Technical information
- Adware.Waps.5.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) s####.m.img####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) huo####.4####.cn.####.com:80
- TCP(HTTP/1.1) cdn.43####.com.####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) who.wa####.com:80
- TCP(HTTP/1.1) p####.43####.com:80
- TCP(HTTP/1.1) huod####.4####.com:80
- TCP(HTTP/1.1) sni.c####.q####.####.net:80
- TCP(HTTP/1.1) f1.img####.com:80
- TCP(HTTP/1.1) 111104d####.dns.wa####.com:80
- TCP(TLS/1.0) ssl.gst####.com:443
- TCP(TLS/1.0) lh3.googleu####.com:443
- TCP(TLS/1.0) www.googlet####.com:443
- TCP(TLS/1.0) www.go####.com:443
- TCP(TLS/1.0) m####.439####.net:443
- TCP(TLS/1.0) www.gst####.com:443
- TCP(TLS/1.0) s####.g.doublec####.net:443
- TCP(TLS/1.0) www.google-####.com:443
- TCP(TLS/1.0) a####.google####.com:443
- TCP(TLS/1.0) doodle-####.app####.com:443
- TCP(TLS/1.0) www.go####.nl:443
- TCP(TLS/1.0) www.google####.com:443
- TCP(TLS/1.0) adser####.go####.com:443
- TCP c####.g####.ig####.com:5225
- TCP sdk.o####.t####.####.com:5224
- TCP p####.43####.com:4800
- 111104d####.dns.wa####.com
- 7j####.c####.z0.####.com
- a####.google####.com
- adser####.go####.com
- c####.g####.ig####.com
- c-h####.g####.com
- cdn.43####.com
- doodle-####.app####.com
- f1.img####.com
- h####.505####.com
- huo####.4####.cn
- huod####.4####.com
- lh3.googleu####.com
- m####.439####.net
- p####.43####.com
- pus####.43####.com
- s####.g.doublec####.net
- s####.m.img####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- sj2.img####.com
- ssl.gst####.com
- who.wa####.com
- www.go####.com
- www.go####.nl
- www.google####.com
- www.google-####.com
- www.googlet####.com
- www.gst####.com
- 111104d####.dns.wa####.com/result?key=####&form=####&
- cdn.43####.com.####.com/app/android/v3.0/config-dailySign-mareacode-9999...
- cdn.43####.com.####.com/app/android/v3.0/software-cover-mareacode-999998...
- cdn.43####.com.####.com/app/android/v3.3/config-common-mareacode-999998....
- cdn.43####.com.####.com/app/android/v4.2/game-index-mareacode-999998.html
- cdn.43####.com.####.com/app/forums/android/v2.1/chat-faces-mareacode-999...
- cdn.43####.com.####.com/app/forums/android/v3.3/chat-faces-mareacode-999...
- f1.img####.com/2018/zqsjb/css/style.css
- f1.img####.com/2018/zqsjb/images/b-hdgz.png
- f1.img####.com/2018/zqsjb/images/b-login.png
- f1.img####.com/2018/zqsjb/images/banner1.png
- f1.img####.com/2018/zqsjb/images/banner2.png
- f1.img####.com/2018/zqsjb/images/banner3.png
- f1.img####.com/2018/zqsjb/images/ibg.png
- f1.img####.com/2018/zqsjb/images/itit1.png
- f1.img####.com/2018/zqsjb/images/itit2.png
- f1.img####.com/2018/zqsjb/images/repbbg.png
- f1.img####.com/2018/zqsjb/images/reptbg.png
- f1.img####.com/2018/zqsjb/images/scrbg1.png
- f1.img####.com/2018/zqsjb/images/scrbg2.png
- f1.img####.com/2018/zqsjb/images/tab.png
- f1.img####.com/2018/zqsjb/images/tabbg.png
- f1.img####.com/2018/zqsjb/images/tipsj.png
- f1.img####.com/2018/zqsjb/images/title.png
- f1.img####.com/2018/zqsjb/img/foot-logo.png
- f1.img####.com/2018/zqsjb/img/img-dy.png
- f1.img####.com/2018/zqsjb/img/img-gz.png
- f1.img####.com/2018/zqsjb/img/img-hb.png
- f1.img####.com/2018/zqsjb/img/img-qb.png
- f1.img####.com/2018/zqsjb/img/img-sb.png
- f1.img####.com/2018/zqsjb/img/img-tx.png
- f1.img####.com/2018/zqsjb/img/img-wj.png
- f1.img####.com/2018/zqsjb/img/img-yb.png
- f1.img####.com/2018/zqsjb/js/base.js
- f1.img####.com/2018/zqsjb/js/daoJiShi.js
- f1.img####.com/2018/zqsjb/js/download.js
- f1.img####.com/2018/zqsjb/js/mpage.js?0####
- f1.img####.com/2018/zqsjb/js/swiper-3.4.1.jquery.min.js
- f1.img####.com/downloader/tpl/thread/template172.zip
- f1.img####.com/js/baidu.template.js
- f1.img####.com/js/zepto.min.js
- f1.img####.com/ma~100273_logo2_4c34.jpg~124x124
- f1.img####.com/ma~107643_logo2_7117.jpg
- f1.img####.com/ma~107763_logo2_60e0.jpg
- f1.img####.com/ma~109842_logo2_b0dc.jpg
- f1.img####.com/ma~111204_logo2_a31c.jpg~124x124
- f1.img####.com/ma~111623_logo2_43a4.jpg
- f1.img####.com/ma~113108_logo2_c11c.jpg
- f1.img####.com/ma~114082_logo2_2e92.jpg~124x124
- f1.img####.com/ma~115517_logo2_8cf6.jpg~124x124
- f1.img####.com/ma~116906_logo2_f4de.jpg
- f1.img####.com/ma~116959_logo2_750f.jpg~124x124
- f1.img####.com/ma~118519_logo2_2a25.jpg~124x124
- f1.img####.com/ma~120642_logo2_a0fa.jpg
- f1.img####.com/ma~121025_logo2_033b.jpg
- f1.img####.com/ma~121253_logo2_05c6.jpg
- f1.img####.com/ma~121753_logo2_a3d2.jpg~124x124
- f1.img####.com/ma~167_20180618234212_5b27d2d478140.png
- f1.img####.com/ma~167_20180618234221_5b27d2dd1981e.png
- f1.img####.com/ma~167_20180618234232_5b27d2e83093d.png
- f1.img####.com/ma~167_20180618234241_5b27d2f149105.png
- f1.img####.com/ma~167_20180618234528_5b27d398a98d9.png
- f1.img####.com/ma~167_20180618234540_5b27d3a40a7c3.png
- f1.img####.com/ma~167_20180618234549_5b27d3adc2533.png
- f1.img####.com/ma~167_20180618234600_5b27d3b85900b.png
- f1.img####.com/ma~167_20180618234611_5b27d3c31d415.png
- f1.img####.com/ma~167_20180618234624_5b27d3d044f68.png
- f1.img####.com/ma~27_20170706154005_595de955018bc.png
- f1.img####.com/ma~30_20180423163038_5add99aec4cca.png
- f1.img####.com/ma~48280_logo2_793f.jpg~124x124
- f1.img####.com/ma~92154_logo2_3b11.jpg
- f1.img####.com/ma~92170_logo2_a073.jpg~124x124
- f1.img####.com/ma~92290_logo2_3b93.jpg~124x124
- f1.img####.com/ma~96397_logo2_e28f.jpg
- f1.img####.com/ma~98519_logo2_b59e.jpg~124x124
- f1.img####.com/ma~wap_s2_1530265447
- f1.img####.com/ma~wap_s2_1530338329
- f1.img####.com/sj~92247_logo_56a9ad8931720.jpg
- huo####.4####.cn.####.com/daily/7693.html?f=####
- huod####.4####.com/2018/zqsjb/?hduuid=####&id=####
- p####.43####.com/cloud.php?act=####&rectime=####&appid=####&uid=####&fla...
- p####.43####.com/cloud.php?act=####&rectime=####&flag=####&data=####
- sni.c####.q####.####.net/config/hz-hzv3.conf
- sni.c####.q####.####.net/tdata_Soq141
- sni.c####.q####.####.net/tdata_vxj811
- who.wa####.com/?key=####&form=####
- c-h####.g####.com/api.php?format=####&t=####
- huod####.4####.com/2018/zqsjb/ajax.php
- s####.m.img####.com/trace/<Package>/1.0/360/
- s####.m.img####.com/trace/<Package>/1.0/360/1100f9KhsvgqWxK4uNSgyea9a
- s####.m.img####.com/trace/<Package>/1.0/Unknown/.config?version=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/._index.css
- /data/data/####/._index.html
- /data/data/####/._index.js
- /data/data/####/._js
- /data/data/####/.jg.ic
- /data/data/####/.policy
- /data/data/####/02bfc27ffb58b9a3796a629dbcb3ab08721b757150a1c08...b8f0.0
- /data/data/####/161f80589cb4c1035a667b8a15b8a51a0f4086eb35b4c71....0.tmp
- /data/data/####/28c56c5c447bac11fb206476faa13d4d2f8a49e4a81c85b....0.tmp
- /data/data/####/314b89c84c35d4c01fabeb63c3269494a474d76f0753278....0.tmp
- /data/data/####/39c83baba0b664fbb096f0eff4dedd666b6a84c9556cfb9....0.tmp
- /data/data/####/42767da5da36d4a44b845478ccc266a949b02f2b10bbc9d....0.tmp
- /data/data/####/478209cf522269ed821206b58c756ce0b92ecb56910a24f....0.tmp
- /data/data/####/4a9f241a47caa2c841cd70903177b4921883c1a47d67f09....0.tmp
- /data/data/####/4eb40b7a4bf17574113bb19c715915459d517e23569d4b4....0.tmp
- /data/data/####/53350db24bebc3c44b4795ecb22cb5cb2b014a0f9d20282...a6f5.0
- /data/data/####/5dee765cbfd9135bf36404639b0f77eea2e40e22c21f5a8....0.tmp
- /data/data/####/5e9c338e364ab97ceea7d950f2b94622b305dc140a6731c....0.tmp
- /data/data/####/62b736b4b251d745bc3c9d7d53c37cc02d43f3d3fe85c80....0.tmp
- /data/data/####/62c780d0445fe2dd2c77761b1cc147921c7035f31d8fe72....0.tmp
- /data/data/####/6324d0d04796de7aee79687d573b612e0aa355cb5482557...1ebe.0
- /data/data/####/6b5b899ea1e7f68a44510c04ed6a7ffec45c1d2886e1acf....0.tmp
- /data/data/####/6f0d81f522033623d3255f0f3c628a25d708f4e74b884f1....0.tmp
- /data/data/####/7019f4bb02229a593c7390ffae64fd595d8e3eca9f70334....0.tmp
- /data/data/####/76c468e8dc669ffce31977ddf6c74532da19e4436a7b0c4....0.tmp
- /data/data/####/8152739e0d96e5349fbea4205fb1bf70c1d11487caa15bf...e6ae.0
- /data/data/####/81eef0de0c31b0cae72e8a315b3404ef0a326a67b9ec445....0.tmp
- /data/data/####/83bf5e1a9c7dcc4a9d929e385f4b3beebe08d2957cea3e6....0.tmp
- /data/data/####/8631a76d672a008158fb0962413669337b53adec5c4e869....0.tmp
- /data/data/####/88703774502c5ff3da77e1bf3e1d0612ef8747114993e21....0.tmp
- /data/data/####/89b62b30965a0bfa29ffe066e82d275c2e6857b16eff560....0.tmp
- /data/data/####/8b475c63b57a8fe3aed46e52b1af4262ddb9db42ba2ba67....0.tmp
- /data/data/####/919611a98617b5ef62008085e18aaaea9a4e7237974a2b5....0.tmp
- /data/data/####/95fbeb2cf9b017baa13d89779462e5b3e029df7b0bb3e25....0.tmp
- /data/data/####/99622834fefcd5c85dbec1dfba710ddbeb609a6efb08251....0.tmp
- /data/data/####/9c86c5c0afbb8700b0a9d9e31522703ebb1a955f7cfaf1b....0.tmp
- /data/data/####/9d6a1be1d2cb8b75928fb5ccc14e5d17086bd09e8252a8d....0.tmp
- /data/data/####/MultiDex.lock
- /data/data/####/MyAnalytics_VERSION_INFO.xml
- /data/data/####/MyAnalytics_device_id.xml
- /data/data/####/MyAnalytics_general_config.xml
- /data/data/####/MyAnalytics_send_config.xml
- /data/data/####/UserInfo.xml
- /data/data/####/ae03c1e7c743c991ee1a6fbf65276ce3c4c0c74f0c532a1....0.tmp
- /data/data/####/b24a3d5b95f0eb69ebbfa44043fc9a9abb35cffc3810111....0.tmp
- /data/data/####/b327ce04039b4465c6f7cf874730423164b097f500d6edb....0.tmp
- /data/data/####/b76eda6b4efb6570a689cf379085badef8b3733538994a6....0.tmp
- /data/data/####/b7daf056fefc0af500e54864806fb9a035ef5ae9c2fe251....0.tmp
- /data/data/####/bd005fa02328ef85462a8b552822d28b8c1eef897ca25ad....0.tmp
- /data/data/####/c7bcf1c31115dccc7a89a9cb9337fb586ebb15e0ccafe00....0.tmp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/com.m4399.gamecenter_preferences.xml
- /data/data/####/com.m4399.gamecenter_preferences.xml.bak
- /data/data/####/d87e26e0d48b75fbcaff43eadb308648f97593d82c864b2....0.tmp
- /data/data/####/d89ead90032de1e0b5abe6fbda903fe5d1356e87717539d....0.tmp
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/downloads.db-journal
- /data/data/####/e00ee0e1d422d5fea29a2b071fe1e419394dd116d865d5e....0.tmp
- /data/data/####/e08ae78a930c5172a1b5a7a593a2f7686fb3bddbfd9f821....0.tmp
- /data/data/####/e411e3c8da2f3d1c7f0b1482ccc40eb5d13ab8ee49fef94....0.tmp
- /data/data/####/ec39316eb23177e17610de5888398db56b1df305ed1a4c7....0.tmp
- /data/data/####/ed7c3f64b0a1904c28245d6b22a3a2bb3910186a555c323....0.tmp
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/f_00000b
- /data/data/####/f_00000c
- /data/data/####/f_00000d
- /data/data/####/fa72e77aa0cd790d84b941b6cce601e15c51f13e28f5bb2....0.tmp
- /data/data/####/fb1bc000ba183137a8f159a6920801d4c7cdf02b4ade650....0.tmp
- /data/data/####/fd8cd9ec6a26bfeb43260e348c7fbd42b3fa8bb2b61924c....0.tmp
- /data/data/####/fe3f8f3698a5ed578ddbd25445dd73a46796ff67ea65842....0.tmp
- /data/data/####/ff9de88a824355fb2cab8e9f58197fcbf056a436fd5e7d7....0.tmp
- /data/data/####/ffdfe73e2de6032abd07da2d520789aa7ce81e91e1695b0....0.tmp
- /data/data/####/framework.db-journal
- /data/data/####/gamecenter.db-journal
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/index
- /data/data/####/index.css
- /data/data/####/index.html
- /data/data/####/index.js
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libjiagu1858054988.so
- /data/data/####/m4399AppEmoji3.0.json
- /data/data/####/m4399BBSEmoji3.0.json
- /data/data/####/mobclick_agent_cached_com.m4399.gamecenter1276
- /data/data/####/multidex.version.xml
- /data/data/####/plugin.meta
- /data/data/####/pref.app.covers.pt
- /data/data/####/pref.headup.message.chat.unread.pt
- /data/data/####/push.jar
- /data/data/####/push.pid
- /data/data/####/push.zip
- /data/data/####/push_box_sdk_version.xml
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/skin_main_plugin_pref.xml
- /data/data/####/statistics_agent_cached_com.m4399.gamecenter
- /data/data/####/tdata_Soq141
- /data/data/####/tdata_Soq141.jar
- /data/data/####/tdata_vxj811
- /data/data/####/tdata_vxj811.jar
- /data/data/####/template.zip
- /data/data/####/type1
- /data/data/####/umeng_general_config.xml
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/.disys
- /data/media/####/.test.txt
- /data/media/####/.udid
- /data/media/####/5b31e883-46ef9.downlad
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.m4399.gamecenter.bin
- /data/media/####/com.m4399.gamecenter.db
- /data/media/####/com.m4399.gamecenter.sdklogin
- /data/media/####/tdata_Soq141
- /data/media/####/tdata_vxj811
- /data/media/####/temp.meta
- /data/media/####/temp.zip
- /data/media/####/test.log
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.GTPushService 24788 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu1858054988.so
- getprop
- grep -i blueStacks
- grep -i virtualbox
- ls /system/bin
- ls /system/lib
- sh
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.GTPushService 24788 300 0
- getuiext2
- libjiagu1858054988
- m4399
- RSA-NONE-OAEPWithSHA1AndMGF1Padding