Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) l####.tbs.qq.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) a.appj####.com:80
- TCP(HTTP/1.1) oss.newairc####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) h5.newairc####.com:80
- TCP(TLS/1.0) h5.newairc####.com:443
- TCP(TLS/1.0) oss.newairc####.com:443
- TCP(TLS/1.0) s####.ml####.cc:443
- TCP c####.g####.ig####.com:5225
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.u####.com
- a.appj####.com
- c####.g####.ig####.com
- c-h####.g####.com
- h5.newairc####.com
- img.newairc####.com
- l####.tbs.qq.com
- oss.newairc####.com
- s####.ml####.cc
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- h5.newairc####.com/api/getArticleAdv?sid=####&cid=####&v=####
- h5.newairc####.com/api/getComments?sid=####&rootID=####&sourceType=####&...
- oss.newairc####.com/xarb/article/201812/02/c5490486.json
- oss.newairc####.com/xarb/pic/201809/17/00c0628b-b265-4dbb-a2b7-a0551ba09...
- oss.newairc####.com/xarb/pic/201809/17/3147a03c-d0a1-4c17-9687-94ca6ef9d...
- oss.newairc####.com/xarb/pic/201809/17/98c4a7c2-4734-42ef-a7c0-16f6b8774...
- oss.newairc####.com/xarb/pic/201809/17/b154c0a3-22df-473a-b098-34d1f53a5...
- oss.newairc####.com/xarb/pic/201809/17/d88c1325-be42-4621-ae79-f9eb41580...
- oss.newairc####.com/xarb/pic/201812/02/0d0dfb00-39e7-4187-ba37-0d68d1dcd...
- oss.newairc####.com/xarb/pic/201812/02/bc47c996-580a-4705-a858-e7c864274...
- t####.c####.q####.####.com/tdata_Soq141
- t####.c####.q####.####.com/tdata_vxj811
- a####.u####.com/app_logs
- a.appj####.com/ad-service/ad/mark
- c-h####.g####.com/api.php?format=####&t=####
- h5.newairc####.com/api/event
- l####.tbs.qq.com/ajax?c=####&k=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/-11299929
- /data/data/####/-1312716470
- /data/data/####/-1383162662
- /data/data/####/-1384058372
- /data/data/####/-1384085252
- /data/data/####/-1384087295
- /data/data/####/-1384089129
- /data/data/####/-1384089152
- /data/data/####/-1384089153
- /data/data/####/-1392773489
- /data/data/####/-1397480940
- /data/data/####/-196126607
- /data/data/####/-2110936501
- /data/data/####/-2141956308
- /data/data/####/-341729750
- /data/data/####/-804016753
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/.log.lock
- /data/data/####/.log.ls
- /data/data/####/027d7afe44d4ce4cfe8b88cd0418430e11046197d19bed2....0.tmp
- /data/data/####/0680fa1dda00d3622183437d27610f6527bd11eafa12f85....0.tmp
- /data/data/####/07d2b7f177576492e968db5007be2804a0e36b7654f2603....0.tmp
- /data/data/####/07f996825312f8c78ecb404d223b06290c537140af7fc28....0.tmp
- /data/data/####/082d3bf370d737442fe9366e8fa3160bd4542ef20c5d56e....0.tmp
- /data/data/####/1194397804
- /data/data/####/11a991e6b111a0628e6bebddc291df42a8ba1cdcbbfe0d3....0.tmp
- /data/data/####/1389023919
- /data/data/####/1526646622
- /data/data/####/1682015639
- /data/data/####/1695857311
- /data/data/####/1a9045b1aadb5523603a659daa96922b27eb51c93936108....0.tmp
- /data/data/####/2014087981
- /data/data/####/259ffb8142efe7b8e6ae3a768bf858763cc05d4bdf3d50b....0.tmp
- /data/data/####/2abed11802f61173ea0b0a546e732aeac9f2c66a30227f5....0.tmp
- /data/data/####/2f256593aa6b8b194bc3ec51ddd6a505796eb57c6387fb4....0.tmp
- /data/data/####/337525857
- /data/data/####/33979d06bf881b57519317839f5c4144240e5af940e253a....0.tmp
- /data/data/####/33aa27ebebc940e9d2bb721a8345e84559c1d0cbae70087....0.tmp
- /data/data/####/386967948
- /data/data/####/3999207b2e952ebd855998cea56dae78aa46b613fb9a657....0.tmp
- /data/data/####/3e8378d55c980e4c99962ed81cf4ed452acc0934c13d6e7....0.tmp
- /data/data/####/3f1c9486ab162f8e461497a4549940d351063c914191aaf....0.tmp
- /data/data/####/44198bfc442ac6f66c858bf8dcc37cf3b8dbb5011eec70f....0.tmp
- /data/data/####/4695cc0db7229f732dbecf83b0ceda4d79018e8958fb053....0.tmp
- /data/data/####/46a8dc6e3ccdf26452a97d77725f68fbcf09b4fcea72e39....0.tmp
- /data/data/####/47e51d0cd987a257380de14418b5e18a43bf5b45aad8170....0.tmp
- /data/data/####/47ea25b5faaf7ec7c5fb62363b0f1d7149ab3ffa124fad3....0.tmp
- /data/data/####/49
- /data/data/####/492026243
- /data/data/####/4c4b1805692560c88521abbfcc9d7d8e6a46f8688dc2d85....0.tmp
- /data/data/####/4c70b3f0dd9d5701e00c2b5b999880a89e6225675588d00....0.tmp
- /data/data/####/4ffe943ff8d316d19eeab98c82ab59762483e0e7d0b33ac....0.tmp
- /data/data/####/542c5cd808daba4b7dc0f9d6822716a1b6d50a2648eb72e....0.tmp
- /data/data/####/5490486_article.js
- /data/data/####/55c39e1c4fec3b919a7a2528f4c055017cb834c3bd15476....0.tmp
- /data/data/####/5894f1a33fd222395c6124627ea104b7db9dc632a02b499....0.tmp
- /data/data/####/58f1741c066b7519d55ecdc9bfaf7476e1d16abe8a73570....0.tmp
- /data/data/####/5f3914d0e5ef8b56977c190238d8384ba7b4bb1cc5e5709....0.tmp
- /data/data/####/61f5b0f97553e25133b682a92c86532d3013821ce2694c7....0.tmp
- /data/data/####/6ac4a0585e191d8ec8f248742cbfec1f18a86e92a67e344....0.tmp
- /data/data/####/7193cea95adb3b40a77568db6100700d8d487b7baaa44dd....0.tmp
- /data/data/####/722433770
- /data/data/####/756723899df8f060efff2e875a5f2e549d50ac665f10dff....0.tmp
- /data/data/####/7949f2b835f2c8ba5a2e0eccb82b4feefd1ca8b8be76d17....0.tmp
- /data/data/####/7c9b478dfc39e9364cd30fd97c7d4f3edd90dda468c81cf....0.tmp
- /data/data/####/7e6fa1f6bf3e998ded445577460ee2d6aaf4cc9a6a4c97a....0.tmp
- /data/data/####/7f51ca594424f82182ae8469eaedf7792146b8a3945663f....0.tmp
- /data/data/####/82d56e0aa17fd777c80ce27da745360dbb9dfd8a9208564....0.tmp
- /data/data/####/8a0bc54e753747bb3d748e3f121f9c5903e415ec1acb361....0.tmp
- /data/data/####/9152da2f102189afaff2c7620cbf1a0f3299ef6a8a484b6....0.tmp
- /data/data/####/99d52a776536fd370e3e2a68cf3f70da9b93ae792ad5bda....0.tmp
- /data/data/####/9be6c2f0ed59aba2e23857a3dfb204aebee00bce0d6e515....0.tmp
- /data/data/####/9d4e049f78b23fe136bde2b602b6890245a1960fad1e6b2....0.tmp
- /data/data/####/FZLTXHK-GBK_YS.ttf
- /data/data/####/QQ_3x.png
- /data/data/####/a0d82ea34bd9d6cc4571ad2d5194a72b9d3129fe574f599....0.tmp
- /data/data/####/a1058256375d0d8fd585b2cf5d05d8e5af19b9cc7228686....0.tmp
- /data/data/####/a52953942b2f5d56dc24aa6a6e7d3f348226c022efef46c....0.tmp
- /data/data/####/ae12ead33bb9be14b593f78af06020a4dab41e0940c58ef....0.tmp
- /data/data/####/amazeui.min.css
- /data/data/####/amazeui.min.js
- /data/data/####/angular1.4.6.min.js
- /data/data/####/article.js
- /data/data/####/b460913f17207ee247e6f44c7b41be2a3d165c952f0e57a....0.tmp
- /data/data/####/b8690dfb31e85ce59432dcbce5ddbfb01ec4723e659798d....0.tmp
- /data/data/####/b8eaba33c75703dd4f311e9ecba2657745eead51813c0cc....0.tmp
- /data/data/####/baed7fac99d1d9b02315aab970be94cd88a51172403942e....0.tmp
- /data/data/####/base.css
- /data/data/####/c2385714f448ebee8bee53c46c572a4d0d676d643f95f4a....0.tmp
- /data/data/####/c58dda480fa48f5cd4cef2924f357398d988af8d5fe60f9....0.tmp
- /data/data/####/c7a49aaad8fd412bcb2a406ee8abff79ac4219a45d4c7a2....0.tmp
- /data/data/####/c802e627651fae951d723af3d4e605ef7b5ca6a2ff0331b....0.tmp
- /data/data/####/c909d702456d5b828299591f3168000927d475a30dbf262....0.tmp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/ced8225991347a63e5dbafa78848ea4fe1f217a6b03ca15....0.tmp
- /data/data/####/cf312e326139f7e49513ab1530ac5c501255ccabe668dce....0.tmp
- /data/data/####/columnId.xml
- /data/data/####/core_info
- /data/data/####/d75d0e5f3b4c7288ebe0bac3431f59a7640f01c1e4dc4d1....0.tmp
- /data/data/####/daa8bd71c81533c42e062bbcd3205d2355d6c415c3033f7....0.tmp
- /data/data/####/dad2f822fdd6261d45fbde270e42ddbca94f77ff02a1dfb....0.tmp
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/db_founder0-journal
- /data/data/####/dcf1e429b4439f8753ceea18a7c3810645e8c116bc73a96....0.tmp
- /data/data/####/dd5543b7d9fe0405d10dc87e5fcd9342ce6982bdbdcc025....0.tmp
- /data/data/####/debug.conf
- /data/data/####/device_id.xml.xml
- /data/data/####/e4a1269940541c59f83a57570cb38bb6340d648749708c0....0.tmp
- /data/data/####/e4d7f34c87dbf4161d606cfa628b81b32a43191616ed32a....0.tmp
- /data/data/####/ea81dd66a118a9be56594a9b215f53278c7120a91ecc8d7....0.tmp
- /data/data/####/ef33ff34e2fa8d3a4c1e63aaa7a9a61d8aaedfc0842635f....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f0606838fa422c59f3371e975632577d7470f27933f0010....0.tmp
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/fc03dc7c5fa0a4683bb0894e1474283015dff1e95af3b97....0.tmp
- /data/data/####/ff55243094b85d510005bedd7566c585d2972861696387e....0.tmp
- /data/data/####/file__0.localstorage-journal
- /data/data/####/fontawesome-webfont.ttf
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/great_button.png
- /data/data/####/great_cancel_button.png
- /data/data/####/gx_sp.xml
- /data/data/####/helpMsg.xml
- /data/data/####/icon-images.png
- /data/data/####/icon_audio_play.png
- /data/data/####/icon_file.png
- /data/data/####/icon_file_down.png
- /data/data/####/icon_meta_voice.png
- /data/data/####/icon_praise.png
- /data/data/####/icon_praiseStar.png
- /data/data/####/icon_selector_normal.png
- /data/data/####/icon_selector_press.png
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/jg_app_update_settings_random.xml
- /data/data/####/journal.tmp
- /data/data/####/jquery.min2.2.0.js
- /data/data/####/js.combine.min.js
- /data/data/####/libjiagu.so
- /data/data/####/loading.png
- /data/data/####/multidex.version.xml
- /data/data/####/mwsdk_analytics.db-journal
- /data/data/####/news_detail.html
- /data/data/####/persistent_data.xml
- /data/data/####/play.png
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/reader.db-journal
- /data/data/####/run.pid
- /data/data/####/sanjiaoxing.png
- /data/data/####/shareTimeline_3x.png
- /data/data/####/sina_3x.png
- /data/data/####/tbs_download_config.xml
- /data/data/####/tbs_download_stat.xml
- /data/data/####/tbscoreinstall.txt
- /data/data/####/tbslock.txt
- /data/data/####/tdata_Soq141
- /data/data/####/tdata_Soq141.jar
- /data/data/####/tdata_vxj811
- /data/data/####/tdata_vxj811.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/video.png
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/wx_3x.png
- /data/media/####/.nomedia
- /data/media/####/app.db
- /data/media/####/com.founder.meixian.bin
- /data/media/####/com.founder.meixian.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/journal.tmp
- /data/media/####/localTemplate.zip
- /data/media/####/tdata_Soq141
- /data/media/####/tdata_vxj811
- /data/media/####/test.log
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.push.GeTuiPushService 24913 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu.so
- getprop ro.product.cpu.abi
- getuiext2
- libjiagu
- AES-CBC-PKCS7Padding
- RSA-ECB-NoPadding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS7Padding