Technical information
- Adware.Was.1.origin
- UDP(DNS) 8####.8.4.4:53
- TCP(HTTP/1.1) xi####.edges####.net:80
- TCP(HTTP/1.1) g####.62####.com:8001
- TCP(HTTP/1.1) api.ad.xi####.com:80
- TCP(HTTP/1.1) api.your####.com:80
- TCP(HTTP/1.1) w####.your####.com:80
- TCP(HTTP/1.1) a.da####.com:9127
- TCP(HTTP/1.1) a####.u####.com.####.com:80
- TCP(TLS/1.0) f.ma####.c.####.com:443
- TCP(TLS/1.0) ipv6-wi####.appl####.com.####.net:443
- TCP(TLS/1.0) api.appsf####.com:443
- TCP(TLS/1.0) mb####.s####.du####.com:443
- TCP(TLS/1.0) xi####.edges####.net:443
- TCP(TLS/1.0) c####.b####.com:443
- TCP(TLS/1.0) a####.u####.com.####.com:443
- TCP(TLS/1.0) rr4---s####.g####.com:443
- TCP(TLS/1.0) pag####.googles####.com:443
- TCP(TLS/1.0) sdkco####.ad.xi####.com:443
- TCP(TLS/1.0) www.google####.com:443
- TCP(TLS/1.0) gmscomp####.google####.com:443
- TCP(TLS/1.0) and####.cli####.go####.com:443
- TCP(TLS/1.0) f####.gst####.com:443
- TCP(TLS/1.0) t.appsf####.com:443
- TCP(TLS/1.0) api.ad.xi####.com:443
- TCP(TLS/1.0) rr3---s####.g####.com:443
- TCP(TLS/1.0) down####.wild####.appl####.####.net:443
- TCP(TLS/1.2) and####.cli####.go####.com:443
- TCP(TLS/1.2) f####.gst####.com:443
- TCP(TLS/1.2) 74.1####.8.106:443
- TCP(TLS/1.2) www.google####.com:443
- a####.u####.com
- a.appl####.com
- a.da####.com
- and####.cli####.go####.com
- api.ad.xi####.com
- api.appsf####.com
- api.your####.com
- c####.b####.com
- d.appl####.com
- digital####.google####.com
- f####.gst####.com
- f####.ma####.xi####.com
- f4.ma####.xi####.com
- f5.ma####.xi####.com
- g####.62####.com
- gmscomp####.google####.com
- i####.superso####.com
- img.appl####.com
- m####.go####.com
- mb####.s####.du####.com
- pag####.googles####.com
- pdn.appl####.com
- pla####.googleu####.com
- plb####.u####.com
- rr3---s####.g####.com
- rr4---s####.g####.com
- rt.appl####.com
- sdkco####.ad.xi####.com
- t.appsf####.com
- u####.u####.com
- w####.your####.com
- www.google####.com
- z####.ad.xi####.com
- api.appsf####.com:443/install_data/v3/<Package>?devkey=####&device_id=####
- api.your####.com/Ads/bgConfig?token=A####&pkg=####
- api.your####.com/Ads/getMopubConfig?token=A####&pkg=####
- api.your####.com/Ads/switchFlow?token=A####&pkg=####
- down####.wild####.appl####.####.net:443/1381250003_28x28.png
- down####.wild####.appl####.####.net:443/closeOptOut.png
- f.ma####.c.####.com:443/download/AdCenter/0e830c372382e473d94ba4667b014d...
- ipv6-wi####.appl####.com.####.net:443/3.0/ad?accept=####&v4=####&api_did...
- ipv6-wi####.appl####.com.####.net:443/i?platform=####&app_version=####&b...
- mb####.s####.du####.com:443/adunion/slot/fetchConfig?h=####&w=####&model...
- mb####.s####.du####.com:443/adunion/slot/getDlAd?h=####&w=####&model=###...
- mb####.s####.du####.com:443/adunion/slot/getSrcPrio?h=####&w=####&model=...
- pag####.googles####.com:443/pagead/gen_204?id=####&action=####&js=####&o...
- sdkco####.ad.xi####.com:443/api/checkupdate/lastusefulversion2?av=####&c...
- t.appsf####.com:443/sdk/v6.7.11?request=####
- w####.your####.com/
- xi####.edges####.net:443/download/AppStore/0b03c468e99cd7327ccf099da4abb...
- a####.u####.com.####.com/app_logs
- a####.u####.com.####.com:443/unify_logs
- a.da####.com:9127/ll//uu?t=####
- api.ad.xi####.com/union/fetchAds
- api.ad.xi####.com:443/client/upgrade/mimo/v1
- g####.62####.com:8001/adStatistics
- g####.62####.com:8001/addNewApp
- ipv6-wi####.appl####.com.####.net:443/device?api_key=####
- ipv6-wi####.appl####.com.####.net:443/device?device_####
- ipv6-wi####.appl####.com.####.net:443/pix?api_did=####&country_code=####...
- t.appsf####.com:443/api/v4/androidevent?buildnumber=####&app_id=####
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/15f9266b-15d1-4de1-8148-1a935fd39e91
- /data/data/####/9e545d60-8d33-4216-8843-f4c68fc1cb78
- /data/data/####/BackgroundLogger.db-journal
- /data/data/####/IPLPrefStorage.xml
- /data/data/####/Mediation_Shared_Preferences.xml
- /data/data/####/UM_PROBE_DATA.xml
- /data/data/####/_m_rec.xml
- /data/data/####/_toolbox_prefs.xml
- /data/data/####/_toolbox_prefs.xml.bak
- /data/data/####/a==7.4.0&&1.0.0_1654346636811_envelope.log
- /data/data/####/accounts_valuestore.pb.lock
- /data/data/####/analytics.apk.tmp
- /data/data/####/analytics_api.xml
- /data/data/####/analytics_updater.xml
- /data/data/####/appsflyer-data.xml
- /data/data/####/appsflyer-data.xml.bak
- /data/data/####/appsflyer-data.xml.bak (deleted)
- /data/data/####/background_counters.db-journal
- /data/data/####/base_value_store.pb
- /data/data/####/base_value_store.pb.tmp
- /data/data/####/bc07defb-8c7f-4767-bb67-e7aeec709c2e
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/cheuu
- /data/data/####/classes.dex
- /data/data/####/classes.dex;classes2.dex
- /data/data/####/classes.dex;classes3.dex
- /data/data/####/com.applovin.sdk.1.xml
- /data/data/####/com.applovin.sdk.1.xml.bak
- /data/data/####/com.applovin.sdk.preferences.caVmO7ZgwTVKiXAtMR...dU.xml
- /data/data/####/com.applovin.sdk.preferences.caVmO7ZgwTVKiXAtMR...ml.bak
- /data/data/####/com.ccstudio.linkstar.mt_preferences.xml
- /data/data/####/counters.db-journal
- /data/data/####/crab_app_life.xml
- /data/data/####/crab_crash_switch.xml
- /data/data/####/crab_user_info.xml
- /data/data/####/dW1weF9pbnRlcm5hbF8xNjU0MzQ2NjE5MDUw;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNjU0MzQ2NjQ5NDMx;
- /data/data/####/download_service-journal
- /data/data/####/download_service_preferences_key.xml
- /data/data/####/download_table
- /data/data/####/download_table-journal
- /data/data/####/duscene_mobula.db-journal
- /data/data/####/event_generator.xml
- /data/data/####/eventlog.store1378595918.log
- /data/data/####/eventlog.store1620626486.log
- /data/data/####/eventlog.store1674501012.log
- /data/data/####/eventlog.store263198071.log
- /data/data/####/eventlog.store599533553.log
- /data/data/####/eventlog.store881879202.log
- /data/data/####/eventlog.store891138462.log
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/finsky.xml
- /data/data/####/finsky.xml.bak
- /data/data/####/frosting.db-journal
- /data/data/####/gdtadv2.jar
- /data/data/####/gdtadv2.jar.sig
- /data/data/####/i==1.2.0&&1.0.0_1654346612035_envelope.log
- /data/data/####/info.xml
- /data/data/####/install_source.db-journal
- /data/data/####/installer_data_v2.db
- /data/data/####/journal
- /data/data/####/last_init_crab.xml
- /data/data/####/libjiagu.so
- /data/data/####/logs_upload_attempt.log
- /data/data/####/mimo_asset.apk
- /data/data/####/mimo_asset.dex
- /data/data/####/mimo_asset.dex.flock (deleted)
- /data/data/####/mimo_download.apk.tmp
- /data/data/####/outer_ad_data_pipe.xml
- /data/data/####/outer_ads_limit_config.xml
- /data/data/####/pai_apps.db-journal
- /data/data/####/phenotype.db
- /data/data/####/phenotype.db-shm (deleted)
- /data/data/####/phenotype.db-wal (deleted)
- /data/data/####/play_metalog.log
- /data/data/####/plugin_updater.xml
- /data/data/####/proc_auxv
- /data/data/####/proc_background.pb.tmp
- /data/data/####/quick_launch_counters.db-journal
- /data/data/####/resource_data.db
- /data/data/####/scheduler_background-journal
- /data/data/####/scheduler_main-journal
- /data/data/####/scheduler_main-journal (deleted)
- /data/data/####/selfupdate_scheduler.xml
- /data/data/####/selfupdate_scheduler.xml.bak
- /data/data/####/stateStorage.xml
- /data/data/####/streamdatastore.db-journal
- /data/data/####/supersonic_sdk.db
- /data/data/####/supersonic_sdk.db-journal
- /data/data/####/time_strategy.xml
- /data/data/####/tmd
- /data/data/####/toolbox_cache.db-journal
- /data/data/####/toolbox_ts.db-journal
- /data/data/####/tv
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/utils.xml
- /data/data/####/uuloi
- /data/data/####/video_pref_def.xml
- /data/data/####/vva
- /data/data/####/vva.dex
- /data/data/####/vva.dex.flock (deleted)
- /data/data/####/vva.jar
- /data/data/####/warm_proc_main.pb.tmp
- /data/data/####/zeus_crash_info.xml
- /data/data/####/zeus_pms.xml
- /data/media/####/.nomedia
- /data/media/####/a39d89da-a29d-444a-b8e8-8a870682d9251381250003_28x28.png
- /data/media/####/a39d89da-a29d-444a-b8e8-8a870682d925closeOptOut.png
- /data/media/####/journal.tmp
- /data/media/####/sysid.dat
- /data/misc/####/primary.prof
- /system/bin/cat /sys/block/mmcblk0/device/cid
- /system/bin/cat /sys/block/mmcblk1/device/cid
- /system/bin/cat /sys/block/mmcblk2/device/cid
- /system/bin/cat /sys/block/mmcblk3/device/cid
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- cat /sys/class/net/wlan0/address
- logcat -v time
- ls -l /system/bin/su
- ls /
- ls /sys/class/thermal
- top -n 1
- libMyGame
- libX86Bridge
- libjiagu
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- RSA-NONE-PKCS1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding