Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) d####.opensp####.cn:80
- TCP(HTTP/1.1) www.10####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) h####.opensp####.cn:80
- TCP(TLS/1.0) sh.wagbr####.alibaba####.com:443
- TCP(TLS/1.0) 1####.25.23.58:8443
- and####.b####.qq.com
- d####.opensp####.cn
- h####.opensp####.cn
- log.u####.com
- s####.u####.com
- www.10####.com
- h####.opensp####.cn/launchconfig?t=####&p=####
- www.10####.com/Uploads/network.ini
- www.10####.com/img/ad.html
- www.10####.com/img/ad.jpg
- and####.b####.qq.com/rqd/async?aid=####
- d####.opensp####.cn/index.php/clientrequest/clientcollect/isCollect
- /data/data/####/.jg.ic
- /data/data/####/1004
- /data/data/####/1532109827116.log
- /data/data/####/484aebe5491328efcfebfdc95828fcd7268a9e1a636da5a....0.tmp
- /data/data/####/5f2dce536da1528c9cad584676dacfdf68a017bd87a20b9....0.tmp
- /data/data/####/67bc4b7cdae052e4f7119b7f2abfadbdc865de46ae4bcbe....0.tmp
- /data/data/####/80406ea154d0597f8723e6bae2fb1301275a914e29eecd6....0.tmp
- /data/data/####/DATA.xml
- /data/data/####/ONE.xml
- /data/data/####/TEMPORARYDATA.xml
- /data/data/####/afbfef3f891069f5f4cf38be67af52e16eb3c03840d4d77....0.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/com.iflytek.id.xml
- /data/data/####/com.iflytek.msc.xml
- /data/data/####/crashrecord.xml
- /data/data/####/e49f89d70d15647a479233ebe8502058ad5761d7399d073....0.tmp
- /data/data/####/ifly_launch_lib.xml
- /data/data/####/iflytek_state_com.shian.intersafemail.xml
- /data/data/####/journal.tmp
- /data/data/####/libjiagu651074074.so
- /data/data/####/local_crash_lock
- /data/data/####/mail_db-journal
- /data/data/####/native_record_lock
- /data/data/####/security_info
- /data/data/####/umeng_socialize.xml
- /data/media/####/iflyworkdir_test
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- chmod 755 <Package Folder>/.jiagu/libjiagu651074074.so
- Bugly
- libjiagu651074074
- msc
- AES-CBC-NoPadding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- AES-CBC-NoPadding
- AES-GCM-NoPadding
- DES-ECB-PKCS5Padding