Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) m.d####.mob.com:80
- TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) 1####.14.18.64:8080
- TCP(HTTP/1.1) www.qtl####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(TLS/1.0) 1####.217.17.142:443
- TCP(TLS/1.0) k####.eas####.com:443
- TCP(TLS/1.0) hotfix####.aliy####.com:443
- TCP(TLS/1.0) 3####.tc.qq.com:443
- TCP c####.g####.ig####.com:5226
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.exc.mob.com
- a####.man.aliy####.com
- a####.u####.com
- and####.b####.qq.com
- c####.g####.ig####.com
- c-h####.g####.com
- hotfix####.aliy####.com
- k####.eas####.com
- m.d####.mob.com
- pub-####.qin####.com
- s.b####.m####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- www.qtl####.com
- m.d####.mob.com/v3/cconf?appkey=####&plat=####&apppkg=####&appver=####&n...
- t####.c####.q####.####.com/config/hz-hzv3.conf
- t####.c####.q####.####.com/tdata_BAI450
- t####.c####.q####.####.com/tdata_YJA893
- a####.u####.com/app_logs
- and####.b####.qq.com/rqd/async?aid=####
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- sh.wagbr####.aliyun####.com/man/api?ak=####&s=####
- www.qtl####.com/QingTengSheApp/app/brandsinfo/finditembybrandid
- www.qtl####.com/QingTengSheApp/app/brandsinfo/getbrandsinfo
- www.qtl####.com/QingTengSheApp/app/categoriesinfonologin/getcategoriesby...
- www.qtl####.com/QingTengSheApp/app/categoriesinfonologin/getlevel_1
- www.qtl####.com/QingTengSheApp/app/commentsinfo/findOneComment
- www.qtl####.com/QingTengSheApp/app/discover/getdiscoverlistbyofficial
- www.qtl####.com/QingTengSheApp/app/index/ad
- www.qtl####.com/QingTengSheApp/app/index/index
- www.qtl####.com/QingTengSheApp/app/index/notice
- www.qtl####.com/QingTengSheApp/app/item/finditeminfobyid
- www.qtl####.com/QingTengSheApp/app/itemspush/guessYouLikeItems
- www.qtl####.com/QingTengSheApp/special/cloverInfo
- www.qtl####.com/QingTengSheApp/special/findIconNaviga
- www.qtl####.com/QingTengSheApp/special/flashSale
- www.qtl####.com/QingTengSheApp/special/getItemSet
- www.qtl####.com/QingTengSheApp/special/specialSale
- /data/data/####/-TVecTHlG4I-VbGus-AR0ZZHZ_I.702314222.tmp
- /data/data/####/-yzQFeTOL6PzW5pYzZTsqv6v9tw.-2515535.tmp
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/.lock
- /data/data/####/097a2ca9d70facbd93b7633d8dc171455b2c9e3f92e28b6....0.tmp
- /data/data/####/0BeUjepL52u-YuQt-2kylTIpfWI.-243953394.tmp
- /data/data/####/0iT0AdMGZiEEsuZol7hItIuCku4.659416486.tmp
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/105ca25586c6c356879dc5683ebffd7f032d946bb247379....0.tmp
- /data/data/####/1355befda30027e952c0e40d9df3a2b563a12d9f53947b5....0.tmp
- /data/data/####/1Q77kIU14NZkSPJTwgWdZ4VgmE0.-952829477.tmp
- /data/data/####/1Vr4ElrlRlaBz_175s1CAiiFBfQ.248462879.tmp
- /data/data/####/1b29af1afb27edad224fe1319c1d8ac6d2e0af70793056e....0.tmp
- /data/data/####/2540845546a5efa08a1143784ee4b90b7f83952d6f67e13....0.tmp
- /data/data/####/420oAh75fpx-EG59075c-wxNnoU.383244494.tmp
- /data/data/####/5f-I0fE3vtBaPv6pisTkcm_T7Do.1628823415.tmp
- /data/data/####/6f92f1b601e98d306cb163e37db5c9d3a4a1e6698464085....0.tmp
- /data/data/####/707ca9086c1b4371d5298574e05e4aa5acd955dc6e5b839....0.tmp
- /data/data/####/81a1165ac4665b80a07e47277fc601d069be32d69e99e97....0.tmp
- /data/data/####/8TNemH4cSAruYh3PrpiRpOd8q7c.-108052452.tmp
- /data/data/####/8v2mD8sTWt5qrKYZu6i95G7qPYE.-16421897.tmp
- /data/data/####/93rUQNeFa2j9M4zBetQePmCJ2-c.1417938364.tmp
- /data/data/####/9hvV-NHwAe3yZBaMKb0pPrOkxVw.1425817959.tmp
- /data/data/####/9kTW71K446ya4YmIiN0gnMumm04.1810856017.tmp
- /data/data/####/9wzaGctbxmh7MGh3dP9f488qHvs.374434061.tmp
- /data/data/####/Alvin2.xml
- /data/data/####/B4fSi2SL3RJr85uJfiWAYkWMfkE.689543674.tmp
- /data/data/####/BCpSzwqVxvpZY-ABvzNmHGdyqDo.1029729769.tmp
- /data/data/####/COLoVwsvziWWDkNmihg4i76WLDk.896240761.tmp
- /data/data/####/ContextData.xml
- /data/data/####/CookiePersistence.xml
- /data/data/####/D1bWFA0hD47f_of6jiXvJH34uGg.-1700426446.tmp
- /data/data/####/D9OryW3H3vfki6PKgrizs6ruR1I.607195130.tmp
- /data/data/####/DYEKSk2PkCCk1mszRKWzRYbLeLE.1910073041.tmp
- /data/data/####/EW9ExmZX1gisiJSCiPU8kCXx0m8.-636812592.tmp
- /data/data/####/GmwRMF2RREJVe1aLuL2uWVdEBgQ.1213861074.tmp
- /data/data/####/JZZxtgVH5z1XsM3iqtaYgOkLwHg.-1684230185.tmp
- /data/data/####/KJmz7BgHKuzKJnEicq1U9gZ7epw.-1036007926.tmp
- /data/data/####/KpWkMm-hKuW_jLee6nibqolabxo.1973809458.tmp
- /data/data/####/MultiDex.lock
- /data/data/####/MxXsIJObhIWlGEzUHEsteYzsVIM.1336789493.tmp
- /data/data/####/NzalqADIgq37tJ8H2bYuo3oOVGw.-802948293.tmp
- /data/data/####/OLvilv_bLOdEJP5nT7_2P87N0o0.-1160684057.tmp
- /data/data/####/ObJEcmJo6Hy0s2Kfv4WwB-AHS18.122229704.tmp
- /data/data/####/OuyWRZOuRdDuAW9e2PG8oqMOx5M.1095899480.tmp
- /data/data/####/S1ISRh1PScDIJ4xBbu7UYrZVIsM.-525202578.tmp
- /data/data/####/SNWAxmEVFY_t6rwvV-iiGl4JmE0.284397866.tmp
- /data/data/####/T88qLLOkPUjs-ykrWS-hnlkLh5o.1770047372.tmp
- /data/data/####/ThrowalbeLog.db-journal
- /data/data/####/Tr6ZHtb2ULOiF99bkE1IXP8Dem0.236265841.tmp
- /data/data/####/Tubcq_ASDs3UGhMB0UMGiMarcgI.2024603472.tmp
- /data/data/####/UA_fjcKs0bVhXOMAhlrUaiUMiDc.-872058479.tmp
- /data/data/####/UTHSSgBwyW4_F2noFED7w1y-Vrk.348321472.tmp
- /data/data/####/WCJj2Gzhd8Y3irIgP8-dCFQ0HXs.1203131039.tmp
- /data/data/####/XsyfW6gKSPl3fvbTWKZG5qeTjBY.1910687327.tmp
- /data/data/####/YsItwpj7Ti5OiWwhqZNLkxm-ozg.2008835636.tmp
- /data/data/####/Zo-vbwI5eSXEEEjtfmk8Pa5d-q8.1131207349.tmp
- /data/data/####/_EUxzOHT1KGbYsKNigUMR_TYpRE.1233248070.tmp
- /data/data/####/_oDCTpG-0exy-5ztgCt1Wz-2g3M.470090379.tmp
- /data/data/####/a3b8fab7780d804a000ab15498cb441fa026b5ed8e1a0b7....0.tmp
- /data/data/####/b615fb17245e42b0bbb629a62ca7ac8b8342fe947e66828....0.tmp
- /data/data/####/b7caf19069164858a4a791c8d899fd9bd98ef339892af30....0.tmp
- /data/data/####/bDqGi092-pdS7qyHNid-QlsT9Gw.2131364399.tmp
- /data/data/####/baffb56720867768f4aa2472ddce73c06a9922d3fb788a6....0.tmp
- /data/data/####/bkC_7iemQI8I7owhHRIFKQ_RgJk.-974815096.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/c60db58fd911e6a7b269d57ec98f67c6dbec43f1636e2d9....0.tmp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/com.manymobi.ljj.qingtenshe.BETA_VALUES.xml
- /data/data/####/crashrecord.xml
- /data/data/####/d22mwNksYWyTYAFBt-m_pg2OeWo.-314306778.tmp
- /data/data/####/dcf8697b4a7f65551707cfae1b4deb74d3db22407d65018....0.tmp
- /data/data/####/device_id.xml.xml
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f02cd322024eabc76186bcdaa64ec8c4c0696a89868a5db....0.tmp
- /data/data/####/ff8a9de8bbc6266b969ee705124affb755c2a5ab0471b81....0.tmp
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/h56Agr6HB1nUcfEkw_0CCHvJ1c4.-834030631.tmp
- /data/data/####/httpclient-req-981217041.cache
- /data/data/####/httpclient-req-981217041.cache (deleted)
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/isFirst.xml
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/kefuinfo.xml
- /data/data/####/libjiagu.so
- /data/data/####/local_crash_lock
- /data/data/####/mob_commons_1.xml
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/oL_sDpbe_mrN5bVlJxw-ijS9lvs.1361742684.tmp
- /data/data/####/ooOVpyPhYMa3cc_7GG82JZ2Xg3M.1676635771.tmp
- /data/data/####/oyk1Eqv6ueHjGfR9BuakdeUJVVc.-1813701001.tmp
- /data/data/####/puK4gSvvuhF-aMthnbrelNONWIs.902682177.tmp
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/q2zCto1B-TVi08JqltOBzEg61uA.-1299737202.tmp
- /data/data/####/rSxpJFRRBkqpiW_NsvaGr9WanAw.-294990074.tmp
- /data/data/####/rtPZqGs1X_ol30zr9bfI6NtBRgo.-1208389779.tmp
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/sp_sophix.xml
- /data/data/####/t2lNU06VRhr9C6Tz-aO5L_DtrHw.686835585.tmp
- /data/data/####/tdata_BAI450
- /data/data/####/tdata_BAI450.jar
- /data/data/####/tdata_YJA893
- /data/data/####/tdata_YJA893.jar
- /data/data/####/tsobqb4QV_--RCXNxNpyMypEK4g.1128779119.tmp
- /data/data/####/uJ0cvNqCNqeMHcxdUR6405MpcHU.-1538287354.tmp
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/vQXDSq5sljrjVSpLC83-YicA0bU.1702422343.tmp
- /data/data/####/wFzYW7DpthHWvlkMrx5L9rgUaOs.-138345929.tmp
- /data/data/####/xIG4JlTtsSepsClodmocf1he68o.-1736699977.tmp
- /data/data/####/yHIO5nxH425BOix-tROUvo5Ijxc.-185476212.tmp
- /data/data/####/zrSVLksWULZMNRycT9X1naBGqpE.1304802636.tmp
- /data/media/####/.dic_lock
- /data/media/####/.duid
- /data/media/####/.globalLock
- /data/media/####/.nomedia
- /data/media/####/.nulplt
- /data/media/####/.pkg_lock
- /data/media/####/.rcTag
- /data/media/####/.rc_lock
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.manymobi.ljj.qingtenshe.bin
- /data/media/####/com.manymobi.ljj.qingtenshe.db
- /data/media/####/commanymobiljjqingtenshe_3.1.2_7c5c3a40-3171-5...00.apk
- /data/media/####/journal.tmp
- /data/media/####/tdata_BAI450
- /data/media/####/tdata_YJA893
- /data/media/####/test.log
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.receiver.DemoPushService 25715 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu.so
- chmod 777 /storage/emulated/0/Download/<Package>/.beta/apk/commanymobiljjqingtenshe_3.1.2_7c5c3a40-3171-5054-8a03-0b82d54e2e00.apk
- getprop
- mount
- sh
- Bugly
- getuiext2
- hyphenate
- hyphenate_av
- hyphenate_av_recorder
- imagepipeline
- libjiagu
- neh
- sqlite
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-NoPadding
- AES-GCM-NoPadding