Technical information
- Adware.Gexin.2.origin
- UDP(DNS) 8####.8.4.4:53
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) adash####.man.aliy####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) sdk.c####.g####.####.cn:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) connect####.gst####.com:80
- TCP(TLS/1.0) connect####.gst####.com:443
- TCP(TLS/1.0) 74.1####.205.102:443
- TCP(TLS/1.0) rr2---s####.g####.com:443
- TCP(TLS/1.0) u####.u####.com:443
- TCP(TLS/1.0) loc.map.b####.com:443
- TCP(TLS/1.0) secgw-d####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) fp.fraudme####.cn:443
- TCP(TLS/1.0) rr18---####.g####.com:443
- TCP(TLS/1.0) plb####.u####.com:443
- TCP(TLS/1.0) www.google####.com:443
- TCP(TLS/1.0) and####.a####.go####.com:443
- TCP(TLS/1.0) 2####.107.1.97:443
- TCP(TLS/1.0) api.map.b####.com:443
- TCP(TLS/1.2) www.go####.com:443
- UDP 1####.0.5.1:137
- UDP www.google####.com:443
- TCP ms####.m.u####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP cm-1####.g####.com:5226
- 7j####.c####.z0.####.com
- a####.man.aliy####.com
- amdc####.m.ta####.com
- and####.a####.go####.com
- and####.google####.com
- api.map.b####.com
- c-h####.g####.com
- cm-1####.g####.com
- connect####.gst####.com
- fp.fraudme####.cn
- gmscomp####.google####.com
- loc.map.b####.com
- m####.go####.com
- p####.google####.com
- plb####.u####.com
- rr18---####.g####.com
- rr2---s####.g####.com
- s####.guo####.com
- sdk.c####.g####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- u####.u####.com
- umen####.m.ta####.com
- umengj####.m.ta####.com
- www.go####.com
- www.google####.com
- y####.al####.org
- sdk.c####.g####.####.cn/config/hzv9.conf
- adash####.man.aliy####.com/man/api?ak=####&s=####
- c-h####.g####.com/api.php?format=####&t=####
- fp.fraudme####.cn:443/android3/profile.json?sctoken=####&partner=####&ve...
- plb####.u####.com:443/umpx_internal
- plb####.u####.com:443/umpx_push_launch
- plb####.u####.com:443/umpx_push_register
- sdk.o####.p####.####.com/api.php?format=####&t=####
- secgw-d####.wagbr####.ali####.####.com:443/saveWb.json
- u####.u####.com:443/unify_logs
- /data/anr/traces.txt
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/.jg.store.report_cf
- /data/data/####/.jgck
- /data/data/####/.td-3
- /data/data/####/0a231bd8575dcf72.txt
- /data/data/####/ACCS_BINDumeng;5b0ba0fbf43e48606900007d.xml
- /data/data/####/ACCS_SDK.xml
- /data/data/####/ACCS_SDK_CHANNEL.xml
- /data/data/####/AGOO_BIND.xml
- /data/data/####/Agoo_AppStore.xml
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/MessageStore.db-journal
- /data/data/####/MsgLogStore.db-journal
- /data/data/####/Q0VSVC5SU0EK.txt
- /data/data/####/SGMANAGER_DATA2
- /data/data/####/SGMANAGER_DATA2.tmp
- /data/data/####/SG_INNER_DATA
- /data/data/####/SP_AROUTER_CACHE.xml
- /data/data/####/UM_PROBE_DATA.xml
- /data/data/####/WebViewChromiumPrefs.xml
- /data/data/####/a==7.5.3&&1.5.2_1701931054273_envelope.log
- /data/data/####/accs.db-journal
- /data/data/####/agoo.pid
- /data/data/####/authStatus_com.tjgy.daefenqi;remote.xml
- /data/data/####/chuanglan_report_2.2.0.2.db
- /data/data/####/chuanglan_report_2.2.0.2.db-journal
- /data/data/####/classes.dex
- /data/data/####/classes.dex;classes2.dex
- /data/data/####/classes.oat
- /data/data/####/com.tjgy.daefenqi_preferences.xml
- /data/data/####/conf.dat.xml
- /data/data/####/core_info
- /data/data/####/dW1weF9pbnRlcm5hbF8xNzAxOTMxMDQ2MDIx;
- /data/data/####/dW1weF9wdXNoX2xhdW5jaF8xNzAxOTMxMDY1MzMz;
- /data/data/####/dW1weF9wdXNoX3JlZ2lzdGVyXzE3MDE5MzEwNTU0NTU=;
- /data/data/####/dc2d3ff7713d39a82e
- /data/data/####/dc731e667b22953682
- /data/data/####/dc829ae6c892d56a81
- /data/data/####/dc9fdce1f5ec534acc
- /data/data/####/dcbf4d60838b43e9ae
- /data/data/####/dcf320a2061c088d3d
- /data/data/####/download_upload
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/firll.dat
- /data/data/####/fm_shared.xml
- /data/data/####/getui_sp.xml
- /data/data/####/hst.db
- /data/data/####/hst.db-journal
- /data/data/####/httpdns_config_cache.xml
- /data/data/####/i==1.2.0&&1.5.2_1701931045991_envelope.log
- /data/data/####/info.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/libcuid.so
- /data/data/####/libjiagu.so
- /data/data/####/libsgavmp_312757200000.dex
- /data/data/####/libsgavmp_312757200000.dex.flock (deleted)
- /data/data/####/libsgavmpso-5.4.1002.so
- /data/data/####/libsgavmpso-5.4.1002.so.tmp.3356
- /data/data/####/libsgavmpso-5.4.1002.so.tmp.3413
- /data/data/####/libsgmain_312757200000.dex
- /data/data/####/libsgmain_312757200000.dex.flock (deleted)
- /data/data/####/libsgmainso-5.4.4066.so
- /data/data/####/libsgmainso-5.4.4066.so.tmp.3142
- /data/data/####/libsgmainso-5.4.4066.so.tmp.3413
- /data/data/####/libsgsecuritybody_312757200000.dex
- /data/data/####/libsgsecuritybody_312757200000.dex.flock (deleted)
- /data/data/####/libsgsecuritybodyso-5.4.62.so
- /data/data/####/lock.lock
- /data/data/####/mac.xml
- /data/data/####/message_accs_db
- /data/data/####/message_accs_db-journal
- /data/data/####/metrics_guid
- /data/data/####/proc_auxv
- /data/data/####/push.pid
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/sgFile.lock
- /data/data/####/share_data.xml
- /data/data/####/share_data.xml.bak
- /data/data/####/sp.lock
- /data/data/####/tbs_download_config.xml
- /data/data/####/tbs_download_config.xml.bak (deleted)
- /data/data/####/tbs_download_stat.xml
- /data/data/####/tbs_pv_config
- /data/data/####/tbscoreinstall.txt
- /data/data/####/tbslock.txt
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_message_state.xml
- /data/media/####/.cuid2
- /data/media/####/.nomedia
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/app.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.tjgy.daefenqi.bin
- /data/media/####/com.tjgy.daefenqi.db
- /data/media/####/dd7893586a493dc3
- /data/media/####/deviceToken
- /data/media/####/hid.dat
- /data/media/####/journal
- /data/media/####/journal.tmp
- /data/media/####/tbslog.txt
- /data/media/####/yoh.dat
- /data/media/####/yol.dat
- /data/media/####/yom.dat
- /data/misc/####/primary.prof
- /data/user/0/<Package>/files/dc2d3ff7713d39a82e
- /data/user/0/<Package>/files/dc731e667b22953682
- /data/user/0/<Package>/files/dc829ae6c892d56a81
- /data/user/0/<Package>/files/dc9fdce1f5ec534acc
- /data/user/0/<Package>/files/dcbf4d60838b43e9ae
- /data/user/0/<Package>/files/dcf320a2061c088d3d
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.build.version.release
- getprop ro.miui.ui.version.name
- getprop ro.product.cpu.abi
- getprop ro.smartisan.version
- getprop ro.vivo.os.version
- ls /
- ls /sys/class/thermal
- libjiagu
- liblocSDK7b
- libsgavmpso-5.4.1002
- libsgmainso-5.4.4066
- libsgsecuritybodyso-5.4.62
- libtnet-3.1.11
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- RC4
- RSA-ECB-NoPadding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding