Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) valiu####.c####.qini####.com:80
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) q####.q####.cn:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- UDP(NTP) n####.al####.com:123
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) conte####.chao####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5226
- 7j####.c####.z0.####.com
- and####.b####.qq.com
- c####.g####.ig####.com
- c-h####.g####.com
- conte####.chao####.com
- gxv####.chao####.com
- log.u####.com
- n####.al####.com
- n####.al####.com
- n####.al####.com
- n####.al####.com
- n####.al####.com
- n####.al####.com
- n####.al####.com
- plb####.u####.com
- q####.q####.cn
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- u####.u####.com
- q####.q####.cn/qzapp/101378925/1E69459C1893708C70110453820E6547/100
- q####.q####.cn/qzapp/101378925/2DEF7B5F58FD924CD2015749FE10FFD0/100
- q####.q####.cn/qzapp/101378925/2EEAD490D76086EA70B05AB16CFFB5B0/100
- q####.q####.cn/qzapp/101378925/3D7D4D1B9D660990F58E42EC3DC2C121/100
- q####.q####.cn/qzapp/101378925/4DA9B28904813B62B1E50C8829C431D2/100
- q####.q####.cn/qzapp/101378925/6767D25F4A54E6DF10C470C6A30DF76F/100
- q####.q####.cn/qzapp/101378925/AFBED9F503B7D21FE239DF8EE8E05A9F/100
- t####.c####.q####.####.com/tdata_bca864
- t####.c####.q####.####.com/tdata_ynp969
- ti####.c####.l####.####.com/config/hz-hzv3.conf
- valiu####.c####.qini####.com/test/videos/doupi/reco/161923/0?vframe/####
- valiu####.c####.qini####.com/test/videos/doupi/reco/161926/0?vframe/####
- valiu####.c####.qini####.com/test/videos/doupi/videos/351265/0?vframe/####
- valiu####.c####.qini####.com/test/videos/doupi/videos/91297/0?vframe/####
- valiu####.c####.qini####.com/test/videos/netease/jokes/VO2QBDBQ8/0?vfram...
- valiu####.c####.qini####.com/test/videos/netease/jokes/VOSDRMBJT/0?vfram...
- valiu####.c####.qini####.com/test/videos/netease/jokes/VOSDRMDM8/0?vfram...
- and####.b####.qq.com/rqd/async?aid=####
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/0031b3edd234b077ac38c4ba84b10eba944d70c0c0c62c3....0.tmp
- /data/data/####/0286c75bbba233afe05799aed5dcd81c86d1e11c880a481....0.tmp
- /data/data/####/056744122499de81abf99258f906cbbc11387c82eb110e2....0.tmp
- /data/data/####/0ac480afd574fbeae2d0ebf6a1858af27d8da6a23afd4d3....0.tmp
- /data/data/####/1004
- /data/data/####/15b0c9269b0bbe30b5f43f761b65941761c82241ec6c7ad....0.tmp
- /data/data/####/182b5e50d6072a6ae6b3528d0b4427ab8a84dd87160ab62....0.tmp
- /data/data/####/1929c4b1a6b533c61055d388e0a80932102c38b66ad7efd....0.tmp
- /data/data/####/1b8790b8d98957ad18cbf4f658a155d20a77f2f97ee8766....0.tmp
- /data/data/####/285167a28a5fc8a28d2dbf1cf0f2c3343c1e31fdfa2891b....0.tmp
- /data/data/####/2c18a31c93aef09f258a5cf7eedc611fcd158e94e151629....0.tmp
- /data/data/####/36b9a80117ba305430b79263d6d18d86c4070b95b2345f9....0.tmp
- /data/data/####/3a5126ee9f589e66a9af8177a6be826e8d04fdc3d8ff7e6....0.tmp
- /data/data/####/3fe14daf58480c974ed800cdef2e98135fdd1dc4413bc8b....0.tmp
- /data/data/####/40111042c2a4a38c615e6b2362561d8c6f85c25cc06dcf3....0.tmp
- /data/data/####/4e9dfeade043c862776111d2a64b05f2e937da497860d2c....0.tmp
- /data/data/####/52bdd18a179e8ba2ce05803d22dc0981f8207e4de9ed6f3....0.tmp
- /data/data/####/59bab3e7aeaf936e9a1361f871600804aa7d056518f8032....0.tmp
- /data/data/####/6b218d84327b9669fd613422135e46444cfe16dbe29dca9....0.tmp
- /data/data/####/6cbe632e896ed602394a8af96bc34cafe0dd06ce1b62b8f....0.tmp
- /data/data/####/873e874304067b5ba8619a1baa0e415d72b6bce6dd17abf....0.tmp
- /data/data/####/920c1e14dab17f46904f4b2317085800ca8b4d4f7e9a5ec....0.tmp
- /data/data/####/99ac7c0eef661f4ababa5836ae5c52165e6b4a713fd9c31....0.tmp
- /data/data/####/9ffaf8a713a00e1ad562813e2bce175f44a7aae9f13babe....0.tmp
- /data/data/####/MultiDex.lock
- /data/data/####/UM_PROBE_DATA.xml
- /data/data/####/a247b534cb23cde40426ed66f7d73284d748217a5a4fffc....0.tmp
- /data/data/####/a9634d3da9b0c1b91a413705b4660c53c1df9e785d1fc2a....0.tmp
- /data/data/####/a==7.5.4&&0.9.1_1545883617391_envelope.log
- /data/data/####/bugly_db_-journal
- /data/data/####/c202f03bc3bfad771e035748c70e57ba35c0dcb750d4b9d....0.tmp
- /data/data/####/ccdcf2b9d9556df30ce8574d833dc49cd068c238de7b213....0.tmp
- /data/data/####/crashrecord.xml
- /data/data/####/d76540e9ff5f22cebac798ab60aed65cd8c0c11569136f4....0.tmp
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ1ODgzNjE2NjU5;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ1ODgzNjQxMDk2;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ1ODgzNjU3NzEx;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ1ODgzNjcyMTE3;
- /data/data/####/dW1weF9zaGFyZV8xNTQ1ODgzNjQ1MTc4;
- /data/data/####/dW1weF9zaGFyZV8xNTQ1ODgzNjQ1MzI0;
- /data/data/####/e023f0768e384fa5234f0a49647a148985fc3962ac2b320....0.tmp
- /data/data/####/e893cd4fb34aac2e2c51641ed2af71a0799b8460cf34973....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/i==1.2.0&&0.9.1_1545883616751_envelope.log
- /data/data/####/i==1.2.0&&0.9.1_1545883641143_envelope.log
- /data/data/####/i==1.2.0&&0.9.1_1545883657720_envelope.log
- /data/data/####/i==1.2.0&&0.9.1_1545883672135_envelope.log
- /data/data/####/info.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libjiagu-1626942992.so
- /data/data/####/local_crash_lock
- /data/data/####/multidex.version.xml
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/qihoo_jiagu_crash_report.xml
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/share.db-journal
- /data/data/####/tdata_bca864
- /data/data/####/tdata_bca864.jar
- /data/data/####/tdata_ynp969
- /data/data/####/tdata_ynp969.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_socialize.xml
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.cca.dat
- /data/media/####/.nomedia
- /data/media/####/.umm.dat
- /data/media/####/2018-12-27_04-07-17_784.hprof.result
- /data/media/####/624ecc1e-632a-4c61-99db-c3c2879b4c95_pending.hprof
- /data/media/####/app.db
- /data/media/####/com.bubble.witty.bin
- /data/media/####/com.bubble.witty.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/sysid.dat
- /data/media/####/tdata_bca864
- /data/media/####/tdata_ynp969
- /data/media/####/test.log
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.push.PushService 24608 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- getprop
- ls /
- ls /sys/class/thermal
- Bugly
- c++_shared
- getuiext3
- ijkffmpeg
- ijkplayer
- ijksdl
- libjiagu-1626942992
- mmkv
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding