Техническая информация
- Adware.Gexin.2.origin
- Android.RemoteCode.127.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
- TCP(HTTP/1.1) c####.t####.cn:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) sni.c####.q####.####.net:80
- TCP(TLS/1.0) q####.a####.com:443
- TCP(TLS/1.0) cdn.t####.cn:443
- TCP(TLS/1.0) ap####.moretic####.com:443
- TCP(TLS/1.0) i####.t####.cn.####.com:443
- TCP(TLS/1.0) adt.x####.com:443
- TCP(TLS/1.0) res####.a####.com:443
- TCP c####.g####.ig####.com:5225
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.u####.com
- adt.x####.com
- amap####.cn-hang####.oss####.####.com
- ap####.moretic####.com
- app.moretic####.com
- c####.g####.ig####.com
- c####.t####.cn
- c-h####.g####.com
- cdn.t####.cn
- i####.t####.cn
- i####.t####.cn
- i####.t####.cn
- i.t####.com
- res####.a####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- c####.t####.cn/config/Android.conf
- c####.t####.cn/config/Android.conf?project=####&token=####
- sh.wagbr####.aliyun####.com/sdkcoor/android/x86/libJni_wgs2gcj.so
- sni.c####.q####.####.net/config/hz-hzv3.conf
- sni.c####.q####.####.net/tdata_Soq141
- sni.c####.q####.####.net/tdata_vxj811
- a####.u####.com/app_logs
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/-1215942841577771975
- /data/data/####/-1371959333-1806652311
- /data/data/####/-18611339081577796903
- /data/data/####/-25179321-928366955
- /data/data/####/-5624518291073067058
- /data/data/####/-7574922991985247512
- /data/data/####/-7574922991985248228
- /data/data/####/-D41r__YxLrNYn-UURcsC5HVL1g.-531084210.tmp
- /data/data/####/._android_rn_1_0_0
- /data/data/####/._drawable-xhdpi
- /data/data/####/._drawable-xxhdpi
- /data/data/####/._index.jsbundle
- /data/data/####/._index.jsbundle.meta
- /data/data/####/._resources_images_comment_comment_action.png
- /data/data/####/._resources_images_comment_comment_empty_icon.png
- /data/data/####/._resources_images_comment_comment_icon_default.png
- /data/data/####/._resources_images_comment_comment_image_default.png
- /data/data/####/._resources_images_comment_comment_navi_share.png
- /data/data/####/._resources_images_comment_comment_praise_normal.png
- /data/data/####/._resources_images_comment_comment_praise_selected.png
- /data/data/####/._resources_images_comment_comment_prefer.png
- /data/data/####/._resources_images_comment_comment_share.png
- /data/data/####/._resources_images_comment_comment_show_shadow.png
- /data/data/####/._resources_images_show_pgc_vip.png
- /data/data/####/._resources_images_show_show_discount_bg.png
- /data/data/####/._resources_images_show_show_list_ad.png
- /data/data/####/._resources_images_starter_back.png
- /data/data/####/._resources_images_starter_back_w.png
- /data/data/####/._resources_images_starter_close_sm.png
- /data/data/####/._resources_images_starter_default_poster.png
- /data/data/####/._resources_images_starter_disclosure.png
- /data/data/####/._resources_images_starter_star_0.png
- /data/data/####/._resources_images_starter_star_1.png
- /data/data/####/._resources_images_starter_star_2.png
- /data/data/####/._resources_images_starter_warning.png
- /data/data/####/._resources_images_user_award_point_bg.png
- /data/data/####/._resources_images_user_award_point_empty.png
- /data/data/####/._resources_images_user_award_point_expire_triangle.png
- /data/data/####/._resources_images_user_award_point_guide_indicator.png
- /data/data/####/._resources_images_user_award_point_icon.png
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/1201977905-1912794436
- /data/data/####/1531833890511_2142
- /data/data/####/1531833890537_2142
- /data/data/####/1531833890574_2142
- /data/data/####/1531833890973_2142
- /data/data/####/1531833894089_2220
- /data/data/####/1531833894238_2220
- /data/data/####/15355708401079462720
- /data/data/####/15355708401687171548
- /data/data/####/19676310681500507808
- /data/data/####/19676310682108215920
- /data/data/####/1oS_Hi8FHHnFll5TUvuSKK34i-k.1026288680.tmp
- /data/data/####/29101837138186.0
- /data/data/####/6tKD4ROqNNdj4dfUH9HXerR9594.1889077646.tmp
- /data/data/####/8871544643304.0
- /data/data/####/Bhi_KhZQUa6nwejcPQ4KPqjkXUk.793398853.tmp
- /data/data/####/CookiePrefsFile.xml
- /data/data/####/CookiePrefsFile.xml.bak
- /data/data/####/GzsrJjVp54uvUY6Yzx2xgjRqes4.1920687556.tmp
- /data/data/####/M23WBl-HeQkgC-qix7KoOjGiCxc.-1323082802.tmp
- /data/data/####/SAqAbJ3fCO7XPlMyXf0-nw6WDQQ.-1410064882.tmp
- /data/data/####/TD_app_pefercen_profile.xml
- /data/data/####/TDpref_longtime.xml
- /data/data/####/TDpref_longtime1.xml
- /data/data/####/TDpref_shorttime.xml
- /data/data/####/TDpref_shorttime1.xml
- /data/data/####/WJWQNJ5xz2zGQ6eQvvBxOywkHvk.-780536194.tmp
- /data/data/####/android_rn_1_0_0.zip
- /data/data/####/cPVBIh3FUp-Lj1WOouSxSnLv8b4.1306952330.tmp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/com.juqitech.niumowang-journal
- /data/data/####/com.juqitech.niumowang_preferences.xml
- /data/data/####/com.sensorsdata.analytics.android.sdk.SensorsDataAPI.xml
- /data/data/####/dOXS8GfGa3UJBTmY20VnesPv2Hs.731783.tmp
- /data/data/####/dafile.db
- /data/data/####/dafile.db-journal
- /data/data/####/dso_deps
- /data/data/####/dso_lock
- /data/data/####/dso_manifest
- /data/data/####/dso_state
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/index.jsbundle
- /data/data/####/index.jsbundle.meta
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/libjiagu-1290856949.so
- /data/data/####/location.json
- /data/data/####/loctemp.so
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/multidex.version.xml
- /data/data/####/niuniu.xml
- /data/data/####/nmw-site.xml
- /data/data/####/nmwdb-journal
- /data/data/####/pref.xml
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/resources_images_comment_comment_action.png
- /data/data/####/resources_images_comment_comment_empty_icon.png
- /data/data/####/resources_images_comment_comment_icon_default.png
- /data/data/####/resources_images_comment_comment_image_default.png
- /data/data/####/resources_images_comment_comment_navi_share.png
- /data/data/####/resources_images_comment_comment_praise_normal.png
- /data/data/####/resources_images_comment_comment_praise_selected.png
- /data/data/####/resources_images_comment_comment_prefer.png
- /data/data/####/resources_images_comment_comment_share.png
- /data/data/####/resources_images_comment_comment_show_shadow.png
- /data/data/####/resources_images_show_pgc_vip.png
- /data/data/####/resources_images_show_show_discount_bg.png
- /data/data/####/resources_images_show_show_list_ad.png
- /data/data/####/resources_images_starter_back.png
- /data/data/####/resources_images_starter_back_w.png
- /data/data/####/resources_images_starter_close_sm.png
- /data/data/####/resources_images_starter_default_poster.png
- /data/data/####/resources_images_starter_disclosure.png
- /data/data/####/resources_images_starter_star_0.png
- /data/data/####/resources_images_starter_star_1.png
- /data/data/####/resources_images_starter_star_2.png
- /data/data/####/resources_images_starter_warning.png
- /data/data/####/resources_images_user_award_point_bg.png
- /data/data/####/resources_images_user_award_point_empty.png
- /data/data/####/resources_images_user_award_point_expire_triangle.png
- /data/data/####/resources_images_user_award_point_guide_indicator.png
- /data/data/####/resources_images_user_award_point_icon.png
- /data/data/####/run.pid
- /data/data/####/sensorsdata.xml
- /data/data/####/snf2X0AmnMBO37XeTBhfVDa1PuI.1691260499.tmp
- /data/data/####/tdata_Soq141
- /data/data/####/tdata_Soq141.jar
- /data/data/####/tdata_vxj811
- /data/data/####/tdata_vxj811.jar
- /data/data/####/tdid.xml
- /data/data/####/uY_6ja0tzDeP8mV3_LE1mGqIQ5o.-2043387725.tmp
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/xi0SK5qlPU-xt9-Jcs_S1x3xLkA.-1324098853.tmp
- /data/data/####/zcMBaKPQ_PfeAfISyNECh41ulWE.-1247384563.tmp
- /data/media/####/.tcookieid
- /data/media/####/alsn.db
- /data/media/####/alsn.db-journal
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.juqitech.niumowang.bin
- /data/media/####/com.juqitech.niumowang.db
- /data/media/####/tdata_Soq141
- /data/media/####/tdata_vxj811
- /data/media/####/test.log
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.gateway.push.GetuiPushService 25253 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu-1290856949.so
- getprop
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.gateway.push.GetuiPushService 25253 300 0
- getuiext2
- gifimage
- imagepipeline
- libjiagu-1290856949
- securitylib
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- DES-CBC-PKCS5Padding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- DES-CBC-PKCS5Padding