Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) wb.110.ta####.com:80
- TCP(HTTP/1.1) static-####.al####.huisuo####.com:80
- TCP(HTTP/1.1) c.g####.qq.com:80
- TCP(HTTP/1.1) ada####.m.ta####.com:80
- TCP(HTTP/1.1) zhg.ali####.com:80
- TCP(HTTP/1.1) p####.tc.qq.com:80
- TCP(HTTP/1.1) s####.e.qq.com:80
- TCP(HTTP/1.1) ad####.m.ta####.com:80
- TCP(HTTP/1.1) loc.map.b####.com:80
- TCP(HTTP/1.1) d.g####.qq.com:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) rb.api.huisuo####.com:80
- TCP(HTTP/1.1) mi.g####.qq.com:80
- TCP(HTTP/1.1) 2####.205.158.53:80
- TCP(TLS/1.0) ssl.gst####.com:443
- TCP(TLS/1.0) t####.me####.com:443
- TCP(TLS/1.0) nbsdk-b####.al####.com:443
- TCP(TLS/1.0) sh####.me####.com:443
- TCP(TLS/1.0) www.go####.com:443
- TCP(TLS/1.0) www.gst####.com:443
- TCP(TLS/1.0) adser####.go####.com:443
- TCP(TLS/1.0) s.mai####.com:443
- TCP(TLS/1.0) fp.fraudme####.cn:443
- TCP(TLS/1.0) u####.umengc####.com:443
- TCP(TLS/1.0) www.go####.nl:443
- TCP(TLS/1.0) 1####.11.132.221:443
- a####.u####.com
- ad####.m.ta####.com
- ada####.m.ta####.com
- adser####.go####.com
- c.g####.qq.com
- d.g####.qq.com
- fp.fraudme####.cn
- imgc####.qq.com
- loc.map.b####.com
- mi.g####.qq.com
- nbsdk-b####.al####.com
- p####.ugd####.com
- qzones####.g####.cn
- rb.api.huisuo####.com
- s####.e.qq.com
- s.mai####.com
- sh####.me####.com
- ssl.gst####.com
- static-####.al####.huisuo####.com
- t####.me####.com
- u####.umengc####.com
- wb.110.ta####.com
- www.go####.com
- www.go####.nl
- www.gst####.com
- y####.al####.com
- ad####.m.ta####.com/rest/gc2?ak=####&av=####&c=####&d=####&sv=####&t=###...
- c.g####.qq.com/gdt_mclick.fcg?viewid=####&jtype=####&i=####&os=####&asi=...
- d.g####.qq.com/fcg-bin/gdt_appdetail.fcg?ico=####&op_appid=####
- mi.g####.qq.com/gdt_mview.fcg?posw=####&posh=####&count=####&r=####&data...
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android02/images/tsa_ad_logo.png
- p####.tc.qq.com/qzone/biz/gdt/mod/android/AndroidAllInOne/proguard/his/r...
- static-####.al####.huisuo####.com/app/entry/new_function_config_flag.json
- static-####.al####.huisuo####.com/app/patch/infos/149-4.7.2.5.json
- static-####.al####.huisuo####.com/app/share/huakang_buding.TTF
- static-####.al####.huisuo####.com/app/share/huakang_wawa.TTF
- static-####.al####.huisuo####.com/news/news_source_config.json
- a####.u####.com/app_logs
- ada####.m.ta####.com/rest/sur?ak=####&av=####&c=####&v=####&s=####&d=###...
- loc.map.b####.com/offline_loc
- loc.map.b####.com/sdk.php
- rb.api.huisuo####.com/frontend/config/app
- rb.api.huisuo####.com/frontend/config/right-slide-credit-config/load
- rb.api.huisuo####.com/frontend/login/device
- rb.api.huisuo####.com/frontend/revision-read/config
- s####.e.qq.com/activate
- s####.e.qq.com/click
- s####.e.qq.com/launch
- s####.e.qq.com/msg
- wb.110.ta####.com/api/update.do
- zhg.ali####.com/saveWb.json
- /data/anr/traces.txt
- /data/data/####/.cfg.hq
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/.lscmf.lscmf
- /data/data/####/.rscms.rscm
- /data/data/####/.td-3
- /data/data/####/0a231bd8575dcf72.txt
- /data/data/####/1d77ea041509fe06.lock
- /data/data/####/21c22f492aba3de8.lock
- /data/data/####/5ead7c1916e321af3ee0d7d6aa595238.temp
- /data/data/####/8ef9c457b3bbb403.lock
- /data/data/####/930a31b34bd52c08.lock
- /data/data/####/Alvin2.xml
- /data/data/####/AppStore.xml
- /data/data/####/BuglySdkInfos.xml
- /data/data/####/ContextData.xml
- /data/data/####/GDTSDK.db
- /data/data/####/GDTSDK.db-journal
- /data/data/####/PhoneUtil.xml
- /data/data/####/SDKCache.xml
- /data/data/####/SGMANAGER_DATA2.tmp
- /data/data/####/UTCommon.xml
- /data/data/####/UmengLocalNotificationStore.db-journal
- /data/data/####/_andfix_.xml
- /data/data/####/a0913f31414456574e78c6fcd02f8f90.temp
- /data/data/####/ap.Lock
- /data/data/####/area_map.db.tmp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/com.huaqian_preferences.xml
- /data/data/####/devCloudSetting.cfg
- /data/data/####/devCloudSetting.sig
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/finalcore.jar
- /data/data/####/finalcore.jar.tmp
- /data/data/####/firll.dat
- /data/data/####/fm_shared.xml
- /data/data/####/gdt_plugin.jar
- /data/data/####/gdt_plugin.jar.sig
- /data/data/####/gdt_plugin.tmp
- /data/data/####/gdt_plugin.tmp.sig
- /data/data/####/gdt_suid
- /data/data/####/huaqian.preferences.xml
- /data/data/####/imei.xml
- /data/data/####/libcuid.so
- /data/data/####/libjiagu1669361268.so
- /data/data/####/libsgmainso-5.1.81.so.tmp
- /data/data/####/libsgsecuritybodyso-5.1.25.so.tmp
- /data/data/####/lock.lock
- /data/data/####/ml-region-11.db.tmp
- /data/data/####/multidex.version.xml
- /data/data/####/null-raw.db-journal
- /data/data/####/ofl.config
- /data/data/####/ofl_location.db
- /data/data/####/ofl_location.db-journal
- /data/data/####/ofl_statistics.db
- /data/data/####/ofl_statistics.db-journal
- /data/data/####/onesdk_device.xml
- /data/data/####/openudid_prefs.xml
- /data/data/####/sdkCloudSetting.cfg
- /data/data/####/sdkCloudSetting.sig
- /data/data/####/sdk_config.xml
- /data/data/####/slldate.xml
- /data/data/####/sp.lock
- /data/data/####/td_fm.jar
- /data/data/####/timestamp
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_message_state.xml
- /data/data/####/update_lc
- /data/data/####/ut.db
- /data/data/####/ut.db-journal
- /data/data/####/webview.db-journal
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.nomedia
- /data/media/####/.sfp
- /data/media/####/.td-3
- /data/media/####/.testf
- /data/media/####/1.app.log
- /data/media/####/6c709c11d2d46a7b
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/conlts.dat
- /data/media/####/dd7893586a493dc3
- /data/media/####/hid.dat
- /data/media/####/huakang_buding.TTF.tmp
- /data/media/####/huakang_wawa.TTF.tmp
- /data/media/####/ller.dat
- /data/media/####/ls.db
- /data/media/####/ls.db-journal
- /data/media/####/ml.properties
- /data/media/####/ml.properties.lock
- /data/media/####/sysid.dat
- /data/media/####/test.0
- /data/media/####/yoh.dat
- /data/media/####/yol.dat
- /data/media/####/yom.dat
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- chmod 444/storage/emulated/0/.td-3
- chmod 444/storage/emulated/0/Alarms/.td-3
- chmod 444/storage/emulated/0/Android/.td-3
- chmod 444/storage/emulated/0/DCIM/.td-3
- chmod 444/storage/emulated/0/Movies/.td-3
- chmod 444/storage/emulated/0/Music/.td-3
- chmod 444/storage/emulated/0/Notifications/.td-3
- chmod 444/storage/emulated/0/Pictures/.td-3
- chmod 444/storage/emulated/0/Podcasts/.td-3
- chmod 444/storage/emulated/0/Ringtones/.td-3
- chmod 444/storage/emulated/0/Tencent/.td-3
- chmod 444/storage/emulated/0/backups/.td-3
- chmod 444/storage/emulated/0/baidu/.td-3
- chmod 444/storage/emulated/0/data/.td-3
- chmod 755 <Package Folder>/.jiagu/libjiagu1669361268.so
- getprop net.dns1
- getprop net.dns2
- ls -l /system/xbin/su
- andfix
- libjiagu1669361268
- locSDK6a
- sgmainso-5.1
- sgsecuritybodyso-5.1
- tongdun
- ut_c_api
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-ECB-PKCS7Padding
- desede-CBC-PKCS5Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-ECB-PKCS7Padding
- RSA-ECB-PKCS1Padding