Technical information
- Adware.GoodAd.1
- UDP(DNS) 8####.8.4.4:53
- TCP(HTTP/1.1) up####.webxia####.top:80
- TCP(HTTP/1.1) w####.pcon####.com.cn:80
- TCP(HTTP/1.1) c5112fe####.c####.front####.com:80
- TCP(HTTP/1.1) a####.webxia####.top:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(TLS/1.0) pla####.google####.com:443
- TCP(TLS/1.0) rr1---s####.g####.com:443
- TCP(TLS/1.0) p####.google####.com:443
- TCP(TLS/1.0) 1####.194.221.95:443
- TCP(TLS/1.0) rr6---s####.g####.com:443
- TCP(TLS/1.0) h####.b####.com:443
- TCP(TLS/1.0) rr8---s####.g####.com:443
- TCP(TLS/1.0) and####.a####.go####.com:443
- TCP(TLS/1.0) connect####.gst####.com:443
- TCP(TLS/1.0) f####.gst####.com:443
- TCP(TLS/1.2) pla####.google####.com:443
- TCP(TLS/1.2) connect####.gst####.com:443
- TCP(TLS/1.2) 1####.194.221.95:443
- UDP tm1.binst####.live:3924
- UDP as2.binst####.live:13
- UDP 2####.255.255.250:1900
- UDP tm3.binst####.live:13
- UDP as2.binst####.live:3924
- UDP tm3.binst####.live:3923
- UDP as4.binst####.live:3923
- a####.juyo####.net
- a####.juyo####.net.####.8
- a####.webxia####.top
- and####.a####.go####.com
- and####.b####.qq.com
- and####.cli####.go####.com
- as1.binst####.live
- as2.binst####.live
- as3.binst####.live
- as4.binst####.live
- connect####.gst####.com
- digital####.google####.com
- f####.gst####.com
- h####.b####.com
- hdp.s####.org
- m####.go####.com
- p####.google####.com
- pla####.google####.com
- pla####.googleu####.com
- rr1---s####.g####.com
- rr6---s####.g####.com
- rr8---s####.g####.com
- tm1.binst####.live
- tm2.binst####.live
- tm3.binst####.live
- tm4.binst####.live
- up####.juyo####.net
- up####.juyo####.net.####.8
- up####.webxia####.top
- w####.pcon####.com.cn
- a####.webxia####.top/plugins/libfuck/202205261145/libfuck.so
- a####.webxia####.top/plugins/libsign/202009211008/libsign.so
- a####.webxia####.top/plugins/libtvcore/202110111500/libtvcore-666.so
- c5112fe####.c####.front####.com/hdp_config/ad.json
- c5112fe####.c####.front####.com/hdp_config/apk-config.json
- c5112fe####.c####.front####.com/hdp_config/channel-configs.json
- c5112fe####.c####.front####.com/hdp_config/hidden-configs.json
- c5112fe####.c####.front####.com/hdp_config/operations.json
- c5112fe####.c####.front####.com/hdp_config/play-order.json
- c5112fe####.c####.front####.com/hdp_config/plugins-113.json
- c5112fe####.c####.front####.com/hdp_config/prepare-block.json
- c5112fe####.c####.front####.com/hdp_config/shopping.json
- c5112fe####.c####.front####.com/hdp_config/special-flavor/shafa/channel-...
- c5112fe####.c####.front####.com/hdp_config/special-flavor/shafa/hidden-c...
- c5112fe####.c####.front####.com/hdp_config/special-flavor/shafa/play-ord...
- up####.webxia####.top/data/channels_new_v2/carousel/264_product.zip
- up####.webxia####.top/data/channels_new_v2/cctv/1011_product.zip
- up####.webxia####.top/data/channels_new_v2/local/748_product.zip
- up####.webxia####.top/data/channels_new_v2/shopping/146_product.zip
- up####.webxia####.top/plugins/hdp/202302281734/hdp_485.jar
- w####.pcon####.com.cn/ipJson.jsp?json=####
- a####.webxia####.top/app/HDP_201.apk
- up####.webxia####.top/data/channels_new_v2/carousel/264_product.zip
- up####.webxia####.top/data/channels_new_v2/cctv/1011_product.zip
- up####.webxia####.top/data/channels_new_v2/local/748_product.zip
- up####.webxia####.top/data/channels_new_v2/shopping/146_product.zip
- and####.b####.qq.com/rqd/async?aid=####
- h####.b####.com:443/app.gif
- /data/data/####/02ceec046e2c0500d1df6489c97f33c2.0.tmp
- /data/data/####/02ceec046e2c0500d1df6489c97f33c2.1
- /data/data/####/02ceec046e2c0500d1df6489c97f33c2.1.tmp
- /data/data/####/1004
- /data/data/####/3ada7ab781be820563481d3d3807694d.0.tmp
- /data/data/####/3ada7ab781be820563481d3d3807694d.1
- /data/data/####/3ada7ab781be820563481d3d3807694d.1.tmp
- /data/data/####/3d6e812910c876b187f884cd4f9c1d90.0.tmp
- /data/data/####/3d6e812910c876b187f884cd4f9c1d90.1
- /data/data/####/3d6e812910c876b187f884cd4f9c1d90.1.tmp
- /data/data/####/3dd3917946becd198a22299bc58d73b4.0.tmp
- /data/data/####/3dd3917946becd198a22299bc58d73b4.1
- /data/data/####/3dd3917946becd198a22299bc58d73b4.1.tmp
- /data/data/####/3e2be8b767c9ea8b4b0f38e70adcda86.0.tmp
- /data/data/####/3e2be8b767c9ea8b4b0f38e70adcda86.1
- /data/data/####/3e2be8b767c9ea8b4b0f38e70adcda86.1.tmp
- /data/data/####/426824f9dfaf2a7fd21b016212fe3ba9.0.tmp
- /data/data/####/426824f9dfaf2a7fd21b016212fe3ba9.1
- /data/data/####/507326d0e90a502e9666f1cc2083e08b.0.tmp
- /data/data/####/507326d0e90a502e9666f1cc2083e08b.1
- /data/data/####/507326d0e90a502e9666f1cc2083e08b.1.tmp
- /data/data/####/70105d1fa158ceb49c49de4cad42bce9.0.tmp
- /data/data/####/70105d1fa158ceb49c49de4cad42bce9.1
- /data/data/####/70105d1fa158ceb49c49de4cad42bce9.1.tmp
- /data/data/####/81166c7727d38735d681dea1e2076af0.0.tmp
- /data/data/####/81166c7727d38735d681dea1e2076af0.1.tmp
- /data/data/####/93c931bed0d21be66f0a523c573d7ef3.0.tmp
- /data/data/####/93c931bed0d21be66f0a523c573d7ef3.1
- /data/data/####/93c931bed0d21be66f0a523c573d7ef3.1.tmp
- /data/data/####/96b8ba2225840405ce6f7e4ccd7d22ee.0.tmp
- /data/data/####/96b8ba2225840405ce6f7e4ccd7d22ee.1
- /data/data/####/HDP_18e4d0.mmap3
- /data/data/####/HDP_18e4d0_20230303.xlog
- /data/data/####/__Baidu_Stat_SDK_SendRem.xml
- /data/data/####/__local_ap_info_cache.json
- /data/data/####/__local_last_session.json
- /data/data/####/__local_stat_cache.json
- /data/data/####/__send_data_1677803010577
- /data/data/####/baidu_mtj_sdk_record.xml
- /data/data/####/bugly_db_-journal
- /data/data/####/c9a5bd6e6be66ad7a31dfdc1087531a4.0.tmp
- /data/data/####/c9a5bd6e6be66ad7a31dfdc1087531a4.1
- /data/data/####/carousel.zip
- /data/data/####/carousel.zip.download
- /data/data/####/carousel.zip.tmp
- /data/data/####/carousel_264_product.php
- /data/data/####/cctv.zip
- /data/data/####/cctv.zip.tmp
- /data/data/####/cctv_1011_product.php
- /data/data/####/channel.xml
- /data/data/####/channel.xml.bak
- /data/data/####/crashrecord.xml
- /data/data/####/e04ad7fffd615cc66db91721f2201b86.0.tmp
- /data/data/####/e04ad7fffd615cc66db91721f2201b86.1
- /data/data/####/eb0e69936ff1ff8e7a0531a1c01d3d34.0.tmp
- /data/data/####/eb0e69936ff1ff8e7a0531a1c01d3d34.1
- /data/data/####/eb0e69936ff1ff8e7a0531a1c01d3d34.1.tmp
- /data/data/####/f1e809138fe17695f55e173b72db762f.0.tmp
- /data/data/####/f1e809138fe17695f55e173b72db762f.1
- /data/data/####/f1e809138fe17695f55e173b72db762f.1.tmp
- /data/data/####/f837245c30b856f3db5ea3b6c335fb24.0.tmp
- /data/data/####/f837245c30b856f3db5ea3b6c335fb24.1
- /data/data/####/f837245c30b856f3db5ea3b6c335fb24.1.tmp
- /data/data/####/hdp.db-journal (deleted)
- /data/data/####/hdp.db-wal
- /data/data/####/hdp.dex
- /data/data/####/hdp.dex.flock (deleted)
- /data/data/####/hdp.jar
- /data/data/####/hdpfans.com_preferences.xml
- /data/data/####/hdpfans.com_preferences.xml.bak
- /data/data/####/journal
- /data/data/####/libcuid.so
- /data/data/####/libfuck.so
- /data/data/####/libsign.so
- /data/data/####/libtvcore.so
- /data/data/####/local.zip (deleted)
- /data/data/####/local.zip.download
- /data/data/####/local.zip.tmp
- /data/data/####/local.zip.tmp (deleted)
- /data/data/####/local_748_product.php
- /data/data/####/local_crash_lock
- /data/data/####/m.xml
- /data/data/####/plugins.xml
- /data/data/####/proc_auxv
- /data/data/####/region.xml
- /data/data/####/security_info
- /data/data/####/shopping.zip
- /data/data/####/shopping.zip.tmp
- /data/data/####/shopping_146_product.php
- /data/data/####/update-config.xml
- /data/data/####/update-config.xml.bak
- /data/media/####/.confd
- /data/media/####/.confd-journal
- /data/media/####/.cuid2
- /data/media/####/.timestamp
- /data/media/####/logs.csv
- /data/misc/####/primary.prof
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- getprop
- getprop ro.build.display.id
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.miui.ui.version.name
- getprop ro.smartisan.version
- getprop ro.vivo.os.version
- libUrlDecode
- libc++_shared
- libmarsxlog
- libtvcore
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- AES-GCM-NoPadding