Technical information
- Adware.Gexin.2.origin
- UDP(DNS) 8####.8.4.4:53
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) cdn-sdk####.g####.com.####.com:80
- TCP(HTTP/1.1) chinawe####.c####.l####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) a####.u####.com.####.com:80
- UDP(NTP) 2.and####.p####.####.org:123
- TCP(TLS/1.0) 1####.250.179.138:443
- TCP(TLS/1.0) p####.39.net.####.cn:443
- TCP(TLS/1.0) av1.x####.com:443
- TCP(TLS/1.0) rr3---s####.g####.com:443
- TCP(TLS/1.0) and####.google####.com:443
- TCP(TLS/1.0) rr4---s####.g####.com:443
- TCP(TLS/1.0) 2####.58.214.10:443
- TCP(TLS/1.0) gmscomp####.google####.com:443
- TCP(TLS/1.0) rr2---s####.g####.com:443
- TCP(TLS/1.2) 2####.58.214.10:443
- TCP(TLS/1.2) 2####.58.214.14:443
- TCP(TLS/1.2) 1####.250.179.142:443
- TCP(TLS/1.2) 1####.251.36.3:443
- UDP 1####.250.179.138:443
- TCP inter####.39.net:443
- UDP 2####.58.214.10:443
- TCP sdk.o####.t####.####.com:5224
- UDP rr4---s####.g####.com:443
- TCP cm-1####.g####.com:5225
- UDP rr3---s####.g####.com:443
- 2.and####.p####.####.org
- a####.u####.com
- and####.b####.qq.com
- and####.google####.com
- av1.x####.com
- c-h####.g####.com
- cdn-sdk####.g####.com
- cm-1####.g####.com
- gmscomp####.google####.com
- i.t####.com
- inter####.39.net
- m####.go####.com
- p####.39.net
- rr2---s####.g####.com
- rr3---s####.g####.com
- rr3---s####.g####.com
- rr4---s####.g####.com
- sdk.c####.g####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- cdn-sdk####.g####.com.####.com/tdata_EAx630
- cdn-sdk####.g####.com.####.com/tdata_fPG280
- cdn-sdk####.g####.com.####.com/tdata_kPg706
- chinawe####.c####.l####.####.com/config/hzv9.conf
- p####.39.net.####.cn:443//PictureLib/A/f5/c5/20170103/org/861071.png
- a####.u####.com.####.com/app_logs
- and####.b####.qq.com/rqd/async?aid=####
- av1.x####.com:443/u/a/v1/74150f7d
- av1.x####.com:443/u/a/v1/752ab600
- av1.x####.com:443/u/a/v1/8975ef1
- av1.x####.com:443/u/a/v1/c360bf91
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/1004
- /data/data/####/1649333286904_3506
- /data/data/####/1649333290539_3506
- /data/data/####/1649333291992_3559
- /data/data/####/1649333292137_3531
- /data/data/####/1649333293449_3559
- /data/data/####/1649333293996_3506
- /data/data/####/1649333294052_3531
- /data/data/####/1649333294240_3559
- /data/data/####/1649333294752_3531
- /data/data/####/1649333295458_3654
- /data/data/####/1649333296457_3654
- /data/data/####/1649333296459_3506
- /data/data/####/1649333298037_3654
- /data/data/####/1649333299064_3506
- /data/data/####/1649333302954_3506
- /data/data/####/1649333304209_3531
- /data/data/####/1649333304700_3506
- /data/data/####/1649333306286_3559
- /data/data/####/1649333311776_3654
- /data/data/####/1649333317425_3531
- /data/data/####/1649333319071_3506
- /data/data/####/1649333319310_3531
- /data/data/####/1649333320141_3531
- /data/data/####/1649333320549_3559
- /data/data/####/1649333322441_3559
- /data/data/####/1649333323168_3559
- /data/data/####/1649333324044_3654
- /data/data/####/1649333326005_3654
- /data/data/####/1649333326864_3506
- /data/data/####/1649333327886_3506
- /data/data/####/1649333328528_3506
- /data/data/####/1649333329010_3506
- /data/data/####/1649333329970_3506
- /data/data/####/1649333330666_3506
- /data/data/####/1649333331203_3506
- /data/data/####/1649333332254_3506
- /data/data/####/1649333333483_3506
- /data/data/####/1649333333740_3506
- /data/data/####/1649333335161_3506
- /data/data/####/1649333337323_3506
- /data/data/####/1649333338581_3506
- /data/data/####/1649333339597_3506
- /data/data/####/1649333341065_3506
- /data/data/####/1649333342138_3506
- /data/data/####/1649333350581_3531
- /data/data/####/1649333350691_3559
- /data/data/####/1649333352668_3654
- /data/data/####/1e7e0e80
- /data/data/####/38117657753306.0
- /data/data/####/94117309822823.0
- /data/data/####/Alvin2.xml
- /data/data/####/Archimedes_p4
- /data/data/####/Archimedes_p5
- /data/data/####/ContextData.xml
- /data/data/####/Pythagoras_phase.xml
- /data/data/####/TD_app_pefercen_profile.xml
- /data/data/####/TDpref_longtime.xml
- /data/data/####/TDpref_longtime0.xml
- /data/data/####/TDpref_shorttime.xml
- /data/data/####/TDpref_shorttime0.xml
- /data/data/####/bugly_db_-journal
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/classes.oat
- /data/data/####/com.qisheng.daoyi.activity_preferences.xml
- /data/data/####/crashrecord.xml
- /data/data/####/daoyiAppData.xml
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/getui_sp.xml
- /data/data/####/gkt-journal
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal
- /data/data/####/local_crash_lock
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/mPBE.xml
- /data/data/####/mobclick_agent_cached_com.qisheng.daoyi.activity47
- /data/data/####/native_record_lock
- /data/data/####/proc_auxv
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/tdata_EAx630
- /data/data/####/tdata_EAx630.dex.flock (deleted)
- /data/data/####/tdata_EAx630.jar
- /data/data/####/tdata_fPG280
- /data/data/####/tdata_fPG280.dex
- /data/data/####/tdata_fPG280.dex.flock (deleted)
- /data/data/####/tdata_fPG280.jar
- /data/data/####/tdata_kPg706
- /data/data/####/tdata_kPg706.dex
- /data/data/####/tdata_kPg706.dex.flock (deleted)
- /data/data/####/tdata_kPg706.jar
- /data/data/####/tdid.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/media/####/.tcookieid
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.qisheng.daoyi.activity.bin
- /data/media/####/com.qisheng.daoyi.activity.db
- /data/media/####/e4bc5c9a8fb75e8d72e281799395aa3a.0.tmp (deleted)
- /data/media/####/gkt
- /data/media/####/gkt-journal
- /data/media/####/gktper (deleted)
- /data/media/####/journal
- /data/media/####/tdata_EAx630
- /data/media/####/tdata_fPG280
- /data/media/####/tdata_kPg706
- /data/media/####/test.log (deleted)
- /data/misc/####/primary.prof
- /system/bin/sh -c type su
- chmod 755 /data/user/0/<Package>/.jiagu/libjiagu.so
- getprop
- lib39_encrypt_jni
- libBugly
- libgetuiext2
- libjiagu
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- DES-CBC-PKCS5Padding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding