Technical information
- Adware.Dangbei.1.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) h####.p####.c####.####.com:80
- TCP(HTTP/1.1) a####.juyo####.net:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) 61.1####.215.224:80
- TCP(HTTP/1.1) prox####.juyo####.net:80
- TCP(HTTP/1.1) h####.c####.myal####.com:80
- TCP(HTTP/1.1) c5112fe####.c####.front####.com:80
- TCP(HTTP/1.1) ip.ta####.com:80
- TCP(TLS/1.0) m.miguv####.com:443
- TCP(TLS/1.0) s####.we####.com:443
- TCP(TLS/1.0) 1####.202.114.42:443
- UDP as1.binst####.live:3925
- UDP tm4.binst####.live:13
- UDP as1.binst####.live:3924
- UDP as4.binst####.live:3923
- UDP 2####.255.255.250:1900
- UDP as4.binst####.live:3925
- UDP tm3.binst####.live:13
- a####.juyo####.net
- and####.b####.qq.com
- as1.binst####.live
- as4.binst####.live
- h####.c####.myal####.com
- h####.chinas####.com
- h####.p####.c####.####.com
- hdp.c01.l####.####.com
- hdp.s####.org
- ip.ta####.com
- l####.gansuyu####.com
- m.miguv####.com
- prox####.juyo####.net
- s####.we####.com
- tm1.binst####.live
- tm2.binst####.live
- tm3.binst####.live
- tm4.binst####.live
- a####.juyo####.net/epg_v2/epg_20191125.zip
- a####.juyo####.net/plugins/libsign/201905291711/libsign.so
- a####.juyo####.net/plugins/libtvcore/201908301120/libtvcore.so
- c5112fe####.c####.front####.com/plugins/libfuck/201910301641/libfuck.so
- h####.c####.myal####.com/cntvlive/cctv1md.m3u8?auth_key=####
- h####.c####.myal####.com/cntvlive/cctv2md.m3u8?auth_key=####
- h####.p####.c####.####.com/cctv1/hd/live.m3u8
- ip.ta####.com/service/getIpInfo.php?ip=####
- prox####.juyo####.net/dli1008620/608807420?v=####&key=####
- prox####.juyo####.net/dli1008620/631780532?v=####&key=####
- prox####.juyo####.net/dli5/cctv1?v=####&key=####
- prox####.juyo####.net/dli5/cctv2?v=####&key=####
- and####.b####.qq.com/rqd/async?aid=####
- /data/data/####/._098add4a8c1da3c3b37b1afff5fa7c39.html
- /data/data/####/._2ab2393cbd987f25f26deaffbf46b81f.html
- /data/data/####/._4e00c380665f9ea39dbe949c1393dc6c.html
- /data/data/####/._72e95c40f478f167d7c4250954f50a87.html
- /data/data/####/._bootstrap.min.css
- /data/data/####/._bootstrap.min.js
- /data/data/####/._brower.js
- /data/data/####/._css
- /data/data/####/._dropzone.js
- /data/data/####/._head.png
- /data/data/####/._img
- /data/data/####/._img_bottom.png
- /data/data/####/._index1.html
- /data/data/####/._index2.html
- /data/data/####/._jquery.min.js
- /data/data/####/._js
- /data/data/####/._modal.js
- /data/data/####/._plus.jpg
- /data/data/####/._upload.css
- /data/data/####/._upload.png
- /data/data/####/.jg.ic
- /data/data/####/098add4a8c1da3c3b37b1afff5fa7c39.html
- /data/data/####/1004
- /data/data/####/1dc8efbcbf3c6afc462cee8365232315.0.tmp
- /data/data/####/1dc8efbcbf3c6afc462cee8365232315.1.tmp
- /data/data/####/20191125.rep
- /data/data/####/2ab2393cbd987f25f26deaffbf46b81f.html
- /data/data/####/410aa2c8156d63f3c2fd71aca3822b9d.0.tmp
- /data/data/####/410aa2c8156d63f3c2fd71aca3822b9d.1.tmp
- /data/data/####/4e00c380665f9ea39dbe949c1393dc6c.html
- /data/data/####/72e95c40f478f167d7c4250954f50a87.html
- /data/data/####/8db60778d346999fa0ffcee6c43c29d62c9bf6cde756dcf....0.tmp
- /data/data/####/93ac8c3220998c973cd3e223d2d192c9.0.tmp
- /data/data/####/93ac8c3220998c973cd3e223d2d192c9.1.tmp
- /data/data/####/979e7b8a2a49e0358c43edd9b9815ebe.0.tmp
- /data/data/####/979e7b8a2a49e0358c43edd9b9815ebe.1.tmp
- /data/data/####/MultiDex.lock
- /data/data/####/V5315.php
- /data/data/####/__Baidu_Stat_SDK_SendRem.xml
- /data/data/####/__local_ap_info_cache.json
- /data/data/####/__local_last_session.json
- /data/data/####/__local_stat_cache.json
- /data/data/####/__send_data_1574642317812
- /data/data/####/__send_data_1574642321028
- /data/data/####/a.xml
- /data/data/####/baidu_mtj_sdk_record.xml
- /data/data/####/baidu_mtj_sdk_record.xml.bak
- /data/data/####/bootstrap.min.css
- /data/data/####/bootstrap.min.js
- /data/data/####/brower.js
- /data/data/####/bugly_db_-journal
- /data/data/####/channel.zip (deleted)
- /data/data/####/channel.zip.download
- /data/data/####/channel.zip.tmp
- /data/data/####/channel.zip.tmp (deleted)
- /data/data/####/crashrecord.xml
- /data/data/####/d8f67a262e84ccc8a8cfbe8d962f6fb3.0.tmp
- /data/data/####/d8f67a262e84ccc8a8cfbe8d962f6fb3.1.tmp
- /data/data/####/dropzone.js
- /data/data/####/epg_20191125.zip
- /data/data/####/hdp.db-journal
- /data/data/####/hdp.jar
- /data/data/####/hdpfans.com_preferences.xml
- /data/data/####/head.png
- /data/data/####/img_bottom.png
- /data/data/####/index1.html
- /data/data/####/index2.html
- /data/data/####/journal.tmp
- /data/data/####/jquery.min.js
- /data/data/####/libcuid.so
- /data/data/####/libfuck.so
- /data/data/####/libjiagu-370963303.so
- /data/data/####/libsign.so
- /data/data/####/libtvcore.so
- /data/data/####/local_crash_lock
- /data/data/####/modal.js
- /data/data/####/morefuntech_yunLocalInfo.xml
- /data/data/####/multidex.version.xml
- /data/data/####/plugins.xml
- /data/data/####/plus.jpg
- /data/data/####/qc_errcode_data.xml
- /data/data/####/region.xml
- /data/data/####/saasagent.conf
- /data/data/####/security_info
- /data/data/####/tvpro-606891670.json
- /data/data/####/tvsou-019d9e5e.json
- /data/data/####/tvsou-0a2de840.json
- /data/data/####/tvsou-0ccc41bf.json
- /data/data/####/tvsou-131cdbbf.json
- /data/data/####/tvsou-13e8f054.json
- /data/data/####/tvsou-15e474b2.json
- /data/data/####/tvsou-1877ed89.json
- /data/data/####/tvsou-1c4d4f90.json
- /data/data/####/tvsou-1e741cb1.json
- /data/data/####/tvsou-1e983148.json
- /data/data/####/tvsou-25feea76.json
- /data/data/####/tvsou-2983827a.json
- /data/data/####/tvsou-3201ff16.json
- /data/data/####/tvsou-34223eae.json
- /data/data/####/tvsou-3a19b822.json
- /data/data/####/tvsou-442cb1d6.json
- /data/data/####/tvsou-50ca1f4c.json
- /data/data/####/tvsou-526cbae7.json
- /data/data/####/tvsou-53eda06f.json
- /data/data/####/tvsou-54cb9087.json
- /data/data/####/tvsou-59690d2e.json
- /data/data/####/tvsou-59736a35.json
- /data/data/####/tvsou-5a44bb16.json
- /data/data/####/tvsou-5ce23afa.json
- /data/data/####/tvsou-61914025.json
- /data/data/####/tvsou-660321844.json
- /data/data/####/tvsou-696f2203.json
- /data/data/####/tvsou-69e7e66e.json
- /data/data/####/tvsou-6b26bee1.json
- /data/data/####/tvsou-6cf61152.json
- /data/data/####/tvsou-6ed65109.json
- /data/data/####/tvsou-6ef94ac4.json
- /data/data/####/tvsou-6fff4f43.json
- /data/data/####/tvsou-7651a0a2.json
- /data/data/####/tvsou-789d0d22.json
- /data/data/####/tvsou-7d4daf1f.json
- /data/data/####/tvsou-8024c685.json
- /data/data/####/tvsou-8125ead4.json
- /data/data/####/tvsou-8f932b7b.json
- /data/data/####/tvsou-92f99bbf.json
- /data/data/####/tvsou-95f40184.json
- /data/data/####/tvsou-9c61c74c.json
- /data/data/####/tvsou-a136a49d.json
- /data/data/####/tvsou-a3659498.json
- /data/data/####/tvsou-a3aa4d01.json
- /data/data/####/tvsou-aa83e122.json
- /data/data/####/tvsou-b3666b9d.json
- /data/data/####/tvsou-b3ca31d8.json
- /data/data/####/tvsou-c25b6c39.json
- /data/data/####/tvsou-c5717c2d.json
- /data/data/####/tvsou-c62d45e9.json
- /data/data/####/tvsou-cb608c10.json
- /data/data/####/tvsou-cdbe165f.json
- /data/data/####/tvsou-ce743104.json
- /data/data/####/tvsou-d5a27a1e.json
- /data/data/####/tvsou-d6253770.json
- /data/data/####/tvsou-d667526e.json
- /data/data/####/tvsou-d8bee9f9.json
- /data/data/####/tvsou-d9d2a299.json
- /data/data/####/tvsou-da0c3f96.json
- /data/data/####/tvsou-da60566f.json
- /data/data/####/tvsou-da6cc342.json
- /data/data/####/tvsou-ddb707c0.json
- /data/data/####/tvsou-e04d023a.json
- /data/data/####/tvsou-e237763b.json
- /data/data/####/tvsou-e4e3801d.json
- /data/data/####/tvsou-e5b252e4.json
- /data/data/####/tvsou-edb5b4ac.json
- /data/data/####/tvsou-f0a3d1b2.json
- /data/data/####/tvsou-f2d13f2a.json
- /data/data/####/tvsou-f5b1a323.json
- /data/data/####/tvsou-fac1ecf6.json
- /data/data/####/upload.css
- /data/data/####/upload.png
- /data/data/####/vcdaemon
- /data/data/####/vodac
- /data/data/####/vodac.conf
- /data/data/####/wt.xml
- /data/media/####/.confd
- /data/media/####/.confd-journal
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.timestamp
- /data/media/####/logs.csv
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- getprop
- getprop ro.build.display.id
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.miui.ui.version.name
- getprop ro.smartisan.version
- getprop ro.vivo.os.version
- Bugly
- UrlDecode
- kooffmpeg
- kooplayer
- koosdl
- libfuck
- libjiagu-370963303
- libtvcore
- yunglib30
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- AES-CBC-PKCS5Padding
- AES-GCM-NoPadding