Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) oth.eve.mdt.####.com:8080
- TCP(HTTP/1.1) oth.str.mdt.####.com:8080
- TCP(HTTP/1.1) s####.tc.qq.com:80
- TCP(HTTP/1.1) c####.g####.com:80
- TCP(HTTP/1.1) qos.l####.360.cn:80
- TCP(HTTP/1.1) p####.tc.qq.com:80
- TCP(HTTP/1.1) s####.e.qq.com:80
- TCP(HTTP/1.1) gs.g####.com:80
- TCP(HTTP/1.1) s####.s.360.cn:80
- TCP(HTTP/1.1) wlkk####.b0.a####.com:80
- TCP(HTTP/1.1) v.g####.qq.com:80
- TCP(HTTP/1.1) enhance####.r####.cn:80
- TCP(HTTP/1.1) i1.g####.com.####.cn:80
- TCP(HTTP/1.1) b####.g####.com:80
- TCP(HTTP/1.1) l####.cc:80
- TCP(HTTP/1.1) sdk.l####.360.cn:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) p.s.3####.cn:80
- TCP(HTTP/1.1) s####.l####.360.####.com:80
- TCP(HTTP/1.1) mi.g####.qq.com:80
- TCP(HTTP/1.1) oth.up####.mdt.####.com:8080
- TCP(TLS/1.0) 05img####.eas####.com.####.com:443
- TCP(TLS/1.0) lbs.net####.im:443
- TCP(TLS/1.0) dt.net####.im:443
- TCP(TLS/1.0) wa####.127.net:443
- TCP(TLS/1.0) wl####.weilito####.net.####.com:443
- TCP(TLS/1.0) log####.weilito####.net:443
- TCP(TLS/1.0) res####.a####.com:443
- TCP(TLS/1.0) 06img####.eas####.com.####.com:443
- TCP(TLS/1.0) sdkc####.e.360.cn:443
- 05img####.eas####.com
- 06img####.eas####.com
- a####.u####.com
- ads.weilito####.net
- b####.g####.com
- c####.g####.com
- c####.g####.com
- clien####.weilito####.net
- dt.net####.im
- enhance####.r####.cn
- gs.g####.com
- i1.g####.com
- imgc####.qq.com
- l####.cc
- lbs.net####.im
- log####.weilito####.net
- mi.g####.qq.com
- oth.eve.mdt.####.com
- oth.str.mdt.####.com
- oth.up####.mdt.####.com
- p####.ugd####.com
- p.s.3####.cn
- pc.weilito####.net
- qos.l####.360.cn
- res####.a####.com
- s####.e.qq.com
- s####.l####.360.cn
- s####.s.360.cn
- sdk.l####.360.cn
- sdkc####.e.360.cn
- up####.weilito####.net
- v.g####.qq.com
- wa####.127.net
- wea####.weilito####.net
- wl####.weilito####.net
- wlkk####.weilito####.net
- i1.g####.com.####.cn/corpimage.php?url=####&type=####&source=####
- mi.g####.qq.com/gdt_mview.fcg?datatype=####&posid=####&count=####&r=####...
- p####.tc.qq.com/qzone/biz/gdt/mod/android/AndroidAllInOne/proguard/his/r...
- qos.l####.360.cn/vc.gif?&bid=####&pid=####&ver=####&c_ver=####&os=####&m...
- s####.l####.360.####.com/Object.getFile/livecloudsdk/YW5kcm9pZF9wbHVnaW5...
- s####.s.360.cn/ak/2e65f2f2fdaf6c699b223c61b1b5ab89.html?m2=####
- s####.tc.qq.com/gdt/0/DAAGTJ3AUAALQAAlBcSDfJB5K9j12B.jpg/0?ck=####
- s####.tc.qq.com/gdt/0/DAAkQKnAUAALQABjBcigDjCHgDNkWh.jpg/0?ck=####
- sdk.l####.360.cn/codec?os=####&tm=####&model=####&r=####&package=####&pi...
- sdk.l####.360.cn/qvideo_sdk_and_android_2.0.9.19012503.conf?os=####&tm=#...
- sdk.l####.360.cn/rtc2?sign=####&os=####&tm=####&model=####&r=####&packag...
- wlkk####.b0.a####.com/e269e3449e8a733c148d9dcedea7623f/0998e5a92a0101749...
- wlkk####.b0.a####.com/e269e3449e8a733c148d9dcedea7623f/30ed49c0494de36eb...
- wlkk####.b0.a####.com/e269e3449e8a733c148d9dcedea7623f/a5108a6afc98b3914...
- wlkk####.b0.a####.com/e269e3449e8a733c148d9dcedea7623f/e6d2e9a1e1d6951ea...
- a####.u####.com/app_logs
- b####.g####.com/api.php?format=####&t=####
- c####.g####.com/api.php?format=####&t=####
- enhance####.r####.cn/enhancement/api/v1/ads
- gs.g####.com/encryption/key/fetch
- gs.g####.com/geshu/sdkStatistics/bd
- gs.g####.com/geshu/sdkStatistics/ubi
- l####.cc/i/sdk/install
- oth.eve.mdt.####.com:8080/analytics/upload?rid=####&sid=####
- oth.str.mdt.####.com:8080/analytics/upload
- oth.str.mdt.####.com:8080/analytics/upload?sid=####
- oth.up####.mdt.####.com:8080/beacon/vercheck
- p.s.3####.cn/update/update.php?p=####
- s####.e.qq.com/activate
- v.g####.qq.com/gdt_stats.fcg
- /data/data/####/-2114142228120960095
- /data/data/####/-285585428782833295
- /data/data/####/-866141050-1148413453
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/086ff3e42dc84364085bba0beaa19dd2114c2307f94900a....0.tmp
- /data/data/####/1066035831-1764807823
- /data/data/####/1301667344-2041093205
- /data/data/####/1336029447-795467801
- /data/data/####/150b9e5de6cdfdd577893a50faf405518994b348e73c9ac....0.tmp
- /data/data/####/153ad551012cf451ee67b744ebc3ca07dd4a422edbe75a8....0.tmp
- /data/data/####/1941684737-1028035580
- /data/data/####/195161411157285168
- /data/data/####/1d2b904cbeadfb72ed9546111a231c85.0
- /data/data/####/39560099efc03c744894e5abcb76c5e213f00a1318295df....0.tmp
- /data/data/####/3c20c611aa0e3e18dcd54a4393ceb7a9802e66d0321f9a2....0.tmp
- /data/data/####/3df087fec2e75c0d32edc31373a45adbf9331d19bf1e613....0.tmp
- /data/data/####/5cb3af71759cdaabc1ec7e012549061a6d30cd2fc1b565c....0.tmp
- /data/data/####/5fb66abf1fe3c65c7b98d97027dfba8ce842320ecd55dea....0.tmp
- /data/data/####/613c36a74b9710374ac6c76ff28fb248a7c2b4c6c9afef4....0.tmp
- /data/data/####/6ff484e4ea383a5d1b55a344926bfa16bf7ef7916fef0cc....0.tmp
- /data/data/####/7c8f3f4390a28ba43021f3fe979e568235f257367bbc043....0.tmp
- /data/data/####/847e8f2a6582eff7af97eda0540e876b1ebc2031e5a999f....0.tmp
- /data/data/####/858078326397955464
- /data/data/####/898cb4a2d2f4dba4fa76d203fab70936ea05146120cd19f....0.tmp
- /data/data/####/AKTorchDownload.db-journal
- /data/data/####/Beacon_sig_1.lock
- /data/data/####/DENGTA_META.xml
- /data/data/####/DownloadMarket.db-journal
- /data/data/####/ECalendarPreferences.xml
- /data/data/####/GDTSDK.db
- /data/data/####/GDTSDK.db-journal
- /data/data/####/LKME_Server_Request_Queue.xml
- /data/data/####/MultiDex.lock
- /data/data/####/NIMSDK_Config_883d8a8d8c35039814932350efa3944a.xml
- /data/data/####/NIM_DC_WATCHER_SP.xml
- /data/data/####/PreSettings-journal
- /data/data/####/QH_DeviceSDK.xml
- /data/data/####/QH_SDK_M2.xml
- /data/data/####/QH_SDK_UserData2e65f2f2fdaf6c699b223c61b1b5ab89...leted)
- /data/data/####/QH_SDK_UserData2e65f2f2fdaf6c699b223c61b1b5ab89.xml
- /data/data/####/ReadAward.xml
- /data/data/####/SuishenAd_prf.xml
- /data/data/####/SuishenExitPageSDK_v102.apk
- /data/data/####/Update.db.xml
- /data/data/####/WlttNews.db-journal
- /data/data/####/Y24ud2VsaS5zdG9yeQ==.tick.lock
- /data/data/####/a100c929d8a3c3acc6b52bc981d4f8100d44efee836642f....0.tmp
- /data/data/####/app_globel_config_file.xml
- /data/data/####/b8ece0cffd0bf8d7e080aea37fa479af2e4d6c4e828075d....0.tmp
- /data/data/####/beacon_db-journal
- /data/data/####/beacontsa_cover.xml
- /data/data/####/beacontsa_cover_check.lock
- /data/data/####/c0586a10777146560765a69231d89beb.xml
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/cloud_switch_cache
- /data/data/####/cn.weli.story_preferences.xml
- /data/data/####/com.qihoo.livecloud.settings.GPWebrtcSettings.pref.xml
- /data/data/####/core_update
- /data/data/####/core_update_locker
- /data/data/####/daemon
- /data/data/####/de380706926af02b6665d6e11f6ffc34d61818200bbfd25....0.tmp
- /data/data/####/devCloudSetting.cfg
- /data/data/####/devCloudSetting.sig
- /data/data/####/device_collector
- /data/data/####/device_collector_locker
- /data/data/####/df86c5bd24814ba8e4225a53c3638d2661ba15c2c60cf64....0.tmp
- /data/data/####/e8ace476d85545b80dd0b6825f98c6a503c2473dce89927....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/finalcore.jar
- /data/data/####/gdt_plugin.jar
- /data/data/####/gdt_plugin.jar.sig
- /data/data/####/gdt_plugin.tmp
- /data/data/####/gdt_plugin.tmp.sig
- /data/data/####/gdt_suid
- /data/data/####/gtc.db-journal
- /data/data/####/history_cache.db-journal
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/ias.db-journal
- /data/data/####/ias_sp.xml
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/k.store
- /data/data/####/libjiagu587952875.so
- /data/data/####/libjplayer.so
- /data/data/####/libjplayer.so.tmp
- /data/data/####/liblocalserver.so.tmp
- /data/data/####/libmyssl.so.1.1.tmp
- /data/data/####/libtranscore.so.tmp
- /data/data/####/libviewer.so.tmp
- /data/data/####/linkedme_referral_shared_pref.xml
- /data/data/####/locker
- /data/data/####/log_reupload_task
- /data/data/####/log_reupload_task_locker
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/multidex.version.xml
- /data/data/####/net_2.0.9.19012503.zip
- /data/data/####/player_2.0.9.19012503.zip
- /data/data/####/pref.xml
- /data/data/####/pref.xml.bak
- /data/data/####/profile_task
- /data/data/####/profile_task_locker
- /data/data/####/qhvc_plugin.xml
- /data/data/####/qhvc_plugin.xml.bak (deleted)
- /data/data/####/sdkCloudSetting.cfg
- /data/data/####/sdkCloudSetting.sig
- /data/data/####/share_data.xml
- /data/data/####/sp.livecloud.database.xml
- /data/data/####/suishenAccountInfo.xml
- /data/data/####/suishen_ad.db-journal
- /data/data/####/suishen_ad_pramas.xml
- /data/data/####/suishen_ad_pramas.xml.bak
- /data/data/####/suishen_ad_pramas.xml.bak (deleted)
- /data/data/####/tools_2.0.9.19012503.zip
- /data/data/####/torch_sdk_config.xml
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/uninstall_apk
- /data/data/####/uninstall_apk_locker
- /data/data/####/update_lc
- /data/data/####/waitingDown
- /data/data/####/waitingDown_locker
- /data/data/####/webview.db-journal
- /data/media/####/.deviceId
- /data/media/####/.iddata
- /data/media/####/.lm_device_id
- /data/media/####/.nomedia
- /data/media/####/.sfp
- /data/media/####/.testf
- /data/media/####/1552932645864.db
- /data/media/####/2e65f2f2fdaf6c699b223c61b1b5ab89
- /data/media/####/2e65f2f2fdaf6c699b223c61b1b5ab89 (deleted)
- /data/media/####/__VERSION__
- /data/media/####/alsn20170807.db
- /data/media/####/alsn20170807.db-journal
- /data/media/####/blank.png
- /data/media/####/btn_nav_bg.9.png
- /data/media/####/btn_nav_sel.9.png
- /data/media/####/cn.weli.story_.db
- /data/media/####/dialog_details_bg.9.png
- /data/media/####/dialog_dismiss.png
- /data/media/####/dialog_dismiss_sel.png
- /data/media/####/download_btn_normal.9.png
- /data/media/####/fes_type_sel.9.png
- /data/media/####/grid_bg.9.png
- /data/media/####/grid_sel.9.png
- /data/media/####/ic_btn_down.png
- /data/media/####/ic_default.png
- /data/media/####/info
- /data/media/####/list_bg_sel.png
- /data/media/####/meta.dat
- /data/media/####/nim_sdk.log
- /data/media/####/oa1
- /data/media/####/oa1 (deleted)
- /data/media/####/top_btn_normal.9.png
- /data/media/####/top_btn_selected.9.png
- /data/media/####/uninstall_apk_list
- /data/media/####/update_btn_normal.9.png
- /system/bin/cat /proc/cpuinfo
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/sh -c getprop ro.build.fingerprint
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/app_bin/daemon
- getprop ro.build.fingerprint
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.miui.ui.version.name
- getprop ro.smartisan.version
- getprop ro.vivo.os.version
- mars_d -p <Package> -s com.igexin.sdk.PushService -p1r 45 -p1w 46 -p2r 47 -p2w 48
- EcalendarLib
- daemon_api20
- libjiagu587952875
- libjplayer
- liblocalserver
- libtranscore
- libviewer
- pl_droidsonroids_gif
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-ECB-PKCS7Padding
- DESede
- RSA-ECB-PKCS1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-ECB-PKCS7Padding
- DESede
- RSA-ECB-PKCS1Padding