Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) q####.c####.l####.####.com:80
- TCP(HTTP/1.1) cdn-sdk####.g####.com.####.com:80
- TCP(HTTP/1.1) jzst####.you####.com.####.com:80
- TCP(HTTP/1.1) jz.yo####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) h####.shangha####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) lar####.c####.l####.####.com:80
- TCP(HTTP/1.1) a.junshi####.cn:80
- TCP(HTTP/1.1) jz.you####.com:80
- TCP(HTTP/1.1) reso####.msg.xi####.net:80
- TCP(HTTP/1.1) j.quwe####.com:80
- TCP(HTTP/1.1) sdk-ope####.g####.com:80
- TCP(HTTP/1.1) jzst####.yo####.com.####.com:80
- TCP(HTTP/1.1) thi####.q####.cn:80
- TCP(TLS/1.0) a####.yo####.com:443
- TCP(TLS/1.0) dualsta####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) d####.me####.com:443
- TCP(TLS/1.0) evtup####.yo####.com:443
- TCP(TLS/1.0) is.sn####.com:443
- TCP(TLS/1.0) regi####.xm####.gl####.####.com:443
- TCP cm-1####.ig####.com:5227
- TCP sdk.o####.t####.####.com:5224
- TCP app.c####.gl####.####.net:5222
- 7j####.c####.z0.####.com
- a####.yo####.com
- a.junshi####.cn
- app.c####.gl####.####.net
- c-h####.g####.com
- cdn-sdk####.g####.com
- cm-1####.ig####.com
- eco####.me####.com
- evtup####.yo####.com
- h####.shangha####.com
- is.sn####.com
- j.quwe####.com
- jz.yo####.com
- jz.you####.com
- jzst####.yo####.com
- jzst####.you####.com
- regi####.xm####.gl####.####.com
- reso####.msg.xi####.net
- s.startog####.com
- sdk-ope####.g####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- thi####.q####.cn
- thi####.q####.cn
- u####.u####.com
- cdn-sdk####.g####.com.####.com/tdata_EAx630
- cdn-sdk####.g####.com.####.com/tdata_EDB102
- cdn-sdk####.g####.com.####.com/tdata_UNt142
- cdn-sdk####.g####.com.####.com/tdata_fPG280
- h####.shangha####.com/gjj/cpixeljz.cy
- jz.yo####.com/image//user_icon/202002/aa9030f062ec481aa2913b2d5761480ebd...
- jz.yo####.com/image//user_icon/202014/898a1886d7cd411abee84a75351ecb9d31...
- jz.you####.com/image//user_icon/201835/895692b6ea634ec289c71504284e046c0...
- jzst####.yo####.com.####.com/jzadmin/images/15577406527468582.jpg
- jzst####.yo####.com.####.com/jzadmin/images/15585151615855173.jpg
- jzst####.yo####.com.####.com/jzadmin/images/15592857686597503.png
- jzst####.yo####.com.####.com/jzadmin/images/15597052567886119.jpg
- jzst####.yo####.com.####.com/jzadmin/images/15604841247564939.jpg
- jzst####.yo####.com.####.com/jzadmin/images/15619694360213373.png
- jzst####.yo####.com.####.com/jzadmin/images/15622938310723458.jpg
- jzst####.yo####.com.####.com/jzadmin/images/15622938624821508.jpg
- jzst####.yo####.com.####.com/jzadmin/images/15627273369015494.png
- jzst####.yo####.com.####.com/jzadmin/images/15629104112527079.jpg
- jzst####.yo####.com.####.com/jzadmin/images/15629105843802980.jpg
- jzst####.yo####.com.####.com/jzadmin/images/15629108086681967.jpg
- jzst####.yo####.com.####.com/jzadmin/images/15641355028413279.png
- jzst####.you####.com.####.com//jzadmin/images/15451117423911023.png
- jzst####.you####.com.####.com//jzadmin/images/15535695208671856.jpg
- jzst####.you####.com.####.com//jzadmin/images/15566068130784173.png
- lar####.c####.l####.####.com/1569578416087_474d95b464ce9927.png
- q####.c####.l####.####.com/config/hz-hzv6.conf
- q####.c####.l####.####.com/tdata_tYM194
- reso####.msg.xi####.net/gslb/?ver=####&type=####&conpt=####&uuid=####&li...
- sdk.o####.p####.####.com/api/addr.htm
- thi####.q####.cn/g?b=####&k=####&s=####
- thi####.q####.cn/mmopen/vi_32/53TAplAR2ZmibIcz6A4gZALriaEia6xD1avK26Giar...
- thi####.q####.cn/mmopen/vi_32/Q0j4TwGTfTJWUaDmdPcrFRnUGB6236UAcYMKibPOkJ...
- a.junshi####.cn/api/getAd
- c-h####.g####.com/api.php?format=####&t=####
- j.quwe####.com/f/m1
- sdk-ope####.g####.com/api.php?format=####&t=####
- sdk-ope####.g####.com/api.php?format=####&t=####&d=####&k=####
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/07d58570b4040987c57ee649121fc222.0.tmp
- /data/data/####/0ca5486ce0c46c53d6e1bf8366b031ce89852e916b1c12f....0.tmp
- /data/data/####/0dc71c78a6577da63c1207cf7a8aa47d.0.tmp
- /data/data/####/16d8c81166cf647abf538445e5c9c83b.0.tmp
- /data/data/####/16d8c81166cf647abf538445e5c9c83b.1.tmp
- /data/data/####/23111400560d956e949b49ebcec710c8.0.tmp
- /data/data/####/23111400560d956e949b49ebcec710c8.1.tmp
- /data/data/####/2355208d73b5749b3c7e82ecdf98800224a062f184a0584....0.tmp
- /data/data/####/29985c07c84e3d083bc17b968b6d0c8a.0.tmp
- /data/data/####/2ec3164d1ba37153aa60f2a280dade86.0.tmp
- /data/data/####/2ec3164d1ba37153aa60f2a280dade86.1.tmp
- /data/data/####/302da7df50058740e7c4d8ae875a532f0502e93a5c1c454....0.tmp
- /data/data/####/307f419228de533f33cdce7d456ae680.0.tmp
- /data/data/####/307f419228de533f33cdce7d456ae680.1.tmp
- /data/data/####/312263055c7e5dd13e619042cb05de61.0.tmp
- /data/data/####/32bc701d8b72395f0c81de10f68e1d58.0.tmp
- /data/data/####/346fc027755f93d749be0cbaf3648234.0.tmp
- /data/data/####/3717d8be32d468bb0e802d430062e95e269c39807ce7ed7....0.tmp
- /data/data/####/3859ffbf766357306a10b3e1297ad191.0.tmp
- /data/data/####/3859ffbf766357306a10b3e1297ad191.1.tmp
- /data/data/####/5398d96d78f7
- /data/data/####/5671
- /data/data/####/5ad21ef39b7f725cc486b48847e15753.0.tmp
- /data/data/####/7f3343814a640e525b27eed24852c9de.0.tmp
- /data/data/####/7f3343814a640e525b27eed24852c9de.1.tmp
- /data/data/####/8b4499c7346f369e2d0c96615803a7e80a2fb87590a71ec....0.tmp
- /data/data/####/8b58ffa366ea0160d62ec660e69fb1f5.0.tmp
- /data/data/####/8e097d496b2ed6f2a1eba9789d5b243e.0.tmp
- /data/data/####/8f9cce9cbc3e6f83228e885d35b9e71b.0.tmp
- /data/data/####/97ff008105be57d773ff0cfbb8e7ae7be4533d93eae265e....0.tmp
- /data/data/####/BuglySdkInfos.xml
- /data/data/####/CaiyiPush.xml
- /data/data/####/Meiqia.xml
- /data/data/####/MultiDex.lock
- /data/data/####/ShenQiAd.xml
- /data/data/####/UserInfo.xml
- /data/data/####/XMPushServiceConfig.xml
- /data/data/####/a96d98674f2c5ee3672e3acbf3a4f7ad8baaab76801b9c3....0.tmp
- /data/data/####/a==7.5.1&&4.5.0_1586882457131_envelope.log
- /data/data/####/ac67e12b2311c87a53d52d130d2f8663.0.tmp
- /data/data/####/ac67e12b2311c87a53d52d130d2f8663.1.tmp
- /data/data/####/ad_struct
- /data/data/####/bad285f06cc007d0e5446fbaae40676a.0.tmp
- /data/data/####/bad285f06cc007d0e5446fbaae40676a.1.tmp
- /data/data/####/bc765dbc6c3dfa3d4e3e7083c2f5d3ad.0.tmp
- /data/data/####/cbf1e8f90db5c516b4aac49a69c81f24.0.tmp
- /data/data/####/com.jz.youyu6796113d00719acec0a31727f572a26e.xml
- /data/data/####/com.jz.youyu;pushservice
- /data/data/####/com.jz.youyu_preferences.xml
- /data/data/####/d2b30a08c90ba5a31dc256eee966ab03.0.tmp
- /data/data/####/df1c949d596108777ad4565147841ad7.0.tmp
- /data/data/####/doc.zip
- /data/data/####/downloader.db-journal
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/ff25e2b4c26fe22e5369579f3a4b867f2553f444f33640f....0.tmp
- /data/data/####/foc.png
- /data/data/####/gdaemon_20161017
- /data/data/####/geofencing.db
- /data/data/####/geofencing.db-journal
- /data/data/####/getui_sp.xml
- /data/data/####/gkt-journal
- /data/data/####/gx_sp.xml
- /data/data/####/hoc.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/jz.db-journal
- /data/data/####/jz_banner.json
- /data/data/####/libjiagu188558744.so
- /data/data/####/meiqia.db
- /data/data/####/meiqia.db-journal
- /data/data/####/message_list.json
- /data/data/####/mipush.xml
- /data/data/####/mipush_account.xml
- /data/data/####/mipush_extra.xml
- /data/data/####/mipush_oc.xml
- /data/data/####/mipush_region
- /data/data/####/mipush_region.lock
- /data/data/####/multidex.version.xml
- /data/data/####/pref_registered_pkg_names.xml
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/sample.db
- /data/data/####/sample.zip
- /data/data/####/skin_plugin_pref.xml
- /data/data/####/sp_client_report_status.xml
- /data/data/####/start_cache.json
- /data/data/####/tdata_EAx630
- /data/data/####/tdata_EAx630.jar
- /data/data/####/tdata_UNt142
- /data/data/####/tdata_UNt142.jar
- /data/data/####/tdata_fPG280
- /data/data/####/tdata_fPG280.jar
- /data/data/####/tt_sdk_settings.xml
- /data/data/####/ttopenadsdk.xml
- /data/data/####/ttopensdk.db-journal
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/youyutongji
- /data/data/####/youyutongji-journal
- /data/media/####/.nomedia
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.jz.youyu.bin
- /data/media/####/com.jz.youyu.db
- /data/media/####/gkt-journal
- /data/media/####/gktper
- /data/media/####/log.lock
- /data/media/####/log1.txt
- /data/media/####/tdata_EAx630
- /data/media/####/tdata_UNt142
- /data/media/####/tdata_fPG280
- /data/media/####/test.log
- /data/media/####/yyid11
- /system/bin/cat /proc/cpuinfo
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.caiyi.push.service.GetuiPushService 24226 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.letv.release.version
- getprop ro.miui.ui.version.name
- getprop ro.smartisan.version
- getprop ro.vivo.os.build.display.id
- getprop ro.vivo.os.version
- mount
- sh
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/com.caiyi.push.service.GetuiPushService 24226 300 0
- BaiduSpeechSDK
- getuiext2
- libjiagu188558744
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-CFB-NOPADDING
- AES-CFB-NoPadding
- AES-ECB-PKCS5Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- RSA-None-PKCS1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-CFB-NOPADDING
- AES-ECB-PKCS5Padding