Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) im####.tcn####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) app.tcn####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) sni.c####.q####.####.net:80
- TCP(TLS/1.0) api.map.b####.com:443
- TCP(TLS/1.0) loc.map.b####.com:443
- TCP c####.g####.ig####.com:5224
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- api.map.b####.com
- app.tcn####.com
- c####.g####.ig####.com
- c-h####.g####.com
- im####.tcn####.com
- loc.map.b####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- im####.tcn####.com/do?uri=####&w=####&h=####&s=####
- im####.tcn####.com/do?uri=####&w=####&h=####&s=####&alw=####
- sni.c####.q####.####.net/config/hz-hzv3.conf
- sni.c####.q####.####.net/tdata_MkX219
- sni.c####.q####.####.net/tdata_iGj879
- app.tcn####.com/(C6D80DFD64D5BA18F9035782318FB709)/msg/getGiftLoopMsg.do
- app.tcn####.com/(C6D80DFD64D5BA18F9035782318FB709)/msg/getLoopMsg.do
- app.tcn####.com/(C6D80DFD64D5BA18F9035782318FB709)/msg/getMsgBoxList.do
- app.tcn####.com/(C6D80DFD64D5BA18F9035782318FB709)/msg/getVideoLoopMsg.do
- app.tcn####.com/(C6D80DFD64D5BA18F9035782318FB709)/search/getCityPopular...
- app.tcn####.com/(C6D80DFD64D5BA18F9035782318FB709)/setting/checkPosition...
- app.tcn####.com/(C6D80DFD64D5BA18F9035782318FB709)/setting/checkVersion.do
- app.tcn####.com/(C6D80DFD64D5BA18F9035782318FB709)/setting/getConfigInfo...
- app.tcn####.com/(C6D80DFD64D5BA18F9035782318FB709)/sys/uploadClientId.do
- app.tcn####.com/sys/clientActivation.do
- app.tcn####.com/sys/initApp.do
- app.tcn####.com/user/register.do
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.jg.ic
- /data/data/####/account.db
- /data/data/####/account.db-journal
- /data/data/####/authStatus_com.beyond.fjyyh.xml
- /data/data/####/authStatus_com.beyond.fjyyh;df_service_v1.xml
- /data/data/####/authStatus_com.beyond.fjyyh;pushservice.xml
- /data/data/####/authStatus_com.beyond.fjyyh;remote.xml
- /data/data/####/com.beyond.fjyyh1738959.db
- /data/data/####/com.beyond.fjyyh1738959.db-journal
- /data/data/####/com.beyond.fjyyh_preferences.xml
- /data/data/####/com.beyond.fjyyh_preferences.xml.bak
- /data/data/####/firll.dat
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/hst.db
- /data/data/####/hst.db-journal
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/libcuid.so
- /data/data/####/libjiagu-1302917488.so
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/tdata_MkX219
- /data/data/####/tdata_MkX219.jar
- /data/data/####/tdata_iGj879
- /data/data/####/tdata_iGj879.jar
- /data/data/####/ums_agent_online_setting_com.beyond.fjyyh.xml
- /data/data/####/yf
- /data/media/####/-1540440713-864624412
- /data/media/####/-9237578461793803302
- /data/media/####/.cuid2
- /data/media/####/12780040911816407814
- /data/media/####/1428277892-196270528
- /data/media/####/44013394817645590
- /data/media/####/644915131-1045374812
- /data/media/####/644915131-1273772197
- /data/media/####/644915131-966897390
- /data/media/####/6449151311115037884
- /data/media/####/6449151311482187989
- /data/media/####/6449151311514679882
- /data/media/####/644915131381282711
- /data/media/####/644916090-2020871989
- /data/media/####/6449160901150776938
- /data/media/####/6449160902014099420
- /data/media/####/644916091-290162344
- /data/media/####/644917051-499237871
- /data/media/####/app.db
- /data/media/####/com.beyond.fjyyh.bin
- /data/media/####/com.beyond.fjyyh.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/tdata_MkX219
- /data/media/####/tdata_iGj879
- /data/media/####/test.log
- /data/media/####/yoh.dat
- /data/media/####/yol.dat
- /data/media/####/yom.dat
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.app.service.GeTuiPushServer 24606 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu-1302917488.so
- sh -c am startservice --user 0 -n <Package>/com.app.service.DfService
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/com.app.service.GeTuiPushServer 24606 300 0
- BaiduMapSDK_base_v5_1_0
- JNI_ImageBlur
- freeNative
- getuiext2
- libjiagu-1302917488
- locSDK7b
- AES-CBC-PKCS5Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding