Technical information
- Adware.Gexin.2.origin
- UDP(DNS) 2####.5.5.5:53
- UDP(DNS) 1####.114.114.114:53
- UDP(DNS) 8####.8.4.4:53
- TCP(HTTP/1.1) q####.c####.l####.####.com:80
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) d####.opensp####.cn:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) m.qiangt####.com:9000
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) ngc.aliy####.com:80
- TCP(HTTP/1.1) qin####.com.www.####.com:80
- TCP(HTTP/1.1) sdk-ope####.g####.com:80
- TCP(HTTP/1.1) 1####.37.132.16:80
- TCP(HTTP/1.1) thi####.q####.cn:80
- TCP(TLS/1.0) stc.qiangt####.com:443
- TCP(TLS/1.0) p1.qiangt####.com:443
- TCP(TLS/1.0) instant####.google####.com:443
- TCP(TLS/1.0) and####.google####.com:443
- TCP(TLS/1.0) p1.jietouz####.com:443
- TCP(TLS/1.0) 2####.58.211.106:443
- TCP(TLS/1.0) api.w####.com:443
- TCP(TLS/1.0) m.qiangt####.com:443
- TCP(TLS/1.0) dualsta####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) 1####.217.168.238:443
- TCP(TLS/1.0) res.wx.qq.####.com:443
- TCP(TLS/1.0) i####.g####.com.####.net:443
- TCP(TLS/1.0) dxp.b####.com:443
- TCP(TLS/1.0) h####.b####.com:443
- TCP(TLS/1.0) 1####.217.20.74:443
- TCP(TLS/1.0) log####.ifl####.com:443
- TCP(TLS/1.2) and####.google####.com:443
- TCP(TLS/1.2) 1####.217.20.74:443
- TCP cm-1####.ig####.com:5227
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- and####.google####.com
- api.w####.com
- c-h####.g####.com
- cm-1####.ig####.com
- d####.opensp####.cn
- dxp.b####.com
- h####.b####.com
- i####.g####.com
- instant####.google####.com
- log####.ifl####.com
- m.qiangt####.com
- ngc.aliy####.com
- p1.jietouz####.com
- p1.qiangt####.com
- pub-####.qin####.com
- r####.wx.qq.com
- sdk-ope####.g####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- stc.qiangt####.com
- thi####.q####.cn
- u####.u####.com
- m.qiangt####.com:9000/v1/ws
- q####.c####.l####.####.com/config/hz-hzv6.conf
- qin####.com.www.####.com/tdata_EDT369
- sdk.o####.p####.####.com/api/addr.htm
- thi####.q####.cn/mmopen/vi_32/Gre8V9MxtfhLlOQ0IdFhs5BSSC144VJpuDVw1LRHEw...
- ti####.c####.l####.####.com/tdata_LRe817
- ti####.c####.l####.####.com/tdata_OxN092
- ti####.c####.l####.####.com/tdata_ZPR725
- ti####.c####.l####.####.com/tdata_bca864
- c-h####.g####.com/api.php?format=####&t=####
- d####.opensp####.cn/index.php/clientrequest/clientcollect/isCollect
- ngc.aliy####.com/data/r?a=####&m=####&o=####&k=####&p=####&u=####&t=####...
- sdk-ope####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####&d=####&k=####
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/.jg.store.report_cf
- /data/data/####/.jgck
- /data/data/####/00dd08fb2576e7bd_0
- /data/data/####/0180de8633eb4651_0
- /data/data/####/02de28c5236aad4f_0
- /data/data/####/0406e6520c72aedc_0
- /data/data/####/0549aca23d673bca_0
- /data/data/####/076b3c481f0b806522c5a5aea97295a6fff8dd93f037953....0.tmp
- /data/data/####/078b851067018966_0
- /data/data/####/09a5818cd782039c_0
- /data/data/####/0a60a760887f577f_0
- /data/data/####/0c26aaae3997c4c7_0
- /data/data/####/124526b509cb767a_0
- /data/data/####/16d675f6a9db8397_0
- /data/data/####/1b61416a5af288429534d79f77c1fde7111ac2587e7b12b....0.tmp
- /data/data/####/1c6ff5b0d26ce006_0
- /data/data/####/202064bb482ffa17_0
- /data/data/####/2221facbdee9172d_0
- /data/data/####/23bab4bc2d1d183fa2cde2956edaf53af92bc33dee3478a....0.tmp
- /data/data/####/24e42d27ca9d9cd2_0
- /data/data/####/257050e1a3600c0a_0
- /data/data/####/267ed88dc99cc6f3_0
- /data/data/####/26b3e94db240e287_0
- /data/data/####/28585d0cd979e386_0
- /data/data/####/2e1d131aac64
- /data/data/####/2f9cd0883631e52e_0
- /data/data/####/3051a8483a75593e_0
- /data/data/####/30b9469f15a8e975_0
- /data/data/####/323950bba7b12b9e_0
- /data/data/####/327079061924ab24_0
- /data/data/####/3390ce20389b26e2_0
- /data/data/####/33cad92acbb3029c44e34817811ddf664cc5b96f574bad2....0.tmp
- /data/data/####/35cbe272fcb89517_0
- /data/data/####/37CF018B.dex
- /data/data/####/37CF018B.dex.flock (deleted)
- /data/data/####/38f138ea1e96cb03_0
- /data/data/####/3933b9245bf3beee_0
- /data/data/####/3e7fbc9b42d20597dbd68aa80b705cb5b207a96f46870cd....0.tmp
- /data/data/####/3fe285f1ffc57c33_0
- /data/data/####/3ff3d3f4b67db75d_0
- /data/data/####/407c3734efdef962_0
- /data/data/####/408f8bbe1e4c3fd5_0
- /data/data/####/42b6eafd76198dcd66cfce79ef080ae8d5fa5a85ae2e444....0.tmp
- /data/data/####/46e53ac4933db30f_0
- /data/data/####/493c3cc0d7ddecec_0
- /data/data/####/496b88c543f73b22_0
- /data/data/####/4ae61bde77d577f2005722eda53f3cc51e7051d74b102d2....0.tmp
- /data/data/####/4c90a335d2c75714_0
- /data/data/####/4dd160670de14aa3_0
- /data/data/####/50281a2d79a98446_0
- /data/data/####/50281a2d79a98446_1
- /data/data/####/50c6e3b6478f7968_0
- /data/data/####/5201a582675e8236_0
- /data/data/####/537488ff756abe62_0
- /data/data/####/53a710d56d347ca9_0
- /data/data/####/587cc2e26671f689_0
- /data/data/####/58938507943a0da9_0
- /data/data/####/5c64dd4c245dca0b_0
- /data/data/####/5cd65fc21bc32b72_0
- /data/data/####/5d40f50168d2a8a0_0
- /data/data/####/5d40f50168d2a8a0_1
- /data/data/####/5eca177b72a5020c_0
- /data/data/####/5eca177b72a5020c_1
- /data/data/####/601b4f9105c34d45_0
- /data/data/####/606dcb05a455ac07_0
- /data/data/####/646b201718aa3e61_0
- /data/data/####/6e2f37484dcbb15f_0
- /data/data/####/6fc0e5da35e8521f_0
- /data/data/####/7257de56e43e2654_0
- /data/data/####/7257de56e43e2654_1
- /data/data/####/7588922a9f317146_0
- /data/data/####/7fd32e6d19f13184a86a47fecdd5d66126b2b8d075eb047....0.tmp
- /data/data/####/831f58c65c34e2c9_0
- /data/data/####/83200b2c173254cb_0
- /data/data/####/8517950a48149a8c_0
- /data/data/####/8641fefce4a82579_0
- /data/data/####/864eb23674afd6be_0
- /data/data/####/880f6a14d87367ee_0
- /data/data/####/8e561ba310c888ddfc73ca662733c52642424f1b8c63980....0.tmp
- /data/data/####/8eab6dc3368bbeab_0
- /data/data/####/961cf89edf998f24_0
- /data/data/####/97e9c388bdfd4ea7_0
- /data/data/####/9ad89fb4735423e0_0
- /data/data/####/9b9decd9ff12a132_0
- /data/data/####/9daa12d81db70bda_0
- /data/data/####/9e9abc5322dabb6d_0
- /data/data/####/9ec95650d7fb0613_0
- /data/data/####/9f218efe70581c48_0
- /data/data/####/9f22f2b4a0b71e66_0
- /data/data/####/CookiePersistence.xml
- /data/data/####/CookiePersistence.xml.bak
- /data/data/####/Cookies-journal
- /data/data/####/Hawk2.xml
- /data/data/####/Hawk2.xml.bak
- /data/data/####/SDK_config
- /data/data/####/SDK_config1
- /data/data/####/WebViewChromiumPrefs.xml
- /data/data/####/__Baidu_Stat_SDK_SendRem.xml
- /data/data/####/__Baidu_Stat_SDK_SendRem.xml.bak
- /data/data/####/__local_ap_info_cache.json
- /data/data/####/__local_last_session.json
- /data/data/####/__local_stat_cache.json
- /data/data/####/__local_stat_full_cache.json
- /data/data/####/__send_data_1571562987119
- /data/data/####/a0190a32b56c6a7c_0
- /data/data/####/a501cef86a77ede7_0
- /data/data/####/a==7.5.3&&4.1.1_1571562974884_envelope.log
- /data/data/####/ab10c04257c5c780_0
- /data/data/####/ab23b04167e34680_0
- /data/data/####/ab913ea9446d654b_0
- /data/data/####/abcd2e0cb546a64c_0
- /data/data/####/ad0d3cac6cf356ca_0
- /data/data/####/b312823e8011586626d90326739aebe14bc68f73ac1b5ad....0.tmp
- /data/data/####/b872b7aa4e48332e_0
- /data/data/####/b872b7aa4e48332e_1
- /data/data/####/baidu_mtj_sdk_record.xml
- /data/data/####/bc48174ac3ca905d6c50e7f904e1fd4c1a9aeea6a70cb25....0.tmp
- /data/data/####/be137b28e7876e74_0
- /data/data/####/be137b28e7876e74_1
- /data/data/####/bf8c46e29c0ff399_0
- /data/data/####/c02be0f8333ba713_0
- /data/data/####/c1e3c341764259bb_0
- /data/data/####/c335a25ec120b945_0
- /data/data/####/c4a2d1753645e65a_0
- /data/data/####/c5306894de62a4f6_0
- /data/data/####/c5306894de62a4f6_1
- /data/data/####/c82bdc9cc853e839_0
- /data/data/####/ca7ed1f67a1085c3_0
- /data/data/####/caf48b0a938595fb9f7f477407e1773bb6d9c68308c4b6c....0.tmp
- /data/data/####/cb4d84a6451114a3_0
- /data/data/####/cc427baa30da8ac3_0
- /data/data/####/ccbe45a69e79bcdf_0
- /data/data/####/cd3d42f21412e4f3_0
- /data/data/####/ce21f6702fc852e5_0
- /data/data/####/ce3de75a4b6dbf8e2fc74f6271dede62192a61702e6a281....0.tmp
- /data/data/####/ce8a2aa05a564366_0
- /data/data/####/ceabcbc24776384a_0
- /data/data/####/classes.dex
- /data/data/####/classes.dex;classes2.dex
- /data/data/####/classes.oat
- /data/data/####/com.iflytek.id.xml
- /data/data/####/com.iflytek.msc.xml
- /data/data/####/com.roadsideclub.news.newsclub_preferences.xml
- /data/data/####/cookie.xml
- /data/data/####/crypto.KEY_256.xml
- /data/data/####/d05bc1b754bf91a2_0
- /data/data/####/d44cd50bd7ab957c_0
- /data/data/####/d44cd50bd7ab957c_1
- /data/data/####/d4ca12562704cc7d_0
- /data/data/####/d4fef7949c0839f8_0
- /data/data/####/d72ab805808f539e_0
- /data/data/####/d96991c2bb3b5ac3_0
- /data/data/####/d==7.5.3&&4.1.1_1571562975118_envelope.log
- /data/data/####/d==7.5.3&&4.1.1_1571562977982_envelope.log
- /data/data/####/d==7.5.3&&4.1.1_1571563009733_envelope.log
- /data/data/####/d==7.5.3&&4.1.1_1571563010750_envelope.log
- /data/data/####/dbd97b164a276161aaefcee4ad2098fd11b07d20d70e7ce....0.tmp
- /data/data/####/de587e775d02822a_0
- /data/data/####/device_id.xml.xml
- /data/data/####/e366bf94aa531533_0
- /data/data/####/e366bf94aa531533_1
- /data/data/####/e5b57f700ce14a85_0
- /data/data/####/e661819e2761535c_0
- /data/data/####/e6b2d1c6af1e14f0_0
- /data/data/####/e7b3b6b92400db7d_0
- /data/data/####/e81cc42ca7ba06d968d8408d9f54b7a3d513e61b17fa1b0....0.tmp
- /data/data/####/e9f82eabe4956ea1_0
- /data/data/####/ee502ae891fe051c_0
- /data/data/####/efc53cbe59e4ebea_0
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f1fac9a552b69546_0
- /data/data/####/f51183f376c6a255_0
- /data/data/####/fcb5cc868999a4c9_0
- /data/data/####/fd5b35078a0f26b8041ae85000e18b62374e51e54fa2d44....0.tmp
- /data/data/####/ff6b153987b9fa0d_0
- /data/data/####/getui_sp.xml
- /data/data/####/gkt-journal
- /data/data/####/gx_sp.xml
- /data/data/####/https_m.qiangttapp.com_0.localstorage-journal
- /data/data/####/iflytek_collect_state.xml
- /data/data/####/iflytek_device_info.zip
- /data/data/####/iflytek_state_com.roadsideclub.news.newsclub.xml
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal
- /data/data/####/libcuid.so
- /data/data/####/libjiagu.so
- /data/data/####/metrics_guid
- /data/data/####/mtj_autoTracker.js
- /data/data/####/openudid_prefs.xml
- /data/data/####/proc_auxv
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushk.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/qtt_sp_Data.xml
- /data/data/####/rt_record_file.txt
- /data/data/####/run.pid
- /data/data/####/tdata_LRe817
- /data/data/####/tdata_LRe817.dex
- /data/data/####/tdata_LRe817.dex.flock (deleted)
- /data/data/####/tdata_LRe817.jar
- /data/data/####/tdata_OxN092
- /data/data/####/tdata_OxN092.dex
- /data/data/####/tdata_OxN092.dex.flock (deleted)
- /data/data/####/tdata_OxN092.jar
- /data/data/####/tdata_ZPR725
- /data/data/####/tdata_ZPR725.dex
- /data/data/####/tdata_ZPR725.dex.flock (deleted)
- /data/data/####/tdata_ZPR725.jar
- /data/data/####/tdata_bca864
- /data/data/####/tdata_bca864.dex
- /data/data/####/tdata_bca864.dex.flock (deleted)
- /data/data/####/tdata_bca864.jar
- /data/data/####/the-real-index
- /data/data/####/trace_circle.data
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_config.xml.bak
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_general_config.xml.bak
- /data/data/####/umeng_it.cache
- /data/data/####/update.xml
- /data/data/####/weibo_sdk_aid1
- /data/data/####/yunceng.conf
- /data/misc/####/primary.prof
- /system/bin/cat /proc/cpuinfo
- /system/bin/dex2oat --instruction-set=x86 --dex-file=<Package Folder>/.jiagu/classes.dex --dex-file=<Package Folder>/.jiagu/classes.dex:classes2.dex --oat-file=<Package Folder>/.jiagu/classes.oat --inline-depth-limit=0 --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/.00000000000/37CF018B.dex --oat-fd=34 --oat-location=/data/user/0/<Package>/.11111111111/37CF018B.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tdata_LRe817.jar --oat-fd=60 --oat-location=/data/user/0/<Package>/files/tdata_LRe817.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tdata_OxN092.jar --oat-fd=61 --oat-location=/data/user/0/<Package>/files/tdata_OxN092.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tdata_ZPR725.jar --oat-fd=61 --oat-location=/data/user/0/<Package>/files/tdata_ZPR725.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tdata_bca864.jar --oat-fd=59 --oat-location=/data/user/0/<Package>/files/tdata_bca864.dex --compiler-filter=speed
- cat /sys/class/net/wlan0/address
- getprop ro.build.display.id
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.miui.ui.version.name
- getprop ro.smartisan.version
- getprop ro.vivo.os.version
- mount
- sh
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-CFB-NoPadding
- AES-ECB-PKCS5Padding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding