Technical information
- Adware.Gexin.2.origin
- UDP(DNS) 8####.8.4.4:53
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) ts.91####.com:80
- TCP(HTTP/1.1) sdk-ope####.g####.com:80
- TCP(HTTP/1.1) q####.c####.l####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) cdn-sdk####.g####.com.####.com:80
- TCP(HTTP/1.1) st####.91####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(TLS/1.0) 2####.58.208.106:443
- TCP(TLS/1.0) instant####.google####.com:443
- TCP(TLS/1.0) lbs.net####.im:443
- TCP(TLS/1.0) and####.google####.com:443
- TCP(TLS/1.0) dt.net####.im:443
- TCP(TLS/1.0) wa####.127.net:443
- TCP(TLS/1.0) 1####.217.17.78:443
- TCP(TLS/1.2) 2####.58.208.106:443
- TCP sdk.o####.t####.####.com:5224
- TCP cm-1####.ig####.com:5225
- TCP cm-1####.ig####.com:5227
- 7j####.c####.z0.####.com
- and####.b####.qq.com
- and####.google####.com
- c-h####.g####.com
- cdn-sdk####.g####.com
- cm-1####.ig####.com
- cm-1####.ig####.com
- cm-1####.ig####.com
- dt.net####.im
- instant####.google####.com
- lbs.net####.im
- sdk-ope####.g####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- st####.91####.com
- ts.91####.com
- wa####.127.net
- cdn-sdk####.g####.com.####.com/tdata_EDB102
- cdn-sdk####.g####.com.####.com/tdata_SIq813
- cdn-sdk####.g####.com.####.com/tdata_agG322
- cdn-sdk####.g####.com.####.com/tdata_xEA084
- q####.c####.l####.####.com/config/hz-hzv6.conf
- q####.c####.l####.####.com/tdata_LRe817
- sdk.o####.p####.####.com/api/addr.htm
- st####.91####.com/internet-drugstore/dist/config.json
- st####.91####.com/internet-drugstore/dist/index.html
- st####.91####.com/internet-drugstore/dist/static/css/app.19268e284f44bad...
- st####.91####.com/internet-drugstore/dist/static/img/annual_fee.e4e3750....
- st####.91####.com/internet-drugstore/dist/static/img/banner.4888d15.jpg
- st####.91####.com/internet-drugstore/dist/static/img/chooseConsultType.2...
- st####.91####.com/internet-drugstore/dist/static/img/fillPatientInfo1.e5...
- st####.91####.com/internet-drugstore/dist/static/img/fillPatientInfo2.8e...
- st####.91####.com/internet-drugstore/dist/static/img/fillPatientInfo3.d7...
- st####.91####.com/internet-drugstore/dist/static/img/fillPatientInfo4.82...
- st####.91####.com/internet-drugstore/dist/static/img/home.03db279.jpg
- st####.91####.com/internet-drugstore/dist/static/img/medicinesStore1.000...
- st####.91####.com/internet-drugstore/dist/static/img/medicinesStore2.f04...
- st####.91####.com/internet-drugstore/dist/static/img/store_value.b759b3d...
- st####.91####.com/internet-drugstore/dist/static/img/store_value_free.12...
- st####.91####.com/internet-drugstore/dist/static/img/trial.f678185.png
- st####.91####.com/internet-drugstore/dist/static/js/0.70c6279556c9ca679b...
- st####.91####.com/internet-drugstore/dist/static/js/10.f2c0528d2de27ba9c...
- st####.91####.com/internet-drugstore/dist/static/js/11.fd024693ca4ed7465...
- st####.91####.com/internet-drugstore/dist/static/js/12.c8dda887730cec54b...
- st####.91####.com/internet-drugstore/dist/static/js/13.da234d007632ba4b7...
- st####.91####.com/internet-drugstore/dist/static/js/14.21338d818f07459fe...
- st####.91####.com/internet-drugstore/dist/static/js/15.6248741a1fc78b5a6...
- st####.91####.com/internet-drugstore/dist/static/js/16.fe11cb3113b7abede...
- st####.91####.com/internet-drugstore/dist/static/js/17.8cee61d12c30fb957...
- st####.91####.com/internet-drugstore/dist/static/js/18.a906978741c3af78d...
- st####.91####.com/internet-drugstore/dist/static/js/21.5df175214f55a2c0f...
- st####.91####.com/internet-drugstore/dist/static/js/22.43663bb5ae7497f9c...
- st####.91####.com/internet-drugstore/dist/static/js/23.5c9cdc55c89a5cd2e...
- st####.91####.com/internet-drugstore/dist/static/js/24.6ab6a5651ea2ae860...
- st####.91####.com/internet-drugstore/dist/static/js/25.2366d456885283bfc...
- st####.91####.com/internet-drugstore/dist/static/js/26.ccb63608973cea598...
- st####.91####.com/internet-drugstore/dist/static/js/27.2ba4d74805c49116a...
- st####.91####.com/internet-drugstore/dist/static/js/31.b1a614aa05f014315...
- st####.91####.com/internet-drugstore/dist/static/js/32.79aa7e72ea4f27d9b...
- st####.91####.com/internet-drugstore/dist/static/js/33.02a61228a077cbd7e...
- st####.91####.com/internet-drugstore/dist/static/js/4.008012c72950b0173f...
- st####.91####.com/internet-drugstore/dist/static/js/5.9b93c2ab9a9720b808...
- st####.91####.com/internet-drugstore/dist/static/js/6.0db6d96a7131c1d90f...
- st####.91####.com/internet-drugstore/dist/static/js/8.c77aabe659a9cfa0d0...
- st####.91####.com/internet-drugstore/dist/static/js/9.c189b2c477d11d380c...
- st####.91####.com/internet-drugstore/dist/static/js/app.c6b58a738fd43f70...
- st####.91####.com/internet-drugstore/dist/static/js/manifest.f4049f38a4a...
- st####.91####.com/internet-drugstore/dist/static/js/vendor.a00c2b046a4b2...
- and####.b####.qq.com/rqd/async?aid=####
- c-h####.g####.com/api.php?format=####&t=####
- sdk-ope####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####&d=####&k=####
- ts.91####.com/nspm
- /data/data/####/.jg.ic
- /data/data/####/.jgck
- /data/data/####/.nomedia
- /data/data/####/0.70c6279556c9ca679b7c.js
- /data/data/####/1.277538d3fbcb7fe937db.js
- /data/data/####/10.f2c0528d2de27ba9c28c.js
- /data/data/####/1004
- /data/data/####/11.fd024693ca4ed7465a28.js
- /data/data/####/12.c8dda887730cec54bf07.js
- /data/data/####/13.da234d007632ba4b7051.js
- /data/data/####/14.21338d818f07459fe12b.js
- /data/data/####/15.6248741a1fc78b5a63ba.js
- /data/data/####/16.fe11cb3113b7abedeb5b.js
- /data/data/####/17.8cee61d12c30fb957e2d.js
- /data/data/####/18.a906978741c3af78d76d.js
- /data/data/####/19.f6b2110620d1826d99c8.js
- /data/data/####/2.514623e899bca498fc75.js
- /data/data/####/20.b51547020e0f3a9799c8.js
- /data/data/####/21.5df175214f55a2c0ff32.js
- /data/data/####/22.43663bb5ae7497f9c07f.js
- /data/data/####/23.5c9cdc55c89a5cd2e65c.js
- /data/data/####/24.6ab6a5651ea2ae860088.js
- /data/data/####/25.2366d456885283bfc3f7.js
- /data/data/####/26.ccb63608973cea5982f1.js
- /data/data/####/27.2ba4d74805c49116a2f9.js
- /data/data/####/28.178b5fa79fe6bbaf8ff0.js
- /data/data/####/29.cc8729c9c387825c53ee.js
- /data/data/####/3.5834a2836e42cfc3d900.js
- /data/data/####/30.6231c38c4f344f0fcb56.js
- /data/data/####/31.b1a614aa05f0143150aa.js
- /data/data/####/32.79aa7e72ea4f27d9bb9a.js
- /data/data/####/33.02a61228a077cbd7e7fe.js
- /data/data/####/4.008012c72950b0173f64.js
- /data/data/####/5.9b93c2ab9a9720b808b8.js
- /data/data/####/57579599
- /data/data/####/5e081ce3a800
- /data/data/####/6.0db6d96a7131c1d90f71.js
- /data/data/####/7.c7f499e2bf12409a136b.js
- /data/data/####/8.c77aabe659a9cfa0d076.js
- /data/data/####/9.c189b2c477d11d380cd5.js
- /data/data/####/Demo.null.xml
- /data/data/####/NIMSDK_Config_NEW_d890b045ee1f2fb1a65960efb665ff21.xml
- /data/data/####/NIMSDK_Config_d890b045ee1f2fb1a65960efb665ff21.xml
- /data/data/####/SP_AROUTER_CACHE.xml
- /data/data/####/Sailer.js
- /data/data/####/Telescope.js
- /data/data/####/annual_fee.e4e3750.png
- /data/data/####/app.19268e284f44bad365834f22b9a8d729.css
- /data/data/####/app.c6b58a738fd43f700c53.js
- /data/data/####/banner.4888d15.jpg
- /data/data/####/banner.png
- /data/data/####/bugly_db_-journal
- /data/data/####/chooseConsultType.236e618.jpg
- /data/data/####/classes.dex
- /data/data/####/classes.dex;classes2.dex
- /data/data/####/classes.dex;classes3.dex
- /data/data/####/classes.oat
- /data/data/####/com.kangmeng.prescription_preferences.xml
- /data/data/####/crashrecord.xml
- /data/data/####/fillPatientInfo1.e5229e0.jpg
- /data/data/####/fillPatientInfo2.8ebce48.jpg
- /data/data/####/fillPatientInfo3.d749724.jpg
- /data/data/####/fillPatientInfo4.824d7f2.jpg
- /data/data/####/flexible.js
- /data/data/####/getui_sp.xml
- /data/data/####/gkt-journal
- /data/data/####/gx_sp.xml
- /data/data/####/home.03db279.jpg
- /data/data/####/icon_prescribe_date@3x.png
- /data/data/####/icon_prescribe_overtime@3x.png
- /data/data/####/index.html
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/libjiagu.so
- /data/data/####/local_crash_lock
- /data/data/####/local_crash_lock (deleted)
- /data/data/####/manifest.f4049f38a4a81b053483.js
- /data/data/####/medicinesStore1.0002397.jpg
- /data/data/####/medicinesStore2.f047f2b.jpg
- /data/data/####/name_bkg_black.png
- /data/data/####/name_bkg_red.png
- /data/data/####/native_record_lock
- /data/data/####/nim_sdk.log
- /data/data/####/no_permission_bg.007b8e7.jpg
- /data/data/####/nodata_1.9ffdb84.png
- /data/data/####/normal_prescription.png
- /data/data/####/prescription_db.db-journal
- /data/data/####/proc_auxv
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/recordnull.4ff8770.jpg
- /data/data/####/rewrite.png
- /data/data/####/run.pid
- /data/data/####/seal.png
- /data/data/####/security_info
- /data/data/####/spdata.xml
- /data/data/####/store_value.b759b3d.png
- /data/data/####/store_value_free.1243d18.png
- /data/data/####/tdata_SIq813
- /data/data/####/tdata_SIq813.dex
- /data/data/####/tdata_SIq813.dex.flock (deleted)
- /data/data/####/tdata_SIq813.jar
- /data/data/####/tdata_agG322
- /data/data/####/tdata_agG322.dex
- /data/data/####/tdata_agG322.dex.flock (deleted)
- /data/data/####/tdata_agG322.jar
- /data/data/####/tdata_xEA084
- /data/data/####/tdata_xEA084.dex.flock (deleted)
- /data/data/####/tdata_xEA084.jar
- /data/data/####/trial.f678185.png
- /data/data/####/tryCatch.js
- /data/data/####/vendor.a00c2b046a4b2566ef97.js
- /data/data/####/xx_NOS_LBS.xml
- /data/misc/####/primary.prof
- /system/bin/cat /proc/cpuinfo
- /system/bin/dex2oat --instruction-set=x86 --dex-file=<Package Folder>/.jiagu/classes.dex --dex-file=<Package Folder>/.jiagu/classes.dex:classes2.dex --dex-file=<Package Folder>/.jiagu/classes.dex:classes3.dex --oat-file=<Package Folder>/.jiagu/classes.oat --inline-depth-limit=0 --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tdata_SIq813.jar --oat-fd=48 --oat-location=/data/user/0/<Package>/files/tdata_SIq813.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tdata_agG322.jar --oat-fd=40 --oat-location=/data/user/0/<Package>/files/tdata_agG322.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tdata_xEA084.jar --oat-fd=40 --oat-location=/data/user/0/<Package>/files/tdata_xEA084.dex --compiler-filter=speed
- cat /proc/uid_stat/10065/tcp_rcv
- cat /proc/uid_stat/10065/tcp_snd
- cat /sys/class/net/wlan0/address
- getprop
- mount
- sh
- AES-CBC-PKCS5Padding
- AES-CFB-NoPadding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding