api.dianshi####.com/api/pan/v3/ufile/list?type=####&page=####&size=####&...
- api.dianshi####.com/api/payorder/equity?deviceId=####&equityType=####&si...
- api.dianshi####.com/api/push/token?channel=####&token=####&type=####
- api.dianshi####.com/api/redpack/info
- api.dianshi####.com/api/song/get?page=####&size=####&tagCode=####
- api.dianshi####.com/api/task/get?
- api.dianshi####.com/api/tv/v1/hotchannels?type=####
- api.dianshi####.com/api/tvSkin?menunum=####
- api.dianshi####.com/api/update/new_version
- api.dianshi####.com/api/v1/cloudConfig?ts=####
- api.dianshi####.com/api/v1/play/control
- api.dianshi####.com/api/v1/plugin?module=####&verCode=####&aver=####&tm=...
- api.dianshi####.com/api/v1/plugin?module=####&verCode=####&sdk=####&aver...
- api.dianshi####.com/api/v18/ad/config?type=####&ts=####
- api.dianshi####.com/api/v2/banner/menu/config
- api.dianshi####.com/api/v2/song/remind?type=####
- api.dianshi####.com/api/v2/sport/list?catId=####
- api.dianshi####.com/api/v2/user/wx/helplogin
- api.dianshi####.com/api/v24/apiConfig
- api.dianshi####.com/api/v3/offProgram
- api.dianshi####.com/api/v6/channels?ts=####
- api.dianshi####.com/cfbqbczu?ts=####
- api.dianshi####.com/gslb/channel/stream?region=####&isp=####&tm=####&uui...
- api.dianshi####.com/ipInfo
- api.mydians####.com/api/config/cashPopup
- api.mydians####.com/api/user/equity/condition
- api.mydians####.com/api/v1/shin?injectConditions=####
- c####.dianshi####.com.####.com/api/config/hotChannelTvTypeOne
- c####.dianshi####.com.####.com/pkg/tv3.0/image/gw_time.txt
- c####.dianshi####.com.####.com/static/ad/069a03835cbc3fc21c348c7311b476a...
- c####.dianshi####.com.####.com/static/ad/8432e3bb3b4c6f56e98786d9b8b9756...
- c####.dianshi####.com.####.com/static/ad/d6b96de57624488d83e5d1dd6c0f9bb...
- c####.dianshi####.com.####.com/static/plugin/2c33bd0922058fab1090c221310...
- c####.dianshi####.com.####.com/static/plugin/434f9e597755246cfd40f6560c6...
- c####.dianshi####.com.####.com/static/plugin/4433709d41777b11ec8dba036a1...
- c####.dianshi####.com.####.com/static/plugin/5548f31879acd52d59c70968c80...
- c####.dianshi####.com.####.com/static/plugin/5e78bd2da52be8fae22e0d0568a...
- c####.dianshi####.com.####.com/static/plugin/7b2267f9f4f7d9e7c3a360950e3...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-131208...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-274345...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-744616...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-746655...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-749427...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-785732...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-832023...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-839275...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/-887774...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/1851869...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/2379617...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/4263091...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/4351071...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/5038105...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/5359987...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/6809842...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/8143282...
- card####.k####.com.####.com:443/media/cdn/prod/ad-card-templates/8397158...
- card####.k####.com.####.com:443/pro/protocol/2021/7/27/10/17/29/16273522...
- card####.k####.com.####.com:443/pro/protocol/2022/11/7/11/39/48/16677923...
- cdn.api.dianshi####.com/api/programs?cid=####&date=####&tm=####
- cdn.dianshi####.com/assets/mobile/temp/ts_cf.json?ts=####
- cdn.dianshi####.com/assets/tvTea.json
- cdn.dianshi####.com/config/channel/voice_mapping.json
- cdn.dianshi####.com/pkg/tv3.0/image/hdlogo.png
- cdn.dianshi####.com/pkg/tv3.0/image/normallogo.png
- cdn.m####.uli####.net:443/histar/apk/histar_app_star_fromtv_release.apk
- co####.ssp.math####.cn/api/v2/SDKCommonConfig?channelCode=####&version=#...
- co####.ssp.math####.cn/api/v3/sdkTestConfig?send_ts=####
- dd2.wuko####.com/tvclient/sdk?func=####&package=####
- detec####.math####.cn/favicon.ico
- detec####.math####.cn/images/sdk/detective.jpeg
- detec####.math####.cn/js/finger20220224.js
- detec####.math####.cn/sdk/checkCookie/httpClient?uniqueId=####&androidVe...
- detec####.math####.cn/sdk/checkCookie/webview?uniqueId=####&androidVersi...
- detec####.math####.cn/sdk/checkRedirect?uniqueId=####&androidVersion=###...
- detec####.math####.cn/sdk/filterHeader/httpClient?uniqueId=####&androidV...
- detec####.math####.cn/sdk/filterHeader/webview?uniqueId=####&androidVers...
- detec####.math####.cn/sdk/openWebview?uniqueId=####&androidVersion=####&...
- detec####.math####.cn/sdk/redirectHttpClientSecondPage?uniqueId=####&and...
- detec####.math####.cn/sdk/redirectWebviewSecondPage?uniqueId=####&androi...
- detec####.math####.cn/sdk/setCookie/httpClient?uniqueId=####&androidVers...
- detec####.math####.cn/sdk/setCookie/webview?uniqueId=####&androidVersion...
- detec####.math####.cn/sdk/validateCookie/httpClient?uniqueId=####&androi...
- detec####.math####.cn/sdk/validateCookie/webview?uniqueId=####&androidVe...
- g3.l####.com/r?format=####
- i####.k####.com.####.com/pro/ad/sdk/jar/2020/11/25/10/46/37272382_160627...
- im.dianshi####.com/ws/v2
- l####.b####.com/jquery/2.1.4/jquery.min.js
- newap####.math####.cn/favicon.ico
- newap####.math####.cn/ssp/mgm_test/webview_version?channelCode=####&vers...
- p####.api.math####.cn/ip?send_ts=####
- t####.k####.com/check.do?pid=####&thread_id=####©right_id=####&mac=#...
- t####.k####.com:443/api/tvsdk/config?ltu=####&bssid=####&sign=####&p_md5...
- t####.k####.com:443/api/tvsdk/prepare?sign=####&request_id=####&mac=####...
- t####.k####.com:443/api/tvsdk/update?sign=####&mac=####&app_id=####&time...
- to####.ctobsn####.com.####.com:443/service/2/app_alert_check/?aid=####&t...
- tra####.dians####.com/config?appid=####&uuid=####&cver=####
- vod####.ip####.q####.####.com/api/channel/v1/template/detail?templateKey...
HTTP POST requests:
- adash####.man.aliy####.com/man/api?ak=####&s=####
- and####.b####.qq.com/rqd/async?aid=####
- api.dianshi####.com/api/pay/documents
- api.dianshi####.com/api/v1/user_risk_device/getUserRiskUid
- api.dianshi####.com/api/v2/device/info?duid=####&c=####&
- api.dianshi####.com/api/v2/device/start/info
- api.o####.ads####.cn/thirdparty/encsapi/enChn2
- d####.100u####.com.####.net:443/reportcomp
- dy.cn.wildpet####.xyz/dycn/update
- dy.cn.wildpet####.xyz:201/proxy/get?e=####&r=####
- newap####.math####.cn/titan/monitor/device_info
- plb####.u####.com:443/umpx_internal
- plb####.u####.com:443/umpx_push_launch
- plb####.u####.com:443/umpx_push_register
- t####.dians####.com/v1/new_peer
- t####.k####.com/template/check/0/00:00:00:00:00:04/0/1001
- to####.ctobsn####.com.####.com:443/service/2/abtest_config/?&os_api=####...
- to####.ctobsn####.com.####.com:443/service/2/app_log/?device_platform=##...
- to####.ctobsn####.com.####.com:443/service/2/device_register/?aid=####&t...
- to####.ctobsn####.com.####.com:443/service/2/log_settings/?device_platfo...
- tv.hub.dianshi####.com/u
- u####.u####.com:443/unify_logs
- vsc.a####.miguv####.com:7114/EPG/VPE/PHONE/Authenticate
File system changes:
Creates the following files:
- /data/dalvik-cache/####/system@framework@am.jar@classes.dex
- /data/dalvik-cache/####/system@framework@am.jar@classes.dex.flo...leted)
- /data/data/####/-1312085025145288056
- /data/data/####/-2743456424884803974
- /data/data/####/-7446161929431181060
- /data/data/####/-7466550696259909127
- /data/data/####/-7494275546626564738
- /data/data/####/-7857323045930740017
- /data/data/####/-8320235658200158291
- /data/data/####/-8392755012898070255
- /data/data/####/-8877748838519959376
- /data/data/####/.imprint
- /data/data/####/.pylock
- /data/data/####/090a3edb0683553a042da12b97b9a69f.0.tmp
- /data/data/####/0cdf16c8e9c7ec49_0
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/1851869527367551996
- /data/data/####/1a53a6c13edaddc12851c17f16493385.0.tmp
- /data/data/####/1a53a6c13edaddc12851c17f16493385.1
- /data/data/####/1a53a6c13edaddc12851c17f16493385.1.tmp
- /data/data/####/1f85f809011a2aaa764e841c2ff79042.0.tmp
- /data/data/####/1f85f809011a2aaa764e841c2ff79042.1
- /data/data/####/1f85f809011a2aaa764e841c2ff79042.1.tmp
- /data/data/####/2379617456227033167
- /data/data/####/325dd77e835cecff2003329b751b13bd.0.tmp
- /data/data/####/325dd77e835cecff2003329b751b13bd.1
- /data/data/####/325dd77e835cecff2003329b751b13bd.1.tmp
- /data/data/####/35f9b9432c52e0a0a2d41af56a14a733.0
- /data/data/####/35f9b9432c52e0a0a2d41af56a14a733.0.tmp
- /data/data/####/35f9b9432c52e0a0a2d41af56a14a733.1
- /data/data/####/35f9b9432c52e0a0a2d41af56a14a733.1.tmp
- /data/data/####/41bb92693f60b18a175ca4d3c144531c.0.tmp
- /data/data/####/41bb92693f60b18a175ca4d3c144531c.1
- /data/data/####/41bb92693f60b18a175ca4d3c144531c.1.tmp
- /data/data/####/421563956e4461b88c4860f73d5c4795.0.tmp
- /data/data/####/421563956e4461b88c4860f73d5c4795.1
- /data/data/####/421563956e4461b88c4860f73d5c4795.1.tmp
- /data/data/####/4263091932627289850
- /data/data/####/4351071184899779741
- /data/data/####/4c149f56a2f37c4bc78ab80b0ba77450.0.tmp
- /data/data/####/4c149f56a2f37c4bc78ab80b0ba77450.1.tmp
- /data/data/####/4e536cc5a48c9165583064b722efe87b.0.tmp
- /data/data/####/4e536cc5a48c9165583064b722efe87b.1
- /data/data/####/4e536cc5a48c9165583064b722efe87b.1.tmp
- /data/data/####/5038105548106165173
- /data/data/####/518fd22e8cc4fa15e023507e5a779d5a.0
- /data/data/####/518fd22e8cc4fa15e023507e5a779d5a.1
- /data/data/####/5359987358570622407
- /data/data/####/55cd470170a6ff40208ec88cb8e09943c8119a5df969b6c...a60a.0
- /data/data/####/56a5c25b6c7f92fb587aa5a1b7fda0c4.0.tmp
- /data/data/####/56a5c25b6c7f92fb587aa5a1b7fda0c4.1
- /data/data/####/56a5c25b6c7f92fb587aa5a1b7fda0c4.1.tmp
- /data/data/####/58095b0c6485c221_0 (deleted)
- /data/data/####/5b6d006e4e787a46e82ebb5e2e71148b.0.tmp
- /data/data/####/5b6d006e4e787a46e82ebb5e2e71148b.1.tmp
- /data/data/####/601fed44b8cc97f903b2146b86d31290.0.tmp
- /data/data/####/601fed44b8cc97f903b2146b86d31290.1
- /data/data/####/601fed44b8cc97f903b2146b86d31290.1.tmp
- /data/data/####/63cde9655e58a6bf5cd3fa408cabc928.0.tmp
- /data/data/####/63cde9655e58a6bf5cd3fa408cabc928.1.tmp
- /data/data/####/680984271311747144
- /data/data/####/6a960be2b86a5d3509e4542a9cac36531f4e93c33c95c0c...8dda.0
- /data/data/####/6eb68ea955d68f02_0
- /data/data/####/6fe78589e8b5ce6d79171f402c7ce897.0.tmp
- /data/data/####/6fe78589e8b5ce6d79171f402c7ce897.1.tmp
- /data/data/####/70298c6eb6032706_0
- /data/data/####/70298c6eb6032706_1
- /data/data/####/71aabc12ce4f8996_0
- /data/data/####/79f56bfdbab87eae36d3bda940ffb3e2.0.tmp
- /data/data/####/79f56bfdbab87eae36d3bda940ffb3e2.1
- /data/data/####/79f56bfdbab87eae36d3bda940ffb3e2.1.tmp
- /data/data/####/7d547b80782fce05_0
- /data/data/####/8143282645073951774
- /data/data/####/830eee87b934b474e23abcc268ee2a36.0.tmp
- /data/data/####/830eee87b934b474e23abcc268ee2a36.1
- /data/data/####/830eee87b934b474e23abcc268ee2a36.1.tmp
- /data/data/####/8397158196018248107
- /data/data/####/8bdbc895a030c866d9592f6456a2c5fb.0.tmp
- /data/data/####/8bdbc895a030c866d9592f6456a2c5fb.1
- /data/data/####/8cb0be1370b4806308b4d8f18a610bbe.0.tmp
- /data/data/####/8cb0be1370b4806308b4d8f18a610bbe.1
- /data/data/####/8cb0be1370b4806308b4d8f18a610bbe.1.tmp
- /data/data/####/923590e5a948cd57923015f8541cf3cc.0.tmp
- /data/data/####/923590e5a948cd57923015f8541cf3cc.1.tmp
- /data/data/####/952fd57f64fbc11f0c7b0ac5ee424258.0.tmp
- /data/data/####/952fd57f64fbc11f0c7b0ac5ee424258.1
- /data/data/####/952fd57f64fbc11f0c7b0ac5ee424258.1.tmp
- /data/data/####/9aeccc8ac824a7a9_0
- /data/data/####/ACCS_BINDumeng;5912cd5f1061d264c8000455.xml
- /data/data/####/ACCS_SDK.xml
- /data/data/####/ACCS_SDK_CHANNEL.xml
- /data/data/####/ACCS_SDK_CHANNEL.xml.bak
- /data/data/####/AGOO_BIND.xml
- /data/data/####/Agoo_AppStore.xml
- /data/data/####/Alvin2.xml
- /data/data/####/BOOT_AD_CONFIG.xml
- /data/data/####/CONFIG.xml
- /data/data/####/CONFIG.xml.bak
- /data/data/####/CUSTOM_CONFIG.xml
- /data/data/####/CUSTOM_CONFIG.xml.bak
- /data/data/####/ContextData.xml
- /data/data/####/Cookies
- /data/data/####/Cookies-journal
- /data/data/####/DEVICE_INFO.xml
- /data/data/####/DEVICE_INFO.xml.bak
- /data/data/####/DOWNLOAD_END_AD.xml
- /data/data/####/DRAINAGE.xml
- /data/data/####/END_AD.xml
- /data/data/####/END_AD_BOOT.xml
- /data/data/####/EVENT_CONFIG.xml
- /data/data/####/LIVE_CONFIG.xml
- /data/data/####/LIVE_CONFIG.xml.bak (deleted)
- /data/data/####/MessageStore.db
- /data/data/####/MessageStore.db-journal
- /data/data/####/MsgLogStore.db
- /data/data/####/MsgLogStore.db-journal
- /data/data/####/PERMANENT_DATA.xml
- /data/data/####/PLAY.xml
- /data/data/####/PLAY_CONFIG.xml
- /data/data/####/PROXYDATA.xml
- /data/data/####/STREAM_CONFIG_V2.xml
- /data/data/####/SWITCH_CONFIG.xml
- /data/data/####/SYSTEM_INFO.xml
- /data/data/####/TAG_URL_SPEC_STREAM_IMAGE_NO_VIP.jpg
- /data/data/####/TAG_URL_SPEC_STREAM_IMAGE_VIP.jpg
- /data/data/####/TEA.xml
- /data/data/####/TEA.xml.bak
- /data/data/####/UM_PROBE_DATA.xml
- /data/data/####/Web Data
- /data/data/####/Web Data-journal
- /data/data/####/WebViewChromiumPrefs.xml
- /data/data/####/a4d8cd821c88d4c5c6864d2130740c9e.0.tmp
- /data/data/####/a4d8cd821c88d4c5c6864d2130740c9e.1
- /data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.0.tmp
- /data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.1
- /data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.1.tmp
- /data/data/####/ac113483425231e55f7291ce24e665ea.0.tmp
- /data/data/####/ac113483425231e55f7291ce24e665ea.1
- /data/data/####/ac113483425231e55f7291ce24e665ea.1.tmp
- /data/data/####/accs.db
- /data/data/####/accs.db-journal
- /data/data/####/ad_templates_1001.xml
- /data/data/####/ad_u_1001.xml
- /data/data/####/agoo.pid
- /data/data/####/agreement.xml
- /data/data/####/agreement.xml.bak
- /data/data/####/api.prefs.xml
- /data/data/####/api.prefs.xml.bak
- /data/data/####/applog_stats.xml
- /data/data/####/bc880a5046d64a76_0
- /data/data/####/bd79e0f7249e41fdd8ad7fd5bd327e55.0.tmp
- /data/data/####/bd79e0f7249e41fdd8ad7fd5bd327e55.1
- /data/data/####/bd79e0f7249e41fdd8ad7fd5bd327e55.1.tmp
- /data/data/####/bd_tea_agent.db
- /data/data/####/bd_tea_agent.db-journal
- /data/data/####/bugly_db_
- /data/data/####/bugly_db_-journal
- /data/data/####/c0968fa531339178b2ed07e203745184.0.tmp
- /data/data/####/c0968fa531339178b2ed07e203745184.1
- /data/data/####/c51cc440027266cf54f9a5bb6ed42dfa.0.tmp
- /data/data/####/c51cc440027266cf54f9a5bb6ed42dfa.1
- /data/data/####/c51cc440027266cf54f9a5bb6ed42dfa.1.tmp
- /data/data/####/c6f69eba0b8c5457_0
- /data/data/####/c95e8fe89978e95a87f3dc7734ccf9d8
- /data/data/####/cctv4.0
- /data/data/####/cctv4.0 (deleted)
- /data/data/####/channels.data
- /data/data/####/com.dianshijia.newlive.BETA_VALUES.xml
- /data/data/####/com.dianshijia.newlive_preferences.xml
- /data/data/####/conf.dat
- /data/data/####/crashrecord.xml
- /data/data/####/cuuid.xml
- /data/data/####/cuuid.xml.bak
- /data/data/####/d1d53c06ecdfb9c1_0
- /data/data/####/d2ed5397160ed6516b6104a98841b262.0
- /data/data/####/d2ed5397160ed6516b6104a98841b262.0.tmp
- /data/data/####/d2ed5397160ed6516b6104a98841b262.1
- /data/data/####/d5bdf84fbacd68c2_0
- /data/data/####/dW1weF9pbnRlcm5hbF8xNjk0MTMzMDg1NjAy;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNjk0MTMzMDkyNjMy;
- /data/data/####/dW1weF9wdXNoX2xhdW5jaF8xNjk0MTMzMTA2Mzk4;
- /data/data/####/dW1weF9wdXNoX3JlZ2lzdGVyXzE2OTQxMzMwOTYyNzY=;
- /data/data/####/device_identification_info.xml
- /data/data/####/device_preference_1001.xml
- /data/data/####/download_splash.xml
- /data/data/####/dy_live.xml
- /data/data/####/e942443ce0c3f38f931b5a36369c6b84.0.tmp
- /data/data/####/e942443ce0c3f38f931b5a36369c6b84.1.tmp
- /data/data/####/ebb3a33f8c89c81cf5b3efc0ba0be4f5.0.tmp
- /data/data/####/ebb3a33f8c89c81cf5b3efc0ba0be4f5.1.tmp
- /data/data/####/epg-cctv1-20230908.json
- /data/data/####/epg-cctv2-20230908.json
- /data/data/####/epg-cctv3-20230908.json
- /data/data/####/epg-cctv4-20230908.json
- /data/data/####/epg-cctv5-20230908.json
- /data/data/####/epg-cctv6-20230908.json
- /data/data/####/epg-cctv7-20230908.json
- /data/data/####/epg-cctv8-20230908.json
- /data/data/####/epg.dex
- /data/data/####/epg.dex.flock (deleted)
- /data/data/####/epg.jar
- /data/data/####/epg.tmp
- /data/data/####/event_db
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f4575992e468a15bc2bb991f8d834d74.0.tmp
- /data/data/####/f4575992e468a15bc2bb991f8d834d74.1
- /data/data/####/f4575992e468a15bc2bb991f8d834d74.1.tmp
- /data/data/####/f7f1052328059de22ef8e0b161a5b8dd2b0659a96189efe....0.tmp
- /data/data/####/f7f1052328059de22ef8e0b161a5b8dd2b0659a96189efe...0aca.0
- /data/data/####/faa09cfb3efe120858e9d9154f83b3df.0.tmp
- /data/data/####/faa09cfb3efe120858e9d9154f83b3df.1.tmp
- /data/data/####/fb6af786f26a2595b3be0ff754fb377a.0.tmp
- /data/data/####/fb6af786f26a2595b3be0ff754fb377a.1
- /data/data/####/header_custom.xml
- /data/data/####/i==1.2.0&&3.5.17_1694133087786_envelope.log
- /data/data/####/i==1.2.0&&3.5.17_1694133092713_envelope.log
- /data/data/####/index
- /data/data/####/info.xml
- /data/data/####/inject_track.xml
- /data/data/####/journal
- /data/data/####/kuyun.apk.tmp
- /data/data/####/kuyun_sdk.xml
- /data/data/####/last_sp_session.xml
- /data/data/####/launch.log
- /data/data/####/launcher_ad.data
- /data/data/####/local_crash_lock
- /data/data/####/log_manager.xml
- /data/data/####/log_manager.xml.bak
- /data/data/####/material_break_point_info.xml
- /data/data/####/message_accs_db
- /data/data/####/message_accs_db-journal
- /data/data/####/metrics_guid
- /data/data/####/native_record_lock
- /data/data/####/native_record_lock (deleted)
- /data/data/####/net_node.xml
- /data/data/####/okhttp_prefs.xml
- /data/data/####/package_infos.xml
- /data/data/####/player_strategy.xml
- /data/data/####/plugin.dex
- /data/data/####/plugin.dex.flock (deleted)
- /data/data/####/plugin.jar
- /data/data/####/plugin.tmp
- /data/data/####/plugin.tmp (deleted)
- /data/data/####/plugin_break_point_info.xml
- /data/data/####/plugin_config.xml
- /data/data/####/pp.dex
- /data/data/####/pp.dex.flock (deleted)
- /data/data/####/pp.jar
- /data/data/####/privacy_agreement
- /data/data/####/proc_auxv
- /data/data/####/promote.dex
- /data/data/####/promote.dex.flock (deleted)
- /data/data/####/promote.jar
- /data/data/####/promote.tmp (deleted)
- /data/data/####/risk_infos.xml
- /data/data/####/risk_user_info.xml
- /data/data/####/safe_mode_config.xml
- /data/data/####/sce_config.xml
- /data/data/####/security_info
- /data/data/####/session_cache
- /data/data/####/session_cache.crc
- /data/data/####/settings.prefs
- /data/data/####/settings.prefs.crc
- /data/data/####/simple-main-msg.dat
- /data/data/####/simple-main-req.dat
- /data/data/####/skin_cache_name.xml
- /data/data/####/snssdk_openudid.xml
- /data/data/####/snssdk_openudid.xml.bak
- /data/data/####/sp_key_stream.xml
- /data/data/####/spider_prefs.xml
- /data/data/####/spider_prefs.xml.bak
- /data/data/####/stream_report.xml
- /data/data/####/stream_report.xml.bak
- /data/data/####/t==8.1.3&&3.5.17_1694133085850_envelope.log
- /data/data/####/the-real-index
- /data/data/####/tv_name_id_map.xml
- /data/data/####/tvcore.tmp
- /data/data/####/tvcore.tmp (deleted)
- /data/data/####/tvlive2.db
- /data/data/####/tvlive2.db-journal
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_message_state.xml
- /data/data/####/user.xml
- /data/data/####/user_agreement
- /data/data/####/webview_data.lock
- /data/data/####/x_google_ad_s_id_123
- /data/data/####/xs.apk
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/ddev.data
- /data/media/####/deviceToken
- /data/media/####/device_parameters.dat
- /data/media/####/flag.data
- /data/media/####/sysid.dat
- /data/media/####/uuid.data
- /data/misc/####/primary.prof
Miscellaneous:
Executes the following shell scripts:
- /system/bin/cat /proc/cpuinfo
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop
- cat /sys/class/net/wlan0/address
- chmod 777 /data/user/0/<Package>/files/.honor0
- getprop
- getprop ro.build.version.emui
- getprop ro.letv.release.version
- getprop ro.vivo.os.build.display.id
- ls /
- ls /sys/class/thermal
- pm install -r /data/user/0/<Package>/files/xs.apk
- sh
- su
Loads the following dynamic libraries:
- libBugly
- libEncryptorP
- libc++_shared
- libmmkv
- libsce
- libtnet-3.1.14
- libtvcore
Uses the following algorithms to encrypt data:
- AES
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- DES
- RSA-ECB-PKCS1Padding
Uses the following algorithms to decrypt data:
- AES
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- DES
- RSA-ECB-PKCS1Padding
Uses elevated priveleges.
Accesses the ITelephony private interface.
Gets information about location.
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Gets information about installed apps.
Gets information about running apps.
Adds tasks to the system scheduler.
Displays its own windows over windows of other apps.
Requests the system alert window permission.
