Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) www.go####.com:80
- TCP(HTTP/1.1) pi####.qq.com:80
- TCP(HTTP/1.1) a####.exc.mob.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) te####.39.net:80
- TCP(HTTP/1.1) sni.c####.q####.####.net:80
- TCP(HTTP/1.1) cgi.con####.qq.com:80
- TCP(TLS/1.0) ssl.gst####.com:443
- TCP(TLS/1.0) ae.bdst####.com.####.com:443
- TCP(TLS/1.0) av1.x####.com:443
- TCP(TLS/1.0) c####.x####.com:443
- TCP(TLS/1.0) pim####.b0.a####.com:443
- TCP(TLS/1.0) sh.wagbr####.alibaba####.com:443
- TCP(TLS/1.0) www.go####.com:443
- TCP(TLS/1.0) www.gst####.com:443
- TCP(TLS/1.0) s####.tc.qq.com:443
- TCP(TLS/1.0) wap.cmpass####.com:8443
- TCP(TLS/1.0) wa####.39he####.com:443
- TCP(TLS/1.0) i####.39.net:443
- TCP(TLS/1.0) hm.b####.com:443
- TCP(TLS/1.0) www.go####.nl:443
- TCP(TLS/1.0) wap.n.sh####.com:443
- TCP(TLS/1.0) adser####.go####.com:443
- TCP(TLS/1.0) inter####.39.net:443
- TCP c####.g####.ig####.com:5225
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.exc.mob.com
- adser####.go####.com
- ae.bdst####.com
- and####.b####.qq.com
- av1.x####.com
- c####.g####.ig####.com
- c####.x####.com
- c####.x####.com
- c-h####.g####.com
- cgi.con####.qq.com
- hm.b####.com
- i####.39.net
- inter####.39.net
- m####.b####.com
- p####.39.net
- pi####.qq.com
- plb####.u####.com
- r####.wx.qq.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- ssl.gst####.com
- te####.39.net
- u####.u####.com
- wa####.39.net
- wap.cmpass####.com
- www.go####.com
- www.go####.nl
- www.gst####.com
- xiongz####.b####.com
- cgi.con####.qq.com/qqconnectopen/openapi/policy_conf?sdkv=####&appid=###...
- sni.c####.q####.####.net/config/hz-hzv3.conf
- sni.c####.q####.####.net/tdata_YYn966
- sni.c####.q####.####.net/tdata_eOt091
- te####.39.net/UploadImages/ListImg/1836633481.jpg
- te####.39.net/UploadImages/ListImg/701890936.jpg
- www.go####.com/complete/search?hl=en&client=android&q=https://www.google...
- a####.exc.mob.com/errconf
- and####.b####.qq.com/rqd/async?aid=####
- c-h####.g####.com/api.php?format=####&t=####
- cgi.con####.qq.com/qqconnectutil/sdk
- pi####.qq.com/mstat/report/?index=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.duid
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/.lock
- /data/data/####/.mta-wxop.xml
- /data/data/####/.vpl_lock
- /data/data/####/01be488491abb4a621fb726e48336f5e970ed41d2e3276d....0.tmp
- /data/data/####/0b9f29314e953449fa8a92979495ce46a0c69737b546bf4....0.tmp
- /data/data/####/1004
- /data/data/####/1146999753001.0
- /data/data/####/135b0e2eec3e7cd89ce610eb0536464a1a743031074a4e2....0.tmp
- /data/data/####/13f8e98bb5bae98302c7f2cf8bfbcbefb66eefe27888e9c....0.tmp
- /data/data/####/1533222693572_2092
- /data/data/####/1533222694828_2092
- /data/data/####/1533222694903_2112
- /data/data/####/1533222695018_2092
- /data/data/####/1533222695249_2092
- /data/data/####/1533222695389_2092
- /data/data/####/1533222695574_2112
- /data/data/####/1533222695747_2112
- /data/data/####/1533222696339_2092
- /data/data/####/1533222696651_2161
- /data/data/####/1533222698245_2161
- /data/data/####/1533222698759_2161
- /data/data/####/1533222698896_2092
- /data/data/####/1533222699047_2325
- /data/data/####/1533222699629_2325
- /data/data/####/1533222699630_2092
- /data/data/####/1533222700067_2092
- /data/data/####/1533222700368_2092
- /data/data/####/1533222702139_2092
- /data/data/####/1533222704018_2092
- /data/data/####/1533222710511_2092
- /data/data/####/1533222712164_2092
- /data/data/####/1533222712317_2092
- /data/data/####/1533222712491_2092
- /data/data/####/1533222712644_2092
- /data/data/####/1533222712877_2092
- /data/data/####/1533222713020_2092
- /data/data/####/1533222714683_2092
- /data/data/####/1533222718154_2092
- /data/data/####/1533222718354_2092
- /data/data/####/1533222718683_2092
- /data/data/####/1533222720120_2092
- /data/data/####/1533222723604_2092
- /data/data/####/1533222728922_2092
- /data/data/####/1533222729304_2092
- /data/data/####/1533222731414_2092
- /data/data/####/1533222747403_2092
- /data/data/####/1533222748091_2092
- /data/data/####/1533222749558_2092
- /data/data/####/1533222758653_2092
- /data/data/####/228488d0ab0f974a70db5b695ed8f5022a56ca0d56f4bb7....0.tmp
- /data/data/####/2368e79092e7a88380570276f8dc37b7b3cc7174b3ecd56....0.tmp
- /data/data/####/5a8ca40850e37ef2027a175e320a75a6038bff27181377e....0.tmp
- /data/data/####/66850d1899cda20a416e80ce6ff7dd28478b30fa4ca3296....0.tmp
- /data/data/####/8846998249604.0
- /data/data/####/Alvin2.xml
- /data/data/####/ApplicationCache.db-journal
- /data/data/####/Archimedes_p1
- /data/data/####/Archimedes_p2
- /data/data/####/Archimedes_p3
- /data/data/####/Archimedes_p4
- /data/data/####/Archimedes_p5
- /data/data/####/ContextData.xml
- /data/data/####/TDCloudSettingsConfig0FDFCC08B7EA4D58B1FB1CE41B5B3FD6.xml
- /data/data/####/TD_app_pefercen_profile.xml
- /data/data/####/TDpref_cloudcontrol1.xml
- /data/data/####/TDpref_longtime.xml
- /data/data/####/TDpref_longtime0.xml
- /data/data/####/TDpref_shorttime.xml
- /data/data/####/TDpref_shorttime0.xml
- /data/data/####/ThrowalbeLog.db-journal
- /data/data/####/UM_PROBE_DATA.xml
- /data/data/####/a006b1c04bc693a458f3aad20d0738e01c07c4bec2122a7....0.tmp
- /data/data/####/a==7.5.0&&6.0.6_1533222695841_envelope.log
- /data/data/####/bugly_db_-journal
- /data/data/####/com.qisheng.daoyi.activity_preferences.xml
- /data/data/####/com.tencent.open.config.json.100844255
- /data/data/####/crashrecord.xml
- /data/data/####/daoyiAppData.xml
- /data/data/####/daoyi_db
- /data/data/####/daoyi_db-journal
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/df5e9df99d1e108dcd258a17dae33b83c10b0c7be52960a....0.tmp
- /data/data/####/df6883f1d51cd8cca36f6c7d8d5340b234f704e82392e6a....0.tmp
- /data/data/####/e50bad098e57987c308ca18ad58cd3aa0886da5fd545835....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/f_00000b
- /data/data/####/f_00000c
- /data/data/####/fd743ec2f146d7377d3b19c2d1cbbccb6205c84376f1a35....0.tmp
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/i==1.2.0&&6.0.6_1533222693274_envelope.log
- /data/data/####/index
- /data/data/####/info.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/iv
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/libjiagu-92706307.so
- /data/data/####/local_crash_lock
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/mob_commons_1
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/pri_wxop_tencent_analysis.db-journal
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/salt
- /data/data/####/security_info
- /data/data/####/ssoconfigs.xml
- /data/data/####/tdata_YYn966
- /data/data/####/tdata_YYn966.jar
- /data/data/####/tdata_eOt091
- /data/data/####/tdata_eOt091.jar
- /data/data/####/tdid.xml
- /data/data/####/tencent_analysis.db-journal
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_general_config.xml (deleted)
- /data/data/####/umeng_it.cache
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/wxop_tencent_analysis.db-journal
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.artc_lock
- /data/media/####/.cca.dat
- /data/media/####/.di
- /data/media/####/.dic_lock
- /data/media/####/.duid
- /data/media/####/.globalLock
- /data/media/####/.im_lock
- /data/media/####/.lecd
- /data/media/####/.lesd_lock
- /data/media/####/.mid.txt
- /data/media/####/.mn_-1464060969
- /data/media/####/.nomedia
- /data/media/####/.pkg_lock
- /data/media/####/.pkgs_lock
- /data/media/####/.rc_lock
- /data/media/####/.slw
- /data/media/####/.ss_lock
- /data/media/####/.tcookieid
- /data/media/####/.umm.dat
- /data/media/####/8285705986d211d5614f2a370a4d777b.0
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.qisheng.daoyi.activity.bin
- /data/media/####/com.qisheng.daoyi.activity.db
- /data/media/####/journal.tmp
- /data/media/####/tdata_YYn966
- /data/media/####/tdata_eOt091
- /data/media/####/test.log
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.qisheng.daoyi.service.DemoPushService 25619 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu-92706307.so
- getprop
- ls /
- ls /sys/class/thermal
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/com.qisheng.daoyi.service.DemoPushService 25619 300 0
- 39_encrypt_jni
- Bugly
- MtaNativeCrash
- getuiext2
- libjiagu-92706307
- AES
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES
- AES-CBC-PKCS7Padding
- AES-ECB-NoPadding
- AES-GCM-NoPadding