Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) oth.eve.mdt.####.com:8080
- TCP(HTTP/1.1) tinyali####.c####.l####.####.com:80
- TCP(HTTP/1.1) oth.str.mdt.####.com:8080
- TCP(HTTP/1.1) qos.l####.360.cn:80
- TCP(HTTP/1.1) syy-ima####.b0.upa####.com:80
- TCP(HTTP/1.1) p####.tc.qq.com:80
- TCP(HTTP/1.1) s####.e.qq.com:80
- TCP(HTTP/1.1) gs.g####.com:80
- TCP(HTTP/1.1) s####.tc.qq.com:80
- TCP(HTTP/1.1) l####.cc:80
- TCP(HTTP/1.1) s####.s.360.cn:80
- TCP(HTTP/1.1) c####.g####.com:80
- TCP(HTTP/1.1) v.g####.qq.com:80
- TCP(HTTP/1.1) b####.g####.com:80
- TCP(HTTP/1.1) 65a4####.cdn.uc####.####.cn:80
- TCP(HTTP/1.1) sdk.l####.360.cn:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) p.s.3####.cn:80
- TCP(HTTP/1.1) s####.l####.360.####.com:80
- TCP(HTTP/1.1) mi.g####.qq.com:80
- TCP(HTTP/1.1) api.f####.so:80
- TCP(TLS/1.0) sdkc####.e.360.cn:443
- TCP(TLS/1.0) lbs.net####.im:443
- TCP(TLS/1.0) wa####.127.net:443
- TCP(TLS/1.0) publish####.b####.com.####.com:443
- TCP(TLS/1.0) 1####.217.17.142:443
- TCP(TLS/1.0) 07img####.eas####.com.####.com:443
- TCP(TLS/1.0) log####.weilito####.net:443
- TCP(TLS/1.0) wea####.weilito####.net.####.com:443
- TCP(TLS/1.0) res####.a####.com:443
- TCP(TLS/1.0) 02img####.eas####.com.####.com:443
- TCP(TLS/1.0) client####.weilito####.net:443
- TCP(TLS/1.0) 05img####.eas####.com.####.com:443
- 02img####.eas####.com
- 05img####.eas####.com
- 06img####.eas####.com
- 07img####.eas####.com
- a####.u####.com
- ads.weilito####.net
- api.f####.so
- b####.g####.com
- c####.g####.com
- c####.g####.com
- clien####.weilito####.net
- client####.weilito####.net
- gs.g####.com
- im####.9l####.com
- img####.st####.suishe####.net
- imgc####.qq.com
- l####.cc
- lbs.net####.im
- log####.weilito####.net
- mi.g####.qq.com
- oth.eve.mdt.####.com
- oth.str.mdt.####.com
- p####.ugd####.com
- p.s.3####.cn
- pc.weilito####.net
- publish####.b####.com
- qos.l####.360.cn
- res####.a####.com
- s####.e.qq.com
- s####.l####.360.cn
- s####.s.360.cn
- sdk.l####.360.cn
- sdkc####.e.360.cn
- st####.et####.cn
- up####.weilito####.net
- v.g####.qq.com
- wa####.127.net
- wea####.weilito####.net
- wl####.weilito####.net
- 65a4####.cdn.uc####.####.cn/imgs/upload/1545386323.3377.jpg
- 65a4####.cdn.uc####.####.cn/imgs/upload/1545386594.9156.jpg
- 65a4####.cdn.uc####.####.cn/imgs/upload/1545386655.3418.jpg
- mi.g####.qq.com/gdt_mview.fcg?datatype=####&posid=####&count=####&r=####...
- p####.tc.qq.com/qzone/biz/gdt/mod/android/AndroidAllInOne/proguard/his/r...
- qos.l####.360.cn/vc.gif?&bid=####&pid=####&ver=####&c_ver=####&os=####&m...
- s####.l####.360.####.com/Object.getFile/livecloudsdk/YW5kcm9pZF9wbHVnaW5...
- s####.s.360.cn/ak/2e65f2f2fdaf6c699b223c61b1b5ab89.html?m2=####
- s####.tc.qq.com/gdt/0/DAAiiAjAUAALQABjBcGkj-COoSEFkc.jpg/0?ck=####
- sdk.l####.360.cn/codec?os=####&tm=####&model=####&r=####&package=####&pi...
- sdk.l####.360.cn/qvideo_sdk_and_android_2.0.6.18082901.conf?os=####&tm=#...
- sdk.l####.360.cn/rtc?os=####&tm=####&model=####&r=####&package=####&pid=...
- syy-ima####.b0.upa####.com/2e52e1dc5ac9d868e9983bd3fd8ced1c/295c156beeb0...
- syy-ima####.b0.upa####.com/2e52e1dc5ac9d868e9983bd3fd8ced1c/eefa43df5541...
- syy-ima####.b0.upa####.com/2e52e1dc5ac9d868e9983bd3fd8ced1c/f4c3aec3f534...
- tinyali####.c####.l####.####.com/image/201812/24/06708a2145ab6b648e20f56...
- tinyali####.c####.l####.####.com/image/201812/24/167781e1fa73fd3d69087a4...
- tinyali####.c####.l####.####.com/image/201812/24/d45e62f8c3d4b106053cec8...
- a####.u####.com/app_logs
- api.f####.so/enhancement/api/v1/ads
- b####.g####.com/api.php?format=####&t=####
- c####.g####.com/api.php?format=####&t=####
- gs.g####.com/encryption/key/fetch
- gs.g####.com/geshu/sdkStatistics/bd
- gs.g####.com/geshu/sdkStatistics/ubi
- l####.cc/i/sdk/install
- oth.eve.mdt.####.com:8080/analytics/upload?rid=####&sid=####
- oth.str.mdt.####.com:8080/analytics/upload
- oth.str.mdt.####.com:8080/analytics/upload?sid=####
- p.s.3####.cn/update/update.php?p=####
- s####.e.qq.com/activate
- v.g####.qq.com/gdt_stats.fcg
- /data/data/####/-1367255240938462138
- /data/data/####/-1513454574-1152607198
- /data/data/####/-2025418993-1615290414
- /data/data/####/-2074605593176466185
- /data/data/####/-232061834-1050944940
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/01361944993ddaf5d986b1daa1e17b993e5290884958464....0.tmp
- /data/data/####/02c1e38874834deadc97ac4a689ae24f461cd73d33d56e6....0.tmp
- /data/data/####/06bb860bfc69ad3306ee2a2b5ac92a60ac3866e96b5944f....0.tmp
- /data/data/####/0dfc59a433d6e22fc0621fe2adce5d25de034d90550c401....0.tmp
- /data/data/####/14afe30888a78b82bedfccb65961900ba4831de2fb0ecc1....0.tmp
- /data/data/####/18d60ce328995f258484aec21bdec5a14559f8c6f486098....0.tmp
- /data/data/####/1d2b904cbeadfb72ed9546111a231c85.0
- /data/data/####/20ab7073c7dc4febed1ca4b87eee3d9b2e3046f2a3b7265....0.tmp
- /data/data/####/2827b57d53f6255f2c156f612ca70f1f85121ba6f3c5e58....0.tmp
- /data/data/####/35cf70388274838d20fc99b311b67d7e591ee9e35f953af....0.tmp
- /data/data/####/36cc60e4e507afe94a06742e21989533b4b58bc09862bf2....0.tmp
- /data/data/####/44f052979fa819a3eeee9e067f89a80f123e29e8a673958....0.tmp
- /data/data/####/5257e6b3aff7bc5abc0498ff55cecca8046b18edf1f844b....0.tmp
- /data/data/####/53b9e9c1026c47a7ebacdff2a9a6b01a5e3a59e4f70df1f....0.tmp
- /data/data/####/633184a3d010fb2228d51c99a4a5193894bd9c38dfe45f7....0.tmp
- /data/data/####/645a94f062f76b5e9ebd15a734478806b49c5d4d8e2ca97....0.tmp
- /data/data/####/6b0da6cd55ec27bab9db38177eb926fbb02647827a9cc3c....0.tmp
- /data/data/####/754869893280994506
- /data/data/####/7d143151d756dd61d00e99db32b280fcacacc5569f2d593....0.tmp
- /data/data/####/85bc01f9aa5eac21a831624f4310dc57c4d4f33b55173cb....0.tmp
- /data/data/####/89351d880c56b28f53cd752cd9bdff99229ec32ab0b85eb....0.tmp
- /data/data/####/9485c68771a172e1057dd182660fc3597e3737b2feac93c....0.tmp
- /data/data/####/AKTorchDownload.db-journal
- /data/data/####/Beacon_sig_1.lock
- /data/data/####/DENGTA_META.xml
- /data/data/####/DownloadMarket.db-journal
- /data/data/####/ECalendarPreferences.xml
- /data/data/####/GDTSDK.db
- /data/data/####/GDTSDK.db-journal
- /data/data/####/LKME_Server_Request_Queue.xml
- /data/data/####/NIMSDK_Config_883d8a8d8c35039814932350efa3944a .xml
- /data/data/####/PreSettings-journal
- /data/data/####/QH_DeviceSDK.xml
- /data/data/####/QH_SDK_M2.xml
- /data/data/####/QH_SDK_UserData2e65f2f2fdaf6c699b223c61b1b5ab89.xml
- /data/data/####/ReadAward.xml
- /data/data/####/SuishenAd_prf.xml
- /data/data/####/SuishenExitPageSDK_v91.apk
- /data/data/####/Umeng.xml
- /data/data/####/Update.db.xml
- /data/data/####/WlttNews.db-journal
- /data/data/####/Y24ud2VsaS5zdG9yeQ==.tick.lock
- /data/data/####/a02e0406c6ea816507ff16acb96a31ec0569b07fef40753....0.tmp
- /data/data/####/app_globel_config_file.xml
- /data/data/####/beacon_db-journal
- /data/data/####/bf8cb09baec0869e867b247ec3486416bd31f72ec7605d7....0.tmp
- /data/data/####/c0586a10777146560765a69231d89beb.xml
- /data/data/####/c34e455b513b4f77dd7f7daea5a6b4ff2dc30b9874b5f8e....0.tmp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/cloud_switch_cache
- /data/data/####/cn.weli.story_preferences.xml
- /data/data/####/com.qihoo.livecloud.settings.GPWebrtcSettings.pref.xml
- /data/data/####/core_update
- /data/data/####/core_update_locker
- /data/data/####/d2741edfa6fa75adc423f5fcd56ba1cf5b6ca7e0009cc1c....0.tmp
- /data/data/####/daemon
- /data/data/####/devCloudSetting.cfg
- /data/data/####/devCloudSetting.sig
- /data/data/####/device_collector
- /data/data/####/device_collector_locker
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/finalcore.jar
- /data/data/####/gdt_plugin.jar
- /data/data/####/gdt_plugin.jar.sig
- /data/data/####/gdt_plugin.tmp
- /data/data/####/gdt_plugin.tmp.sig
- /data/data/####/gdt_suid
- /data/data/####/gtc.db-journal
- /data/data/####/history_cache.db-journal
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/ias.db-journal
- /data/data/####/ias_sp.xml
- /data/data/####/ias_sp.xml (deleted)
- /data/data/####/ias_sp.xml.bak
- /data/data/####/ias_sp.xml.bak (deleted)
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/k.store
- /data/data/####/libjiagu587952875.so
- /data/data/####/libjplayer.so.tmp
- /data/data/####/liblocalserver.so.tmp
- /data/data/####/libmyssl.so.1.1.tmp
- /data/data/####/libtranscore.so.tmp
- /data/data/####/libviewer.so.tmp
- /data/data/####/linkedme_referral_shared_pref.xml
- /data/data/####/localserver_2.0.6.18081503.zip
- /data/data/####/locker
- /data/data/####/log_reupload_task
- /data/data/####/log_reupload_task_locker
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/multidex.version.xml
- /data/data/####/player_2.0.6.18082901.zip
- /data/data/####/pref.xml
- /data/data/####/profile_task
- /data/data/####/profile_task_locker
- /data/data/####/qhvc_plugin.xml
- /data/data/####/qhvc_plugin.xml.bak
- /data/data/####/qhvc_plugin.xml.bak (deleted)
- /data/data/####/sdkCloudSetting.cfg
- /data/data/####/sdkCloudSetting.sig
- /data/data/####/share_data.xml
- /data/data/####/sp.livecloud.database.xml
- /data/data/####/suishenAccountInfo.xml
- /data/data/####/suishen_ad.db-journal
- /data/data/####/suishen_ad_pramas.xml
- /data/data/####/tools_2.0.6.18082901.zip
- /data/data/####/torch_sdk_config.xml
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/uninstall_apk
- /data/data/####/uninstall_apk_locker
- /data/data/####/update_lc
- /data/data/####/waitingDown
- /data/data/####/waitingDown_locker
- /data/data/####/webview.db-journal
- /data/media/####/.deviceId
- /data/media/####/.iddata
- /data/media/####/.lm_device_id
- /data/media/####/.nomedia
- /data/media/####/.sfp
- /data/media/####/.testf
- /data/media/####/1545386323.3377.jpg
- /data/media/####/1545386594.9156.jpg
- /data/media/####/1545386655.3418.jpg
- /data/media/####/1545624017494.db
- /data/media/####/2e65f2f2fdaf6c699b223c61b1b5ab89
- /data/media/####/2e65f2f2fdaf6c699b223c61b1b5ab89 (deleted)
- /data/media/####/5lY
- /data/media/####/5lY (deleted)
- /data/media/####/alsn20170807.db
- /data/media/####/alsn20170807.db-journal
- /data/media/####/blank.png
- /data/media/####/btn_nav_bg.9.png
- /data/media/####/btn_nav_sel.9.png
- /data/media/####/cn.weli.story_.db
- /data/media/####/dialog_details_bg.9.png
- /data/media/####/dialog_dismiss.png
- /data/media/####/dialog_dismiss_sel.png
- /data/media/####/download_btn_normal.9.png
- /data/media/####/fes_type_sel.9.png
- /data/media/####/grid_bg.9.png
- /data/media/####/grid_sel.9.png
- /data/media/####/ic_btn_down.png
- /data/media/####/ic_default.png
- /data/media/####/info
- /data/media/####/list_bg_sel.png
- /data/media/####/meta.dat
- /data/media/####/nim_sdk.log
- /data/media/####/top_btn_normal.9.png
- /data/media/####/top_btn_selected.9.png
- /data/media/####/uninstall_apk_list
- /data/media/####/update_btn_normal.9.png
- /system/bin/cat /proc/cpuinfo
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/sh -c getprop ro.build.fingerprint
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/app_bin/daemon
- getprop ro.build.fingerprint
- mars_d -p <Package> -s com.igexin.sdk.PushService -p1r 45 -p1w 46 -p2r 47 -p2w 48
- EcalendarLib
- daemon_api20
- libjiagu587952875
- libjplayer
- liblocalserver
- libtranscore
- libviewer
- pl_droidsonroids_gif
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-ECB-PKCS7Padding
- DESede
- RSA-ECB-PKCS1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-ECB-PKCS7Padding
- DESede
- RSA-ECB-PKCS1Padding