Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) pub-####.qin####.com:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) apic####.mob.com:80
- TCP(HTTP/1.1) a####.exc.mob.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) s####.ad####.com:80
- TCP(HTTP/1.1) www.slan####.top:80
- TCP(HTTP/1.1) cnf.ad####.com:80
- TCP(HTTP/1.1) m.d####.mob.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) paye####.com:80
- TCP(TLS/1.0) raw.githubu####.com:443
- TCP(TLS/1.0) www.slan####.top:443
- TCP c####.g####.ig####.com:5224
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.exc.mob.com
- a####.u####.com
- apic####.mob.com
- c####.g####.ig####.com
- c-h####.g####.com
- cnf.ad####.com
- m.d####.mob.com
- paye####.com
- pub-####.qin####.com
- raw.githubu####.com
- s####.ad####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- www.slan####.top
- apic####.mob.com/appstore/calendar/day?key=####&date=####
- m.d####.mob.com/v3/cconf?appkey=####&plat=####&apppkg=####&appver=####&n...
- pub-####.qin####.com/tdata_EDT356
- t####.c####.q####.####.com/tdata_MkX219
- t####.c####.q####.####.com/tdata_iGj879
- ti####.c####.l####.####.com/config/hz-hzv3.conf
- www.slan####.top/api/sys/getappadslist?appType=####
- a####.exc.mob.com/errconf
- a####.u####.com/app_logs
- c-h####.g####.com/api.php?format=####&t=####
- cnf.ad####.com/config/217/20170109001143/100785/1543641580906
- paye####.com/api/v1/pay/init
- s####.ad####.com/record/217/20170109001143/1543641582421
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/.lock
- /data/data/####/17bfa8d4d822cb308d38a189c0c8e2b994b3f7156a6172e....0.tmp
- /data/data/####/21db3a95800763809872f1f3c3814da1e8243b379309244....0.tmp
- /data/data/####/3e67ce4f516e99579d5df03c04142c8a9e54d4f370eb8b6....0.tmp
- /data/data/####/49da6dbcf863b8304099840ba75d500bb4d95736152b842....0.tmp
- /data/data/####/5a455c3d9aa8aac2e9a948296e58690491430e1ddf796c8....0.tmp
- /data/data/####/704afe39a8eafed6878e706c074c73aa6efbac6c696419f....0.tmp
- /data/data/####/7dcd8b12481beed025581fdf4cd5fa69e1dce0913d80e02....0.tmp
- /data/data/####/829d7efaea9492a25a5028f41a2ebe7b412e9bf60327f51....0.tmp
- /data/data/####/93d1d85233a63a57af4d2b58eece89dc58a9969569ede3d....0.tmp
- /data/data/####/95c6b8cab1cb04707167fecc54455852f7149f94851f0c6....0.tmp
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/MultiDex.lock
- /data/data/####/a6c93a92c57b83d58dd09f931551c1a7c951d433c4dad7d....0.tmp
- /data/data/####/ab0f7792ee06732de02b080976345c191525c741aadd064....0.tmp
- /data/data/####/adb29b2e3aa7596f75d0fda1f1f56183907.xml
- /data/data/####/b277abb99e2554202e31db9fde8ac6c24476af454eca107....0.tmp
- /data/data/####/c5cf29dfcd26d4dab7bd19692bd6e7a2a3ab40c87f40500....0.tmp
- /data/data/####/ca7867b10194
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/d26ff95a49c0a463ae25153b701e6e261493c1d0e4ecca8....0.tmp
- /data/data/####/daf8ecf2b2898e3497341f80951576ac4be77e7a551cf3a....0.tmp
- /data/data/####/df7f3df93e871a990cfba274330c876c901334db9278afa....0.tmp
- /data/data/####/ee1598100187644b5a86a9dce70793ec461dfb19629ee90....0.tmp
- /data/data/####/efed64783bb0a7e37c574c97bc182be64dc6b5f6b92c132....0.tmp
- /data/data/####/epay_data.xml
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f877d2d42223640ad0fe27d1698fd32de4146624111f798....0.tmp
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libjiagu-1618479617.so
- /data/data/####/mob_commons_1.xml
- /data/data/####/mob_sdk_exception_1.xml
- /data/data/####/multidex.version.xml
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/share_data.xml
- /data/data/####/tdata_MkX219
- /data/data/####/tdata_MkX219.jar
- /data/data/####/tdata_iGj879
- /data/data/####/tdata_iGj879.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/media/####/.dic_lock
- /data/media/####/.duid
- /data/media/####/.globalLock
- /data/media/####/.nulplt
- /data/media/####/.pkg_lock
- /data/media/####/.rcTag
- /data/media/####/.rc_lock
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/tdata_MkX219
- /data/media/####/tdata_iGj879
- /data/media/####/test.log
- /data/media/####/top.slantech.voicebirds.bin
- /data/media/####/top.slantech.voicebirds.db
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.services.DemoPushService 25347 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- mount
- sh
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.services.DemoPushService 25347 300 0
- getuiext2
- libjiagu-1618479617
- neh
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS7Padding
- AES-ECB-NoPadding
- RSA-ECB-PKCS1Padding
- desede-CBC-PKCS5Padding