Техническая информация
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) sv.g####.qq.com:80
- TCP(HTTP/1.1) a.appj####.com:80
- TCP(HTTP/1.1) 0####.s####.com:80
- TCP(HTTP/1.1) 1####.199.125.47:80
- TCP(HTTP/1.1) p####.ugd####.com.####.com:80
- TCP(HTTP/1.1) 2####.205.151.16:80
- TCP(HTTP/1.1) t.g####.qq.com:80
- TCP(HTTP/1.1) 58.2####.137.37:80
- TCP(HTTP/1.1) imgc####.qq.com.####.com:80
- TCP(HTTP/1.1) xc.g####.qq.com:80
- TCP(HTTP/1.1) a.wfc####.cn:80
- TCP(TLS/1.0) wapif####.dftou####.com:443
- TCP(TLS/1.0) 58.2####.137.37:443
- TCP(TLS/1.0) analy####.map.qq.com:443
- TCP(TLS/1.0) c####.baidust####.com.####.com:443
- TCP(TLS/1.0) ci####.s####.com:443
- TCP(TLS/1.0) dup.baidust####.com:443
- TCP(TLS/1.0) i####.sogo####.com.####.com:443
- TCP(TLS/1.0) wn.pos.b####.com:443
- TCP(TLS/1.0) 0####.s####.com:443
- TCP(TLS/1.0) t####.09####.com.####.com:443
- TCP(TLS/1.0) 09img####.eas####.com.####.com:443
- TCP(TLS/1.0) softwor####.dftou####.com:443
- TCP(TLS/1.0) m####.eas####.com:443
- TCP(TLS/1.0) t####.sogo####.com.####.com:443
- TCP(TLS/1.0) ec####.b####.com:443
- TCP(TLS/1.0) softw####.dftou####.com:443
- TCP(TLS/1.0) pos.b####.com:443
- TCP(TLS/1.0) pcunion####.s####.com:443
- TCP(TLS/1.0) 08img####.eas####.com.####.com:443
- TCP(TLS/1.0) wapac####.dftou####.com:443
- TCP(TLS/1.0) hm.b####.com:443
- TCP(TLS/1.0) st####.tt.cn.####.com:443
- TCP(TLS/1.0) s####.dftou####.com:443
- TCP(TLS/1.0) f####.s####.com:443
- TCP(TLS/1.0) posi####.dftou####.com:443
- TCP(TLS/1.0) ser####.e####.s####.com:443
- 0####.s####.com
- 00img####.eas####.com
- 01img####.eas####.com
- 03img####.eas####.com
- 04img####.eas####.com
- 05img####.eas####.com
- 06img####.eas####.com
- 07img####.eas####.com
- 08img####.eas####.com
- 09img####.eas####.com
- a.appj####.com
- a.wfc####.cn
- analy####.map.qq.com
- c####.baidust####.com
- ci####.s####.com
- dup.baidust####.com
- ec####.b####.com
- f####.s####.com
- hm.b####.com
- i####.sogo####.com
- i####.sogo####.com
- i####.sogo####.com
- imgc####.qq.com
- m####.eas####.com
- m.t####.cn
- mt####.go####.com
- p####.ugd####.com
- pcunion####.s####.com
- pos.b####.com
- posi####.dftou####.com
- s####.dftou####.com
- ser####.e####.s####.com
- softw####.dftou####.com
- softwor####.dftou####.com
- st####.tt.cn
- sv.g####.qq.com
- t####.09####.com
- t####.sogo####.com
- t.g####.qq.com
- wapac####.dftou####.com
- wapif####.dftou####.com
- wn.pos.b####.com
- wu####.e####.s####.com
- xc.g####.qq.com
- 0####.s####.com/toutiaoh5/img/dftth5/xiangqin1.png
- 0####.s####.com/toutiaoh5/img/dftth5/xiangqin2.png
- 0####.s####.com/toutiaoh5/img/dftth5/xiangqin3.png
- a.wfc####.cn/ad/tracker/landing?sid=fhram7h7zeep2&imp_time=1570916245&me...
- a.wfc####.cn/ad/tracker/landing?sid=fhram7h7zeep2&imp_time=1570916246&me...
- imgc####.qq.com.####.com/qzone/biz/gdt/dev/sdk/cdn/resources/common/SdkS...
- imgc####.qq.com.####.com/qzone/biz/gdt/mod/android/AndroidAllInOne/progu...
- p####.ugd####.com.####.com/gdt/0/EAAat8uAMgASwAAAQWsBdaNTiCsaBrnN5.jpg/0...
- sv.g####.qq.com/gdt_stats.fcg?viewid=####&i=####&os=####&xp=####&gap=###...
- t.g####.qq.com/conv/sdk/spa/conv?encver=####&vx=aFkm####
- t.g####.qq.com/conv/sdk/spa/conv?encver=####&vx=o1Co####
- xc.g####.qq.com/adx_click.fcg?viewid=####&jtype=####&bid=####&i=####&os=...
- a.appj####.com/jiagu/check/upgrade
- /data/anr/traces.txt
- /data/data/####/.jg.ic
- /data/data/####/.turing.dat
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/2346.yaqcookie
- /data/data/####/2438.yaqcookie
- /data/data/####/2549.yaqcookie
- /data/data/####/2914.yaqcookie
- /data/data/####/91bb3a83147574e2d3348929005465e4.temp
- /data/data/####/9714bf40c9de48d5556754ddc50f3742.temp
- /data/data/####/ApplicationCache.db-journal
- /data/data/####/BrowserPreference.xml
- /data/data/####/BuglySdkInfos.xml
- /data/data/####/GDTSDK.db
- /data/data/####/GDTSDK.db-journal
- /data/data/####/ad_show_time.xml
- /data/data/####/bugly_db_-journal
- /data/data/####/cn.zhufu.lx_festival_sms.BETA_VALUES.xml
- /data/data/####/com.qq.e.sdkconfig.xml
- /data/data/####/config
- /data/data/####/crashrecord.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/devCloudSetting.cfg
- /data/data/####/devCloudSetting.sig
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/f_00000b
- /data/data/####/f_00000c
- /data/data/####/f_00000d
- /data/data/####/f_00000e
- /data/data/####/f_00000f
- /data/data/####/f_000010
- /data/data/####/f_000011
- /data/data/####/f_000012
- /data/data/####/f_000013
- /data/data/####/f_000014
- /data/data/####/f_000015
- /data/data/####/f_000016
- /data/data/####/f_000017
- /data/data/####/f_000018
- /data/data/####/f_000019
- /data/data/####/f_00001a
- /data/data/####/f_00001b
- /data/data/####/f_00001c
- /data/data/####/f_00001d
- /data/data/####/f_00001e
- /data/data/####/f_00001f
- /data/data/####/f_000020
- /data/data/####/f_000021
- /data/data/####/f_000022
- /data/data/####/f_000023
- /data/data/####/f_000024
- /data/data/####/f_000025
- /data/data/####/f_000026
- /data/data/####/f_000027
- /data/data/####/f_000028
- /data/data/####/f_000029
- /data/data/####/f_00002a
- /data/data/####/f_00002b
- /data/data/####/f_00002c
- /data/data/####/f_00002d
- /data/data/####/gdt_plugin.dex (deleted)
- /data/data/####/gdt_plugin.jar
- /data/data/####/gdt_plugin.jar.sig
- /data/data/####/gdt_plugin.next.sig
- /data/data/####/gdt_plugin.tmp
- /data/data/####/gdt_stat.db
- /data/data/####/gdt_stat.db-journal
- /data/data/####/gdt_suid
- /data/data/####/getui_sp.xml
- /data/data/####/https_09img.shaqm.com_0.localstorage-journal
- /data/data/####/https_mini.eastday.com_0.localstorage-journal
- /data/data/####/index
- /data/data/####/init_c1.pid
- /data/data/####/jg_app_update_settings_random.xml
- /data/data/####/libMMANDKSignature.3b153c6f.so
- /data/data/####/libjiagu.so
- /data/data/####/libturingau.3b153c6f.so
- /data/data/####/libyaqbasic.3b153c6f.so
- /data/data/####/libyaqpro.3b153c6f.so
- /data/data/####/qihoo_jiagu_crash_report.xml
- /data/data/####/sdkCloudSetting.cfg
- /data/data/####/sdkCloudSetting.sig
- /data/data/####/security_info
- /data/data/####/turingfd_conf_105498_28_audienceMini.xml
- /data/data/####/turingfd_conf_105498_28_audienceMini.xml.bak
- /data/data/####/turingfd_protect_105498_28_audienceMini.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/update_lc
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/yaq.3b153c6f.sec
- /data/data/####/yaqsdkcookie
- /data/media/####/.nomedia
- /data/media/####/.turing.dat
- /system/bin/df
- /system/bin/getprop
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- chmod 755 <Package Folder>/.jiagu/libjiagu.so
- getprop
- logcat -d -v threadtime
- Bugly
- getuiext2
- libMMANDKSignature.3b153c6f
- libjiagu
- libturingau.3b153c6f
- libyaqbasic.3b153c6f
- libyaqpro.3b153c6f
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS7Padding
- AES-GCM-NoPadding
- RSA
- RSA-ECB-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-ECB-PKCS7Padding
- RSA-ECB-PKCS1Padding