Android.Siggen.Susp.2645

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Siggen.Susp.63

Network activity:

Connects to:

UDP(DNS) 8####.8.4.4:53
TCP(HTTP/1.1) api.dianshi####.com:80
TCP(HTTP/1.1) 1####.28.228.62:14305
TCP(HTTP/1.1) g3.l####.com:80
TCP(HTTP/1.1) m.cdn.cmv####.cn:80
TCP(HTTP/1.1) cdn.api.dianshi####.com:80
TCP(HTTP/1.1) dd2.wuko####.com:80
TCP(HTTP/1.1) hub.dianshi####.com:80
TCP(HTTP/1.1) vsc.a####.miguv####.com:7114
TCP(HTTP/1.1) adash####.man.aliy####.com:80
TCP(HTTP/1.1) 2####.107.1.1:80
TCP(HTTP/1.1) cdn.dianshi####.com:80
TCP(HTTP/1.1) www.a.sh####.com:80
TCP(HTTP/1.1) tra####.dians####.com:80
TCP(HTTP/1.1) we####.miguv####.com:80
TCP(HTTP/1.1) im.dianshi####.com:80
TCP(HTTP/1.1) and####.b####.qq.com:80
TCP(HTTP/1.1) d####.100u####.com.####.net:80
TCP(HTTP/1.1) 39.1####.143.44:8001
TCP(HTTP/1.1) t####.dians####.com:80
TCP(HTTP/1.1) api.mydians####.com:80
TCP(HTTP/1.1) cdn.mydians####.com:80
TCP(HTTP/1.1) ne####.dianshi####.com:80
TCP(HTTP/1.1) c####.dianshi####.com.####.com:80
TCP(TLS/1.0) h5####.g####.cmv####.cn:443
TCP(TLS/1.0) pla####.google####.com:443
TCP(TLS/1.0) and####.a####.go####.com:443
TCP(TLS/1.0) p####.google####.com:443
TCP(TLS/1.0) psd.ja####.com:8361
TCP(TLS/1.0) plb####.u####.com:443
TCP(TLS/1.0) hlszymg####.miguv####.cdn.####.cn:443
TCP(TLS/1.0) to####.volceap####.com.####.com:443
TCP(TLS/1.0) rr9---s####.g####.com:443
TCP(TLS/1.0) u####.u####.com:443
TCP(TLS/1.2) p####.google####.com:443
TCP(TLS/1.2) 64.2####.164.94:443
UDP tm3.binst####.live:3924
TCP 1####.175.3.110:4010
TCP 2####.201.106.46:4010
UDP 39.1####.51.152:1222
TCP 42.6.2####.233:4010
TCP 1####.130.82.25:4010
TCP 1.1####.228.158:4010
UDP 1####.227.51.254:2414
UDP 39.1####.100.53:2886
UDP 1####.243.4.144:1832
TCP 42.54.1####.67:4010
UDP 1####.17.77.214:3071
TCP 1####.118.250.115:4010
UDP 1####.60.64.174:3074
UDP tm2.binst####.live:3925
TCP 1####.222.168.148:4010
UDP tm2.binst####.live:3923
TCP 1####.228.222.219:4010
TCP 1####.166.120.223:4010
TCP 92.2####.228.129:4010
UDP 1####.206.81.195:3614
UDP 39.1####.211.80:2578
TCP 1####.82.24.241:4010
TCP 1####.228.9.68:4010
TCP 27.8.1####.111:4010
UDP 39.1####.62.19:3478
TCP 1####.75.35.96:4010
TCP 1####.107.198.233:4010
UDP tm1.binst####.live:13
TCP 1####.72.185.238:4010
TCP 1####.18.15.77:4010
UDP 1####.0.1.254:4010
TCP 42.2####.101.229:4010
UDP 2####.255.255.250:1900
TCP 1####.136.17.13:4010
TCP zb-cent####.m.ta####.com:443
TCP 1####.225.26.100:4010
TCP 1####.96.255.215:4694
TCP 1####.124.50.244:4010
TCP 49.82.2####.192:4010
TCP 1####.115.90.244:4010
UDP 1####.9.218.69:1067
TCP 1####.26.121.199:4010
UDP tm4.binst####.live:13
TCP 2####.163.133.234:4010
TCP 2####.229.212.67:4695
TCP 1####.113.107.40:4010
TCP 1####.165.78.3:4010
TCP 1####.225.129.149:4010
UDP 39.1####.134.87:3479
UDP 1####.41.203.185:1843
UDP tm4.binst####.live:3923
TCP 1####.0.1.254:37592
TCP 1####.229.190.101:4010
TCP 1.57.1####.186:4010
TCP 1####.139.82.171:4010
UDP tm3.binst####.live:3925
TCP 61.1####.244.176:4010

DNS requests:

a####.man.aliy####.com
acc####.m.ta####.com
amdc####.m.ta####.com
and####.a####.go####.com
and####.b####.qq.com
and####.google####.com
api.dianshi####.com
api.mydians####.com
as1.binst####.live
as2.binst####.live
as3.binst####.live
as4.binst####.live
c####.dianshi####.com
cdn.api.dianshi####.com
cdn.dianshi####.com
cdn.mydians####.com
co####
co####.8.8.####.8
d####.100u####.com
dd2.wuko####.com
g####.dianshi####.com
g3.l####.com
gmscomp####.google####.com
h5####.g####.cmv####.cn
hlszymg####.miguv####.com
hub.dianshi####.com
im.dianshi####.com
k####.volceap####.com
m.miguv####.com
ne####.dianshi####.com
off####.dianshi####.com
p####.dianshi####.com
p####.google####.com
pla####.google####.com
plb####.u####.com
psd.ja####.com
rr9---s####.g####.com
t####.dians####.com
tm1.binst####.live
tm2.binst####.live
tm3.binst####.live
tm4.binst####.live
to####.volceap####.com
tra####.dians####.com
u####.u####.com
umen####.m.ta####.com
vsc.a####.miguv####.com
we####.miguv####.com
www.b####.com
yk.miguv####.com
yk.miguv####.com.####.8

HTTP GET requests:

api.dianshi####.com/api/11519ac1c893737a/ahhXIFrwnvLa?info=JE####
api.dianshi####.com/api/509a4cb99bd39a5f/NbxvoKJywzYR?info=####
api.dianshi####.com/api/5cced51e11f51c6b/GWbxGoRACFqH?info=####
api.dianshi####.com/api/82210fa1213139c6/gYvYWuhVHLlz?info=jx####
api.dianshi####.com/api/channel/v1/channelGroup/template
api.dianshi####.com/api/channel/v1/newChannel
api.dianshi####.com/api/channel/v1/payed?userid=####
api.dianshi####.com/api/coin/info
api.dianshi####.com/api/config/deviceCompat?brand=####&model=####&osver=...
api.dianshi####.com/api/config/v1/common/conf
api.dianshi####.com/api/config/v1/noSimpleMode/classConfig/query
api.dianshi####.com/api/config/v1/tvMenu/listV2
api.dianshi####.com/api/f6d02ae2031b1d3f/iYvkpRiKdfdW?info=u7####
api.dianshi####.com/api/pan/v1/config/promotional
api.dianshi####.com/api/pan/v3/ufile/list?type=####&page=####&size=####&...
api.dianshi####.com/api/programs/channel/bg
api.dianshi####.com/api/programs/channel/hp
api.dianshi####.com/api/programs/logout/bg
api.dianshi####.com/api/redpack/info
api.dianshi####.com/api/song/get?page=####&size=####&tagCode=####
api.dianshi####.com/api/task/get?
api.dianshi####.com/api/tvSkin?menunum=####
api.dianshi####.com/api/v1/ad/highDefinitionSource/query
api.dianshi####.com/api/v1/cloudConfig?ts=####
api.dianshi####.com/api/v1/play/control
api.dianshi####.com/api/v1/tv/channelRecommend/list?channelId=####
api.dianshi####.com/api/v19/ad/config?type=####&ts=####
api.dianshi####.com/api/v2/banner/menu/config
api.dianshi####.com/api/v2/user/wx/helplogin
api.dianshi####.com/api/v4/offProgram
api.dianshi####.com/cfbqbczu?ts=####
api.dianshi####.com/ipInfo
api.mydians####.com/api/payorder/equity?deviceId=####&equityType=####&si...
api.mydians####.com/api/programs/exclusive/unlock
api.mydians####.com/api/user/equity/condition
api.mydians####.com/api/v1/plugin?module=####&verCode=####&sdk=####&aver...
api.mydians####.com/api/v1/shin?injectConditions=####
api.mydians####.com/api/v1/tv/hkCategory/list
api.mydians####.com/api/v1/tv/powerBoot/image
api.mydians####.com/api/v19/ad/config?type=####&ts=####
api.mydians####.com/api/v2/sport/list?catId=####
api.mydians####.com/api/v24/apiConfig
api.mydians####.com/ipInfo
c####.dianshi####.com.####.com/api/channel/group/v7/02/383?ctms=####
c####.dianshi####.com.####.com/static/ad/06f19a6b3cb44dfe0c9c8ded05e9a3b...
c####.dianshi####.com.####.com/static/ad/18f759157732644516c2d33c5a39882...
c####.dianshi####.com.####.com/static/ad/d6b96de57624488d83e5d1dd6c0f9bb...
c####.dianshi####.com.####.com/static/plugin/01f41a829659f80e9566717f8ee...
c####.dianshi####.com.####.com/static/plugin/343f88522e562dc57be54cb8f01...
c####.dianshi####.com.####.com/static/plugin/5f9f59f64fdf2e69791ecf2b8fd...
c####.dianshi####.com.####.com/static/plugin/7b2267f9f4f7d9e7c3a360950e3...
c####.dianshi####.com.####.com/static/plugin/bae7dc6701bc8e540ba4f4902dd...
c####.dianshi####.com.####.com/static/plugin/bd84d77390a1cac0e9a3410097a...
cdn.api.dianshi####.com/api/programs?cid=####&date=####&tm=####
cdn.dianshi####.com/assets/mobile/random/randomconfig.json?ts=####
cdn.dianshi####.com/assets/mobile/temp/ts_cf.json?ts=####
cdn.dianshi####.com/assets/tvTea.json
cdn.dianshi####.com/config/channel/voice_mapping.json?t=####
cdn.mydians####.com/static/channel/poster/cctv4.jpg
dd2.wuko####.com/tvclient/sdk?func=####&package=####
g3.l####.com/r?format=####
h5####.g####.cmv####.cn:443/wd_r2/cctv/cctv4hd/600/index.m3u8?msisdn=###...
im.dianshi####.com/ws/v2
m.cdn.cmv####.cn/playurl/v1/play/playurlh5?contId=####&rateType=####
ne####.dianshi####.com/
to####.volceap####.com.####.com:443/service/2/app_alert_check/?os_api=##...
tra####.dians####.com/config?appid=####&uuid=####&cver=####
we####.miguv####.com/gateway/playurl/v3/play/playurl?contId=####&rateTyp...
www.a.sh####.com/api/activity/v1/redPack/conf

HTTP POST requests:

adash####.man.aliy####.com/man/api?ak=####&s=####
and####.b####.qq.com/rqd/async?aid=####
api.dianshi####.com/api/config/v1/pay/document
api.dianshi####.com/api/pay/documents
api.dianshi####.com/api/v2/device/info?duid=####&c=####&
api.dianshi####.com/api/v2/device/start/info
api.mydians####.com/api/v1/user_risk_device/getUserRiskUid
d####.100u####.com.####.net/reportcomp
hub.dianshi####.com/u
plb####.u####.com:443/umpx_internal
psd.ja####.com:8361/config?&st=####
t####.dians####.com/v1/new_peer
to####.volceap####.com.####.com:443/service/2/app_log/?device_platform=#...
to####.volceap####.com.####.com:443/service/2/device_register/?os_api=##...
to####.volceap####.com.####.com:443/service/2/log_settings/?device_platf...
u####.u####.com:443/unify_logs
vsc.a####.miguv####.com:7114/EPG/VPE/PHONE/Authenticate

File system changes:

Creates the following files:

/data/data/####/.imprint
/data/data/####/02bcd09b884c0f5f2ac1f56b9e5b5e91.0.tmp
/data/data/####/02bcd09b884c0f5f2ac1f56b9e5b5e91.1
/data/data/####/02bcd09b884c0f5f2ac1f56b9e5b5e91.1.tmp
/data/data/####/0e627ae72e2cc942e2e392f26d13cada.0.tmp
/data/data/####/0e627ae72e2cc942e2e392f26d13cada.1
/data/data/####/0e627ae72e2cc942e2e392f26d13cada.1.tmp
/data/data/####/1002
/data/data/####/1004
/data/data/####/14e5b06a2221057b8b675749037230bb.0
/data/data/####/14e5b06a2221057b8b675749037230bb.1
/data/data/####/168436@bd_tea_agent.db-journal
/data/data/####/18b4ad432220cf347944de4d617df71d.0.tmp
/data/data/####/18b4ad432220cf347944de4d617df71d.1
/data/data/####/18b4ad432220cf347944de4d617df71d.1.tmp
/data/data/####/1f85f809011a2aaa764e841c2ff79042.0.tmp
/data/data/####/1f85f809011a2aaa764e841c2ff79042.1
/data/data/####/1f85f809011a2aaa764e841c2ff79042.1.tmp
/data/data/####/21d8ce8b5313b0291714f5d373a98eb4.0.tmp
/data/data/####/21d8ce8b5313b0291714f5d373a98eb4.1
/data/data/####/21d8ce8b5313b0291714f5d373a98eb4.1.tmp
/data/data/####/28a0dee0f6d836c41541374c85b867dd.0.tmp
/data/data/####/28a0dee0f6d836c41541374c85b867dd.1
/data/data/####/28a0dee0f6d836c41541374c85b867dd.1.tmp
/data/data/####/34f29242548533c5e549a133578b0b4a.0.tmp
/data/data/####/34f29242548533c5e549a133578b0b4a.1
/data/data/####/34f29242548533c5e549a133578b0b4a.1.tmp
/data/data/####/3fad3dabbdf7f83dc2411fa244b94c5d.0.tmp
/data/data/####/3fad3dabbdf7f83dc2411fa244b94c5d.1
/data/data/####/3fad3dabbdf7f83dc2411fa244b94c5d.1.tmp
/data/data/####/411e51805239e2be836be606f7f5ae50.0.tmp
/data/data/####/411e51805239e2be836be606f7f5ae50.1
/data/data/####/411e51805239e2be836be606f7f5ae50.1.tmp
/data/data/####/46dfadf7049b74d8733d290eeb93bbdc.0.tmp
/data/data/####/46dfadf7049b74d8733d290eeb93bbdc.1
/data/data/####/4c149f56a2f37c4bc78ab80b0ba77450.0.tmp
/data/data/####/4c149f56a2f37c4bc78ab80b0ba77450.1
/data/data/####/4c149f56a2f37c4bc78ab80b0ba77450.1.tmp
/data/data/####/511a91d6a422c68db04d252d67d293aa.0
/data/data/####/511a91d6a422c68db04d252d67d293aa.1
/data/data/####/54fdf49dff9a9c963faaa62934daf940.0.tmp
/data/data/####/54fdf49dff9a9c963faaa62934daf940.1
/data/data/####/54fdf49dff9a9c963faaa62934daf940.1.tmp
/data/data/####/5b274235a6b15d26de5de29ed30668fa.0.tmp
/data/data/####/5b274235a6b15d26de5de29ed30668fa.1
/data/data/####/5b274235a6b15d26de5de29ed30668fa.1.tmp
/data/data/####/601fed44b8cc97f903b2146b86d31290.0.tmp
/data/data/####/601fed44b8cc97f903b2146b86d31290.1
/data/data/####/601fed44b8cc97f903b2146b86d31290.1.tmp
/data/data/####/63cde9655e58a6bf5cd3fa408cabc928.0.tmp
/data/data/####/63cde9655e58a6bf5cd3fa408cabc928.1
/data/data/####/63cde9655e58a6bf5cd3fa408cabc928.1.tmp
/data/data/####/6deaf7745498f3f8fc35dc922783f569.0.tmp
/data/data/####/6deaf7745498f3f8fc35dc922783f569.1
/data/data/####/6deaf7745498f3f8fc35dc922783f569.1.tmp
/data/data/####/705b4b56f751f7d8fe4044bfa442a8eb.0.tmp
/data/data/####/705b4b56f751f7d8fe4044bfa442a8eb.1
/data/data/####/705b4b56f751f7d8fe4044bfa442a8eb.1.tmp
/data/data/####/81b02692d6e9c790a85f08f4e48be0ce.0.tmp
/data/data/####/81b02692d6e9c790a85f08f4e48be0ce.1
/data/data/####/81b02692d6e9c790a85f08f4e48be0ce.1.tmp
/data/data/####/8883a79baa010ecc599a4fda824745b4.0.tmp
/data/data/####/8883a79baa010ecc599a4fda824745b4.1
/data/data/####/8883a79baa010ecc599a4fda824745b4.1.tmp
/data/data/####/8f257c75f4afc69ee721e8a01500c9cd.0.tmp
/data/data/####/8f257c75f4afc69ee721e8a01500c9cd.1
/data/data/####/8f257c75f4afc69ee721e8a01500c9cd.1.tmp
/data/data/####/90fa889de6b696e137e1d89d8d82b136.0.tmp
/data/data/####/90fa889de6b696e137e1d89d8d82b136.1
/data/data/####/90fa889de6b696e137e1d89d8d82b136.1.tmp
/data/data/####/97ed152c9b94e17e826316eb2b8c3e2a.0.tmp
/data/data/####/97ed152c9b94e17e826316eb2b8c3e2a.1
/data/data/####/ACCS_BINDumeng;5912cd5f1061d264c8000455.xml
/data/data/####/ACCS_SDK.xml
/data/data/####/ACCS_SDK_CHANNEL.xml
/data/data/####/ACCS_SDK_CHANNEL.xml.bak
/data/data/####/Agoo_AppStore.xml
/data/data/####/Alvin2.xml
/data/data/####/CONFIG.xml
/data/data/####/CONFIG.xml.bak
/data/data/####/CUSTOM_CONFIG.xml
/data/data/####/ContextData.xml
/data/data/####/DEVICE_INFO.xml
/data/data/####/DEVICE_INFO.xml.bak
/data/data/####/DOWNLOAD_END_AD.xml
/data/data/####/DOWNLOAD_START_AD.xml
/data/data/####/DRAINAGE.xml
/data/data/####/END_AD.xml
/data/data/####/END_AD_BOOT.xml
/data/data/####/EVENT_CONFIG.xml
/data/data/####/IpConfig.xml
/data/data/####/KEY_SP_NAME_RISK.xml
/data/data/####/LIVE_CONFIG.xml
/data/data/####/MessageStore.db-journal
/data/data/####/MsgLogStore.db-journal
/data/data/####/OFFLINE.xml
/data/data/####/PERMANENT_DATA.xml
/data/data/####/PHOTO_INFO.xml
/data/data/####/PLAY.xml
/data/data/####/PLAY_CONFIG.xml
/data/data/####/PLAY_CONFIG.xml.bak
/data/data/####/STREAM_CONFIG_V2.xml
/data/data/####/SWITCH_CONFIG.xml
/data/data/####/SWITCH_CONFIG.xml.bak
/data/data/####/SYSTEM_INFO.xml
/data/data/####/TEA.xml
/data/data/####/UM_PROBE_DATA.xml
/data/data/####/_global_cache.xml
/data/data/####/_global_cache.xml.bak
/data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.0.tmp
/data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.1
/data/data/####/a7229fec28d20d696a701e6bb0bfb2d5.1.tmp
/data/data/####/accs.db-journal
/data/data/####/agoo.pid
/data/data/####/api.prefs.xml
/data/data/####/api.prefs.xml.bak
/data/data/####/applog_stats.xml
/data/data/####/b09e1fabe8c7a34364627b4066c5560c.0.tmp
/data/data/####/b09e1fabe8c7a34364627b4066c5560c.1
/data/data/####/b09e1fabe8c7a34364627b4066c5560c.1.tmp
/data/data/####/bdtracker_dr_migrate_detector.xml
/data/data/####/bf1ce492164e2b5b0edb20922c315cb5.0.tmp
/data/data/####/bf1ce492164e2b5b0edb20922c315cb5.1
/data/data/####/bf1ce492164e2b5b0edb20922c315cb5.1.tmp
/data/data/####/bugly_db_-journal
/data/data/####/c0968fa531339178b2ed07e203745184.0.tmp
/data/data/####/c0968fa531339178b2ed07e203745184.1
/data/data/####/c0968fa531339178b2ed07e203745184.1.tmp
/data/data/####/c6951e9702af6b6362d150ce081325e3.0.tmp
/data/data/####/c6951e9702af6b6362d150ce081325e3.1
/data/data/####/c6951e9702af6b6362d150ce081325e3.1.tmp
/data/data/####/c89d2493e0b57d4e78abc11e68463250.0.tmp
/data/data/####/c89d2493e0b57d4e78abc11e68463250.1
/data/data/####/c89d2493e0b57d4e78abc11e68463250.1.tmp
/data/data/####/cctv4.0
/data/data/####/cctv4.0 (deleted)
/data/data/####/channels.data
/data/data/####/com.dsj.pj.BETA_VALUES.xml
/data/data/####/com.dsj.pj_preferences.xml
/data/data/####/conf.dat
/data/data/####/crashrecord.xml
/data/data/####/cuuid.xml
/data/data/####/d0e5f92f9dbea347b518d1f15cd71515.0.tmp
/data/data/####/d0e5f92f9dbea347b518d1f15cd71515.1
/data/data/####/d0e5f92f9dbea347b518d1f15cd71515.1.tmp
/data/data/####/d2ed5397160ed6516b6104a98841b262.0.tmp
/data/data/####/d2ed5397160ed6516b6104a98841b262.1
/data/data/####/d2ed5397160ed6516b6104a98841b262.1.tmp
/data/data/####/d6b07bb3308ff5cf72b33dfd637bdfeb
/data/data/####/d71b93d0dbf5c293ee626e7ed28ae9a1.0.tmp
/data/data/####/d71b93d0dbf5c293ee626e7ed28ae9a1.1
/data/data/####/d71b93d0dbf5c293ee626e7ed28ae9a1.1.tmp
/data/data/####/d8ca3beb2a977011cf12dd4fa2fac2da17a7d6db8f50c0c....0.tmp
/data/data/####/d8ca3beb2a977011cf12dd4fa2fac2da17a7d6db8f50c0c...3369.0
/data/data/####/dW1weF9pbnRlcm5hbF8xNjg4MjIwMzIwOTUw;
/data/data/####/download_splash.xml
/data/data/####/e2619f854b3fc3b53d9b4c0cc8139334a40d95158bb3c22...9919.0
/data/data/####/e6b0a7313c01713979b89211b22fc490.0
/data/data/####/e6b0a7313c01713979b89211b22fc490.1
/data/data/####/epg-cctv1-20230701.json
/data/data/####/epg-cctv2-20230701.json
/data/data/####/epg-cctv3-20230701.json
/data/data/####/epg-cctv4-20230701.json
/data/data/####/epg-cctv5-20230701.json
/data/data/####/epg.dex
/data/data/####/epg.dex.flock (deleted)
/data/data/####/epg.tmp
/data/data/####/event_db
/data/data/####/exchangeIdentity.json
/data/data/####/exid.dat
/data/data/####/f7f1052328059de22ef8e0b161a5b8dd2b0659a96189efe...0aca.0
/data/data/####/f90f578c50373809eb01f868fc2d8c42.0.tmp
/data/data/####/f90f578c50373809eb01f868fc2d8c42.1
/data/data/####/f90f578c50373809eb01f868fc2d8c42.1.tmp
/data/data/####/faa09cfb3efe120858e9d9154f83b3df.0
/data/data/####/faa09cfb3efe120858e9d9154f83b3df.0.tmp
/data/data/####/faa09cfb3efe120858e9d9154f83b3df.1.tmp
/data/data/####/fb6af786f26a2595b3be0ff754fb377a.0.tmp
/data/data/####/fb6af786f26a2595b3be0ff754fb377a.1.tmp
/data/data/####/header_custom.xml
/data/data/####/header_custom.xml.bak
/data/data/####/i==1.2.0&&3.10.15_1688220321048_envelope.log
/data/data/####/info.xml
/data/data/####/inject_track.xml
/data/data/####/journal
/data/data/####/journal.tmp
/data/data/####/last_sp_session.xml
/data/data/####/launcher_ad.data
/data/data/####/libztvb321.2.2.2.so
/data/data/####/local_crash_lock
/data/data/####/message_accs_db
/data/data/####/message_accs_db-journal
/data/data/####/native_record_lock
/data/data/####/network.log
/data/data/####/offline.data
/data/data/####/okhttp_prefs.xml
/data/data/####/package_infos.xml
/data/data/####/package_infos.xml.bak
/data/data/####/pid.txt
/data/data/####/player_strategy.xml
/data/data/####/plugin.dex
/data/data/####/plugin.dex.flock (deleted)
/data/data/####/plugin.tmp
/data/data/####/plugin_config.xml
/data/data/####/pp.dex
/data/data/####/pp.dex.flock (deleted)
/data/data/####/pp.jar
/data/data/####/proc_auxv
/data/data/####/promote.dex
/data/data/####/promote.dex.flock (deleted)
/data/data/####/promote.tmp
/data/data/####/risk_infos.xml
/data/data/####/risk_infos.xml.bak
/data/data/####/risk_user_info.xml
/data/data/####/safe_mode_config.xml
/data/data/####/sce.tmp
/data/data/####/sce_config.xml
/data/data/####/security_info
/data/data/####/session_cache
/data/data/####/skin_cache_name.xml
/data/data/####/snssdk_openudid.xml
/data/data/####/sp_key_stream.xml
/data/data/####/spider_prefs.xml
/data/data/####/spider_prefs.xml.bak
/data/data/####/t==8.1.3&&3.10.15_1688220323625_envelope.log
/data/data/####/tencent.dex
/data/data/####/tencent.dex.flock (deleted)
/data/data/####/tencent.tmp
/data/data/####/total.log
/data/data/####/total_pay_documents.xml
/data/data/####/tvcore.tmp
/data/data/####/tvlive2.db-journal
/data/data/####/ua.db
/data/data/####/ua.db-journal
/data/data/####/ug_install_settings_pref.xml
/data/data/####/um_pri.xml
/data/data/####/umeng_common_config.xml
/data/data/####/umeng_common_location.xml
/data/data/####/umeng_general_config.xml
/data/data/####/umeng_it.cache
/data/data/####/umeng_message_state.xml
/data/data/####/unknown.xml
/data/media/####/21cf1702e7928d01e6c2c0db7d8e03d1
/data/media/####/Alvin2.xml
/data/media/####/ContextData.xml
/data/media/####/ddev.data
/data/media/####/dvc
/data/media/####/flag.data
/data/media/####/uuid.data
/data/misc/####/primary.prof

Miscellaneous:

Executes the following shell scripts:

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
/system/bin/sh -c getprop
cat /sys/class/net/wlan0/address
chmod 777 /data/user/0/<Package>/files/.honor0
getprop
getprop ro.build.version.emui
getprop ro.letv.release.version
getprop ro.vivo.os.build.display.id
ls /
ls /sys/class/thermal
sh

Loads the following dynamic libraries:

libBugly
libc++_shared
libffavc
libijkffmpeg
libijkplayer
libijksdl
libpag
libsce
libtnet-3.1.14
libtvcore
libztvb321.2.2.2

Uses the following algorithms to encrypt data:

AES
AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-PKCS5Padding
AES-GCM-NoPadding
RSA-ECB-PKCS1Padding

Uses the following algorithms to decrypt data:

AES
AES-ECB-PKCS5Padding
AES-GCM-NoPadding

Accesses the ITelephony private interface.

Gets information about location.

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Gets information about installed apps.

Gets information about running apps.

Adds tasks to the system scheduler.

Displays its own windows over windows of other apps.

Requests the system alert window permission.

技术

术语

教育培训

误区

Technical information

Curing recommendations

Free trial