Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
- TCP(HTTP/1.1) nav.cn.ron####.com:80
- TCP(HTTP/1.1) d####.opensp####.cn:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) h####.opensp####.cn:80
- TCP(HTTP/1.1) scs.opensp####.cn:80
- TCP(TLS/1.0) na61-####.wagbr####.non####.####.com:443
- TCP(TLS/1.0) m####.oss-cn-####.aliy####.com:443
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) api.m####.com:443
- TCP(TLS/1.0) res####.a####.com:443
- TCP(TLS/1.0) and####.cli####.go####.com:443
- UDP 1####.168.116.1:137
- TCP 1####.92.13.109:8617
- amap####.cn-hang####.oss####.####.com
- and####.b####.qq.com
- and####.cli####.go####.com
- api.m####.com
- d####.opensp####.cn
- h####.opensp####.cn
- log.u####.com
- m####.oss-cn-####.aliy####.com
- nav.cn.ron####.com
- plb####.u####.com
- res####.a####.com
- s####.cn.ron####.com
- scs.opensp####.cn
- u####.u####.com
- y####.al####.com
- h####.opensp####.cn/launchconfig?t=####&p=Lm1mY####
- sh.wagbr####.aliyun####.com/sdkcoor/android/x86/libJni_wgs2gcj.so
- and####.b####.qq.com/rqd/async?aid=####
- d####.opensp####.cn/index.php/clientrequest/clientcollect/isCollect
- nav.cn.ron####.com/navipush.json
- scs.opensp####.cn/scs?cmd=####&logver=####&size=####
- /data/anr/traces.txt
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/07c268f2b55a6ef312f0c643c70b6017cdf864078a856dc....0.tmp
- /data/data/####/0a231bd8575dcf72.txt
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/14221132411876.0
- /data/data/####/1d2b904cbeadfb72ed9546111a231c85.0
- /data/data/####/2c22125c7248657151c6691ecf37ede8e58b1f993921763....0.tmp
- /data/data/####/3a2c684d0b9ffd7bbf2ddb1a06098c7e71d98c1a82125ca....0.tmp
- /data/data/####/71195284324727.0
- /data/data/####/9437d13b19ee27802a433b8086681f6d34177881911464c....0.tmp
- /data/data/####/Alvin2.xml
- /data/data/####/BUGLY_COMMON_VALUES.xml
- /data/data/####/COUNTLY_STORE.xml
- /data/data/####/ContextData.xml
- /data/data/####/MFBB.xml
- /data/data/####/Q0VSVC5SU0EK.txt8e9
- /data/data/####/RongPush.xml
- /data/data/####/SGMANAGER_DATA2
- /data/data/####/SGMANAGER_DATA2 (deleted)
- /data/data/####/SGMANAGER_DATA2.tmp
- /data/data/####/SG_INNER_DATA
- /data/data/####/Statistics.xml
- /data/data/####/WindVane_wv_main_configcommonwv-data
- /data/data/####/WindVane_wv_main_configdomainwv-data
- /data/data/####/a==7.5.0&&2.4.7_1545232439880_envelope.log
- /data/data/####/ab914f43b8296c2c.lock
- /data/data/####/bugly_db_
- /data/data/####/bugly_db_-journal
- /data/data/####/com.fxkj.mfbb.BETA_VALUES.xml
- /data/data/####/com.fxkj.mfbb.BETA_VALUES.xml.bak
- /data/data/####/com.fxkj.mfbb_preferences.xml
- /data/data/####/com.iflytek.id.xml
- /data/data/####/com.iflytek.msc.xml
- /data/data/####/crashrecord.xml
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ1MjMyMzE5MDc1;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ1MjMyMzI3NTQ2;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ1MjMyMzM0MzU2;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ1MjMyMzUyMDY4;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ1MjMyMzc0ODU4;
- /data/data/####/ee0a4c8d93064dc0f2b3c00b99245ee8e37b376c3a21e31....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/i==1.2.0&&2.4.7_1545232319335_envelope.log
- /data/data/####/ifly_launch_lib.xml
- /data/data/####/iflytek_state_com.fxkj.mfbb.xml
- /data/data/####/imei.xml
- /data/data/####/info.xml
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/libjiagu-1119963561.so
- /data/data/####/libsgmain_315446400000.dex
- /data/data/####/libsgmainso-5.4.38.so.tmp.2281
- /data/data/####/libsgsecuritybody_315446400000.dex
- /data/data/####/libsgsecuritybodyso-5.4.28.so.tmp.2403
- /data/data/####/local_crash_lock
- /data/data/####/lock.lock
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/multidex.version.xml
- /data/data/####/pref.xml
- /data/data/####/security_info
- /data/data/####/sgFile.lock
- /data/data/####/sp.lock
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_socialize.xml
- /data/data/####/webview.db
- /data/data/####/webview.db-journal
- /data/data/####/wv_web_info.dat
- /data/media/####/.2F6E2C5B63F0F83B
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.cca.dat
- /data/media/####/.umm.dat
- /data/media/####/1545232375138.db
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/RongLog_2_8_16.log
- /data/media/####/alsn20170807.db
- /data/media/####/alsn20170807.db-journal
- /data/media/####/dd7893586a493dc3
- /data/media/####/hid.dat
- /data/media/####/iflyworkdir_test
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- getprop
- getprop ro.build.version.release
- logcat -d -v threadtime
- ls /sys/class/thermal
- Bugly
- RongIMLib
- libjiagu-1119963561
- msc
- sgmainso-5.4
- sgsecuritybodyso-5.4
- tpnsSecurity
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding