Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) oth.eve.mdt.####.com:8080
- TCP(HTTP/1.1) s####.s.360.cn:80
- TCP(HTTP/1.1) api.f####.so:80
- TCP(HTTP/1.1) r####.n####.127.net:80
- TCP(HTTP/1.1) qos.l####.360.cn:80
- TCP(HTTP/1.1) syy-ima####.b0.upa####.com:80
- TCP(HTTP/1.1) gs.g####.com:80
- TCP(HTTP/1.1) l####.cc:80
- TCP(HTTP/1.1) sf3-ttc####.ps####.com:80
- TCP(HTTP/1.1) c####.g####.com:80
- TCP(HTTP/1.1) b####.g####.com:80
- TCP(HTTP/1.1) 65a4####.cdn.uc####.####.cn:80
- TCP(HTTP/1.1) sdk.l####.360.cn:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) p.s.3####.cn:80
- TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
- TCP(HTTP/1.1) s####.l####.360.####.com:80
- TCP(HTTP/1.1) oth.str.mdt.####.com:8080
- TCP(TLS/1.0) lbs.net####.im:443
- TCP(TLS/1.0) wa####.127.net:443
- TCP(TLS/1.0) publish####.b####.com.####.com:443
- TCP(TLS/1.0) 07img####.eas####.com.####.com:443
- TCP(TLS/1.0) log####.weilito####.net:443
- TCP(TLS/1.0) sf3-ttc####.ps####.com:443
- TCP(TLS/1.0) wea####.weilito####.net.####.com:443
- TCP(TLS/1.0) res####.a####.com:443
- TCP(TLS/1.0) client####.weilito####.net:443
- TCP(TLS/1.0) sdkc####.e.360.cn:443
- TCP ou####.yun####.net:8000
- 01img####.eas####.com
- 03img####.eas####.com
- 07img####.eas####.com
- a####.u####.com
- ads.weilito####.net
- amap####.cn-hang####.oss####.####.com
- api.f####.so
- b####.g####.com
- c####.g####.com
- c####.g####.com
- clien####.weilito####.net
- client####.weilito####.net
- gs.g####.com
- img####.st####.suishe####.net
- l####.cc
- lbs.net####.im
- lf.sn####.com
- log####.weilito####.net
- oth.eve.mdt.####.com
- oth.str.mdt.####.com
- ou####.yun####.net
- p.s.3####.cn
- pc.weilito####.net
- publish####.b####.com
- qos.l####.360.cn
- r####.n####.127.net
- res####.a####.com
- s####.l####.360.cn
- s####.s.360.cn
- sdk.l####.360.cn
- sdkc####.e.360.cn
- sf3-ttc####.ps####.com
- st####.et####.cn
- st####.weilito####.net
- up####.weilito####.net
- wa####.127.net
- wea####.weilito####.net
- wfd.net####.im
- wl####.weilito####.net
- 65a4####.cdn.uc####.####.cn/imgs/upload/1543832456.0482.jpg
- 65a4####.cdn.uc####.####.cn/imgs/upload/1543832523.9486.jpg
- qos.l####.360.cn/vc.gif?&bid=####&pid=####&ver=####&c_ver=####&os=####&m...
- r####.n####.127.net/icovr-20181203-703d30c34fafc556e8e19973e38b6c3c.jpg
- r####.n####.127.net/icovr-20181203-adee0dd59467a6f19c389d7d16b15f47.jpg
- r####.n####.127.net/icovr-20181203-ef7f96f02b67d4c892d7756fd6f51140.jpg
- s####.l####.360.####.com/Object.getFile/livecloudsdk/YW5kcm9pZF9wbHVnaW5...
- s####.s.360.cn/ak/2e65f2f2fdaf6c699b223c61b1b5ab89.html?m2=####
- sdk.l####.360.cn/codec?os=####&tm=####&model=####&r=####&package=####&pi...
- sdk.l####.360.cn/qvideo_sdk_and_android_2.0.6.18082901.conf?os=####&tm=#...
- sdk.l####.360.cn/rtc?os=####&tm=####&model=####&r=####&package=####&pid=...
- sf3-ttc####.ps####.com/obj/web.business.image/201809195d0d9423607473cd44...
- sh.wagbr####.aliyun####.com/sdkcoor/android/x86/libJni_wgs2gcj.so
- syy-ima####.b0.upa####.com/2e52e1dc5ac9d868e9983bd3fd8ced1c/1f87a5744bfc...
- syy-ima####.b0.upa####.com/2e52e1dc5ac9d868e9983bd3fd8ced1c/2e987d2d5e8b...
- syy-ima####.b0.upa####.com/2e52e1dc5ac9d868e9983bd3fd8ced1c/608a0cfcdac1...
- syy-ima####.b0.upa####.com/2e52e1dc5ac9d868e9983bd3fd8ced1c/95f2b25098cb...
- syy-ima####.b0.upa####.com/2e52e1dc5ac9d868e9983bd3fd8ced1c/a7390e1c43ae...
- syy-ima####.b0.upa####.com/2e52e1dc5ac9d868e9983bd3fd8ced1c/bc2360070dc3...
- syy-ima####.b0.upa####.com/2e52e1dc5ac9d868e9983bd3fd8ced1c/db4733e75cde...
- a####.u####.com/app_logs
- api.f####.so/enhancement/api/v1/ads
- b####.g####.com/api.php?format=####&t=####
- c####.g####.com/api.php?format=####&t=####
- gs.g####.com/encryption/key/fetch
- gs.g####.com/geshu/sdkStatistics/bd
- gs.g####.com/geshu/sdkStatistics/ubi
- l####.cc/i/sdk/install
- oth.eve.mdt.####.com:8080/analytics/upload?rid=####&sid=####
- oth.str.mdt.####.com:8080/analytics/upload
- oth.str.mdt.####.com:8080/analytics/upload?sid=####
- p.s.3####.cn/update/update.php?p=####
- /data/data/####/-11267957471843483176
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/08fdf01977f8ec9927bb314276ac0a3ed15acec72636aeb....0.tmp
- /data/data/####/0941659089ce2462a22dbcceb8a7d60690830d05fa3a3f4....0.tmp
- /data/data/####/0ff6e0a14c4905f7232c3fd6195a2f9ead27d393f920722....0.tmp
- /data/data/####/1165522767-966944454
- /data/data/####/12101070511502570126
- /data/data/####/13135723401197830141
- /data/data/####/1362d148d7cfef694830c98522c0e03d71c8d905bc6aab0....0.tmp
- /data/data/####/1473018276-502522305
- /data/data/####/1912917632-1223143435
- /data/data/####/1e033b1224491fa6ab08173e1e9b523890159c6be52ee1f....0.tmp
- /data/data/####/227569bdb86aea4cf9c3be8fd1a354f430c5afc800fe4dc....0.tmp
- /data/data/####/28750da654444dd7aabdeb0ae83b2552f65b8eb90671232....0.tmp
- /data/data/####/48f8cd0d110ad7108eb903060426b56e223ec971b5f7ab6....0.tmp
- /data/data/####/4cca2158982eda81dab66574ba0d6881145e551df5200d2....0.tmp
- /data/data/####/568f08cba0f46bf194aace62607e92217b275ec49ebd73d....0.tmp
- /data/data/####/661737752379a7fb038f3707dcd28b8ad495fe8ecfad663....0.tmp
- /data/data/####/663284de48d6cf38cbb7caaad15c9e51947261c8290f973....0.tmp
- /data/data/####/66b3844d6bf8f86672be9a48f61050ebd78f03ec7329a9f....0.tmp
- /data/data/####/69c224c344832946959aab2c9274ae19e1c7b97945b2a8d....0.tmp
- /data/data/####/6a281dc6bd119bae62ba70e18d5db9fd942b6ada7b35951....0.tmp
- /data/data/####/70c9e4956330b89e77e7b7b47cbcfba3a973455b19b7851....0.tmp
- /data/data/####/76e5cb09feabaa6366f3837adca40e5baf4e90707abae3a....0.tmp
- /data/data/####/7ab7604e28c4824db385ad46033c029d9767e56102bc9ff....0.tmp
- /data/data/####/80cfad78ec74f9df45a17e35c7e891c144d9b75e81f3f61....0.tmp
- /data/data/####/8365410461162100415
- /data/data/####/8872846e9bfa259f8fbf25f4bb630e5513eb18dd3b68c67....0.tmp
- /data/data/####/913555191030279b089b662c97ad5230c5aa7b363c6d18f....0.tmp
- /data/data/####/932d471b0903d78bb983316fcd17e1340f69439d5ac5b5d....0.tmp
- /data/data/####/9f83ae59131264ac80eb47e16c09035eeaff4d3df249c14....0.tmp
- /data/data/####/AKTorchDownload.db-journal
- /data/data/####/Beacon_sig_1.lock
- /data/data/####/DENGTA_META.xml
- /data/data/####/DownloadMarket.db-journal
- /data/data/####/ECalendarPreferences.xml
- /data/data/####/LKME_Server_Request_Queue.xml
- /data/data/####/NIMSDK_Config_883d8a8d8c35039814932350efa3944a.xml
- /data/data/####/NIMSDK_Config_883d8a8d8c35039814932350efa3944a_...15.xml
- /data/data/####/NIMSDK_Config_UI883d8a8d8c35039814932350efa3944a.xml
- /data/data/####/PreSettings-journal
- /data/data/####/QH_DeviceSDK.xml
- /data/data/####/QH_SDK_M2.xml
- /data/data/####/QH_SDK_UserData2e65f2f2fdaf6c699b223c61b1b5ab89.xml
- /data/data/####/ReadAward.xml
- /data/data/####/SuishenAd_prf.xml
- /data/data/####/SuishenExitPageSDK_v91.apk
- /data/data/####/Umeng.xml
- /data/data/####/Update.db.xml
- /data/data/####/WlttNews.db-journal
- /data/data/####/Y24ud2VsaS5zdG9yeQ==.tick.lock
- /data/data/####/a3e332db8b01884b990e3ba93e9d80f6f029a8781dcb8f7....0.tmp
- /data/data/####/a944e5ace1f7c391bdb183877da0b4ae4d8c0af52f8a26c....0.tmp
- /data/data/####/a9c7947144da95016edcad7cd795b7ff44a3ae68dd57887....0.tmp
- /data/data/####/app_globel_config_file.xml
- /data/data/####/b67e480198051e08b163bf99f2377433f60f1a0affd7aa2....0.tmp
- /data/data/####/beacon_db-journal
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/cloud_switch_cache
- /data/data/####/cn.weli.story_preferences.xml
- /data/data/####/com.qihoo.livecloud.settings.GPWebrtcSettings.pref.xml
- /data/data/####/core_update
- /data/data/####/core_update_locker
- /data/data/####/daemon
- /data/data/####/device_collector
- /data/data/####/device_collector_locker
- /data/data/####/e4c3323dac8fc269a948718fd205e75aedf8fc73e6d6ae5....0.tmp
- /data/data/####/e4cca5cbfccf9fd3247866b4bbe3c9e45526314d2f7d2d8....0.tmp
- /data/data/####/e6f0fb1e29d1bfaa93d9138344d9844238fb3845cee4d16....0.tmp
- /data/data/####/ee27a92c35fb1cb906c49dd9aeaace2b6b618789bd33f19....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f0b2b36c6792c2e0318c6f1d04922c91be57954ccf3c87e....0.tmp
- /data/data/####/f9fa09e168e047f761f311fb01f489b4b72ef3c48993d30....0.tmp
- /data/data/####/ff740003af5cb33b38d4562b00eec609d99c7e8a7ae78ad....0.tmp
- /data/data/####/finalcore.jar
- /data/data/####/gtc.db-journal
- /data/data/####/history_cache.db-journal
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/ias.db-journal
- /data/data/####/ias_sp.xml
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/libjiagu587952875.so
- /data/data/####/libjplayer.so.tmp
- /data/data/####/liblocalserver.so.tmp
- /data/data/####/libmyssl.so.1.1.tmp
- /data/data/####/libtranscore.so.tmp
- /data/data/####/libviewer.so.tmp
- /data/data/####/linkedme_referral_shared_pref.xml
- /data/data/####/localserver_2.0.6.18081503.zip
- /data/data/####/locker
- /data/data/####/loctemp.so
- /data/data/####/log_reupload_task
- /data/data/####/log_reupload_task_locker
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/msg.db-journal
- /data/data/####/multidex.version.xml
- /data/data/####/nim_cache.db-journal
- /data/data/####/nim_device
- /data/data/####/player_2.0.6.18082901.zip
- /data/data/####/pref.xml
- /data/data/####/profile_task
- /data/data/####/profile_task_locker
- /data/data/####/qhvc_plugin.xml
- /data/data/####/qhvc_plugin.xml.bak
- /data/data/####/serverData.db-journal
- /data/data/####/share_data.xml
- /data/data/####/sp.livecloud.database.xml
- /data/data/####/suishenAccountInfo.xml
- /data/data/####/suishen_ad.db-journal
- /data/data/####/suishen_ad_pramas.xml
- /data/data/####/tools_2.0.6.18082901.zip
- /data/data/####/torch_sdk_config.xml
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/uninstall_apk
- /data/data/####/uninstall_apk_locker
- /data/data/####/waitingDown
- /data/data/####/waitingDown_locker
- /data/data/####/webview.db-journal
- /data/media/####/.deviceId
- /data/media/####/.iddata
- /data/media/####/.lm_device_id
- /data/media/####/.nomedia
- /data/media/####/.sfp
- /data/media/####/.testf
- /data/media/####/1543832456.0482.jpg
- /data/media/####/1543832523.9486.jpg
- /data/media/####/2e65f2f2fdaf6c699b223c61b1b5ab89
- /data/media/####/2e65f2f2fdaf6c699b223c61b1b5ab89 (deleted)
- /data/media/####/alsn.db
- /data/media/####/alsn.db-journal
- /data/media/####/bLR
- /data/media/####/bLR (deleted)
- /data/media/####/blank.png
- /data/media/####/btn_nav_bg.9.png
- /data/media/####/btn_nav_sel.9.png
- /data/media/####/cn.weli.story_.db
- /data/media/####/dialog_details_bg.9.png
- /data/media/####/dialog_dismiss.png
- /data/media/####/dialog_dismiss_sel.png
- /data/media/####/download_btn_normal.9.png
- /data/media/####/fes_type_sel.9.png
- /data/media/####/grid_bg.9.png
- /data/media/####/grid_sel.9.png
- /data/media/####/ic_btn_down.png
- /data/media/####/ic_default.png
- /data/media/####/info
- /data/media/####/list_bg_sel.png
- /data/media/####/meta.dat
- /data/media/####/nim_sdk.log
- /data/media/####/top_btn_normal.9.png
- /data/media/####/top_btn_selected.9.png
- /data/media/####/uninstall_apk_list
- /data/media/####/update_btn_normal.9.png
- /system/bin/cat /proc/cpuinfo
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/sh -c getprop ro.build.fingerprint
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/app_bin/daemon
- getprop ro.build.fingerprint
- mars_d -p <Package> -s com.igexin.sdk.PushService -p1r 45 -p1w 46 -p2r 47 -p2w 48
- EcalendarLib
- daemon_api20
- libjiagu587952875
- libjplayer
- liblocalserver
- libtranscore
- libviewer
- pl_droidsonroids_gif
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- DESede
- RSA-ECB-PKCS1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- DESede