Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) vipc-####.v####.me:80
- TCP(TLS/1.0) data-ce####.v####.cn:443
- TCP(TLS/1.0) l####.c####.q####.####.com:443
- TCP(TLS/1.0) idu####.qini####.com:443
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) ars.v####.cn:443
- TCP(TLS/1.0) sni.c####.q####.####.com:443
- TCP c####.g####.ig####.com:5226
- TCP c####.g####.ig####.com:5224
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.u####.com
- and####.b####.qq.com
- ars.v####.cn
- c####.g####.ig####.com
- c####.g####.ig####.com
- c-h####.g####.com
- data-ce####.v####.cn
- dl3.v####.cn
- i####.v####.cn
- i-####.v####.cn
- i-app-####.v####.cn
- im####.v####.cn
- im####.v####.cn
- jc.v####.cn
- log.u####.com
- mt####.go####.com
- s####.u####.com
- s####.v####.cn
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- tes.v####.cn
- vipc-####.v####.me
- vipc-####.v####.me/web/pushConfig/imei/<IMEI>
- a####.u####.com/app_logs
- and####.b####.qq.com/rqd/async?aid=####
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- vipc-####.v####.me/web/pushBind/imei/<IMEI>
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/01df320b8e98eb19ac3eaa30046e7466.0.tmp
- /data/data/####/01df320b8e98eb19ac3eaa30046e7466.1.tmp
- /data/data/####/05363aad935a2c823841653e6e4101e11470496c69cd95b....0.tmp
- /data/data/####/066c3c436fea7679ec7087835899cdc197db3410d593ecc....0.tmp
- /data/data/####/0f632537d92b613885ec6c701bf6bbf1aa9fbbba6d5c011....0.tmp
- /data/data/####/1004
- /data/data/####/1543793481723.log
- /data/data/####/1abfa095fbe81b133c86089b7454654c0cdcd91a68819ab....0.tmp
- /data/data/####/1cfea57fc719268a4ef392370cfb678611cd5cd4c0909da....0.tmp
- /data/data/####/1e860be56f98e0b9d5da3f146ac1ab2b2e5df2d1ddbe56d....0.tmp
- /data/data/####/1f0036963e97f4550bba05350207a3f8c12d4e60ec2b0b5....0.tmp
- /data/data/####/246a3ccb3979b9ac9d4ea6cafbe97680.0.tmp
- /data/data/####/246a3ccb3979b9ac9d4ea6cafbe97680.1.tmp
- /data/data/####/2b89d8b4b2ee4396e5a0b8df64c460bff15c88901674914....0.tmp
- /data/data/####/2e1e45f3ba6f32768fc822388711f7d1befbb09a98d79a9....0.tmp
- /data/data/####/326fb22b1be662755184be3e0e0d170f.0.tmp
- /data/data/####/326fb22b1be662755184be3e0e0d170f.1.tmp
- /data/data/####/3273bb3137c5a93c42ba50049190907ffecfbf074fd9438....0.tmp
- /data/data/####/362db94cb39e9913004c59933fc469010bbda0cf63821d4....0.tmp
- /data/data/####/3b2891b47ce97d600ef3a040b0671566.0.tmp
- /data/data/####/3b2891b47ce97d600ef3a040b0671566.1.tmp
- /data/data/####/3cd01fa9b9276b4b3ecf6fc4b1c92443.0.tmp
- /data/data/####/3cd01fa9b9276b4b3ecf6fc4b1c92443.1.tmp
- /data/data/####/41437e7b1abcddba0850e32d97574211.0.tmp
- /data/data/####/41437e7b1abcddba0850e32d97574211.1.tmp
- /data/data/####/418ceb954ad159843b77494037eab99f40f3bbdf8a09153....0.tmp
- /data/data/####/43a007b12df7d5288969cdb2e415ae463fd71d974ec2150....0.tmp
- /data/data/####/43e57a510260a48a0b3e3c8a757fd0f99a44b6f2aea9ef1....0.tmp
- /data/data/####/45e23a5b780d28adf9109ce852d9c89d6cd12b99ff1a834....0.tmp
- /data/data/####/46dc1e0564daeaef00bea0b190319d8a6997328210edd47....0.tmp
- /data/data/####/4cbf591bc9dd9f13029d539a9c5ef16512cdd3329963b2f....0.tmp
- /data/data/####/4d7768c3ff11e6fcd23ab97c9be4c94b4c7c1ffabbc50d6....0.tmp
- /data/data/####/4ebc2a785a7fa629ba66105080998028448d916c0fb1015....0.tmp
- /data/data/####/53b8a0aa2cbad41749469e85479f415fe01ecc784c72838....0.tmp
- /data/data/####/5d24dabc6278c282978d35722baac5aa966ab03cb09ede9....0.tmp
- /data/data/####/624b5aec3d758959756e69cc57f4ea89.0.tmp
- /data/data/####/624b5aec3d758959756e69cc57f4ea89.1.tmp
- /data/data/####/64e379e3ae73dcf9510dd6bbb7192fd6ceae21549830024....0.tmp
- /data/data/####/6da889427ce04e5805509ea033622fc6343fb4b3deeeab2....0.tmp
- /data/data/####/6dca73738e2aa1797e133a44e87d6e5259e871c161a7d09....0.tmp
- /data/data/####/71e6631f33a6e61aa379308d537de23d.0.tmp
- /data/data/####/71e6631f33a6e61aa379308d537de23d.1.tmp
- /data/data/####/74c484a305c16e08caef485e00b223cce9579143b650a59....0.tmp
- /data/data/####/76292994fd0ad4d9a6ba4573f63d0a00e39f90b49811497....0.tmp
- /data/data/####/76dda2ad4578c8729575ae8a04f997fe6139c821dfa8692....0.tmp
- /data/data/####/79a773af6c6b1909e812bbf33cc961b0a5e39a49b889f35....0.tmp
- /data/data/####/7ce29a780f13e2e1e7669988c099e264.0.tmp
- /data/data/####/7ce29a780f13e2e1e7669988c099e264.1.tmp
- /data/data/####/7e2510452e6dd0ecc5fbebeafce0d4e559e1b81325b1bfc....0.tmp
- /data/data/####/8066a7be996c26319d6bd50486d3c091.0.tmp
- /data/data/####/8066a7be996c26319d6bd50486d3c091.1.tmp
- /data/data/####/80ca2b7ea1979b7ed62a8e87a1623bda02705fc01af560b....0.tmp
- /data/data/####/859ea9191787239c6edf5ef13514c06a0641359924df233....0.tmp
- /data/data/####/897adfb9f3c38676ca6ae08453934503.0.tmp
- /data/data/####/897adfb9f3c38676ca6ae08453934503.1.tmp
- /data/data/####/8c61ad6d7a966b566eeea1011b1b89c89b0b999da745b9f....0.tmp
- /data/data/####/8c89ac391985992b449954e7f5baed6a5ec3c0eb3d7014a....0.tmp
- /data/data/####/912ada54b97546809a981a364c6dde09.0.tmp
- /data/data/####/912ada54b97546809a981a364c6dde09.1.tmp
- /data/data/####/9857092b84c3960c28cf644fad24edddb4478ddc55fcacc....0.tmp
- /data/data/####/9884fe4f2b7d718a3024a7b5f6c76a41d5063a6021d6783....0.tmp
- /data/data/####/99109659523c9f2249dd2265c231ca781b2bc57e7d120ea....0.tmp
- /data/data/####/TrineaAndroidCommon.xml
- /data/data/####/a024b30931b87c793645bfa132e450fc.0.tmp
- /data/data/####/a024b30931b87c793645bfa132e450fc.1.tmp
- /data/data/####/a02b62d01a2790f87f25a31e581dea48a52d3cf40d47ed7....0.tmp
- /data/data/####/a60475f83037d4289f5e7ff7cab9d5690cb859f99b54ffc....0.tmp
- /data/data/####/a777e1e6e510f3dce257ebaadce404d7.0.tmp
- /data/data/####/a777e1e6e510f3dce257ebaadce404d7.1.tmp
- /data/data/####/a8a8dc775efdfb8071b4f491209eb5ef153680a8c543bac....0.tmp
- /data/data/####/ab4991bf184627153629d8b97af7fd09dfd9683d632f852....0.tmp
- /data/data/####/acba6465bdcc0b65d74ff2aa1af57fc1c6e3725ba1c49f3....0.tmp
- /data/data/####/b08fae26acce9952044071d035401785.0.tmp
- /data/data/####/b08fae26acce9952044071d035401785.1.tmp
- /data/data/####/b17f8e048ed07e82b5816ddbc10c2af8322d5222b7eca38....0.tmp
- /data/data/####/b2f07299672b1b83fbd3e6320fb9daa6d13e122772a790f....0.tmp
- /data/data/####/b4feec93cbc64d9f25e57e2d852947750a7d9819288e902....0.tmp
- /data/data/####/b630da2f266bda807cc201df1d5eb243bb0e1a31267065c....0.tmp
- /data/data/####/b75a01a95e652a230db357858376e11217c8b4f3eed9b93....0.tmp
- /data/data/####/b79e60545df6ea7d43fec17a0df829500f78912e7e54a7c....0.tmp
- /data/data/####/b88edca71fd3697ddae3e559847518ce2f11becbe06c41d....0.tmp
- /data/data/####/bbc739f008acf4e5d4de1f394b67c42e2d02842c1ef7161....0.tmp
- /data/data/####/bd504b486365b608e1016a0f07e077d0.0.tmp
- /data/data/####/bd504b486365b608e1016a0f07e077d0.1.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/c10d8f85f5ef0fa16745a6e19668fda3539e05db5e702d6....0.tmp
- /data/data/####/c2e1ea9d65e1124d807fdea9065910e0.0.tmp
- /data/data/####/c2e1ea9d65e1124d807fdea9065910e0.1.tmp
- /data/data/####/c36c1311776d8124eec956dd926886fa.0.tmp
- /data/data/####/c36c1311776d8124eec956dd926886fa.1.tmp
- /data/data/####/c6b4f4e266c4117699414c99f3fe5870.0.tmp
- /data/data/####/c6b4f4e266c4117699414c99f3fe5870.1.tmp
- /data/data/####/c8a125c38d3177417b9d853610e44b943ebff326b4f3922....0.tmp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/cc119d5faaca4e39d3ffc447946246f33d887c7a4fb8f9f....0.tmp
- /data/data/####/cfb6cfdfbae557be34399549b215cbc599c75fe92c4bf6a....0.tmp
- /data/data/####/crashrecord.xml
- /data/data/####/d19f518d65229acef48e6c886151da585374f107295276d....0.tmp
- /data/data/####/d6bd579f34f00e23b9b30e7902b834925e3ec3c5f92d4b4....0.tmp
- /data/data/####/d99cf3d051b010a97d2b6850a723bd104e66c69666506af....0.tmp
- /data/data/####/dbbcef95ff946b96e601149308e8c4c5.0.tmp
- /data/data/####/dbbcef95ff946b96e601149308e8c4c5.1.tmp
- /data/data/####/dbfa3ced5f4970c33d53beb3b54b0ada57bd33879922ee3....0.tmp
- /data/data/####/de399b6fb03ce726620fc3135ac2493f2d207f83bd5d60b....0.tmp
- /data/data/####/e0d6b807eaab6cf6985b4bb1a50d59b3ece2dc2b2837059....0.tmp
- /data/data/####/e31b56435883f46951f0e1b8e8026bf2.0.tmp
- /data/data/####/e31b56435883f46951f0e1b8e8026bf2.1.tmp
- /data/data/####/e7010cde380825ab2d38f0a7852a6f6350ff599f72ff8f7....0.tmp
- /data/data/####/e7afa9628ed455f6b560aca928d1560e481f1ed1e3dabae....0.tmp
- /data/data/####/ee5d62e0b6647d2736f32cd0e53748ffd1aa0f3f6e7862e....0.tmp
- /data/data/####/ee61949a859066381fc50cbe171b3ec5.0.tmp
- /data/data/####/ee61949a859066381fc50cbe171b3ec5.1.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f032d240c7248f9f169e83aba2f91f6bbfd79a30e83a3fc....0.tmp
- /data/data/####/f2f1d91fab4237342a5d20d109043fff66ae76e5098040a....0.tmp
- /data/data/####/f384cf09900fc1b773701dbe2bfc4bb4.0.tmp
- /data/data/####/f384cf09900fc1b773701dbe2bfc4bb4.1.tmp
- /data/data/####/f410258d90bf9ee53a607e6dba2242cf74dbbc497d46f88....0.tmp
- /data/data/####/f5e47e662702a1d75b404a76a78c77cb.0.tmp
- /data/data/####/f5e47e662702a1d75b404a76a78c77cb.1.tmp
- /data/data/####/f5fb695d295020d7d6e8ae0103558e9621eb11b30b2fc88....0.tmp
- /data/data/####/fe9cb09b5e7ac9067c4a8c880c02c72c18c0d31014cc329....0.tmp
- /data/data/####/fead188aa96eb68f90094e92369b4198.0.tmp
- /data/data/####/fead188aa96eb68f90094e92369b4198.1.tmp
- /data/data/####/getui_sp.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libjiagu1730892450.so
- /data/data/####/local_crash_lock
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/push.pid
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_socialize.xml
- /data/data/####/user.xml
- /data/data/####/vpic-db-journal
- /data/data/####/webview.db-journal
- /data/media/####/app.db
- /data/media/####/com.app.vipc.bin
- /data/media/####/com.app.vipc.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/vipc56400-Vipc-MT360.apk
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- chmod 755 <Package Folder>/.jiagu/libjiagu1730892450.so
- getprop
- Bugly
- getuiext2
- libjiagu1730892450
- pl_droidsonroids_gif
- AES-CBC-NoPadding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-NoPadding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding