Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) www.c####.cn.####.cn:80
- TCP(TLS/1.0) ssl.gst####.com:443
- TCP(TLS/1.0) sh.wagbr####.alibaba####.com:443
- TCP(TLS/1.0) www.go####.com:443
- TCP(TLS/1.0) www.gst####.com:443
- TCP(TLS/1.0) app.c####.cn:443
- and####.b####.qq.com
- app.c####.cn
- plb####.u####.com
- ssl.gst####.com
- u####.u####.com
- www.c####.cn
- www.go####.com
- www.gst####.com
- www.c####.cn.####.cn/static/images/product-v1.0/IP-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/as-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/cda-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/cdn-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/cloud-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/desktop_cloud-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/dps-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/elb-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/evs-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/fbshc-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/gateway-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/gpu-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/ims-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/mysql-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/oos-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/postgresql-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/sqlserver-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/vbs-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/vpc-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/vpcpeering-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/vpn-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/wdsjk-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/xtfxfk-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/xtjzyx-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/ybf-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/yrq-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/ywg-m.png
- www.c####.cn.####.cn/static/images/product-v1.0/yzjbf-m.png
- and####.b####.qq.com/rqd/async?aid=####
- /data/data/####/-CacheDBManager-journal
- /data/data/####/-ECloud-journal
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/01c90b3ffadd407975fd3480443164b5.0.tmp
- /data/data/####/01c90b3ffadd407975fd3480443164b5.1.tmp
- /data/data/####/057b4f23e26f24f127364627ad027ae72b22857b7139c28....0.tmp
- /data/data/####/1004
- /data/data/####/1037ed2de970490022e1c2e6fa5e50fe.0.tmp
- /data/data/####/1037ed2de970490022e1c2e6fa5e50fe.1.tmp
- /data/data/####/149c4a801baf439069b37551298570d392d901c565c505e....0.tmp
- /data/data/####/1c9a7ba02a405b5804417c4c8898a464233925d4c5f7c80....0.tmp
- /data/data/####/2076_com.ctg.itrdc.ecloud_14_42_53.mmap2
- /data/data/####/2181_com.ctg.itrdc.ecloud_14_42_58.mmap2
- /data/data/####/21dfbbb1af30ca9158b3afc85caa97f9.0.tmp
- /data/data/####/21dfbbb1af30ca9158b3afc85caa97f9.1.tmp
- /data/data/####/2264_com.ctg.itrdc.ecloud_14_43_02.mmap2
- /data/data/####/2346_com.ctg.itrdc.ecloud_14_43_06.mmap2
- /data/data/####/2433_com.ctg.itrdc.ecloud_14_43_10.mmap2
- /data/data/####/2512_com.ctg.itrdc.ecloud_14_43_13.mmap2
- /data/data/####/2596_com.ctg.itrdc.ecloud_14_43_17.mmap2
- /data/data/####/2649_com.ctg.itrdc.ecloud_14_43_18.mmap2
- /data/data/####/2702_com.ctg.itrdc.ecloud_14_43_19.mmap2
- /data/data/####/2840_com.ctg.itrdc.ecloud_14_43_54.mmap2
- /data/data/####/295bd064c499bdfe74effed142a1b0ea.0.tmp
- /data/data/####/295bd064c499bdfe74effed142a1b0ea.1.tmp
- /data/data/####/3cae317751906ac739bfafaada6f8eb6891f741c3a1ff95....0.tmp
- /data/data/####/3e10a0fe4c394750aad8adbab65faca5c30e88bc2618f7d....0.tmp
- /data/data/####/3e8ed5dba0a6a40e137bee48734170e5c12d3b4ce5bf88b....0.tmp
- /data/data/####/3ec813717a58c64c8eb2c46191c1ed1a.0.tmp
- /data/data/####/3ec813717a58c64c8eb2c46191c1ed1a.1.tmp
- /data/data/####/40063e62b1eba30bf4bf7faed4d7d09a2e845f32c58b394....0.tmp
- /data/data/####/4175b4f63c28ecff2dec8694c3766dbe7047a742ea78d34....0.tmp
- /data/data/####/4b80679e88c77f9db94844b97b1ad5362abeac4f25e730d....0.tmp
- /data/data/####/5447856e56e1f15a4ae9f5ee8ba313d30ae5f4c9f61d038....0.tmp
- /data/data/####/600ded7ef62fe69657632aa0718ad51889e22a52f392a18....0.tmp
- /data/data/####/6c8821bd08c3dec82a6827cc765d2aab6fc38ad854ba7e8....0.tmp
- /data/data/####/71f722000c013659cc7bc5880b1b52059f2c39e5867d88c....0.tmp
- /data/data/####/760b454fc885fad0dabe79e4b2e852dc.0.tmp
- /data/data/####/760b454fc885fad0dabe79e4b2e852dc.1.tmp
- /data/data/####/8ca4dd06ef6f7918d1babf1406642273b234fda465f7881....0.tmp
- /data/data/####/IMEI.xml
- /data/data/####/MultiDex.lock
- /data/data/####/Settings.xml
- /data/data/####/a10cedea97e7d0f009f60a65a5fe3d8793b6ff592127e82....0.tmp
- /data/data/####/a2e66d185d25dc430202c6899858aabb7c4f452bb403f55....0.tmp
- /data/data/####/a==7.5.0&&1.2.4_1535035374484_envelope.log
- /data/data/####/ada6fe75a5d0387982bd4193d0039f10.0.tmp
- /data/data/####/ada6fe75a5d0387982bd4193d0039f10.1.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/c2c1fd1aed27e00ca573d901256c9cb3ea46e711e7bf69c....0.tmp
- /data/data/####/c8249bc163e13cc06b6325c79b023de2d670a3d549b19d8....0.tmp
- /data/data/####/c97d95d654e62c100a02bd42c7169914.0.tmp
- /data/data/####/c97d95d654e62c100a02bd42c7169914.1.tmp
- /data/data/####/cb669b90b3ca4657f3937b90c9ad6204.0.tmp
- /data/data/####/cb669b90b3ca4657f3937b90c9ad6204.1.tmp
- /data/data/####/crashrecord.xml
- /data/data/####/e23803964d015b18ff2008c1f38b4244c7fd5e84e392a09....0.tmp
- /data/data/####/ece64ca92dbf71307fdb851890b130fdf09aec45a8dac58....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f169290133b3d20579648aba5cf6ef457f38edcae4b2daa....0.tmp
- /data/data/####/f29b6f63dc119a001afcdf099029a4442bfd72ad2641655....0.tmp
- /data/data/####/f48a90425b470bbeb47303a0a6d946543b38f065fb75be4....0.tmp
- /data/data/####/f5e7eb6446e00774d5caee86604ddb27.0.tmp
- /data/data/####/f5e7eb6446e00774d5caee86604ddb27.1.tmp
- /data/data/####/fab763ae6277b5d37f70538be15976df7e3ea3cf544fc11....0.tmp
- /data/data/####/i==1.2.0&&1.2.4_1535035373896_envelope.log
- /data/data/####/i==1.2.0&&1.2.4_1535035382736_envelope.log
- /data/data/####/info.xml
- /data/data/####/journal.tmp
- /data/data/####/libjiagu-1671662011.so
- /data/data/####/local_crash_lock
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/restart_counter.xml
- /data/data/####/security_info
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.cca.dat
- /data/media/####/.nomedia
- /data/media/####/.umm.dat
- /data/media/####/2076_com.ctg.itrdc.ecloud_14_42_53_20180823.xlog
- /data/media/####/2181_com.ctg.itrdc.ecloud_14_42_58_20180823.xlog
- /data/media/####/2264_com.ctg.itrdc.ecloud_14_43_02_20180823.xlog
- /data/media/####/2346_com.ctg.itrdc.ecloud_14_43_06_20180823.xlog
- /data/media/####/2433_com.ctg.itrdc.ecloud_14_43_10_20180823.xlog
- /data/media/####/2512_com.ctg.itrdc.ecloud_14_43_13_20180823.xlog
- /data/media/####/2596_com.ctg.itrdc.ecloud_14_43_17_20180823.xlog
- /data/media/####/2649_com.ctg.itrdc.ecloud_14_43_18_20180823.xlog
- /data/media/####/2702_com.ctg.itrdc.ecloud_14_43_19_20180823.xlog
- /data/media/####/2840_com.ctg.itrdc.ecloud_14_43_54_20180823.xlog
- /data/media/####/sysid.dat
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- chmod 755 <Package Folder>/.jiagu/libjiagu-1671662011.so
- getprop
- ls /sys/class/thermal
- Bugly
- libjiagu-1671662011
- marsxlog
- stlport_shared
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding