Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) pub-####.qin####.com:80
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) res####.a####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) a.appj####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) yh.ey####.com:80
- TCP(TLS/1.0) ssl.gst####.com:443
- TCP(TLS/1.0) www.go####.com:443
- TCP(TLS/1.0) www.gst####.com:443
- TCP c####.g####.ig####.com:5224
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a.appj####.com
- api####.a####.com
- c####.g####.ig####.com
- c-h####.g####.com
- pub-####.qin####.com
- res####.a####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- ssl.gst####.com
- www.go####.com
- www.gst####.com
- yh.ey####.com
- pub-####.qin####.com/tdata_EDT356
- t####.c####.q####.####.com/tdata_SzD730
- t####.c####.q####.####.com/tdata_ZCi456
- ti####.c####.l####.####.com/config/hz-hzv3.conf
- yh.ey####.com/upload/adv/ad_1701121528108842006.jpg
- yh.ey####.com/upload/adv/ad_1701121529162712006.jpg
- yh.ey####.com/upload/adv/ad_1701121529343782006.jpg
- yh.ey####.com/upload/adv/ad_1701201801059314483.png
- yh.ey####.com/upload/adv/ad_1705251325304089430.png
- yh.ey####.com/upload/adv/ad_1705251325442522480.png
- yh.ey####.com/upload/adv/ad_1711301755013847131.png
- yh.ey####.com/upload/adv/ad_1806280930497187500.jpg
- yh.ey####.com/upload/bbs/show/thumb260_89/bbs_1607291453051639485.jpg
- yh.ey####.com/upload/bbs/show/thumb260_89/bbs_1607291505052443531.jpg
- yh.ey####.com/upload/bbs/show/thumb260_89/bbs_1608301507408942505.jpg
- yh.ey####.com/upload/bbs/show/thumb260_89/bbs_1611221523499894145.jpg
- yh.ey####.com/upload/bbs/show/thumb260_89/bbs_1611221532212385379.jpg
- a.appj####.com/ad-service/ad/mark
- c-h####.g####.com/api.php?format=####&t=####
- res####.a####.com/v3/config/resource?
- res####.a####.com/v3/log/init
- sdk.o####.p####.####.com/api.php?format=####&t=####
- yh.ey####.com/app/home/GetHomeAdverts
- yh.ey####.com/app/home/GetHomeAdverts2
- yh.ey####.com/app/home/GetNowCity
- yh.ey####.com/app/home/getworkcontext
- yh.ey####.com/app/news/HomeNewsList
- yh.ey####.com/app/ucenter/LoadUserAllMessageCount
- /data/data/####/.jg.ic
- /data/data/####/.log.lock
- /data/data/####/.log.ls
- /data/data/####/027490bcf7fe
- /data/data/####/clientid_igexin.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/gdaemon_20161017
- /data/data/####/gx_sp.xml
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/jg_app_update_settings_random.xml
- /data/data/####/last_known_location.xml
- /data/data/####/libjiagu.so
- /data/data/####/pdr.xml
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/sjkj.app.eyouhu.com.xml
- /data/data/####/sjkj.app.eyouhu.com_storages.xml
- /data/data/####/tdata_SzD730
- /data/data/####/tdata_SzD730.jar
- /data/data/####/tdata_ZCi456
- /data/data/####/tdata_ZCi456.jar
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/webviewCookiesChromiumPrivate.db-journal
- /data/media/####/.nomedia
- /data/media/####/1024X748.png
- /data/media/####/1024X768.png
- /data/media/####/1080X1882.png
- /data/media/####/1242X2208.png
- /data/media/####/1536x2008.png
- /data/media/####/1536x2048.png
- /data/media/####/20181226.log
- /data/media/####/2048x1496.png
- /data/media/####/2048x1536.png
- /data/media/####/2208X1242.png
- /data/media/####/240X282.png
- /data/media/####/320X442.png
- /data/media/####/320X480.png
- /data/media/####/480X762.png
- /data/media/####/620_420.jpg
- /data/media/####/640X1136.png
- /data/media/####/640X960.png
- /data/media/####/720X1242.png
- /data/media/####/750X1334.png
- /data/media/####/768X1004.png
- /data/media/####/768X1024.png
- /data/media/####/about.html
- /data/media/####/add_img.jpg
- /data/media/####/amap.html
- /data/media/####/amap.js
- /data/media/####/app.account.js
- /data/media/####/app.appoint.js
- /data/media/####/app.cart.js
- /data/media/####/app.css
- /data/media/####/app.data.js
- /data/media/####/app.db
- /data/media/####/app.js
- /data/media/####/app.knowledge.js
- /data/media/####/app.loadusermessagecount.js
- /data/media/####/app.map.js
- /data/media/####/app.news.js
- /data/media/####/app.notification.js
- /data/media/####/app.order.js
- /data/media/####/app.product.js
- /data/media/####/app.question.js
- /data/media/####/app.review.js
- /data/media/####/app.shipaddress.js
- /data/media/####/app.sms.js
- /data/media/####/app.team.js
- /data/media/####/app.ucenter.js
- /data/media/####/app.update.js
- /data/media/####/app.uploader.js
- /data/media/####/app.views.bak.js
- /data/media/####/app.workcontext.js
- /data/media/####/application.html
- /data/media/####/applist.html
- /data/media/####/applist_detail.html
- /data/media/####/appoint.html
- /data/media/####/appoint2.html
- /data/media/####/appoint_1.html
- /data/media/####/arttmpl.js
- /data/media/####/badges.scss
- /data/media/####/banner-01.jpg
- /data/media/####/bars.scss
- /data/media/####/base.css
- /data/media/####/base.scss
- /data/media/####/benurse.html
- /data/media/####/benurse_add.html
- /data/media/####/benurse_details.html
- /data/media/####/benurse_list.html
- /data/media/####/benurselog.html
- /data/media/####/benurselog_details.html
- /data/media/####/benurselog_edit.html
- /data/media/####/bj-bottom.jpg
- /data/media/####/bj-my.jpg
- /data/media/####/bj-my.png
- /data/media/####/buttons.scss
- /data/media/####/calendar.css
- /data/media/####/calendar.html
- /data/media/####/calendar.js
- /data/media/####/calendarExt.css
- /data/media/####/calendarExt.js
- /data/media/####/calendarExt00.js
- /data/media/####/cards.scss
- /data/media/####/certificate.html
- /data/media/####/certificate_idcard.html
- /data/media/####/city.data-3.js
- /data/media/####/city.data.js
- /data/media/####/city.html
- /data/media/####/classify.html
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/common.js
- /data/media/####/common.myStorageForPrivateBrowsing.js
- /data/media/####/complain.html
- /data/media/####/complain_detail.html
- /data/media/####/consult01.jpg
- /data/media/####/consult02.jpg
- /data/media/####/consult03.jpg
- /data/media/####/default_ad_90_90.jpg
- /data/media/####/default_pd_100_100.jpg
- /data/media/####/default_pd_110_110.jpg
- /data/media/####/default_pd_150_150.jpg
- /data/media/####/default_pd_170_170.jpg
- /data/media/####/default_pd_220_220.jpg
- /data/media/####/default_pd_80_80.jpg
- /data/media/####/doctordetail.html
- /data/media/####/edit_address.html
- /data/media/####/editaccount.html
- /data/media/####/epurse.html
- /data/media/####/evaluate.html
- /data/media/####/evaluate.js
- /data/media/####/evaluate_single.html
- /data/media/####/fast1.png
- /data/media/####/fast2.png
- /data/media/####/fast3.png
- /data/media/####/feature_details.html
- /data/media/####/feature_teacher.html
- /data/media/####/feedback.css
- /data/media/####/feedback.html
- /data/media/####/feedback.js
- /data/media/####/forget_password.html
- /data/media/####/forms.scss
- /data/media/####/fullscreen.scss
- /data/media/####/gojgmarkeorder.html
- /data/media/####/grid.scss
- /data/media/####/guide.html
- /data/media/####/guide1.png
- /data/media/####/guide2.png
- /data/media/####/guide3.png
- /data/media/####/hack.scss
- /data/media/####/header_default.jpg
- /data/media/####/healthprofile.html
- /data/media/####/help.html
- /data/media/####/help_details.html
- /data/media/####/helpcenter.html
- /data/media/####/icon-extra.scss
- /data/media/####/icon.scss
- /data/media/####/iconfont-tianjia.png
- /data/media/####/iconfont.js
- /data/media/####/iconfont.scss
- /data/media/####/iconfont.ttf
- /data/media/####/icons-extra.css
- /data/media/####/iframe.scss
- /data/media/####/imageviewer.css
- /data/media/####/immersed.js
- /data/media/####/in_feature.html
- /data/media/####/in_feature_head.jpg
- /data/media/####/in_home.html
- /data/media/####/in_home_head.jpg
- /data/media/####/in_hospital.html
- /data/media/####/in_hospital_head.jpg
- /data/media/####/in_order.html
- /data/media/####/index-01.jpg
- /data/media/####/index-02.jpg
- /data/media/####/index-03.jpg
- /data/media/####/index-04.jpg
- /data/media/####/index.html
- /data/media/####/index.js
- /data/media/####/index1.html
- /data/media/####/index2.html
- /data/media/####/index_click1.jpg
- /data/media/####/index_click2.jpg
- /data/media/####/iscroll.scss
- /data/media/####/jgmarkeorder.html
- /data/media/####/jgnurse_details.html
- /data/media/####/jgnurselist.html
- /data/media/####/join_us.html
- /data/media/####/journal.tmp
- /data/media/####/jquery.min.js
- /data/media/####/kefu.png
- /data/media/####/knowledge.html
- /data/media/####/knowledge_detail.html
- /data/media/####/loadings.scss
- /data/media/####/location-pointer.png
- /data/media/####/location.html
- /data/media/####/login.html
- /data/media/####/logo-white.png
- /data/media/####/logo.png
- /data/media/####/logof.png
- /data/media/####/manager_login.png
- /data/media/####/manager_logo.png
- /data/media/####/manifest.json
- /data/media/####/map-center.html
- /data/media/####/map-submap.html
- /data/media/####/map.html
- /data/media/####/mark.png
- /data/media/####/mark_r.png
- /data/media/####/markeorder.html
- /data/media/####/mixins.scss
- /data/media/####/mjs.js
- /data/media/####/modals.scss
- /data/media/####/msg.png
- /data/media/####/msg_1.png
- /data/media/####/msg_2.png
- /data/media/####/msg_3.png
- /data/media/####/msg_4.png
- /data/media/####/msg_no.png
- /data/media/####/mui-icons-extra.ttf
- /data/media/####/mui.css
- /data/media/####/mui.enterfocus.js
- /data/media/####/mui.extend.js
- /data/media/####/mui.indexedlist.css
- /data/media/####/mui.indexedlist.js
- /data/media/####/mui.js
- /data/media/####/mui.locker.js
- /data/media/####/mui.min.css
- /data/media/####/mui.min.js
- /data/media/####/mui.picker.css
- /data/media/####/mui.picker.js
- /data/media/####/mui.picker.min.css
- /data/media/####/mui.picker.min.js
- /data/media/####/mui.poppicker.css
- /data/media/####/mui.poppicker.js
- /data/media/####/mui.previewimage.js
- /data/media/####/mui.pullToRefresh.js
- /data/media/####/mui.pullToRefresh.material.js
- /data/media/####/mui.scss
- /data/media/####/mui.star.js
- /data/media/####/mui.ttf
- /data/media/####/mui.view.js
- /data/media/####/mui.zoom.js
- /data/media/####/my.html
- /data/media/####/my_appoint.html
- /data/media/####/my_avatar.html
- /data/media/####/my_bankcard.html
- /data/media/####/my_bankcard_add.html
- /data/media/####/my_collectservice.html
- /data/media/####/my_complain.html
- /data/media/####/my_complain_add.html
- /data/media/####/my_complain_detail.html
- /data/media/####/my_fav.html
- /data/media/####/my_follow.html
- /data/media/####/my_knowledge_paid.html
- /data/media/####/my_notification.html
- /data/media/####/my_orderdetail.html
- /data/media/####/my_orderlist.html
- /data/media/####/my_orderprogress.html
- /data/media/####/my_orderprojectdetail.html
- /data/media/####/my_projectrevieworder.html
- /data/media/####/my_purse.html
- /data/media/####/my_question.html
- /data/media/####/my_question_add.html
- /data/media/####/my_question_detail.html
- /data/media/####/my_question_pay.html
- /data/media/####/my_question_selecttype.html
- /data/media/####/my_revieworder.html
- /data/media/####/mycenter.js
- /data/media/####/nav.html
- /data/media/####/nav_input_baseinfo.html
- /data/media/####/nav_input_personalinfo.html
- /data/media/####/nav_input_specialcareinfo.html
- /data/media/####/nav_service.html
- /data/media/####/newappointment.mp3
- /data/media/####/newcomplain.mp3
- /data/media/####/neworder.mp3
- /data/media/####/news.html
- /data/media/####/news.jpg
- /data/media/####/news.js
- /data/media/####/news_details.html
- /data/media/####/newslist.html
- /data/media/####/normalize.scss
- /data/media/####/notification_center.html
- /data/media/####/notification_indicator.html
- /data/media/####/number.scss
- /data/media/####/nurse_details.html
- /data/media/####/nurselist.html
- /data/media/####/off-canvas.scss
- /data/media/####/orderdetail.html
- /data/media/####/orderlist.html
- /data/media/####/orderprojectdetail.html
- /data/media/####/os.scss
- /data/media/####/pagination.scss
- /data/media/####/passed.png
- /data/media/####/payshow.html
- /data/media/####/popovers.scss
- /data/media/####/popup.scss
- /data/media/####/postal.html
- /data/media/####/product.js
- /data/media/####/product01.jpg
- /data/media/####/product02.jpg
- /data/media/####/product03.jpg
- /data/media/####/product_default.jpg
- /data/media/####/productdata.html
- /data/media/####/products.html
- /data/media/####/products_details.html
- /data/media/####/progressbar.scss
- /data/media/####/proxy.properties
- /data/media/####/pullrefreshs.scss
- /data/media/####/push.scss
- /data/media/####/qihoo.png
- /data/media/####/qq.png
- /data/media/####/qrcodepay.html
- /data/media/####/query.html
- /data/media/####/query_results.html
- /data/media/####/radio.svg
- /data/media/####/radio0.svg
- /data/media/####/radio1.svg
- /data/media/####/recharge.html
- /data/media/####/reg.html
- /data/media/####/register.html
- /data/media/####/rem.scss
- /data/media/####/reviewdetail.html
- /data/media/####/reviewlist.html
- /data/media/####/sc_text_01.jpg
- /data/media/####/sc_text_11.jpg
- /data/media/####/sc_text_12.jpg
- /data/media/####/sc_text_21.jpg
- /data/media/####/sc_text_22.jpg
- /data/media/####/scroll.scss
- /data/media/####/segmented-controls.scss
- /data/media/####/select_benurseitem.html
- /data/media/####/select_dictionaryitem.html
- /data/media/####/select_hospital.html
- /data/media/####/select_language.html
- /data/media/####/select_location.html
- /data/media/####/select_project.html
- /data/media/####/select_radio_hospital.html
- /data/media/####/select_radio_project.html
- /data/media/####/select_workplace.html
- /data/media/####/serve_datetime.html
- /data/media/####/setting.html
- /data/media/####/sever_cont.html
- /data/media/####/sfzsl.jpg
- /data/media/####/sinaweibo.png
- /data/media/####/sjkj.app.eyouhu.com.db
- /data/media/####/slider-cell.scss
- /data/media/####/sliders.scss
- /data/media/####/specialdetail.html
- /data/media/####/speciallist.html
- /data/media/####/specialorder.html
- /data/media/####/specialorderdetail.html
- /data/media/####/specialorderlist.html
- /data/media/####/spend.html
- /data/media/####/switches.scss
- /data/media/####/tabbar.html
- /data/media/####/table-views.scss
- /data/media/####/tdata_SzD730
- /data/media/####/tdata_ZCi456
- /data/media/####/teacher_details.html
- /data/media/####/teacherappoint.html
- /data/media/####/teacherdata.html
- /data/media/####/teacherorderdetail.html
- /data/media/####/teacherorderlist.html
- /data/media/####/team_invite.html
- /data/media/####/team_validation.html
- /data/media/####/teamlist.html
- /data/media/####/template-core.js
- /data/media/####/template.html
- /data/media/####/template.js
- /data/media/####/template0.html
- /data/media/####/template1.html
- /data/media/####/template2.html
- /data/media/####/template3.html
- /data/media/####/template4.html
- /data/media/####/template_sub0.html
- /data/media/####/template_sub1.html
- /data/media/####/template_sub2.html
- /data/media/####/template_sub3.html
- /data/media/####/template_sub4.html
- /data/media/####/template_test.html
- /data/media/####/template_test_sub.html
- /data/media/####/test.log
- /data/media/####/text.scss
- /data/media/####/time_choose.html
- /data/media/####/title_bj.jpg
- /data/media/####/toast.scss
- /data/media/####/toutiao.png
- /data/media/####/type.scss
- /data/media/####/unlock.html
- /data/media/####/update.html
- /data/media/####/upload.jpg
- /data/media/####/uploader.js
- /data/media/####/user-photo.png
- /data/media/####/user_myAjax_Demo.js
- /data/media/####/utils.js
- /data/media/####/variables.scss
- /data/media/####/weixin.png
- /data/media/####/workinfo_base.html
- /data/media/####/workinfo_personal.html
- /data/media/####/workinfo_personal_sub.html
- /data/media/####/workinfo_specialcare.html
- /data/media/####/workinfo_specialcare_sub.html
- /data/media/####/workinfo_teacher.html
- /data/media/####/workinfo_teacher_sub.html
- /data/media/####/youb_bj.jpg
- /data/media/####/youb_top.jpg
- /data/media/####/youbi1.html
- /data/media/####/youbi_bj.jpg
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.igexin.sdk.PushService 24883 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu.so
- mount
- getuiext2
- libjiagu
- AES-ECB-PKCS5Padding
- AES-ECB-ZeroBytePadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding