Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) qin####.com.www.####.com:80
- TCP(HTTP/1.1) sdk-ope####.g####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) thi####.q####.cn:80
- TCP(HTTP/1.1) 1####.wx.qinz####.cn:80
- TCP(HTTP/1.1) rp-na####.ron####.com:80
- TCP(HTTP/1.1) cdnst####.ley####.com:80
- TCP(TLS/1.0) wild####.q####.cn.####.net:443
- TCP(TLS/1.0) s####.cn.ron####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5226
- TCP 1####.92.22.171:8626
- 1####.wx.qinz####.cn
- 7j####.c####.z0.####.com
- a####.exc.mob.com
- c####.g####.ig####.com
- c####.g####.ig####.com
- c-h####.g####.com
- cdnst####.ley####.com
- m####.q####.cn
- nav.cn.ron####.com
- pub-####.qin####.com
- s####.cn.ron####.com
- sdk-ope####.g####.com
- sdk.c####.ig####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- thi####.q####.cn
- 1####.wx.qinz####.cn/mobile/qzy/113841/12/apistatic/getlist.html?type=##...
- 1####.wx.qinz####.cn/mobile/qzy/113841/12/apistatic/getnotice.html
- 1####.wx.qinz####.cn/mobile/qzy/113841/12/apistatic/placeMore.html?type=...
- 1####.wx.qinz####.cn/mobile/qzy/113841/12/apistatic/productinfo.html?ID=...
- 1####.wx.qinz####.cn/mobile/qzy/113841/12/apistatic/yxproductMore.html?t...
- cdnst####.ley####.com/upload/10021/qzyplace/201904251626207548.png@1e_20...
- cdnst####.ley####.com/upload/10021/qzyproduct/201803081152488009.png@1e_...
- cdnst####.ley####.com/upload/10021/qzyproduct/201803091050039261.png@1e_...
- cdnst####.ley####.com/upload/10021/qzyproduct/201806291650515652.jpg@1e_...
- cdnst####.ley####.com/upload/10021/qzyproduct/201810151620471231.png@1e_...
- cdnst####.ley####.com/upload/10021/qzyproduct/201810161108263149.png@1e_...
- cdnst####.ley####.com/upload/10021/qzyproduct/201902272012178142.png@1e_...
- cdnst####.ley####.com/upload/10021/qzyproduct/201905081737503311.png@1e_...
- qin####.com.www.####.com/tdata_EDT369
- t####.c####.q####.####.com/config/hz-hzv6.conf
- t####.c####.q####.####.com/tdata_FhD658
- t####.c####.q####.####.com/tdata_QWd236
- t####.c####.q####.####.com/tdata_oAh725
- t####.c####.q####.####.com/tdata_vHH584
- thi####.q####.cn/mmopen/vi_32/DYAIOgq83eq9NAbfA8kPdW53hY0uibRW8cIf740C40...
- thi####.q####.cn/mmopen/vi_32/DYAIOgq83eqMZofjXGvtAAWu8L8fhWxe9CRwLAf0AI...
- thi####.q####.cn/mmopen/vi_32/DYAIOgq83erwEaKSKVia6zmqDKWUxaUVQ1aBfxcPC9...
- c-h####.g####.com/api.php?format=####&t=####
- rp-na####.ron####.com/navipush.json
- sdk-ope####.g####.com/api.php?format=####&t=####
- sdk-ope####.g####.com/api.php?format=####&t=####&d=####&k=####
- /data/data/####/.duid
- /data/data/####/.jg.ic
- /data/data/####/.lock
- /data/data/####/.vpl_lock
- /data/data/####/044d5032eb116c96321a894f3e9a151804c88c2e10e54e4....0.tmp
- /data/data/####/096f34418c78dda6ac5af700e5b79797a1e1e273f14bfb0....0.tmp
- /data/data/####/185b824642c7ceaa711fd594fb0ee4d1ef1d47a7a567334....0.tmp
- /data/data/####/1b05f64dea4071e18ea0173c6caf5fee7cefea9c3ee7205....0.tmp
- /data/data/####/2ab819cf5347622903288cff6cb7ac82.0.tmp
- /data/data/####/2ab819cf5347622903288cff6cb7ac82.1.tmp
- /data/data/####/3357c9488d2ecb4b52181628541d3ab7.0.tmp
- /data/data/####/3357c9488d2ecb4b52181628541d3ab7.1.tmp
- /data/data/####/3826b9a2241eda2243924eb91c8b6413164373eede013d0....0.tmp
- /data/data/####/508fc78039a548fdc11840e73851a41e.0.tmp
- /data/data/####/508fc78039a548fdc11840e73851a41e.1.tmp
- /data/data/####/50b8e630b70862344ecefb4d29215f67.0.tmp
- /data/data/####/50b8e630b70862344ecefb4d29215f67.1.tmp
- /data/data/####/541753851689fbd92b381bbf99a45818017a54730531bc8....0.tmp
- /data/data/####/55ab38d171ab5f76983a24a2181a64cc205bf9759b7ed1c....0.tmp
- /data/data/####/6378e8841b4db96ceef62bf667d6b83d1a5f7ef6acbd4b4....0.tmp
- /data/data/####/6536e3556132cd59e6a01f416de1d76cfe46aab9ee9a602....0.tmp
- /data/data/####/6e28323f344b6f998e7fd8645249f17e82ca29c7f941628....0.tmp
- /data/data/####/7131dbb2b60fbca47a6d656e6912fd340a5378338cc3699....0.tmp
- /data/data/####/7222edb0c6bda08096f9d96462224142.0.tmp
- /data/data/####/7222edb0c6bda08096f9d96462224142.1.tmp
- /data/data/####/7706bc35d1632aedb7957518e6629b9aa6da4c2bc7f5efa....0.tmp
- /data/data/####/98f5b3ba76b8b1186adb65d9e8d63d1339718abf7260b24....0.tmp
- /data/data/####/9f262c8438bbd4da4c5f35adfd4b665ff38dce1490f6e8e....0.tmp
- /data/data/####/COUNTLY_STORE.xml
- /data/data/####/FwLog.xml
- /data/data/####/MultiDex.lock
- /data/data/####/RongPush.xml
- /data/data/####/RongPushAppConfig.xml
- /data/data/####/Statistics.xml
- /data/data/####/ThrowalbeLog.db-journal
- /data/data/####/b46313aad1f230fa8beb9b2a9a32bb9466de859cfffee20....0.tmp
- /data/data/####/c16f023e435ca4543cae303a0690a1ebac15d057febf68e....0.tmp
- /data/data/####/cd43728219d6
- /data/data/####/ceea3b0e66113a94aed9c4814747e88f7b23f74ebf6d717....0.tmp
- /data/data/####/d0391b44d6cd69ad2f3ede670de06e4bd38e6067472eba6....0.tmp
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/dd8c9183659677340d48cfd4a91a6247987dacbc6c2297d....0.tmp
- /data/data/####/domain_1
- /data/data/####/ed163860a95423bd6ebcfb1dab5c30aef378916af003204....0.tmp
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/f_00000b
- /data/data/####/f_00000c
- /data/data/####/f_00000d
- /data/data/####/f_00000e
- /data/data/####/f_00000f
- /data/data/####/f_000010
- /data/data/####/f_000011
- /data/data/####/f_000012
- /data/data/####/f_000013
- /data/data/####/f_000014
- /data/data/####/f_000015
- /data/data/####/f_000016
- /data/data/####/f_000017
- /data/data/####/f_000018
- /data/data/####/f_000019
- /data/data/####/f_00001a
- /data/data/####/f_00001b
- /data/data/####/f_00001c
- /data/data/####/f_00001d
- /data/data/####/f_00001e
- /data/data/####/f_00001f
- /data/data/####/f_000020
- /data/data/####/f_000021
- /data/data/####/f_000022
- /data/data/####/f_000023
- /data/data/####/f_000024
- /data/data/####/f_000025
- /data/data/####/f_000026
- /data/data/####/f_000027
- /data/data/####/f_000028
- /data/data/####/f_000029
- /data/data/####/f_00002a
- /data/data/####/f_00002b
- /data/data/####/f_00002c
- /data/data/####/f_00002d
- /data/data/####/f_00002e
- /data/data/####/f_00002f
- /data/data/####/f_000030
- /data/data/####/f_000031
- /data/data/####/f_000032
- /data/data/####/f_000033
- /data/data/####/f_000034
- /data/data/####/f_000035
- /data/data/####/f_000036
- /data/data/####/f_000037
- /data/data/####/ff12cdb117e07a1dc10175a28a7394e5.0.tmp
- /data/data/####/ff12cdb117e07a1dc10175a28a7394e5.1.tmp
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gkt-journal
- /data/data/####/gx_sp.xml
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libjiagu-1358608971.so
- /data/data/####/locale.config.xml
- /data/data/####/mob_commons_1
- /data/data/####/multidex.version.xml
- /data/data/####/pangxie.xml
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushk.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/tdata_FhD658
- /data/data/####/tdata_FhD658.jar
- /data/data/####/tdata_QWd236
- /data/data/####/tdata_QWd236.jar
- /data/data/####/tdata_oAh725
- /data/data/####/tdata_oAh725.jar
- /data/data/####/tdata_vHH584
- /data/data/####/tdata_vHH584.jar
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/.artc_lock
- /data/media/####/.di
- /data/media/####/.dic_lock
- /data/media/####/.du_lock
- /data/media/####/.duid
- /data/media/####/.globalLock
- /data/media/####/.gm_lock
- /data/media/####/.im_lock
- /data/media/####/.lesd_lock
- /data/media/####/.mn_-1464060969
- /data/media/####/.nomedia
- /data/media/####/.pkg_lock
- /data/media/####/.pkgs_lock
- /data/media/####/.rc_lock
- /data/media/####/.slw
- /data/media/####/.ss_lock
- /data/media/####/.wkl
- /data/media/####/app.db
- /data/media/####/com.fanwang.qzy.bin
- /data/media/####/com.fanwang.qzy.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/gkt-journal
- /data/media/####/gktper
- /data/media/####/tdata_FhD658
- /data/media/####/tdata_QWd236
- /data/media/####/tdata_oAh725
- /data/media/####/tdata_vHH584
- /data/media/####/test.log
- /system/bin/cat /proc/cpuinfo
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.PushService 24505 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- mount
- sh
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.PushService 24505 300 0
- RongIMLib
- getuiext2
- libjiagu-1358608971
- AES-CFB-NoPadding
- AES-ECB-PKCS5Padding
- AES-ECB-PKCS7Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-ECB-NoPadding
- AES-ECB-PKCS5Padding