Android.RemoteCode.8145

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.RemoteCode.358.origin

Network activity:

Connects to:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) na61-####.wagbr####.ali####.####.com:80
TCP(HTTP/1.1) 2####.107.1.65:80
TCP(HTTP/1.1) cdn.api.dianshi####.com:80
TCP(HTTP/1.1) and####.b####.qq.com:80
TCP(HTTP/1.1) api.dianshi####.com:80
TCP(HTTP/1.1) dd2.wuko####.com:80
TCP(HTTP/1.1) 1####.23.148.191:8802
TCP(HTTP/1.1) vod####.ip####.q####.####.com:80
TCP(HTTP/1.1) vsc.a####.miguv####.com:7114
TCP(HTTP/1.1) pay.dianshi####.com:80
TCP(HTTP/1.1) detec####.math####.cn:80
TCP(HTTP/1.1) 1####.23.148.191:8801
TCP(HTTP/1.1) cdn.dianshi####.com:80
TCP(HTTP/1.1) 39.1####.226.196:8801
TCP(HTTP/1.1) hub.dianshi####.com:80
TCP(HTTP/1.1) c####.dianshi####.com.####.com:80
TCP(HTTP/1.1) pro.wildpet####.com:201
TCP(HTTP/1.1) g####.dianshi####.com:80
TCP(HTTP/1.1) newap####.math####.cn:80
TCP(HTTP/1.1) p####.api.math####.cn:80
TCP(HTTP/1.1) 64.2####.161.94:80
TCP(HTTP/1.1) m.cdn.cmv####.cn:80
TCP(HTTP/1.1) t####.dians####.com:80
TCP(HTTP/1.1) api.o####.ads####.cn:80
TCP(HTTP/1.1) we####.miguv####.com:80
TCP(HTTP/1.1) api.mydians####.com:80
TCP(HTTP/1.1) ne####.dianshi####.com:80
TCP(HTTP/1.1) adash####.man.aliy####.com:80
TCP(HTTP/1.1) pro.wildpet####.com:80
TCP(HTTP/1.1) l####.b####.com:80
TCP(HTTP/1.1) 2####.107.1.1:80
TCP(HTTP/1.1) 1####.161.124.146:12340
TCP(HTTP/1.1) 39.1####.143.44:8001
TCP(HTTP/1.1) co####.ssp.math####.cn:80
TCP(HTTP/1.1) g3.l####.com:80
TCP(HTTP/1.1) tra####.dians####.com:80
TCP(TLS/1.0) and####.google####.com:443
TCP(TLS/1.0) rr9---s####.g####.com:443
TCP(TLS/1.0) d####.100u####.com.####.net:443
TCP(TLS/1.0) msg.umengc####.com:443
TCP(TLS/1.0) hlszymg####.miguv####.cdn.####.cn:443
TCP(TLS/1.0) 2####.107.1.97:443
TCP(TLS/1.0) plb####.u####.com:443
TCP(TLS/1.0) u####.u####.com:443
TCP(TLS/1.0) h5####.g####.cmv####.cn:443
TCP(TLS/1.0) to####.volceap####.com.####.com:443
TCP(TLS/1.0) and####.a####.go####.com:443
TCP(TLS/1.0) k####.volceap####.com.####.com:443
TCP(TLS/1.0) 64.2####.161.94:443
TCP(TLS/1.2) 64.2####.161.94:443
TCP(TLS/1.2) 74.1####.131.103:443
TCP(TLS/1.2) and####.google####.com:443
TCP(TLS/1.2) 74.1####.205.100:443
TCP 1####.20.60.53:12354
TCP 1####.42.133.29:4010
TCP 39.82.2####.173:4010
TCP 1####.51.141.4:23429
TCP 1####.167.122.188:40259
TCP 1####.3.124.89:23429
TCP 27.1####.213.214:4010
UDP 1####.0.10.254:4010
TCP 2####.163.6.252:4010
TCP 1####.133.149.172:4010
TCP 36.25.2####.4:4683
TCP 4####.55.40.236:4010
TCP 61.1####.154.25:4010
TCP 2####.175.152.94:4010
UDP 39.1####.134.87:3479
UDP tm2.binst####.live:13
TCP 2####.201.38.220:23429
TCP 1####.147.218.164:4010
TCP 2####.190.76.221:4010
UDP and####.google####.com:443
TCP 1.1####.79.170:4010
TCP 1####.205.115.179:4010
UDP rr18---####.g####.com:443
TCP 1####.13.77.3:4010
TCP 1####.121.198.0:4010
TCP 36.2####.200.135:4010
TCP 1####.7.86.62:11719
TCP 1####.19.112.49:23429
TCP 1####.83.176.202:23429
TCP 42.1####.30.125:4010
TCP 1####.208.30.81:23429
TCP 58.21.1####.86:4010
TCP 1####.83.50.22:23429
UDP as3.binst####.live:3924
TCP 60.23.2####.100:38798
UDP tm2.binst####.live:3923
UDP tm1.binst####.live:3923
TCP 1####.248.130.116:4010
UDP 1####.92.164.146:3303
TCP 67.2####.19.191:4010
TCP 1####.151.160.154:4010
UDP 1####.230.29.127:2829
TCP 2####.239.176.53:4010
UDP 1####.52.254.217:2523
TCP 1####.224.113.190:4010
UDP 1####.18.97.159:2389
TCP 1####.11.231.56:23429
UDP tm1.binst####.live:13
UDP tm4.binst####.live:3924
TCP 1####.105.145.85:23429
UDP 1####.100.243.133:20356
TCP 1####.25.254.31:9998
TCP 42.87.2####.28:4010
UDP 1####.49.237.241:3431
UDP 1####.152.188.205:2882
TCP 1####.217.237.32:4010
TCP 1####.175.113.191:4010
TCP 1####.108.46.152:4010
UDP as3.binst####.live:3923
TCP 2####.93.118.229:4010
TCP 42.7.1####.241:4010
UDP 36.47.1####.170:1025
UDP 39.1####.62.19:3478
UDP 1####.227.156.127:3406
TCP 1####.116.152.172:4010
TCP 42.52.1####.207:4010
UDP 27.38.1####.220:3039
TCP 1####.188.5.154:4010
UDP 60.2####.160.169:2025
TCP 1####.244.67.185:23429
UDP 1####.194.163.20:443
TCP 1####.0.10.254:57008
TCP 1####.238.17.103:23429
TCP 1####.234.118.138:23429
TCP 1####.168.118.36:4010
TCP 1####.126.28.3:4010
UDP tm4.binst####.live:3923
TCP 1####.55.162.70:41144
TCP 2####.21.3.208:23429
TCP 2####.201.221.55:41403
TCP 1####.111.247.144:4010
TCP 61.1####.198.94:4010
UDP 2####.88.195.81:3276
TCP 7####.69.68.212:23429
UDP 1####.160.120.97:3109
TCP ms####.m.u####.com:443
UDP 2####.255.255.250:1900
UDP as3.binst####.live:13
TCP 42.6.1####.143:4010
TCP 2####.8.193.241:23429
TCP 1####.0.10.254:39648
TCP 1####.160.9.48:23429
UDP 1####.39.17.206:1111
TCP 1####.146.119.37:4010
TCP 4####.58.14.4:4010
UDP 1####.35.224.129:1811
TCP 1.48.2####.75:4010
UDP 1####.15.18.122:3679
UDP 1####.113.17.135:1811
TCP 83.1####.223.194:4010
TCP 60.19.1####.229:4010
TCP 1####.3.146.172:4010

DNS requests:

a####.man.aliy####.com
amdc####.m.ta####.com
and####.a####.go####.com
and####.b####.qq.com
and####.google####.com
api.dianshi####.com
api.mydians####.com
api.o####.ads####.cn
as1.binst####.live
as2.binst####.live
as3.binst####.live
as4.binst####.live
c####.dianshi####.com
cdn.api.dianshi####.com
cdn.dianshi####.com
cha####.cdn.dianshi####.com
co####.ssp.math####.cn
d####.100u####.com
dd2.wuko####.com
detec####.math####.cn
dy.cn.wildpet####.xyz
g####.dianshi####.com
g3.l####.com
h5####.g####.cmv####.cn
hlszymg####.miguv####.com
hub.dianshi####.com
ip.ta####.com
k####.volceap####.com
l####.b####.com
m####.go####.com
m.miguv####.com
msg.umengc####.com
ne####.dianshi####.com
newap####.math####.cn
p####.api.math####.cn
p####.dianshi####.com
pay.dianshi####.com
plb####.u####.com
pro.wildpet####.com
rr18---####.g####.com
rr9---s####.g####.com
t####.dians####.com
tm1.binst####.live
tm2.binst####.live
tm3.binst####.live
tm4.binst####.live
to####.volceap####.com
tra####.dians####.com
tv.hub.dianshi####.com
u####.u####.com
umen####.m.ta####.com
umengj####.m.ta####.com
vsc.a####.miguv####.com
we####.miguv####.com
yk.miguv####.com

HTTP GET requests:

api.dianshi####.com/api/5cced51e11f51c6b/GWbxGoRACFqH?info=####
api.dianshi####.com/api/82210fa1213139c6/gYvYWuhVHLlz?info=####
api.dianshi####.com/api/ad/carousel
api.dianshi####.com/api/channel/v1/channelGroup/template
api.dianshi####.com/api/channel/v1/config
api.dianshi####.com/api/channel/v1/highFrag
api.dianshi####.com/api/channel/v1/newChannel
api.dianshi####.com/api/coin/info
api.dianshi####.com/api/config/deviceCompat?brand=####&model=####&osver=...
api.dianshi####.com/api/config/lookBack/list
api.dianshi####.com/api/config/prompt/list
api.dianshi####.com/api/config/selfStart/config
api.dianshi####.com/api/config/shortVideo/list
api.dianshi####.com/api/config/v1/channelQrcode/list
api.dianshi####.com/api/config/v1/common/conf
api.dianshi####.com/api/config/v1/tvMenu/listV2
api.dianshi####.com/api/config/v1/vipTryWatchLive/list
api.dianshi####.com/api/config/vipTryWatch/list?
api.dianshi####.com/api/pan/v1/config/promotional
api.dianshi####.com/api/pan/v3/ufile/list?type=####&page=####&size=####&...
api.dianshi####.com/api/point/v1/lookback/config
api.dianshi####.com/api/point/v1/retain/popup
api.dianshi####.com/api/programs/channel/bg
api.dianshi####.com/api/programs/exclusive/unlock
api.dianshi####.com/api/programs/logout/bg
api.dianshi####.com/api/redpack/info
api.dianshi####.com/api/song/get?page=####&size=####&tagCode=####
api.dianshi####.com/api/task/get?
api.dianshi####.com/api/tvSkin?menunum=####
api.dianshi####.com/api/v1/ad/highDefinitionSource/query
api.dianshi####.com/api/v1/ad/tvConfig
api.dianshi####.com/api/v1/cloudConfig?ts=####
api.dianshi####.com/api/v1/play/control
api.dianshi####.com/api/v1/tv/channelRecommend/list?channelId=####&progr...
api.dianshi####.com/api/v19/ad/config?type=####&ts=####
api.dianshi####.com/api/v2/banner/menu/config
api.dianshi####.com/api/v2/user/wx/helplogin
api.dianshi####.com/api/v24/apiConfig
api.dianshi####.com/api/v5/offProgram
api.dianshi####.com/api/voice/v2/list
api.dianshi####.com/cfbqbczu?ts=####
api.dianshi####.com/ipInfo
api.mydians####.com/api/payorder/equity?deviceId=####&equityType=####&si...
api.mydians####.com/api/push/token?channel=####&token=####&type=####
api.mydians####.com/api/user/equity/condition
api.mydians####.com/api/user/v1/hlc/show
api.mydians####.com/api/v1/plugin?module=####&verCode=####&sdk=####&aver...
api.mydians####.com/api/v1/shin?injectConditions=####
api.mydians####.com/api/v1/tv/hkCategory/list
api.mydians####.com/api/v1/tv/powerBoot/image
api.mydians####.com/api/v19/ad/config?type=####&ts=####
api.mydians####.com/ipInfo
c####.dianshi####.com.####.com/static/ad/18f759157732644516c2d33c5a39882...
c####.dianshi####.com.####.com/static/ad/2d5aa75a8115905f3acc7cb84bf73ca...
c####.dianshi####.com.####.com/static/ad/4c15d6a052a20b87ae03a0fe5eae169...
c####.dianshi####.com.####.com/static/channel/poster/cctv4.jpg
c####.dianshi####.com.####.com/static/plugin/2c33bd0922058fab1090c221310...
c####.dianshi####.com.####.com/static/plugin/434f9e597755246cfd40f6560c6...
c####.dianshi####.com.####.com/static/plugin/4433709d41777b11ec8dba036a1...
c####.dianshi####.com.####.com/static/plugin/7b2267f9f4f7d9e7c3a360950e3...
c####.dianshi####.com.####.com/static/plugin/e61e185ab965bdd02d59332804a...
c####.dianshi####.com.####.com/static/plugin/e72ccc3cb278342d49769eb0a49...
cdn.api.dianshi####.com/api/programs?cid=####&date=####&tm=####
cdn.dianshi####.com/assets/mobile/temp/ts_cf.json?ts=####
cdn.dianshi####.com/assets/tvTea.json
cdn.dianshi####.com/config/channel/voice_mapping.json?t=####
cdn.dianshi####.com/pkg/tv3.0/image/gw_time.txt
cdn.dianshi####.com/pkg/tv3.0/image/hdlogo.png
cdn.dianshi####.com/pkg/tv3.0/image/normallogo.png
co####.ssp.math####.cn/api/v2/SDKCommonConfig?channelCode=####&version=#...
co####.ssp.math####.cn/api/v3/sdkTestConfig?send_ts=####
dd2.wuko####.com/tvclient/sdk?func=####&package=####
detec####.math####.cn/favicon.ico
detec####.math####.cn/images/sdk/detective.jpeg
detec####.math####.cn/js/finger20220224.js
detec####.math####.cn/sdk/checkCookie/httpClient?uniqueId=####&androidVe...
detec####.math####.cn/sdk/checkCookie/webview?uniqueId=####&androidVersi...
detec####.math####.cn/sdk/checkRedirect?uniqueId=####&androidVersion=###...
detec####.math####.cn/sdk/filterHeader/httpClient?uniqueId=####&androidV...
detec####.math####.cn/sdk/filterHeader/webview?uniqueId=####&androidVers...
detec####.math####.cn/sdk/openWebview?uniqueId=####&androidVersion=####&...
detec####.math####.cn/sdk/redirectHttpClientSecondPage?uniqueId=####&and...
detec####.math####.cn/sdk/redirectWebviewSecondPage?uniqueId=####&androi...
detec####.math####.cn/sdk/setCookie/httpClient?uniqueId=####&androidVers...
detec####.math####.cn/sdk/setCookie/webview?uniqueId=####&androidVersion...
detec####.math####.cn/sdk/validateCookie/httpClient?uniqueId=####&androi...
detec####.math####.cn/sdk/validateCookie/webview?uniqueId=####&androidVe...
detec####.math####.cn/sdk/webviewBasic?uniqueId=####&androidVersion=####...
g####.dianshi####.com/api/11519ac1c893737a/ahhXIFrwnvLa?info=####
g####.dianshi####.com/api/509a4cb99bd39a5f/NbxvoKJywzYR?info=####
g####.dianshi####.com/api/f6d02ae2031b1d3f/iYvkpRiKdfdW?info=####
g3.l####.com/r?format=####
h5####.g####.cmv####.cn:443/wd_r2/cctv/cctv4hd/600/index.m3u8?msisdn=###...
k####.volceap####.com.####.com:443/service/2/app_alert_check/?os_api=###...
l####.b####.com/jquery/2.1.4/jquery.min.js
m.cdn.cmv####.cn/playurl/v1/play/playurlh5?contId=####&rateType=####
na61-####.wagbr####.ali####.####.com/service/getIpInfo.php?ip=####
ne####.dianshi####.com/
p####.api.math####.cn/ip?send_ts=####
pay.dianshi####.com/api/payorder/equity?deviceId=####&equityType=####&si...
pay.dianshi####.com/api/v24/apiConfig
tra####.dians####.com/config?appid=####&uuid=####&cver=####
vod####.ip####.q####.####.com/api/channel/v1/template/detail?templateKey...
we####.miguv####.com/gateway/playurl/v3/play/playurl?contId=####&rateTyp...

HTTP POST requests:

adash####.man.aliy####.com/man/api?ak=####&s=####
and####.b####.qq.com/rqd/async?aid=####
api.dianshi####.com/api/ad/infoGroup
api.dianshi####.com/api/config/v1/pay/document
api.dianshi####.com/api/pay/documents
api.dianshi####.com/api/v2/device/info?duid=####&c=####&
api.dianshi####.com/api/v2/device/start/info
api.mydians####.com/api/v1/user_risk_device/getUserRiskUid
api.o####.ads####.cn/thirdparty/encsapi/enChn2
g####.dianshi####.com/api/v2/device/info?duid=####&c=####&
hub.dianshi####.com/u
k####.volceap####.com.####.com:443/service/2/app_log/?device_platform=##...
k####.volceap####.com.####.com:443/service/2/device_register/?os_api=###...
k####.volceap####.com.####.com:443/service/2/log_settings/?device_platfo...
msg.umengc####.com:443/tag/add
newap####.math####.cn/titan/monitor/device_info
plb####.u####.com:443/umpx_internal
plb####.u####.com:443/umpx_push_launch
plb####.u####.com:443/umpx_push_register
pro.wildpet####.com/dycn/update
pro.wildpet####.com:201/proxy/get?e=####&r=####
t####.dians####.com/v1/new_peer
t####.dians####.com/v1/peer_status
to####.volceap####.com.####.com:443/service/2/app_log/?device_platform=#...
u####.u####.com:443/unify_logs
vsc.a####.miguv####.com:7114/EPG/VPE/PHONE/Authenticate

File system changes:

Creates the following files:

/data/data/####/.hptc_kache_com.dsj.pj
/data/data/####/.imprint
/data/data/####/.pylock
/data/data/####/032ef2bf9275e358173be6cc695f1014.0.tmp
/data/data/####/032ef2bf9275e358173be6cc695f1014.1
/data/data/####/032ef2bf9275e358173be6cc695f1014.1.tmp
/data/data/####/0cdf16c8e9c7ec49_0
/data/data/####/0e627ae72e2cc942e2e392f26d13cada.0.tmp
/data/data/####/0e627ae72e2cc942e2e392f26d13cada.1
/data/data/####/0e627ae72e2cc942e2e392f26d13cada.1.tmp
/data/data/####/1002
/data/data/####/1004
/data/data/####/142672fc648cdd12fa5487cce7849c45.0.tmp
/data/data/####/142672fc648cdd12fa5487cce7849c45.1
/data/data/####/142672fc648cdd12fa5487cce7849c45.1.tmp
/data/data/####/14e5b06a2221057b8b675749037230bb.0.tmp
/data/data/####/14e5b06a2221057b8b675749037230bb.1
/data/data/####/14e5b06a2221057b8b675749037230bb.1.tmp
/data/data/####/168436@bd_tea_agent.db-journal
/data/data/####/1694811874810.ts
/data/data/####/1694811906026.ts
/data/data/####/1e6803d91ce9dd999608566f39994c3d.0.tmp
/data/data/####/1e6803d91ce9dd999608566f39994c3d.1
/data/data/####/1e6803d91ce9dd999608566f39994c3d.1.tmp
/data/data/####/1f85f809011a2aaa764e841c2ff79042.0
/data/data/####/1f85f809011a2aaa764e841c2ff79042.1
/data/data/####/20c2504aa3076aa1230fd4744ab9429b.0.tmp
/data/data/####/20c2504aa3076aa1230fd4744ab9429b.1
/data/data/####/20c2504aa3076aa1230fd4744ab9429b.1.tmp
/data/data/####/2221ba1260a95d28039abe83020c705b.0.tmp
/data/data/####/2221ba1260a95d28039abe83020c705b.1
/data/data/####/2221ba1260a95d28039abe83020c705b.1.tmp
/data/data/####/255d7c948b05c60628a35485c273016f.0.tmp
/data/data/####/255d7c948b05c60628a35485c273016f.1
/data/data/####/255d7c948b05c60628a35485c273016f.1.tmp
/data/data/####/28a0dee0f6d836c41541374c85b867dd.0.tmp
/data/data/####/28a0dee0f6d836c41541374c85b867dd.1
/data/data/####/28a0dee0f6d836c41541374c85b867dd.1.tmp
/data/data/####/2d8b3a974771a653f6cc2ee5d88dc341
/data/data/####/2ef4f85a54546f22d4fef524785f853f.0.tmp
/data/data/####/2ef4f85a54546f22d4fef524785f853f.1.tmp
/data/data/####/318277675.dex
/data/data/####/318277675.dex.flock (deleted)
/data/data/####/318277675.jar
/data/data/####/318277675.jar.temp
/data/data/####/321ec9e85fd58cc7690da12f8925d33c.0.tmp
/data/data/####/321ec9e85fd58cc7690da12f8925d33c.1
/data/data/####/321ec9e85fd58cc7690da12f8925d33c.1.tmp
/data/data/####/35d01ed208878a76193bcdb71a13c949.0.tmp
/data/data/####/35d01ed208878a76193bcdb71a13c949.1
/data/data/####/374f28aeaeb79c5854998e830f974845.0.tmp
/data/data/####/374f28aeaeb79c5854998e830f974845.1
/data/data/####/374f28aeaeb79c5854998e830f974845.1.tmp
/data/data/####/379981f286d2e6e4b16c0c25c8a68734.0.tmp
/data/data/####/379981f286d2e6e4b16c0c25c8a68734.1.tmp
/data/data/####/3980c7fb5baec570fb5f5133e58bf92b.0.tmp
/data/data/####/3980c7fb5baec570fb5f5133e58bf92b.1
/data/data/####/3980c7fb5baec570fb5f5133e58bf92b.1.tmp
/data/data/####/3b7371c07eefca10f31786447962b669
/data/data/####/42897a2de7f49fc0ffb25372a9c6c153.0.tmp
/data/data/####/42897a2de7f49fc0ffb25372a9c6c153.1
/data/data/####/42897a2de7f49fc0ffb25372a9c6c153.1.tmp
/data/data/####/46dfadf7049b74d8733d290eeb93bbdc.0.tmp
/data/data/####/46dfadf7049b74d8733d290eeb93bbdc.1
/data/data/####/46dfadf7049b74d8733d290eeb93bbdc.1.tmp
/data/data/####/4bd4c9136cd47ad5fe3cbcc8d6a7c853.0.tmp
/data/data/####/4bd4c9136cd47ad5fe3cbcc8d6a7c853.1
/data/data/####/4bd4c9136cd47ad5fe3cbcc8d6a7c853.1.tmp
/data/data/####/4c149f56a2f37c4bc78ab80b0ba77450.0.tmp
/data/data/####/4c149f56a2f37c4bc78ab80b0ba77450.1
/data/data/####/511a91d6a422c68db04d252d67d293aa.0.tmp
/data/data/####/511a91d6a422c68db04d252d67d293aa.1
/data/data/####/52ea2186e7a43979b2ff3c6e44f6d3c46cbf6d9318d8efc....0.tmp
/data/data/####/52ea2186e7a43979b2ff3c6e44f6d3c46cbf6d9318d8efc...cb33.0
/data/data/####/543d86af005252d72375a7cdf0cdad12.0.tmp
/data/data/####/543d86af005252d72375a7cdf0cdad12.1
/data/data/####/543d86af005252d72375a7cdf0cdad12.1.tmp
/data/data/####/54fdf49dff9a9c963faaa62934daf940.0.tmp
/data/data/####/54fdf49dff9a9c963faaa62934daf940.1
/data/data/####/54fdf49dff9a9c963faaa62934daf940.1.tmp
/data/data/####/58095b0c6485c221_0
/data/data/####/58095b0c6485c221_1
/data/data/####/5844896571f1f137d89e19827e00c4ee.0.tmp
/data/data/####/5844896571f1f137d89e19827e00c4ee.1
/data/data/####/5844896571f1f137d89e19827e00c4ee.1.tmp
/data/data/####/5891d96be8793ce4e3251d552f837b3e.0.tmp
/data/data/####/5891d96be8793ce4e3251d552f837b3e.1
/data/data/####/5891d96be8793ce4e3251d552f837b3e.1.tmp
/data/data/####/5b274235a6b15d26de5de29ed30668fa.0.tmp
/data/data/####/5b274235a6b15d26de5de29ed30668fa.1
/data/data/####/5b274235a6b15d26de5de29ed30668fa.1.tmp
/data/data/####/601fed44b8cc97f903b2146b86d31290.0.tmp
/data/data/####/601fed44b8cc97f903b2146b86d31290.1
/data/data/####/601fed44b8cc97f903b2146b86d31290.1.tmp
/data/data/####/63cde9655e58a6bf5cd3fa408cabc928.0.tmp
/data/data/####/63cde9655e58a6bf5cd3fa408cabc928.1
/data/data/####/63cde9655e58a6bf5cd3fa408cabc928.1.tmp
/data/data/####/6609de9a79fb952512e70415776ca65c.0.tmp
/data/data/####/6609de9a79fb952512e70415776ca65c.1
/data/data/####/6609de9a79fb952512e70415776ca65c.1.tmp
/data/data/####/6b219deb5c2d6dd05cbd3c089d5ed2d8
/data/data/####/6eb68ea955d68f02_0
/data/data/####/70298c6eb6032706_0
/data/data/####/70298c6eb6032706_1
/data/data/####/705b4b56f751f7d8fe4044bfa442a8eb.0.tmp
/data/data/####/705b4b56f751f7d8fe4044bfa442a8eb.1
/data/data/####/705b4b56f751f7d8fe4044bfa442a8eb.1.tmp
/data/data/####/71aabc12ce4f8996_0
/data/data/####/7c043bd473f80c28896427247a603a1e.0.tmp
/data/data/####/7c043bd473f80c28896427247a603a1e.1
/data/data/####/7c043bd473f80c28896427247a603a1e.1.tmp
/data/data/####/7d547b80782fce05_0
/data/data/####/80523ba78a64d04aac756f25e9d5f750.0.tmp
/data/data/####/80523ba78a64d04aac756f25e9d5f750.1
/data/data/####/80523ba78a64d04aac756f25e9d5f750.1.tmp
/data/data/####/81b02692d6e9c790a85f08f4e48be0ce.0.tmp
/data/data/####/81b02692d6e9c790a85f08f4e48be0ce.1
/data/data/####/8883a79baa010ecc599a4fda824745b4.0.tmp
/data/data/####/8883a79baa010ecc599a4fda824745b4.1
/data/data/####/8883a79baa010ecc599a4fda824745b4.1.tmp
/data/data/####/907e8eb71986c4efa82809d216c97011.0.tmp
/data/data/####/907e8eb71986c4efa82809d216c97011.1
/data/data/####/907e8eb71986c4efa82809d216c97011.1.tmp
/data/data/####/90fa889de6b696e137e1d89d8d82b136.0.tmp
/data/data/####/90fa889de6b696e137e1d89d8d82b136.1
/data/data/####/90fa889de6b696e137e1d89d8d82b136.1.tmp
/data/data/####/941584d6d6406b06e8076ac9e3dc5752.0.tmp
/data/data/####/941584d6d6406b06e8076ac9e3dc5752.1.tmp
/data/data/####/96aaea1856cc7fff048f72be81057924.0
/data/data/####/96aaea1856cc7fff048f72be81057924.0.tmp
/data/data/####/96aaea1856cc7fff048f72be81057924.1
/data/data/####/96aaea1856cc7fff048f72be81057924.1.tmp
/data/data/####/970c2c5453e0184890cc63c59b9b337f.0.tmp
/data/data/####/970c2c5453e0184890cc63c59b9b337f.1
/data/data/####/970c2c5453e0184890cc63c59b9b337f.1.tmp
/data/data/####/9aeccc8ac824a7a9_0
/data/data/####/ACCS_BINDumeng;637d8d2df8fb1344680d1a7d.xml
/data/data/####/ACCS_SDK.xml
/data/data/####/ACCS_SDK_CHANNEL.xml
/data/data/####/ACCS_SDK_CHANNEL.xml.bak
/data/data/####/AGOO_BIND.xml
/data/data/####/Agoo_AppStore.xml
/data/data/####/Alvin2.xml
/data/data/####/CONFIG.xml
/data/data/####/CONFIG.xml.bak
/data/data/####/CUSTOM_CONFIG.xml
/data/data/####/ContextData.xml
/data/data/####/Cookies-journal
/data/data/####/DEVICE_INFO.xml
/data/data/####/DOWNLOAD_END_AD.xml
/data/data/####/DOWNLOAD_START_AD.xml
/data/data/####/DRAINAGE.xml
/data/data/####/END_AD.xml
/data/data/####/END_AD_BOOT.xml
/data/data/####/EVENT_CONFIG.xml
/data/data/####/EVENT_CONFIG.xml.bak
/data/data/####/IpConfig.xml
/data/data/####/KEY_SP_NAME_RISK.xml
/data/data/####/LIVE_CONFIG.xml
/data/data/####/LIVE_CONFIG.xml.bak
/data/data/####/MessageStore.db-journal
/data/data/####/MsgLogStore.db-journal
/data/data/####/OFFLINE.xml
/data/data/####/PERMANENT_DATA.xml
/data/data/####/PERMANENT_DATA.xml.bak
/data/data/####/PHOTO_INFO.xml
/data/data/####/PLAY.xml
/data/data/####/PLAY_CONFIG.xml
/data/data/####/PLAY_CONFIG.xml.bak
/data/data/####/PROXYDATA.xml
/data/data/####/STREAM_CONFIG_V2.xml
/data/data/####/SWITCH_CONFIG.xml
/data/data/####/SWITCH_CONFIG.xml.bak
/data/data/####/SYSTEM_INFO.xml
/data/data/####/TAG_URL_SPEC_STREAM_IMAGE_NO_VIP.jpg
/data/data/####/TAG_URL_SPEC_STREAM_IMAGE_VIP.jpg
/data/data/####/TEA.xml
/data/data/####/UM_PROBE_DATA.xml
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/_global_cache.xml
/data/data/####/_global_cache.xml.bak
/data/data/####/a643d40c18f0ac7ae5c4ce5f888603d6.0.tmp
/data/data/####/a643d40c18f0ac7ae5c4ce5f888603d6.1
/data/data/####/a643d40c18f0ac7ae5c4ce5f888603d6.1.tmp
/data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.0.tmp
/data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.1
/data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.1.tmp
/data/data/####/a833d4a7a6f88602_0
/data/data/####/a9d75a62de0f3aa533c9ada22d0c3533.0
/data/data/####/a9d75a62de0f3aa533c9ada22d0c3533.0.tmp
/data/data/####/a9d75a62de0f3aa533c9ada22d0c3533.1
/data/data/####/a9d75a62de0f3aa533c9ada22d0c3533.1.tmp
/data/data/####/accs.db-journal
/data/data/####/agoo.pid
/data/data/####/api.prefs.xml
/data/data/####/api.prefs.xml.bak
/data/data/####/applog_stats.xml
/data/data/####/bc880a5046d64a76_0
/data/data/####/bdtracker_dr_migrate_detector.xml
/data/data/####/be2a2568b78aa8578016129a792ecab731e1c32dfa02abe....0.tmp
/data/data/####/bugly_db_-journal
/data/data/####/c0968fa531339178b2ed07e203745184.0.tmp
/data/data/####/c0968fa531339178b2ed07e203745184.1
/data/data/####/c2bad3572aef1317_0
/data/data/####/c6951e9702af6b6362d150ce081325e3.0.tmp
/data/data/####/c6951e9702af6b6362d150ce081325e3.1
/data/data/####/c6951e9702af6b6362d150ce081325e3.1.tmp
/data/data/####/cache_flow_count.xml
/data/data/####/cache_flow_count.xml.bak
/data/data/####/ccabc51e3be72d1f42c9dd205cc41d23
/data/data/####/cctv4.0
/data/data/####/cctv4.0 (deleted)
/data/data/####/channels.data
/data/data/####/com.dsj.pj.BETA_VALUES.xml
/data/data/####/com.dsj.pj_preferences.xml
/data/data/####/com.dsj.pj_preferences.xml.bak
/data/data/####/conf.dat
/data/data/####/count_shop_tip.xml
/data/data/####/crashrecord.xml
/data/data/####/cuuid.xml
/data/data/####/cuuid.xml.bak
/data/data/####/cuuid.xml.bak (deleted)
/data/data/####/d1999028a5653df7011b0c99a38da37f.0.tmp
/data/data/####/d1999028a5653df7011b0c99a38da37f.1
/data/data/####/d1999028a5653df7011b0c99a38da37f.1.tmp
/data/data/####/d2ed5397160ed6516b6104a98841b262.0.tmp
/data/data/####/d2ed5397160ed6516b6104a98841b262.1
/data/data/####/d2ed5397160ed6516b6104a98841b262.1.tmp
/data/data/####/d5bdf84fbacd68c2_0
/data/data/####/d6b07bb3308ff5cf72b33dfd637bdfeb
/data/data/####/dW1weF9pbnRlcm5hbF8xNjk0ODExODM2Mzgz;
/data/data/####/dW1weF9pbnRlcm5hbF8xNjk0ODExODMwOTIx;
/data/data/####/dW1weF9wdXNoX2xhdW5jaF8xNjk0ODExODQ1MzUw;
/data/data/####/dW1weF9wdXNoX3JlZ2lzdGVyXzE2OTQ4MTE4MzY1MDY=;
/data/data/####/download_splash.xml
/data/data/####/download_splash.xml.bak
/data/data/####/dy_live.xml
/data/data/####/e53dfa405fea0315e2eee0b830dd5897.0.tmp
/data/data/####/e53dfa405fea0315e2eee0b830dd5897.1
/data/data/####/e53dfa405fea0315e2eee0b830dd5897.1.tmp
/data/data/####/e5d0fed597939070eee37bb319938a03.0.tmp
/data/data/####/e5d0fed597939070eee37bb319938a03.1
/data/data/####/ec7645de7bb145a127656cfd115402b2.0.tmp
/data/data/####/ec7645de7bb145a127656cfd115402b2.1
/data/data/####/ec7645de7bb145a127656cfd115402b2.1.tmp
/data/data/####/ef7b540991770149d3d8a22f114a1810.0.tmp
/data/data/####/ef7b540991770149d3d8a22f114a1810.1
/data/data/####/ef7b540991770149d3d8a22f114a1810.1.tmp
/data/data/####/epg-cctv1-20230916.json
/data/data/####/epg-cctv2-20230916.json
/data/data/####/epg-cctv3-20230916.json
/data/data/####/epg-cctv4-20230916.json
/data/data/####/epg-cctv5-20230916.json
/data/data/####/epg-cctv6-20230916.json
/data/data/####/epg-cctv7-20230916.json
/data/data/####/epg-cctv8-20230916.json
/data/data/####/epg-cctv9-20230916.json
/data/data/####/epg.dex
/data/data/####/epg.dex.flock (deleted)
/data/data/####/epg.jar
/data/data/####/epg.tmp
/data/data/####/event_db
/data/data/####/exchangeIdentity.json
/data/data/####/exid.dat
/data/data/####/f023f1756aa55446fae2a36c7cf10aa2.0.tmp
/data/data/####/f023f1756aa55446fae2a36c7cf10aa2.1
/data/data/####/f023f1756aa55446fae2a36c7cf10aa2.1.tmp
/data/data/####/faa09cfb3efe120858e9d9154f83b3df.0.tmp
/data/data/####/faa09cfb3efe120858e9d9154f83b3df.1
/data/data/####/faa09cfb3efe120858e9d9154f83b3df.1.tmp
/data/data/####/fb6af786f26a2595b3be0ff754fb377a.0
/data/data/####/fb6af786f26a2595b3be0ff754fb377a.0.tmp
/data/data/####/fb6af786f26a2595b3be0ff754fb377a.1
/data/data/####/fc998cc78d282345_0
/data/data/####/header_custom.xml
/data/data/####/header_custom.xml.bak
/data/data/####/httpdns_config_cache.xml
/data/data/####/httpdns_config_cache.xml.bak
/data/data/####/i==1.2.0&&3.10.23_1694811830484_envelope.log
/data/data/####/i==1.2.0&&3.10.23_1694811836394_envelope.log
/data/data/####/index
/data/data/####/info.xml
/data/data/####/inject_track.xml
/data/data/####/journal
/data/data/####/last_sp_session.xml
/data/data/####/launcher_ad.data
/data/data/####/libtvcore.so
/data/data/####/local_crash_lock
/data/data/####/local_crash_lock (deleted)
/data/data/####/message_accs_db
/data/data/####/message_accs_db-journal
/data/data/####/metrics_guid
/data/data/####/native_record_lock
/data/data/####/net_node.xml
/data/data/####/offline.data
/data/data/####/okhttp_prefs.xml
/data/data/####/package_infos.xml
/data/data/####/package_infos.xml.bak
/data/data/####/player_strategy.xml
/data/data/####/plugin.dex
/data/data/####/plugin.dex.flock (deleted)
/data/data/####/plugin.tmp
/data/data/####/plugin_config.xml
/data/data/####/plugin_file.name
/data/data/####/pp.dex
/data/data/####/pp.dex.flock (deleted)
/data/data/####/pp.tmp
/data/data/####/proc_auxv
/data/data/####/product_intercept.xml
/data/data/####/promote.dex
/data/data/####/promote.dex.flock (deleted)
/data/data/####/promote.jar
/data/data/####/promote.tmp
/data/data/####/risk_infos.xml
/data/data/####/risk_infos.xml.bak
/data/data/####/risk_user_info.xml
/data/data/####/rmt_umeng_common_config.xml
/data/data/####/safe_mode_config.xml
/data/data/####/safe_mode_config.xml.bak
/data/data/####/sce.tmp
/data/data/####/sce_config.xml
/data/data/####/security_info
/data/data/####/session_cache
/data/data/####/share_date.xml
/data/data/####/simple-other-msg.dat
/data/data/####/simple-other-req.dat
/data/data/####/skin_cache_name.xml
/data/data/####/snssdk_openudid.xml
/data/data/####/sp_key_stream.xml
/data/data/####/spider_prefs.xml
/data/data/####/spider_prefs.xml.bak
/data/data/####/stream_report.xml
/data/data/####/t==8.1.3&&3.10.23_1694811832123_envelope.log
/data/data/####/tencent.dex
/data/data/####/tencent.dex.flock (deleted)
/data/data/####/tencent.jar
/data/data/####/the-real-index
/data/data/####/total.log
/data/data/####/total_pay_documents.xml
/data/data/####/tvcore.tmp
/data/data/####/tvlive2.db-journal
/data/data/####/ua.db
/data/data/####/ua.db-journal
/data/data/####/ug_install_settings_pref.xml
/data/data/####/um_pri.xml
/data/data/####/umeng_common_config.xml
/data/data/####/umeng_common_location.xml
/data/data/####/umeng_general_config.xml
/data/data/####/umeng_it.cache
/data/data/####/umeng_message_state.xml
/data/data/####/umeng_message_state.xml.bak
/data/data/####/x_google_ad_s_id_123
/data/media/####/21cf1702e7928d01e6c2c0db7d8e03d1
/data/media/####/6135a7b46c73610339e9a47d137e4918.mp3
/data/media/####/Alvin2.xml
/data/media/####/ContextData.xml
/data/media/####/ddev.data
/data/media/####/deviceToken
/data/media/####/flag.data
/data/media/####/sysid.dat
/data/media/####/uuid.data
/data/misc/####/primary.prof

Miscellaneous:

Executes the following shell scripts:

/system/bin/cat /proc/cpuinfo
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
/system/bin/sh -c getprop
cat /sys/class/net/eth0/address
cat /sys/class/net/wlan0/address
chmod 777 /data/user/0/<Package>/files/.honor0
getprop
getprop ro.build.version.emui
getprop ro.letv.release.version
getprop ro.vivo.os.build.display.id
ls /
ls /sys/class/thermal
sh

Loads the following dynamic libraries:

libBugly
libc++_shared
libffavc
libijkffmpeg
libijkplayer
libijksdl
libmmkv
libpag
libsce
libtnet-3.1.14
libtvcore

Uses the following algorithms to encrypt data:

AES
AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-PKCS5Padding
AES-GCM-NoPadding
DES
RSA
RSA-ECB-PKCS1Padding

Uses the following algorithms to decrypt data:

AES
AES-CBC-PKCS7Padding
AES-ECB-PKCS5Padding
AES-GCM-NoPadding
DES
RSA-ECB-PKCS1Padding

Accesses the ITelephony private interface.

Gets information about location.

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Gets information about installed apps.

Gets information about running apps.

Adds tasks to the system scheduler.

Displays its own windows over windows of other apps.

Requests the system alert window permission.

Technologies

Terminology

Training and education

Myths

Technical information

Curing recommendations

Free trial