Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) a####.thext####.com:80
- TCP(HTTP/1.1) nim.nos.net####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) m.thext####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) pub-####.qin####.com:80
- TCP(HTTP/1.1) l####.tbs.qq.com:80
- TCP(TLS/1.0) 1####.217.17.142:443
- TCP(TLS/1.0) api.face####.com:443
- TCP(TLS/1.0) app-mea####.com:443
- TCP(TLS/1.0) lbs.net####.im:443
- TCP(TLS/1.0) wa####.127.net:443
- TCP(TLS/1.0) m.thext####.com:443
- TCP 47.2####.129.35:30000
- TCP sdk.o####.t####.####.com:5224
- TCP ou####.yun####.net:8000
- TCP c####.g####.ig####.com:5227
- 7j####.c####.z0.####.com
- a####.thext####.com
- a####.u####.com
- app-mea####.com
- c####.g####.ig####.com
- c-h####.g####.com
- g####.face####.com
- l####.tbs.qq.com
- lbs.net####.im
- m.thext####.com
- nim.nos.net####.com
- ou####.yun####.net
- pub-####.qin####.com
- q.thext####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- st####.thext####.com
- wa####.127.net
- a####.thext####.com/
- m.thext####.com/activity/recharge_act/20181217/css/base.css
- m.thext####.com/activity/recharge_act/20181217/images/btn.jpg
- m.thext####.com/activity/recharge_act/20181217/images/btn_01.png
- m.thext####.com/activity/recharge_act/20181217/images/btn_02.png
- m.thext####.com/activity/recharge_act/20181217/images/card_01.jpg
- m.thext####.com/activity/recharge_act/20181217/images/card_02.jpg
- m.thext####.com/activity/recharge_act/20181217/images/card_03.jpg
- m.thext####.com/activity/recharge_act/20181217/images/card_04.jpg
- m.thext####.com/activity/recharge_act/20181217/images/card_05.jpg
- m.thext####.com/activity/recharge_act/20181217/images/card_06.jpg
- m.thext####.com/activity/recharge_act/20181217/images/img_01.jpg
- m.thext####.com/activity/recharge_act/20181217/images/img_02.jpg
- m.thext####.com/activity/recharge_act/20181217/images/img_04.jpg
- m.thext####.com/activity/recharge_act/20181217/images/img_05.jpg
- m.thext####.com/activity/recharge_act/20181217/images/pop_title.png
- m.thext####.com/activity/recharge_act/20181217/images/risk_text.png
- m.thext####.com/activity/recharge_act/20181217/images/support.png
- m.thext####.com/activity/recharge_act/20181217/index.html?t=####&deviceI...
- m.thext####.com/activity/recharge_act/20181217/js/base.js
- m.thext####.com/activity/recharge_act/20181217/js/jquery-1.12.3.min.js
- m.thext####.com/activity/recharge_act/20181217/js/recharge.js
- m.thext####.com/app/whwp/exchange/recharge/recharge/types/jsonp?callback...
- m.thext####.com/images/appAdvert/list/0/0/31/20181218040155041.png
- m.thext####.com/images/appAdvert/list/0/0/31/20181218040203333.png
- m.thext####.com/images/appContent/list/0/0/110/20181121072106833.png
- m.thext####.com/images/appContent/list/0/0/128/20181205073251375.png
- m.thext####.com/images/appContent/list/0/0/141/20181218040048844.png
- m.thext####.com/images/appContent/list/0/0/143/20181221094500986.png
- m.thext####.com/images/appContent/list/0/0/144/20181221094904616.png
- m.thext####.com/images/others/head.png
- m.thext####.com/news/api/startup/init/v4?t=####&deviceId=####&sourceId=#...
- m.thext####.com/news/api/version/check/android?t=####&deviceId=####&sour...
- m.thext####.com/quotation/realTime/v2?t=####&deviceId=####&sourceId=####...
- m.thext####.com/user/profile/select/name/jsonp?callback=####&userId=####...
- nim.nos.net####.com/NDMyNDA2NA==/bmltYV8xODM2NDU5MzYyXzE1MzAxNzUwNjE0MjB...
- pub-####.qin####.com/tdata_EDT356
- t####.c####.q####.####.com/tdata_bca864
- t####.c####.q####.####.com/tdata_ynp969
- ti####.c####.l####.####.com/config/hz-hzv3.conf
- a####.u####.com/app_logs
- c-h####.g####.com/api.php?format=####&t=####
- l####.tbs.qq.com/ajax?c=####&k=####
- l####.tbs.qq.com/ajax?c=####&v=####&k=####
- m.thext####.com/app/getui/user/version/information/v2
- m.thext####.com/app/whwp/exchange/copy/order/hold/list
- m.thext####.com/app/whwp/exchange/trade/regVoucher/exist/v4
- m.thext####.com/app/whwp/exchange/user/v2/account/info
- m.thext####.com/group/message/center/count
- m.thext####.com/group/post/unread/count
- m.thext####.com/news/api/appcontent/activity/list/v2
- m.thext####.com/news/api/billboard/profit/rate/list
- m.thext####.com/news/api/helpline/clickV2
- m.thext####.com/news/api/transaction/operation/count
- m.thext####.com/news/api/transaction/opportunity/list/
- m.thext####.com/user/profile/status
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/Alvin2.xml
- /data/data/####/AppEventsLogger.persistedevents
- /data/data/####/ContextData.xml
- /data/data/####/Demo..xml
- /data/data/####/MultiDex.lock
- /data/data/####/NIMSDK_Config_30253e4af067640cc46d52cd3c687208.xml
- /data/data/####/NIMSDK_Config_30253e4af067640cc46d52cd3c687208_...91.xml
- /data/data/####/NIMSDK_Config_30253e4af067640cc46d52cd3c687208_null.xml
- /data/data/####/NIMSDK_Config_UI30253e4af067640cc46d52cd3c687208.xml
- /data/data/####/PreferenceSetting_default.xml
- /data/data/####/TradeConfig_config.xml
- /data/data/####/UIKit.xtrend_1545633106926591.xml
- /data/data/####/com.facebook.internal.preferences.APP_GATEKEEPERS.xml
- /data/data/####/com.facebook.internal.preferences.APP_SETTINGS.xml
- /data/data/####/com.facebook.sdk.appEventPreferences.xml
- /data/data/####/com.facebook.sdk.attributionTracking.xml
- /data/data/####/com.google.InstanceId.properties
- /data/data/####/com.google.android.gms.appid-no-backup
- /data/data/####/com.google.android.gms.appid.xml
- /data/data/####/com.google.android.gms.measurement.prefs.xml
- /data/data/####/com.rynat.xtrend_preferences.xml
- /data/data/####/core_info
- /data/data/####/d62475e959b3
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/datacache.db-journal
- /data/data/####/debug.conf
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/google_app_measurement.db-journal
- /data/data/####/google_app_measurement_local.db
- /data/data/####/google_app_measurement_local.db-journal
- /data/data/####/gx_sp.xml
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/libjiagu-2113777060.so
- /data/data/####/mobclick_agent_cached_com.rynat.xtrend22
- /data/data/####/mobclick_agent_online_setting_com.rynat.xtrend.xml
- /data/data/####/mpush.cfg.xml
- /data/data/####/msg.db
- /data/data/####/msg.db-journal
- /data/data/####/multidex.version.xml
- /data/data/####/nim_cache.db
- /data/data/####/nim_cache.db-journal
- /data/data/####/nim_device
- /data/data/####/pending_segments_1
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/qihoo_jiagu_crash_report.xml
- /data/data/####/run.pid
- /data/data/####/setting.xml
- /data/data/####/tbs_download_config.xml
- /data/data/####/tbs_download_stat.xml
- /data/data/####/tbscoreinstall.txt
- /data/data/####/tbslock.txt
- /data/data/####/tdata_bca864
- /data/data/####/tdata_bca864.jar
- /data/data/####/tdata_ynp969
- /data/data/####/tdata_ynp969.jar
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/write.lock
- /data/media/####/.nomedia
- /data/media/####/08cac8f9ed690ac8b95086a3cd4a549bd09010aae757c4....0.tmp
- /data/media/####/20181224.log
- /data/media/####/26ea34f9325e9a8fc7f7b9130cb5a68ec917444e766390....0.tmp
- /data/media/####/40978242477b480745df5cabc1aae940844efeb97b3b45....0.tmp
- /data/media/####/506403353ccba59e935b9317df6596c9cd074d91190325....0.tmp
- /data/media/####/567f2fdab8ac2ad545a8861b68c1583276617e905d71c1....0.tmp
- /data/media/####/8f43f638a644556202fdd8426006fb582d8f3876cf063a....0.tmp
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/a8876748a482b1c8ff9cb9e95580320fdb6123313d2eb9....0.tmp
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.rynat.xtrend.bin
- /data/media/####/com.rynat.xtrend.db
- /data/media/####/e985e92c94d3eda5c7742fa71090863ba31a70fcaef963....0.tmp
- /data/media/####/eaea015a9575e74f5f43473aaeba1d4ec4c05fc9f04c08....0.tmp
- /data/media/####/f4bcd9e8c8fdd14effb6f09a9e36fbaf253b5bf15892d2....0.tmp
- /data/media/####/journal
- /data/media/####/journal.tmp
- /data/media/####/nim_sdk.log
- /data/media/####/official_config
- /data/media/####/tdata_bca864
- /data/media/####/tdata_ynp969
- /data/media/####/test.log
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.trade.eight.moudle.push.AppPushCoreService 24630 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- getprop ro.product.cpu.abi
- mount
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/com.trade.eight.moudle.push.AppPushCoreService 24630 300 0
- getuiext3
- libjiagu-2113777060
- AES-CBC-PKCS5Padding
- DESede-ECB-PKCS5Padding
- RSA-ECB-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding