Technical information
- Adware.Dangbei.1.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) m2.ad####.com:8130
- TCP(HTTP/1.1) esw.ty####.com:80
- TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
- TCP(HTTP/1.1) es####.dan####.net:80
- TCP(HTTP/1.1) v.j####.cn:80
- TCP(HTTP/1.1) bp.ad####.com:8130
- TCP(HTTP/1.1) tv####.ad####.com:80
- TCP(HTTP/1.1) up####.dan####.net:80
- TCP(HTTP/1.1) e####.ty####.com:80
- TCP(HTTP/1.1) sm.dan####.com:80
- TCP(HTTP/1.1) ip.ta####.com:80
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) hotfix####.aliy####.com:443
- TCP(TLS/1.0) www.lotu####.com:8888
- TCP(TLS/1.0) bp.ad####.com:443
- TCP 47.97.1####.93:9989
- 240.31.27.####.arpa
- a####.man.aliy####.com
- bp.ad####.com
- e####.ty####.com
- es####.dan####.net
- esw.ty####.com
- hotfix####.aliy####.com
- ip.ta####.com
- m2.ad####.com
- plb####.u####.com
- sm.dan####.com
- tv####.ad####.com
- u####.u####.com
- up####.dan####.net
- v.j####.cn
- www.lotu####.com
- esw.ty####.com/dbGold/v1/sdkSwitch.do?appkey=####&channel=####&device_na...
- ip.ta####.com/service/getIpInfo.php?ip=####
- ip.ta####.com/service/getIpInfo2.php?ip=####
- up####.dan####.net/api/updatea?appkey=####&model=m####&deviceE####&code=...
- v.j####.cn/weather/index?dtype=####&key=####&format=####&cityname=####
- bp.ad####.com:8130/burying/uploadPoint
- e####.ty####.com/dbGold/v1/deviceRegister.do
- e####.ty####.com/dbGold/v1/liveReveal.do
- es####.dan####.net/dbzs/m1/appInfo.do
- es####.dan####.net/dbzs/m1/terminalInfo.do
- esw.ty####.com/dbGold/v1/diskAuth.do
- m2.ad####.com:8130/master/ds/actionDcStatus
- m2.ad####.com:8130/master/init/actionInit
- m2.ad####.com:8130/master/init/actionRegion
- sh.wagbr####.aliyun####.com/man/api?ak=####&s=####
- sm.dan####.com/sdk/sdktj
- tv####.ad####.com/api/tvblockitem/list
- tv####.ad####.com/api/tvcategory/list
- tv####.ad####.com/api/tvchannel/list
- tv####.ad####.com/api/tvdevice/add
- tv####.ad####.com/api/tvversion/checkUpdate
- /data/anr/traces.txt
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/0a50e0dce415e49fd400a6c1379684ea
- /data/data/####/358734d2b0014b2d674a586bb63e89fc
- /data/data/####/7f33541f781d6072f7cf46862a0a93a1
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/MultiDex.lock
- /data/data/####/UM_PROBE_DATA.xml
- /data/data/####/ZBSpUtils.xml
- /data/data/####/a==7.5.4&&2.0.1_1554419261867_envelope.log
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0NDE5MjY5OTIy;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0NDE5MjYwOTA4;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0NDE5Mjg1NDgz;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0NDE5MjgwMzI1;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0NDE5Mjk4ODQ5;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0NDE5MjkyOTEy;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0NDE5MzA4NTI4;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0NDE5MzEwMDY1;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0NDE5MzI3NTI1;
- /data/data/####/dbfile.xml
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/fywdl2
- /data/data/####/i==1.2.0&&2.0.1_1554419260913_envelope.log
- /data/data/####/i==1.2.0&&2.0.1_1554419269959_envelope.log
- /data/data/####/i==1.2.0&&2.0.1_1554419280365_envelope.log
- /data/data/####/i==1.2.0&&2.0.1_1554419298853_envelope.log
- /data/data/####/i==1.2.0&&2.0.1_1554419308569_envelope.log
- /data/data/####/info.xml
- /data/data/####/libjiagu-986569940.so
- /data/data/####/lotuseed.apps
- /data/data/####/lotuseed.lock
- /data/data/####/lotuseed.s
- /data/data/####/lotuseed.task
- /data/data/####/lotuseed_global.xml
- /data/data/####/lotuseed_main.xml
- /data/data/####/multidex.version.xml
- /data/data/####/no_notice.mp3
- /data/data/####/qihoo_jiagu_crash_report.xml
- /data/data/####/share_date.xml
- /data/data/####/sp_sophix.xml
- /data/data/####/task_20.jar
- /data/data/####/task_20.jar.temp
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/media/####/.D1C593128F43E2D009A968D7C663F774
- /data/media/####/.D1C593128F43E2D009A968D7C663F774-journal
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.cca.dat
- /data/media/####/.nomedia
- /data/media/####/.umm.dat
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/afinalCache.0
- /data/media/####/afinalCache.1
- /data/media/####/afinalCache.idx
- /data/media/####/crash-2019-04-04-23-07-42-1554419262699.log
- /data/media/####/crash-2019-04-04-23-07-55-1554419275270.log
- /data/media/####/crash-2019-04-04-23-08-00-1554419280866.log
- /data/media/####/crash-2019-04-04-23-08-06-1554419286065.log
- /data/media/####/crash-2019-04-04-23-08-13-1554419293668.log
- /data/media/####/crash-2019-04-04-23-08-23-1554419303560.log
- /data/media/####/crash-2019-04-04-23-08-30-1554419310729.log
- /data/media/####/crash-2019-04-04-23-08-47-1554419327531.log
- /data/media/####/lotuseed.devid
- /data/media/####/sysid.dat
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- <Package Folder>/files/fywdl2 <Package Folder>/files/hello2 am startservice --user 0 -a com.google.ACTION.service -n <Package>/net.internal.zokx.OszeService
- app_process /system/bin com.android.commands.am.Am startservice --user 0 -a com.google.ACTION.service -n <Package>/net.internal.zokx.OszeService
- cat /proc/meminfo
- chmod 777 /storage/emulated/0/Android/data/<Package>/cache/afinalCache
- chmod 777 <Package Folder>/files/0a50e0dce415e49fd400a6c1379684ea/0a50e0dce415e49fd400a6c1379684ea
- chmod 777 <Package Folder>/files/358734d2b0014b2d674a586bb63e89fc/358734d2b0014b2d674a586bb63e89fc
- chmod 777 <Package Folder>/files/task_20.dex/task_20.dex
- chmod 777 <Package Folder>/files/task_20.jar/task_20.jar
- df
- ls /
- ls /sys/class/thermal
- ping -c 1 -w 2 update.dangbei.net
- ps
- sh
- euthenia-lib
- libjiagu-986569940
- tvcore
- AES
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- DES-CBC-PKCS5Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- DES-CBC-PKCS5Padding