Техническая информация
- Adware.Airpush.7.origin
- Adware.Dowgin.3.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) api.is.d####.####.cn:80
- TCP(HTTP/1.1) et2-na6####.wagbr####.ali####.####.com:80
- TCP(HTTP/1.1) api.cp.13####.net:80
- TCP(HTTP/1.1) api.box.yo####.cn:80
- TCP(TLS/1.0) nqsh####.nq.com:443
- api.box.yo####.cn
- api.cp.13####.net
- api.is.d####.####.cn
- apk.d.ad.####.com
- mt####.go####.com
- nqsh####.nq.com
- www.u####.co
- www.u####.com
- api.box.yo####.cn/nbox/init.jsp
- api.cp.13####.net/is/info.jsp
- api.cp.13####.net/is/init.jsp
- api.is.d####.####.cn/is/info.jsp
- api.is.d####.####.cn/is/init.jsp
- et2-na6####.wagbr####.ali####.####.com/check_config_update
- /data/data/####/DexToLoad.apk
- /data/data/####/_bx_share.xml
- /data/data/####/_dsph.xml
- /data/data/####/_dtnum.xml
- /data/data/####/_ishares.xml
- /data/data/####/awllsasi.dex (deleted)
- /data/data/####/awllsasi.jar
- /data/data/####/ccom
- /data/data/####/com.hdimxtw.wllsasi_preferences.xml
- /data/data/####/cwllsasico.dex (deleted)
- /data/data/####/cwllsasico.jar
- /data/data/####/cwllsasico.jar (deleted)
- /data/data/####/libnqshieldx86.so
- /data/data/####/mobclick_agent_header_com.hdimxtw.wllsasi.xml
- /data/data/####/mobclick_agent_state_com.hdimxtw.wllsasi.xml
- /data/data/####/nqdata
- /data/data/####/nqshield_pref_file.xml
- /data/data/####/umeng_analytic_online_setting_com.hdimxtw.wllsasi.xml
- /data/media/####/.lock
- /data/media/####/comhdimxtwwllsasi.tmp
- /data/media/####/run.pp
- chmod 755 <Package Folder>/.cache/libnqshieldx86.so
- chmod 755 <Package Folder>/.cache/nqshell
- logcat -d -v raw -s AndroidRuntime:E -p <Package>
- game_frame
- libnqshieldx86
- DES