Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) api.s####.mob.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) s####.tc.qq.com:80
- TCP(HTTP/1.1) peopl####.oss-cn-####.aliy####.com:80
- TCP(HTTP/1.1) a####.exc.mob.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) 1####.70.14.60:8004
- TCP(HTTP/1.1) v####.pe####.cn:80
- TCP(HTTP/1.1) m.d####.mob.com:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) sdk-ope####.g####.com:80
- TCP(HTTP/1.1) fanews-####.oss-cn-####.aliy####.com:80
- TCP(HTTP/1.1) v####.c####.com.cn:80
- TCP(TLS/1.0) st####.ml####.cc:443
- TCP(TLS/1.0) s####.ml####.cc:443
- TCP(TLS/1.0) s.ml####.cc:443
- TCP(TLS/1.0) 2####.58.211.110:443
- TCP(TLS/1.0) redi####.network####.com:443
- TCP(TLS/1.0) dc1.network####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP t####.nz4.ig####.com:5224
- TCP 43.2####.145.8:5227
- 7j####.c####.z0.####.com
- a####.exc.mob.com
- a####.u####.com
- api.s####.mob.com
- c-h####.g####.com
- dc1.network####.com
- fanews-####.oss-cn-####.aliy####.com
- m.d####.mob.com
- peopl####.oss-cn-####.aliy####.com
- r####.wx.qq.com
- redi####.network####.com
- s####.ml####.cc
- s.ml####.cc
- sdk-ope####.g####.com
- sdk.c####.ig####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- st####.ml####.cc
- t####.nz4.g####.net
- t####.nz4.ge####.com
- t####.nz4.ig####.com
- v####.c####.com.cn
- v####.pe####.cn
- v####.pe####.cn
- vs####.c####.com.cn
- fanews-####.oss-cn-####.aliy####.com/null_56015.gif?action=####&app_vers...
- fanews-####.oss-cn-####.aliy####.com/null_56015.gif?action=####&page=###...
- fanews-####.oss-cn-####.aliy####.com/null_56015.gif?action=####&utdid=##...
- m.d####.mob.com/v2/cconf?appkey=####&plat=####&apppkg=####&appver=####&n...
- peopl####.oss-cn-####.aliy####.com/people/cdrb_2_201503/20181107/cdrb_2_...
- peopl####.oss-cn-####.aliy####.com/people/cdrb_2_201503/20181111/cdrb_2_...
- peopl####.oss-cn-####.aliy####.com/people/cdrb_2_201503/20181119/cdrb_2_...
- peopl####.oss-cn-####.aliy####.com/people/cdrb_2_201503/20181121/cdrb_2_...
- peopl####.oss-cn-####.aliy####.com/people/cdrb_2_201503/20181123/cdrb_2_...
- peopl####.oss-cn-####.aliy####.com/people/cdrb_2_201503/20181124/cdrb_2_...
- peopl####.oss-cn-####.aliy####.com/people/cdrb_2_201503/20181125/cdrb_2_...
- peopl####.oss-cn-####.aliy####.com/people/cdrb_2_201503/20181129/cdrb_2_...
- peopl####.oss-cn-####.aliy####.com/people/cdrb_2_201503/20181203/cdrb_2_...
- s####.tc.qq.com/open/js/jweixin-1.0.0.js
- t####.c####.q####.####.com/tdata_Soq141
- t####.c####.q####.####.com/tdata_vxj811
- ti####.c####.l####.####.com/config/bj-bjv6.conf
- ti####.c####.l####.####.com/config/hz-bjv6.conf
- v####.c####.com.cn/comment/commentlist?articleId=####&count=####&maxId=#...
- v####.c####.com.cn/content/detail?categoryId=####&articleId=####&sysCode...
- v####.c####.com.cn/content/getcontentlist?categoryId=####&count=####&pla...
- v####.c####.com.cn/menu/menulist?devicetype=####&parentid=####&version=#...
- v####.c####.com.cn/views/counts?articleIds=####&platform=####&pjCode=###...
- v####.c####.com.cn/views/coverpages?platform=####&pjCode=####&device_siz...
- v####.c####.com.cn/views/version?appversion=####&platform=####&pjCode=##...
- v####.pe####.cn/
- v####.pe####.cn/comment/commentlist?client_ver=####&device_size=####&art...
- v####.pe####.cn/content/detail?client_ver=####&device_size=####&articleI...
- v####.pe####.cn/content/subjectlist?articleId=####&platform=####&pjCode=...
- v####.pe####.cn/content/subjectlist?client_ver=####&device_size=####&art...
- v####.pe####.cn/prod/common/api/paper/paperdetail.php?client_ver=####&de...
- v####.pe####.cn/prod/common/api/paper/paperlist.php?date=####&pagesSize=...
- v####.pe####.cn/prod/common/api/paper/prepaper.php?paperName=####&platfo...
- v####.pe####.cn/prod/common/img/data/paper/cdrb//paper/data/user/demo/ho...
- v####.pe####.cn/static/css/app.48a680bc39d13061cbac2b6f53841048.css
- v####.pe####.cn/static/img/app_down_guid_adr.664d1d7.png
- v####.pe####.cn/static/img/down_top@3x.13b3aa2.png
- v####.pe####.cn/static/img/pic_default_common.e75d77a.png
- v####.pe####.cn/static/img/special_topic_placeholder.85346bb.png
- v####.pe####.cn/static/js/app.f86abc07df42662147af.js
- v####.pe####.cn/static/js/manifest.af1965424a0c0b6fdfb2.js
- v####.pe####.cn/static/js/vendor.2c5267162e46606af949.js
- v####.pe####.cn/static/weixin/jssdk.php?callback=####&url=####&_=####
- v####.pe####.cn/undefined
- a####.exc.mob.com/errconf
- a####.u####.com/app_logs
- api.s####.mob.com/conf5
- api.s####.mob.com/conn
- api.s####.mob.com/snsconf
- c-h####.g####.com/api.php?format=####&t=####
- sdk-ope####.g####.com/api.php?format=####&t=####
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/.lock
- /data/data/####/.mrecord
- /data/data/####/.mrlock
- /data/data/####/.statistics
- /data/data/####/0987fd94dc66ee5404a6a20a8c880475.0.tmp
- /data/data/####/0987fd94dc66ee5404a6a20a8c880475.1.tmp
- /data/data/####/255284597b1ca52edeb7b482ac872541.0.tmp
- /data/data/####/255284597b1ca52edeb7b482ac872541.1.tmp
- /data/data/####/31edd280fa6b4c6850cea9b8ab4f74da.0.tmp
- /data/data/####/31edd280fa6b4c6850cea9b8ab4f74da.1.tmp
- /data/data/####/56fcdadfdcbd8625eca1c89a006b469b.0.tmp
- /data/data/####/56fcdadfdcbd8625eca1c89a006b469b.1.tmp
- /data/data/####/5c62d62000e0a8a7db5be38173474bc5.0.tmp
- /data/data/####/5c62d62000e0a8a7db5be38173474bc5.1.tmp
- /data/data/####/62626a8afdfd36e4305870cad63be43c.0.tmp
- /data/data/####/62626a8afdfd36e4305870cad63be43c.1.tmp
- /data/data/####/681c39eef2653907d0654c54ec42d194.0.tmp
- /data/data/####/681c39eef2653907d0654c54ec42d194.1.tmp
- /data/data/####/80d411ebcf5a2257104744f3709ecbb1.0.tmp
- /data/data/####/80d411ebcf5a2257104744f3709ecbb1.1.tmp
- /data/data/####/INSTALLATION-744d9fc3-5dbd-3edd-a589-56d77bdb0e5d
- /data/data/####/NBSUserAction
- /data/data/####/ThrowalbeLog.db-journal
- /data/data/####/WebViewSettings.xml
- /data/data/####/a3fc8e43354383311997c6342d1b16aa.0.tmp
- /data/data/####/a3fc8e43354383311997c6342d1b16aa.1.tmp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/cd7d80962c4a32b92c5daa54e8e37443.0.tmp
- /data/data/####/cd7d80962c4a32b92c5daa54e8e37443.1.tmp
- /data/data/####/com.networkbench.agent.impl.v2_com.chengdudaily...ty.xml
- /data/data/####/config.xml
- /data/data/####/config_noclear.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/ddfb3a47b9523f21477aa04d397efacb.0.tmp
- /data/data/####/ddfb3a47b9523f21477aa04d397efacb.1.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f9e52d310bedc9d4263bd9ce5f0b034b.0.tmp
- /data/data/####/f9e52d310bedc9d4263bd9ce5f0b034b.1.tmp
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/f_00000b
- /data/data/####/f_00000c
- /data/data/####/f_00000d
- /data/data/####/f_00000e
- /data/data/####/f_00000f
- /data/data/####/f_000010
- /data/data/####/f_000011
- /data/data/####/f_000012
- /data/data/####/f_000013
- /data/data/####/f_000014
- /data/data/####/f_000015
- /data/data/####/f_000016
- /data/data/####/f_000017
- /data/data/####/f_000018
- /data/data/####/f_000019
- /data/data/####/f_00001a
- /data/data/####/f_00001b
- /data/data/####/f_00001c
- /data/data/####/f_00001d
- /data/data/####/f_00001e
- /data/data/####/f_00001f
- /data/data/####/f_000020
- /data/data/####/f_000021
- /data/data/####/f_000022
- /data/data/####/f_000023
- /data/data/####/f_000024
- /data/data/####/f_000025
- /data/data/####/f_000026
- /data/data/####/f_000027
- /data/data/####/f_000028
- /data/data/####/f_000029
- /data/data/####/f_00002a
- /data/data/####/f_00002b
- /data/data/####/f_00002c
- /data/data/####/f_00002d
- /data/data/####/f_00002e
- /data/data/####/f_00002f
- /data/data/####/f_000030
- /data/data/####/f_000031
- /data/data/####/f_000032
- /data/data/####/f_000033
- /data/data/####/f_000034
- /data/data/####/f_000035
- /data/data/####/f_000036
- /data/data/####/f_000037
- /data/data/####/f_000038
- /data/data/####/f_000039
- /data/data/####/f_00003a
- /data/data/####/f_00003b
- /data/data/####/f_00003c
- /data/data/####/f_00003d
- /data/data/####/f_00003e
- /data/data/####/f_00003f
- /data/data/####/f_000040
- /data/data/####/f_000041
- /data/data/####/f_000042
- /data/data/####/f_000043
- /data/data/####/f_000044
- /data/data/####/f_000045
- /data/data/####/f_000046
- /data/data/####/f_000047
- /data/data/####/f_000048
- /data/data/####/f_000049
- /data/data/####/f_00004a
- /data/data/####/f_00004b
- /data/data/####/f_00004c
- /data/data/####/f_00004d
- /data/data/####/f_00004e
- /data/data/####/fa2e4d822738528dd5ab857c4c42857e.0.tmp
- /data/data/####/fa2e4d822738528dd5ab857c4c42857e.1.tmp
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libjiagu24573087.so
- /data/data/####/mob_commons_1.xml
- /data/data/####/mob_sdk_exception_1.xml
- /data/data/####/multidex.version.xml
- /data/data/####/mwsdk_analytics.db-journal
- /data/data/####/persistent_data.xml
- /data/data/####/primary.db-journal
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/share_sdk_1.xml
- /data/data/####/sharesdk.db-journal
- /data/data/####/tdata_Soq141
- /data/data/####/tdata_Soq141.jar
- /data/data/####/tdata_vxj811
- /data/data/####/tdata_vxj811.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/.dic_lock
- /data/media/####/.duid
- /data/media/####/.globalLock
- /data/media/####/.nulplt
- /data/media/####/.pkg_lock
- /data/media/####/.rcTag
- /data/media/####/.rc_lock
- /data/media/####/06vNH94fR8UXJgrh8WI1Z7kQHLw.1157521279.tmp
- /data/media/####/2NX3_yaiIU_MFkdikNEOsPsLGcU.2092100158.tmp
- /data/media/####/2bc1ebe56da6d15f5d78c2a0481273e1
- /data/media/####/4dIGepETNB3qtP-8bu8jtq0Dh90.-187555290.tmp
- /data/media/####/4db2c1d3f8a0a01035532cc97312621e
- /data/media/####/8hvW7lOnsrKB9lpWZstB6kJM-t0.-1077350301.tmp
- /data/media/####/BgaAmJ0BgXFzp9pU0WVfZRP8p-Y.-2061085197.tmp
- /data/media/####/FdD7t0tGjFPh9CpakODNjuY6uBM.-751993718.tmp
- /data/media/####/QDAmAPLBSFqn1fIi_mc_9VwK3a0.-1805278366.tmp
- /data/media/####/VMOtlhtKhY01ek5ONifyg6t07dw.-1735773182.tmp
- /data/media/####/W0KfNF1qCPOBDiXZS4hAYHpv7xE.-1144514611.tmp
- /data/media/####/WWyw7B_-ARR68B310uwwOTzc-mM.-2057703373.tmp
- /data/media/####/XYACE6chGo7bMipZAQUI5lSuBVc.-1004353283.tmp
- /data/media/####/YO-mbUNj57L1EbIM1bB_lFvc3Tw.-1462687640.tmp
- /data/media/####/YSWru2UN2VL9pXB8jTXhABOlPTQ.-1030091412.tmp
- /data/media/####/a358CqPayrlg_-AraKr97_fX6ak.1768632856.tmp
- /data/media/####/aFaie5jF2t826onb0GFLfu7WUiM.-1031845369.tmp
- /data/media/####/app.db
- /data/media/####/com.chengdudaily.activity.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/comment_logo.png
- /data/media/####/dqikj94PvunuDXLuzx1chXMeGTY.1730786827.tmp
- /data/media/####/ePgAs4nJ3EsWYOuGcDuihUATVe0.-220705052.tmp
- /data/media/####/fLgEkSPCY36NBYcRlcRNONsqxpk.-976693962.tmp
- /data/media/####/gov_logo.png
- /data/media/####/ic_launcher.png
- /data/media/####/lr863uXPdCHFkjwtJ5L-e2_mGX0.-743088825.tmp
- /data/media/####/nQITahSW6Oh2ameoYsgyLeVkNyk.619481289.tmp
- /data/media/####/paper_cache_data
- /data/media/####/paper_history_cache_data
- /data/media/####/praise.dat
- /data/media/####/sbxnQQUIY3Cn6Hpi3q1YeebZv0U.1279163365.tmp
- /data/media/####/splash_ad
- /data/media/####/t_a9rdl5kgB9qekUel_Rb130kBI.633044629.tmp
- /data/media/####/tdata_Soq141
- /data/media/####/tdata_vxj811
- /data/media/####/test.log
- /data/media/####/wxV1JuIMnYqWgIyoNgwTAMhTKGc.-319653282.tmp
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.igexin.sdk.PushService 25553 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu24573087.so
- sh
- getuiext2
- imagepipeline
- libjiagu24573087
- neh
- AES-CBC-PKCS7Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS7Padding
- AES-ECB-NoPadding