Technical information
- Adware.Panda.2.origin
- Adware.Panda.3.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) ngb####.9s####.com:80
- TCP(HTTP/1.1) cdn.9m####.com:80
- TCP(HTTP/1.1) p####.9s####.com:80
- TCP(HTTP/1.1) a.appj####.com:80
- TCP(HTTP/1.1) 1####.171.140.131:80
- TCP(HTTP/1.1) ser####.9m####.com:80
- TCP(TLS/1.0) api.w####.com:443
- TCP(TLS/1.0) 1####.217.168.206:443
- TCP im####.9m####.com:9999
- a####.u####.com
- a.appj####.com
- api.w####.com
- cdn.9m####.com
- im####.9m####.com
- ngb####.9s####.com
- p####.9s####.com
- ser####.9m####.com
- cdn.9m####.com/images/anchor/cutImage/20181019/153996213760445.jpg
- cdn.9m####.com/images/anchor/cutImage/20181023/154028370388746.jpg
- cdn.9m####.com/images/anchor/cutImage/20181231/154626958638579.jpg
- cdn.9m####.com/images/anchor/cutImage/20190324/15534421159380.jpg
- cdn.9m####.com/images/anchor/cutImage/20190326/15536051411218.jpg
- cdn.9m####.com/images/anchor/cutImage/20190330/155389103820855.jpg
- cdn.9m####.com/images/anchor/cutImage/20190403/155428505010066.jpg
- cdn.9m####.com/images/anchor/cutImage/20190509/155740093648134.jpg
- cdn.9m####.com/images/anchor/cutImage/20190512/155765420785531.jpg
- cdn.9m####.com/images/anchor/cutImage/20190514/155783564937458.jpg
- cdn.9m####.com/images/banner/150898280336043.png
- cdn.9m####.com/images/banner/150900017304972.png
- cdn.9m####.com/images/banner/155686774101825.png
- cdn.9m####.com/images/banner/155686795146583.png
- cdn.9m####.com/images/decorate/147937879356160.png
- cdn.9m####.com/images/decorate/147937881078775.png
- cdn.9m####.com/images/decorate/152117194108311.png
- cdn.9m####.com/images/decorate/152394056694270.png
- cdn.9m####.com/images/decorate/152835276180366.png
- cdn.9m####.com/images/decorate/153188206331985.png
- cdn.9m####.com/images/decorate/15323248421696.png
- cdn.9m####.com/images/decorate/153438726303173.png
- cdn.9m####.com/images/decorate/153922898776991.png
- cdn.9m####.com/images/decorate/154044878679281.png
- cdn.9m####.com/images/decorate/154347130833344.png
- cdn.9m####.com/images/decorate/154347365434599.png
- cdn.9m####.com/images/decorate/154391528829812.png
- cdn.9m####.com/images/decorate/155375043626244.png
- cdn.9m####.com/images/decorate/155556988068466.png
- cdn.9m####.com/images/decorate/155557027562123.png
- cdn.9m####.com/images/decorate/155685474935389.png
- cdn.9m####.com/images/decorate/15568548715241.png
- cdn.9m####.com/images/decorate/155685488073884.png
- cdn.9m####.com/images/decorate/155685489253687.png
- cdn.9m####.com/images/decorate/15568549024868.png
- cdn.9m####.com/images/decorate/15568549466020.png
- cdn.9m####.com/images/decorate/155685495968687.png
- cdn.9m####.com/images/decorate/155686994886613.png
- cdn.9m####.com/images/decorate/15568699665749.png
- cdn.9m####.com/images/gift/14515278070287112.png
- cdn.9m####.com/images/gift/14537054095469667.gif
- cdn.9m####.com/images/gift/14537068265524800.gif
- cdn.9m####.com/images/gift/14537858480406456.gif
- cdn.9m####.com/images/gift/14636616264879057.png
- cdn.9m####.com/images/gift/14690934618936251.png
- cdn.9m####.com/images/gift/14721293665254733.png
- cdn.9m####.com/images/gift/14738453992581753.png
- cdn.9m####.com/images/gift/14750359362562123.png
- cdn.9m####.com/images/gift/14750359500830098.png
- cdn.9m####.com/images/gift/14788546327665204.png
- cdn.9m####.com/images/gift/14793750034195316.png
- cdn.9m####.com/images/gift/14848061362452549.png
- cdn.9m####.com/images/gift/14848061702510259.png
- cdn.9m####.com/images/gift/14848061962120841.png
- cdn.9m####.com/images/gift/14848062290252721.png
- cdn.9m####.com/images/gift/14848062505048380.png
- cdn.9m####.com/images/gift/14848062620701951.png
- cdn.9m####.com/images/gift/14866334991199727.png
- cdn.9m####.com/images/gift/14869490695282979.png
- cdn.9m####.com/images/gift/14985351068387796.png
- cdn.9m####.com/images/gift/14985351185398158.png
- cdn.9m####.com/images/gift/15015575357801603.png
- cdn.9m####.com/images/gift/15015587213749030.png
- cdn.9m####.com/images/gift/15015587266689260.png
- cdn.9m####.com/images/gift/15015649107612546.png
- cdn.9m####.com/images/gift/15045823312139051.png
- cdn.9m####.com/images/gift/15045824161363079.png
- cdn.9m####.com/images/gift/15123832040509637.png
- cdn.9m####.com/images/gift/15168494407664358.png
- cdn.9m####.com/images/gift/15168494663511305.png
- cdn.9m####.com/images/gift/15277488431224463.png
- cdn.9m####.com/images/gift/15277488739038117.png
- cdn.9m####.com/images/gift/15283399825951283.png
- cdn.9m####.com/images/gift/15283399916120172.png
- cdn.9m####.com/images/gift/15283400025962038.png
- cdn.9m####.com/images/gift/15318841211082044.png
- cdn.9m####.com/images/gift/15318841420281752.png
- cdn.9m####.com/images/gift/15318841548416112.png
- cdn.9m####.com/images/gift/15318842402821711.png
- cdn.9m####.com/images/gift/15318842734920529.png
- cdn.9m####.com/images/gift/15318842870643732.png
- cdn.9m####.com/images/gift/15318843013041953.png
- cdn.9m####.com/images/gift/15318843369894051.png
- cdn.9m####.com/images/gift/15318843498231179.png
- cdn.9m####.com/images/gift/15318843647668394.png
- cdn.9m####.com/images/gift/15318843784438159.png
- cdn.9m####.com/images/gift/15318844051909049.png
- cdn.9m####.com/images/gift/15361154782085741.gif
- cdn.9m####.com/images/gift/15422795554762682.png
- cdn.9m####.com/images/gift/15488128517096274.png
- cdn.9m####.com/images/gift/15488128696646909.png
- cdn.9m####.com/images/icon/20190322/15532245135919732.jpg
- cdn.9m####.com/images/icon/20190423/155594931502533.jpg
- cdn.9m####.com/zip/shows/enact_1_1473150604457.zip
- cdn.9m####.com/zip/shows/enact_2_1476781047504.zip
- cdn.9m####.com/zip/shows/enact_3_1476781120870.zip
- cdn.9m####.com/zip/shows/engift_160_1473150443682.zip
- cdn.9m####.com/zip/shows/engift_161_1473150490365.zip
- cdn.9m####.com/zip/shows/engift_163_1502852163344.zip
- cdn.9m####.com/zip/shows/engift_167_1474441371106.zip
- cdn.9m####.com/zip/shows/engift_171_1475035540836.zip
- cdn.9m####.com/zip/shows/engift_182_1479375340847.zip
- p####.9s####.com/live/421423.flv?wsSecret=####&wsTime=####
- p####.9s####.com/live/772684.flv?wsSecret=####&wsTime=####
- a####.u####.com/app_logs
- a.appj####.com/ad-service/ad/mark
- ngb####.9s####.com/live/103742?get_url=####
- ngb####.9s####.com/live/421423?get_url=####
- ser####.9m####.com/C1/1/
- ser####.9m####.com/C13/1/
- ser####.9m####.com/C18/1/
- ser####.9m####.com/C20/1/
- ser####.9m####.com/C21/1/
- ser####.9m####.com/C24/1/
- ser####.9m####.com/C26/1/
- ser####.9m####.com/C34/1/
- ser####.9m####.com/C8/1/
- ser####.9m####.com/C9/1/
- ser####.9m####.com/G11/1/
- ser####.9m####.com/U15/1/
- ser####.9m####.com/U43/1/
- ser####.9m####.com/U52/1/
- ser####.9m####.com/U6/1/
- ser####.9m####.com/U67/1/
- ser####.9m####.com/U70/1/
- ser####.9m####.com/U72/1/
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/.log.lock
- /data/data/####/.log.ls
- /data/data/####/1.mt
- /data/data/####/10.mt
- /data/data/####/11.mt
- /data/data/####/12.mt
- /data/data/####/13.mt
- /data/data/####/14.mt
- /data/data/####/15.mt
- /data/data/####/16.mt
- /data/data/####/17.mt
- /data/data/####/18.mt
- /data/data/####/19.mt
- /data/data/####/2.mt
- /data/data/####/20.mt
- /data/data/####/21.mt
- /data/data/####/22.mt
- /data/data/####/23.mt
- /data/data/####/24.mt
- /data/data/####/25.mt
- /data/data/####/26.mt
- /data/data/####/3.mt
- /data/data/####/4.mt
- /data/data/####/5.mt
- /data/data/####/6.mt
- /data/data/####/7.mt
- /data/data/####/8.mt
- /data/data/####/9.mt
- /data/data/####/channel_file.xml
- /data/data/####/enact_1_1473150604457.zip (deleted)
- /data/data/####/enact_1_1473150604457.zip.tmp
- /data/data/####/enact_2_1476781047504.zip (deleted)
- /data/data/####/enact_2_1476781047504.zip.tmp
- /data/data/####/enact_3_1476781120870.zip (deleted)
- /data/data/####/enact_3_1476781120870.zip.tmp
- /data/data/####/engift_160_1473150443682.zip (deleted)
- /data/data/####/engift_160_1473150443682.zip.tmp
- /data/data/####/engift_161_1473150490365.zip (deleted)
- /data/data/####/engift_161_1473150490365.zip.tmp
- /data/data/####/engift_163_1502852163344.zip (deleted)
- /data/data/####/engift_163_1502852163344.zip.tmp
- /data/data/####/engift_167_1474441371106.zip (deleted)
- /data/data/####/engift_167_1474441371106.zip.tmp
- /data/data/####/engift_171_1475035540836.zip (deleted)
- /data/data/####/engift_171_1475035540836.zip.tmp
- /data/data/####/engift_182_1479375340847.zip.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/jg_app_update_settings_random.xml
- /data/data/####/libjiagu.so
- /data/data/####/local_userinfo.xml
- /data/data/####/nineshow.db
- /data/data/####/nineshow.db-journal
- /data/data/####/plugin.apk
- /data/data/####/sp_member.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/webview.db-journal
- /data/media/####/-1014142675.0
- /data/media/####/-1083260392.0
- /data/media/####/-1097485299.0
- /data/media/####/-1178408017.0
- /data/media/####/-1244700913.0
- /data/media/####/-1302137058.0
- /data/media/####/-1333005456.0
- /data/media/####/-1391420181.0
- /data/media/####/-1443687210.0
- /data/media/####/-1497816568.0
- /data/media/####/-1554483931.0
- /data/media/####/-1621911063.0
- /data/media/####/-185274157.0
- /data/media/####/-1994810595.0
- /data/media/####/-2032092106.0
- /data/media/####/-290047784.0
- /data/media/####/-323334528.0
- /data/media/####/-363353331.0
- /data/media/####/-417394732.0
- /data/media/####/-438907726.0
- /data/media/####/-587841788.0
- /data/media/####/-632485728.0
- /data/media/####/-892828353.0
- /data/media/####/.nomedia
- /data/media/####/1039283648.0
- /data/media/####/1063008996.0
- /data/media/####/10h0yhaicvaugvgquvgh4p8e4.0.tmp
- /data/media/####/1145837412.0
- /data/media/####/1167222388.0
- /data/media/####/1234068023.0
- /data/media/####/1265850144.0
- /data/media/####/1345upfuhx26fw8y1ugxt077y.0.tmp
- /data/media/####/1383236181.0
- /data/media/####/1397219880.0
- /data/media/####/1423216816.0
- /data/media/####/1426177472.0
- /data/media/####/1466359178.0
- /data/media/####/1537094516.0
- /data/media/####/15bzq2robgdyoc7fk2thlui17.0.tmp
- /data/media/####/1663117189.0
- /data/media/####/1673923188.0
- /data/media/####/16bpcz8sqfb98s0ttp4d6cjc2.0.tmp
- /data/media/####/1717351299.0
- /data/media/####/1760513103.0
- /data/media/####/1786151973.0
- /data/media/####/1791833128.0
- /data/media/####/1799464185.0
- /data/media/####/1849714940.0
- /data/media/####/1883791482.0
- /data/media/####/1915368815.0
- /data/media/####/1992451820.0
- /data/media/####/1ftad2rtl44n14wyxc3y4rflx.0.tmp
- /data/media/####/1ywmkuf0gkib17tx67fn01zyo.0.tmp
- /data/media/####/2022504564.0
- /data/media/####/2123171450.0
- /data/media/####/2129042421.0
- /data/media/####/286466751.0
- /data/media/####/2ax56onzx10d2tzt6l99covhk.0.tmp
- /data/media/####/2vkgq63svx99zflya35s3ntmt.0.tmp
- /data/media/####/36vrk15rjfwkw2sn9u3wmll2b.0.tmp
- /data/media/####/3d0yp41lvtf4ur6vjbiuypufz.0.tmp
- /data/media/####/3l4nle0b4gi6pzy9yjzf7cl5s.0.tmp
- /data/media/####/3no0cwtm4q96lu2rchkwn00yt.0.tmp
- /data/media/####/3tj1mjslk7wwi8t731n1s6pj4.0.tmp
- /data/media/####/405375149.0
- /data/media/####/4dj49cdmk4n6cecvghfo9pgr0.0.tmp
- /data/media/####/4fgd6beaswrwut3lpcoojog1b.0.tmp
- /data/media/####/4fiv7mzw0msbnz3xtlq8u7kf5.0.tmp
- /data/media/####/4uf749qm2xvh0os5uiabqgzp8.0.tmp
- /data/media/####/4wj66155u0sqns0ov03emid8u.0.tmp
- /data/media/####/4xpmy6trpairodsg9ben9mbkl.0.tmp
- /data/media/####/504oot124f89oesvw994aaz5t.0.tmp
- /data/media/####/509043924.0
- /data/media/####/52rf99kswu4jrnc9mb48hgtge.0.tmp
- /data/media/####/552482356.0
- /data/media/####/5je9w9ko67jwvps6f7l4alvdp.0.tmp
- /data/media/####/5n12o91qqowemovxod5o5fbgq.0.tmp
- /data/media/####/5q1a2q9na47px3ff1oj6t8wf1.0.tmp
- /data/media/####/5wt4w510qegezpf34jdqm6x37.0.tmp
- /data/media/####/63160393.0
- /data/media/####/66lq2c389ccm7f7h69stxsl79.0.tmp
- /data/media/####/6cmeme3k1d9xobtsawdlgtd5z.0.tmp
- /data/media/####/6gs0eonlxtcsq1w76exf213xc.0.tmp
- /data/media/####/6sybk32ppfoeb64dwewd8xt6n.0.tmp
- /data/media/####/6tqu7hf8gy9ekuhzk5woio7z9.0.tmp
- /data/media/####/712337389.0
- /data/media/####/71p968ve7npmdhe5kir7uz01j.0.tmp
- /data/media/####/74899813.0
- /data/media/####/76akb3103hozq2kn3jxmavs4l.0.tmp
- /data/media/####/798088791.0
- /data/media/####/937544618.0
- /data/media/####/944062949.0
- /data/media/####/948891973.0
- /data/media/####/95509663.0
- /data/media/####/axf5xxmttf574075ns5y4o1k.0.tmp
- /data/media/####/journal
- /data/media/####/journal.tmp
- /data/media/####/nineShow.txt
- /data/media/####/v98turb05o3ezirivwhdmxlx.0.tmp
- chmod 755 <Package Folder>/.jiagu/libjiagu.so
- ijkffmpeg
- ijkplayer
- ijksdl
- libjiagu
- weibosdkcore
- RSA-ECB-PKCS1Padding
- AES-CBC-PKCS5Padding