Technical information
- Adware.MyFolder.1.origin
- UDP(DNS) <Google DNS>
- UDP(DNS) 1####.114.114.114:53
- TCP(HTTP/1.1) 2####.243.212.25:80
- TCP(HTTP/1.1) up####.sdk.jig####.cn:80
- TCP(HTTP/1.1) z####.4g.jx####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) 1####.40.143.134:80
- TCP(HTTP/1.1) et2-na6####.wagbr####.ali####.####.com:80
- TCP(HTTP/1.1) pic.4g.jx####.####.com:80
- TCP(TLS/1.0) api.map.b####.com:443
- TCP(TLS/1.0) o####.map.b####.com:443
- TCP(TLS/1.0) s####.j####.cn:443
- TCP(TLS/1.0) loc.map.b####.com:443
- TCP 1####.121.49.93:7003
- TCP maa####.chinane####.com:6666
- UDP s.j####.cn:19000
- and####.b####.qq.com
- api.map.b####.com
- loc.map.b####.com
- log.u####.com
- maa####.chinane####.com
- o####.map.b####.com
- pic.4g.jx####.####.cn
- s####.j####.cn
- s####.u####.com
- s.j####.cn
- up####.sdk.jig####.cn
- z####.4g.jx####.####.cn
- et2-na6####.wagbr####.ali####.####.com/bar/get/5bc15ea3b465f5ee6200006a/...
- pic.4g.jx####.####.com/v4/M00/55/64/rBAVFFv2T0mAAJg5AAQs7z1WUr4818.jpg
- pic.4g.jx####.####.com/v4/M00/55/7D/rBAVFFv21F6AdSC2AACwQXBOWJg66.jpeg.w...
- pic.4g.jx####.####.com/v4/M00/55/C7/rBAVFFv4Cd2AKeR4AAE4mck5Zf847.jpeg.w...
- pic.4g.jx####.####.com/v4/M00/55/C7/rBAVFFv4Cd2AYgT0AALFAj9AdHA87.jpeg.w...
- pic.4g.jx####.####.com/v4/M00/55/C7/rBAVFFv4Cd2AbNFDAAJsX2aM75k29.jpeg.w...
- pic.4g.jx####.####.com/v4/M00/56/21/rBAVFFv5RWWAJkVgAAQV1umY7Oc433.jpg.w...
- pic.4g.jx####.####.com/v4/M00/56/22/rBAVFFv5U1eAYMo4AAJ_gjMrtRg175.jpg.w...
- pic.4g.jx####.####.com/v4/M00/56/22/rBAVFFv5UpKAWr4SAACItt92rYk07.jpeg.w...
- pic.4g.jx####.####.com/v4/M00/56/37/rBAVFFv6cJCARPXgAAC__41FWiQ36.jpeg.w...
- pic.4g.jx####.####.com/v4/M00/56/3A/rBAVFFv6p-OABX6OAB3tydcwOg0006.jpg
- pic.4g.jx####.####.com/v4/M00/56/3A/rBAVFFv6px-AKCVhABFQHrDyA4k612.jpg
- pic.4g.jx####.####.com/v4/M00/56/3A/rBAVFFv6px2AarkYAA8P0KAqKgM515.jpg
- pic.4g.jx####.####.com/v4/M00/56/3A/rBAVFFv6px6AAZO9AA_Pnr2tsNQ658.jpg
- pic.4g.jx####.####.com/v4/M00/56/3A/rBAVFFv6px6AUxyVAA-x3kG94Cs266.jpg
- pic.4g.jx####.####.com/v4/M00/56/3A/rBAVFFv6pyCAQeL0ABc1mbBImvY137.jpg
- pic.4g.jx####.####.com/v4/M00/56/3A/rBAVFFv6pyCAcv9oAAqn6Ez0ov8724.jpg
- pic.4g.jx####.####.com/v4/M00/56/3A/rBAVFFv6pyGAGaUaAA-PhW5MgcQ384.jpg
- pic.4g.jx####.####.com/v4/M00/56/3B/rBAVFFv6rmqADjfVAAOzMCCEWnw618.jpg.w...
- pic.4g.jx####.####.com/v4/M00/56/3B/rBAVFFv6rpGAJzDVAAPKQdjLsOk586.jpg.w...
- pic.4g.jx####.####.com/v4/M00/56/55/rBAVFFv7VGCAQvxEAAHfi6Hmg2c19.jpeg.w...
- pic.4g.jx####.####.com/v4/M00/56/55/rBAVFFv7VGCAcXYJAAFL8IVzepE08.jpeg.w...
- pic.4g.jx####.####.com/v4/M00/56/55/rBAVFFv7VGGAVeg2AAFZbvIaRhE68.jpeg.w...
- z####.4g.jx####.####.com/v4/index.php?c=####&m=####&siteid=####&time=###...
- z####.4g.jx####.####.com/v5/index.php?c=####&m=####&siteid=####&time=###...
- and####.b####.qq.com/rqd/async?aid=####
- up####.sdk.jig####.cn/v1/push/sdk/postlist
- z####.4g.jx####.####.com/v4/index.php?c=####&m=####&siteid=####&time=###...
- /data/data/####/-1381424092
- /data/data/####/-599871594
- /data/data/####/.jg.ic
- /data/data/####/00a1033deaf0467629b90cba6bc2fc90d236fc71dd777ce....0.tmp
- /data/data/####/083949f5ec54f120babff8e52fd46fef7caefd9015bb7ed....0.tmp
- /data/data/####/1004
- /data/data/####/114ff0f48e210b15043694fc3f9a6473a8b7b044aac89ab....0.tmp
- /data/data/####/1226ca1e036475b52909c8d036f16b8c1f8cc080b78d5c9....0.tmp
- /data/data/####/13ddfb91dd9125251d855f7193ce599e31afa5b7f85997e....0.tmp
- /data/data/####/1543271027695.log
- /data/data/####/15ec540df8d212a6741eb85ce851ae1b22ee52fad6608d0....0.tmp
- /data/data/####/181a4f0916b3aa15f2f44daacb0d54a44c7dee8d4352dee....0.tmp
- /data/data/####/1a31f2c396dfff0310dfa5fee1ea103e612802b44ac8780....0.tmp
- /data/data/####/2553e6a96f28b494ca03194377b46eac9604b10ca454049....0.tmp
- /data/data/####/28d875fbb79e116ff0d5c9ee3c17b31fb23f4883144e0b4....0.tmp
- /data/data/####/2cd0b1a824abf52afe4b8ceef031576d9548ba741bbe358....0.tmp
- /data/data/####/2e38dca8eb324722403c9425a78baa6c503a0039425eb0b....0.tmp
- /data/data/####/2fbf229bedb97e39ff790893363d9dddaab8955cf3fc477....0.tmp
- /data/data/####/375c71a5f6752af27cb6217efe69ddee6f70c2257917b88....0.tmp
- /data/data/####/46737982
- /data/data/####/572fd97ab30671def9cc3b9ab16c42367c3acbafb67d575....0.tmp
- /data/data/####/58f6ba887531ebfd92605d2875ade96387d10e96f0cb62b...1543.0
- /data/data/####/628dca6c8708bb2df79e034a31691c4b77b4601a0105418....0.tmp
- /data/data/####/656c55447eeb87dbf557c6d37b4539babf763cd43eb719f....0.tmp
- /data/data/####/73237d396c6e3288226ccec1a116beabdc9a1b5d9c177d6....0.tmp
- /data/data/####/79c6b3b65ae609a6d76e7f9cb76aca75c3d61db84da9b62....0.tmp
- /data/data/####/809575cfd612249cf85aa43893b56ec160e46381827168e....0.tmp
- /data/data/####/8635cb64c64dc353159097956ead6474397acbb95eb0ff3....0.tmp
- /data/data/####/8f45f9e34c3aec8968bc6540cdd1b442df7e5184c88d361....0.tmp
- /data/data/####/9a77ca4b0161be984716677f669fc9db427951dd4ec8746....0.tmp
- /data/data/####/9fca330be4553c7eeffa0cb251237a6317c6d51d161de62....0.tmp
- /data/data/####/JPushSA_Config.xml
- /data/data/####/NewsDjw2.sp.xml
- /data/data/####/_andfix_.xml
- /data/data/####/a26d4045cd772393dc28234935a3145db414832ff043a48....0.tmp
- /data/data/####/ace776f7e73af0efd4cf425fdbe7710194b7c78efb7396f....0.tmp
- /data/data/####/appPackageNames_v2
- /data/data/####/authStatus_com.jxmfkj.www.company.wdnx;remote.xml
- /data/data/####/b3a2d29c278bb5705de66e1861e9ee9e93e12084e48c439....0.tmp
- /data/data/####/b7d3ba5dce196ad84c289464d0a2930683a15510df4484f....0.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/c2f7b151fb53f9bf147354c2b7b4bb9624861cc999719a7....0.tmp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/cn.jpush.android.user.profile.xml
- /data/data/####/cn.jpush.preferences.v2.rid.xml
- /data/data/####/cn.jpush.preferences.v2.xml
- /data/data/####/crashrecord.xml
- /data/data/####/d4fb1e6ffe70686cefb2edee4ba5d75edfa7e4c424303ed....0.tmp
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/dfc9c701e897b5a07cd4ead1a8b6481660ae235c5cc3643....0.tmp
- /data/data/####/e83479713deb134708f75c72f8344340f4412e03b4447d0....0.tmp
- /data/data/####/ee93df1265a36c9c17e95439f32581dbf1ab4a4a05399d7....0.tmp
- /data/data/####/event_com.jxmfkj.www.company.wdnx.log
- /data/data/####/event_com.jxmfkj.www.company.wdnx;remote.log
- /data/data/####/f6532d1f8f621297662debf826f7631d1de3bbc087b0748....0.tmp
- /data/data/####/f_000001
- /data/data/####/firll.dat
- /data/data/####/gal.db
- /data/data/####/gal.db-journal
- /data/data/####/hst.db
- /data/data/####/hst.db-journal
- /data/data/####/index
- /data/data/####/index.sp.xml
- /data/data/####/journal.tmp
- /data/data/####/jpush_device_info.xml
- /data/data/####/jpush_local_notification.db
- /data/data/####/jpush_local_notification.db-journal
- /data/data/####/jpush_local_notification.db-wal
- /data/data/####/jpush_stat_cache.json
- /data/data/####/jpush_stat_cache_history.json
- /data/data/####/jpush_statistics.db
- /data/data/####/jpush_statistics.db-journal
- /data/data/####/jpush_statistics.db-shm (deleted)
- /data/data/####/jpush_statistics.db-wal
- /data/data/####/libcuid.so
- /data/data/####/libjiagu-1720445722.so
- /data/data/####/local_crash_lock
- /data/data/####/location.sp.xml
- /data/data/####/lock.tmp
- /data/data/####/matosdk_preference.xml
- /data/data/####/matosdk_preference_remote.xml
- /data/data/####/mobclick_agent_cached_com.jxmfkj.www.company.wdnx1
- /data/data/####/native_record_lock
- /data/data/####/newsdjw.db-journal
- /data/data/####/ofl.config
- /data/data/####/ofl_location.db
- /data/data/####/ofl_location.db-journal
- /data/data/####/ofl_statistics.db
- /data/data/####/ofl_statistics.db-journal
- /data/data/####/security_info
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_socialize.xml
- /data/data/####/wakeup_cache.json
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/wspx
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.push_deviceid
- /data/media/####/conlts.dat
- /data/media/####/ls.db
- /data/media/####/ls.db-journal
- /data/media/####/yoh.dat
- /data/media/####/yol.dat
- /data/media/####/yom.dat
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- getprop
- Bugly
- andfix
- com.maa
- jcore119
- libjiagu-1720445722
- locSDK7a
- AES-CBC-NoPadding
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- AES-CBC-NoPadding
- AES-CBC-PKCS5Padding
- AES-ECB-NoPadding
- AES-GCM-NoPadding