Technical information
- Adware.Panda.2.origin
- Adware.Panda.3.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) res.wx.qq.####.com:80
- TCP(HTTP/1.1) p####.s####.com:80
- TCP(HTTP/1.1) hm.b####.com:80
- TCP(HTTP/1.1) a.appj####.com:80
- TCP(HTTP/1.1) m.h####.s####.com:80
- TCP(HTTP/1.1) d.123.sogo####.####.com:80
- TCP(HTTP/1.1) h####.s####.com:80
- TCP(HTTP/1.1) gd.a.s####.com:80
- TCP(HTTP/1.1) gs.a.s####.com:80
- TCP(HTTP/1.1) i####.sogo####.com.####.com:80
- TCP(TLS/1.0) gs.a.s####.com:443
- TCP(TLS/1.0) p####.s####.com:443
- TCP(TLS/1.0) gd.a.s####.com:443
- a.appj####.com
- chan####.itc.cn
- chan####.s####.com
- d.123.sogo####.com
- h####.s####.com
- hm.b####.com
- i####.sogo####.com
- i####.sogo####.com
- i####.sogo####.com
- m.h####.s####.com
- mt####.go####.com
- n####.wu####.com
- p####.s####.com
- p2.123.sogo####.com
- p5.123.sogo####.com
- p7.123.sogo####.com
- pb.s####.com
- r####.wx.qq.com
- d.123.sogo####.####.com/imgu/2019/07/20190705150406_666.jpg
- d.123.sogo####.####.com/imgu/2019/07/20190705150734_483.jpg
- d.123.sogo####.####.com/imgu/2019/07/20190705151012_168.jpg
- d.123.sogo####.####.com/imgu/2019/07/20190705151310_897.jpg
- d.123.sogo####.####.com/u/pb/pb.692148.js?v=####
- gd.a.s####.com/api/2/config/get/cysEzfRqT?callback=####
- gd.a.s####.com/api/2/user/info?callback=####&client_id=####&login_termin...
- gd.a.s####.com/api/3/topic/liteload?callback=####&client_id=####&topic_u...
- gd.a.s####.com/api/3/topic/liteload?callback=jQuery17043633765005506575_...
- gd.a.s####.com/api/gold/prop/all_props?callback=####&_=####
- gd.a.s####.com/api/gold/user/get_coins?callback=####&client_id=####&_=####
- gd.a.s####.com/debug/cookie?callback=####
- gd.a.s####.com/debug/cookie?callback=####&_=####
- gd.a.s####.com/debug/cookie?callback=####&setCook####&_=####
- gd.a.s####.com/debug/cookie?setCook####&callback=####&Thu Sep####
- gd.a.s####.com/stat/event?clientid=####&uuid=####&topicId=####&type=####
- gd.a.s####.com/stat/uvstat?callback=####&client_id=####&uuid=####&platfo...
- gd.a.s####.com/upload/mobile/wap-js/changyan_mobile.js?client_id=####&co...
- gd.a.s####.com/upload/plugins/plugins.list.count.js?clientId=####
- gd.a.s####.com/upload/version-v3.js?1567698####
- gs.a.s####.com//mdevp/extensions/longloop/002/longloop.js?_=####
- gs.a.s####.com/mdevp/extensions/mobile-auto-recommand/013/mobile-auto-re...
- gs.a.s####.com/mdevp/extensions/mobile-cmt-advert/030/mobile-cmt-advert.js
- gs.a.s####.com/mdevp/extensions/mobile-cmt-barrage/017/mobile-cmt-barrag...
- gs.a.s####.com/mdevp/extensions/mobile-cmt-box/052/mobile-cmt-box.js
- gs.a.s####.com/mdevp/extensions/mobile-cmt-float-bar/025/mobile-cmt-floa...
- gs.a.s####.com/mdevp/extensions/mobile-cmt-header/047/mobile-cmt-header.js
- gs.a.s####.com/mdevp/extensions/mobile-cmt-list/068/mobile-cmt-list.js
- gs.a.s####.com/mdevp/extensions/mobile-enter/050/mobile-enter.js
- gs.a.s####.com/mdevp/extensions/mobile-icp-tips/018/mobile-icp-tips.js
- gs.a.s####.com/mdevp/extensions/mobile-login-box/024/mobile-login-box.js
- gs.a.s####.com/mdevp/extensions/mobile-skin/025/mobile-skin.js
- gs.a.s####.com/mdevp/extensions/mobile-task/016/mobile-task.js
- gs.a.s####.com/mdevp/extensions/mobile-user-center/047/mobile-user-cente...
- gs.a.s####.com/v3/v201908291014/src/adapter.min.js
- gs.a.s####.com/v3/v201908291014/src/start.min.js
- h####.s####.com/port/ChangyanGet?callback=####&_=####
- hm.b####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&vl=####&ep=####&et=#...
- hm.b####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&vl=####&et=####&ja=#...
- hm.b####.com/hm.js?43bfcd8####
- i####.sogo####.com.####.com/app/a/200547/7e6ada6d35ac3027ea406fdc972d0aa...
- i####.sogo####.com.####.com/v2/thumb/resize/w/430/zi/off/crop/h/900/wate...
- i####.sogo####.com.####.com/v2/thumb/resize/w/500/t/1/?appid=####&url=####
- m.h####.s####.com/
- m.h####.s####.com/6239589/
- m.h####.s####.com/6633173/?idx=####
- m.h####.s####.com/6635381/
- m.h####.s####.com/getMore/index?key=####&page=####
- m.h####.s####.com/mcss/main.css?v=####
- m.h####.s####.com/mimg/header_bg.png
- m.h####.s####.com/mimg/header_l.png
- m.h####.s####.com/mimg/header_r.png
- m.h####.s####.com/mimg/icon.png?id=####
- m.h####.s####.com/mimg/icon_new.png?id=####
- m.h####.s####.com/mimg/logo.png?id=####
- m.h####.s####.com/min_mjs/page/detail.js?v=####
- m.h####.s####.com/min_mjs/page/index.js?v=####
- m.h####.s####.com/mjs/require.js
- m.h####.s####.com/port/ChangyanGet?callback=####&_=####
- p####.s####.com/pv.gif?model=####&img=####&ssuv=####&versionCode=####&fr...
- p####.s####.com/pv.gif?model=####&img=####&ssuv=####&versionCode=####&ne...
- p####.s####.com/pv.gif?uigs_productid=####&rdk=####&img=####&b=####&v=##...
- p####.s####.com/pv.gif?uigs_productid=####&rdk=####&img=####&url=####&ur...
- p####.s####.com/pv.gif?uigs_productid=####&ufoid=####&rdk=####&img=####&...
- p####.s####.com/pv.gif?uigs_productid=daohang&rdk=1567698679767&img=pv.g...
- p####.s####.com/pv.gif?uigs_productid=ufo&ufoid=daohang&rdk=156769867976...
- res.wx.qq.####.com/open/js/jweixin-1.0.0.js?v=####
- a.appj####.com/ad-service/ad/mark
- /data/data/####/.jg.ic
- /data/data/####/.log.lock
- /data/data/####/.log.ls
- /data/data/####/Alvin2.xml
- /data/data/####/AppStore.xml
- /data/data/####/ContextData.xml
- /data/data/####/PB_SP.xml
- /data/data/####/SOGOUPLUS_CONFIG.xml
- /data/data/####/UmengLocalNotificationStore.db-journal
- /data/data/####/WebViewSettings.xml
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/f_00000b
- /data/data/####/f_00000c
- /data/data/####/f_00000d
- /data/data/####/index
- /data/data/####/jg_app_update_settings_random.xml
- /data/data/####/libjiagu.so
- /data/data/####/mobclick_agent_cached_com.sogou.haha.sogouhahas12
- /data/data/####/pb_db-journal
- /data/data/####/plugin.apk
- /data/data/####/sce_1567698652114.dat
- /data/data/####/umeng_general_config.xml
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- chmod 755 <Package Folder>/.jiagu/libjiagu.so
- libjiagu
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS5Padding