Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) www.go####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) app.c####.cn:443
- and####.b####.qq.com
- app.c####.cn
- plb####.u####.com
- u####.u####.com
- www.c####.cn
- www.go####.com
- www.go####.com/complete/search?hl=####&client=####&q=####
- and####.b####.qq.com/rqd/async?aid=####
- /data/data/####/-CacheDBManager-journal
- /data/data/####/-ECloud-journal
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/0ddbda7e9890dfa8660e8a4858db817a1687597ffc529a8....0.tmp
- /data/data/####/1004
- /data/data/####/15e5ff0ff903e2b042e3ecd698270db5e59d92adb0c03bb....0.tmp
- /data/data/####/17f80af4e825f1f749d2267bfd666c2f471bdf7014db61c....0.tmp
- /data/data/####/2263461afda3c8b3a0df49ce5b0c36f9.0.tmp
- /data/data/####/2263461afda3c8b3a0df49ce5b0c36f9.1.tmp
- /data/data/####/2275_com.ctg.itrdc.ecloud_20_58_08.mmap2
- /data/data/####/2395_com.ctg.itrdc.ecloud_20_58_15.mmap2
- /data/data/####/250d9c0e46f516fc3ce844431d53824ebfe489f0c0f291c....0.tmp
- /data/data/####/2551_com.ctg.itrdc.ecloud_20_58_22.mmap2
- /data/data/####/2666_com.ctg.itrdc.ecloud_20_58_30.mmap2
- /data/data/####/2775_com.ctg.itrdc.ecloud_20_58_37.mmap2
- /data/data/####/2913_com.ctg.itrdc.ecloud_20_58_49.mmap2
- /data/data/####/2997_com.ctg.itrdc.ecloud_20_58_55.mmap2
- /data/data/####/2b185b0512787a6990fb8d516d0f52a36c3124a20fb8585....0.tmp
- /data/data/####/3092_com.ctg.itrdc.ecloud_20_59_01.mmap2
- /data/data/####/30f6106cf1898e3289fd72b3c1c6f6f3.0.tmp
- /data/data/####/30f6106cf1898e3289fd72b3c1c6f6f3.1.tmp
- /data/data/####/3172_com.ctg.itrdc.ecloud_20_59_05.mmap2
- /data/data/####/3251_com.ctg.itrdc.ecloud_20_59_09.mmap2
- /data/data/####/3305_com.ctg.itrdc.ecloud_20_59_10.mmap2
- /data/data/####/3358_com.ctg.itrdc.ecloud_20_59_11.mmap2
- /data/data/####/3432_com.ctg.itrdc.ecloud_20_59_14.mmap2
- /data/data/####/3c40ebdcbc8702e5444f15d7934c697d.0.tmp
- /data/data/####/3c40ebdcbc8702e5444f15d7934c697d.1.tmp
- /data/data/####/47c0999dae35211f8fdea561690f1efb.0.tmp
- /data/data/####/47c0999dae35211f8fdea561690f1efb.1.tmp
- /data/data/####/4abd10b3de07f6f1d8c43f02c84fc2ab9727c5eb1ba1479....0.tmp
- /data/data/####/67da7513e940996f7df020017d25fcdb.0.tmp
- /data/data/####/67da7513e940996f7df020017d25fcdb.1.tmp
- /data/data/####/697f1891e1aa70aeb4aac43f8d4dee9dc85302351dc8703....0.tmp
- /data/data/####/83642c5e345e312a334ab068091800cc.0.tmp
- /data/data/####/83642c5e345e312a334ab068091800cc.1.tmp
- /data/data/####/83f9d2d87df90572911a8fbc9560e8f3.0.tmp
- /data/data/####/83f9d2d87df90572911a8fbc9560e8f3.1.tmp
- /data/data/####/886edea76db4436d4b5d7c193fc0411508bb5e73f265f05....0.tmp
- /data/data/####/9d94fca252b9a314184f2b1db728b42f.0.tmp
- /data/data/####/9d94fca252b9a314184f2b1db728b42f.1.tmp
- /data/data/####/IMEI.xml
- /data/data/####/MultiDex.lock
- /data/data/####/Settings.xml
- /data/data/####/Splash.xml
- /data/data/####/a5cc3d1370e7a66f761d1b7589f58abb5772cceb559819f....0.tmp
- /data/data/####/a95d7410881e34893a59901c986169cdac4f3e50dcfccd5....0.tmp
- /data/data/####/a==7.5.0&&1.3.2_1544389092720_envelope.log
- /data/data/####/b42dba91c97b3e9fe35088111e0f0bbb.0.tmp
- /data/data/####/b42dba91c97b3e9fe35088111e0f0bbb.1.tmp
- /data/data/####/b61a07a42a45b794bcfb7531cd5a6d798f476100a57804e....0.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/c9d7649051e7405ac88df0962acd133c.0.tmp
- /data/data/####/c9d7649051e7405ac88df0962acd133c.1.tmp
- /data/data/####/crashrecord.xml
- /data/data/####/d2aae666fe12b08cf2756812da5ad7e2f834cd7c7a70eac....0.tmp
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ0Mzg5MDg5MzUw;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ0Mzg5MDk2MzM0;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ0Mzg5MTAzMzM2;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ0Mzg5MTE5MzIw;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ0Mzg5MTEwNzY1;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ0Mzg5MTM2MzIz;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ0Mzg5MTMwNjYw;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ0Mzg5MTQ1NzA0;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ0Mzg5MTQyNDY1;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ0Mzg5MTU0ODM4;
- /data/data/####/e783c3496b2491b0c468abd2d4264c43.0.tmp
- /data/data/####/e783c3496b2491b0c468abd2d4264c43.1.tmp
- /data/data/####/eb238fabe9ae88837361d3bf588da537.0.tmp
- /data/data/####/eb238fabe9ae88837361d3bf588da537.1.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f2275c673d4a2adac82099d3a285197c.0.tmp
- /data/data/####/f2275c673d4a2adac82099d3a285197c.1.tmp
- /data/data/####/i==1.2.0&&1.3.2_1544389089384_envelope.log
- /data/data/####/i==1.2.0&&1.3.2_1544389096370_envelope.log
- /data/data/####/i==1.2.0&&1.3.2_1544389103377_envelope.log
- /data/data/####/i==1.2.0&&1.3.2_1544389110972_envelope.log
- /data/data/####/i==1.2.0&&1.3.2_1544389119356_envelope.log
- /data/data/####/i==1.2.0&&1.3.2_1544389130797_envelope.log
- /data/data/####/i==1.2.0&&1.3.2_1544389136388_envelope.log
- /data/data/####/i==1.2.0&&1.3.2_1544389142491_envelope.log
- /data/data/####/info.xml
- /data/data/####/journal.tmp
- /data/data/####/libjiagu-1671662011.so
- /data/data/####/local_crash_lock
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/qihoo_jiagu_crash_report.xml
- /data/data/####/restart_counter.xml
- /data/data/####/security_info
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.cca.dat
- /data/media/####/.nomedia
- /data/media/####/.umm.dat
- /data/media/####/2275_com.ctg.itrdc.ecloud_20_58_08_20181209.xlog
- /data/media/####/2395_com.ctg.itrdc.ecloud_20_58_15_20181209.xlog
- /data/media/####/2551_com.ctg.itrdc.ecloud_20_58_22_20181209.xlog
- /data/media/####/2666_com.ctg.itrdc.ecloud_20_58_30_20181209.xlog
- /data/media/####/2775_com.ctg.itrdc.ecloud_20_58_37_20181209.xlog
- /data/media/####/2913_com.ctg.itrdc.ecloud_20_58_49_20181209.xlog
- /data/media/####/2997_com.ctg.itrdc.ecloud_20_58_55_20181209.xlog
- /data/media/####/3092_com.ctg.itrdc.ecloud_20_59_01_20181209.xlog
- /data/media/####/3172_com.ctg.itrdc.ecloud_20_59_05_20181209.xlog
- /data/media/####/3251_com.ctg.itrdc.ecloud_20_59_09_20181209.xlog
- /data/media/####/3305_com.ctg.itrdc.ecloud_20_59_10_20181209.xlog
- /data/media/####/3358_com.ctg.itrdc.ecloud_20_59_11_20181209.xlog
- /data/media/####/3432_com.ctg.itrdc.ecloud_20_59_14_20181209.xlog
- /data/media/####/sysid.dat
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- getprop
- ls /sys/class/thermal
- Bugly
- libjiagu-1671662011
- marsxlog
- stlport_shared
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding