Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) pg.x####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- UDP(NTP) 1.cn.p####.####.org:123
- TCP(TLS/1.0) av1.x####.com:443
- 1.cn.p####.####.org
- and####.b####.qq.com
- av1.x####.com
- i####.cn
- pg.x####.com
- and####.b####.qq.com/rqd/async?aid=####
- pg.x####.com/api/q/a/370c9adac6ad5d9864bbc634bade05703
- pg.x####.com/api/statis/370c9adac6ad5d9864bbc634bade05703/app-6C2946C900...
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/BUGLY_COMMON_VALUES.xml
- /data/data/####/TD_app_pefercen_profile.xml
- /data/data/####/TD_app_pefercen_profile.xml.bak
- /data/data/####/TDpref_longtime.xml
- /data/data/####/TDtcagent.db
- /data/data/####/TDtcagent.db-journal
- /data/data/####/_nohttp_cookies_db.db
- /data/data/####/_nohttp_cookies_db.db-journal
- /data/data/####/bugly_db_-journal
- /data/data/####/com.gogenius.mansioncloudhouse.BETA_VALUES.xml
- /data/data/####/com.gogenius.mansioncloudhouse_preferences.xml
- /data/data/####/crashrecord.xml
- /data/data/####/libjiagu435413418.so
- /data/data/####/local_crash_lock
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/native_record_lock (deleted)
- /data/data/####/security_info
- /data/data/####/talkingdata_app.db-journal
- /data/data/####/talkingdata_app_process_preferences_file
- /data/data/####/talkingdata_app_version_preferences_file
- /data/data/####/td.lock
- /data/data/####/tdid.xml
- /data/media/####/.tcookieid
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- getprop
- logcat -d -v threadtime
- Bugly
- QRCodeOffLine
- libjiagu435413418
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- AES-GCM-NoPadding