Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) sdk-ope####.g####.com:80
- TCP(HTTP/1.1) a####.exc.mob.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) z####.e23.cn:80
- TCP(HTTP/1.1) i####.e23.cn:80
- TCP(TLS/1.0) api.map.b####.com:443
- TCP(TLS/1.0) h####.b####.com:443
- TCP(TLS/1.0) 2####.58.208.110:443
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5227
- 7j####.c####.z0.####.com
- a####.exc.mob.com
- api.map.b####.com
- c####.g####.ig####.com
- c-h####.g####.com
- h####.b####.com
- i####.e23.cn
- sdk-ope####.g####.com
- sdk.c####.ig####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- yigo####.e23.cn
- z####.e23.cn
- i####.e23.cn/63ab688906880221ed0c865a0c4ec9ad
- t####.c####.q####.####.com/config/hz-hzv6.conf
- t####.c####.q####.####.com/tdata_LsR975
- t####.c####.q####.####.com/tdata_RyW085
- t####.c####.q####.####.com/tdata_YYn966
- t####.c####.q####.####.com/tdata_lOE499
- z####.e23.cn/api/activity/check-status?platform=####×tamp=####&id=#...
- z####.e23.cn/api/activity/view?id=####
- z####.e23.cn/api/content/index?timestamp=####&perpage=####&page=####&pla...
- z####.e23.cn/api/content/view?id=####
- z####.e23.cn/api/site/app-cover?size=####&type=####
- z####.e23.cn/assets/424af743/css/activity-news.css
- z####.e23.cn/assets/424af743/css/activity-recruit.css
- z####.e23.cn/assets/424af743/css/base.css
- z####.e23.cn/assets/424af743/css/story-detail.css
- z####.e23.cn/assets/424af743/js/rem.js
- z####.e23.cn/assets/5d01649f/css/bootstrap.css
- z####.e23.cn/assets/9bb2fc8c/yii.js
- z####.e23.cn/assets/b135eaa1/jquery.js
- z####.e23.cn/images/cover_android0.png
- z####.e23.cn/uploads/image/20190107/1546845484646925.jpg
- z####.e23.cn/uploads/image/20190107/1546845668467828.jpg
- z####.e23.cn/uploads/image/20190107/1546845731938216.jpg
- z####.e23.cn/uploads/image/20190107/1546845907727412.jpg
- z####.e23.cn/uploads/images/20180725/1532518914743517.png
- z####.e23.cn/uploads/images/20180725/1532518930580979.jpg
- a####.exc.mob.com/errconf
- c-h####.g####.com/api.php?format=####&t=####
- sdk-ope####.g####.com/api.php?format=####&t=####
- z####.e23.cn/api/api&c=content&a=check_version
- /data/data/####/.jg.ic
- /data/data/####/.lock
- /data/data/####/01fe2dcb935aa5cd93f2138bad1ce1dbea6f0e63b5991fa....0.tmp
- /data/data/####/0aed46f1a991d99ee070597f03c7bc5a62e19413880ce57....0.tmp
- /data/data/####/234d789f64b7d250e0d738bb32e902657e83c787c481e0c....0.tmp
- /data/data/####/39e52e682f15e93865af83079061d4c21b986959bc77e63....0.tmp
- /data/data/####/3f163efe9d92680f070ce636ce78eb6978405c83c63ff6c....0.tmp
- /data/data/####/68240e9afd3b8020b43c25176e35ee8d315313d3f4d0174....0.tmp
- /data/data/####/ThrowalbeLog.db-journal
- /data/data/####/__Baidu_Stat_SDK_SendRem.xml
- /data/data/####/__local_ap_info_cache.json
- /data/data/####/__local_last_session.json
- /data/data/####/__local_stat_cache.json
- /data/data/####/__send_data_1558469294570
- /data/data/####/a45773eae0fe451057475d4cf115c113748d92c2a8af29c....0.tmp
- /data/data/####/aacd662ac8b0b385c54f025d53c997295b2677c4154e3cd....0.tmp
- /data/data/####/authStatus_cn.e23.volunteer.xml
- /data/data/####/authStatus_cn.e23.volunteer;pushservice.xml
- /data/data/####/b8167654ea6e308141619690777d917297c510fafcb677f....0.tmp
- /data/data/####/baidu_mtj_sdk_record.xml
- /data/data/####/bdc3e5120b0f27fb3bbdfede5519199c6462c6d4579520e....0.tmp
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/e9d07055733b723b075566988283abea7f2c75eb777624f....0.tmp
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/ffd56c193b9fbeb04954e5939e984781b0ee74c7ba75d23....0.tmp
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gkt-journal
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libcuid.so
- /data/data/####/libjiagu1812818403.so
- /data/data/####/mob_sdk_exception_1
- /data/data/####/multidex.version.xml
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushk.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/tdata_LsR975
- /data/data/####/tdata_LsR975.jar
- /data/data/####/tdata_RyW085
- /data/data/####/tdata_RyW085.jar
- /data/data/####/tdata_YYn966
- /data/data/####/tdata_YYn966.jar
- /data/data/####/tdata_lOE499
- /data/data/####/tdata_lOE499.jar
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/.confd
- /data/media/####/.confd-journal
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.dic_lock
- /data/media/####/.nomedia
- /data/media/####/.nulplt
- /data/media/####/.pkg_lock
- /data/media/####/.rcTag
- /data/media/####/.rc_lock
- /data/media/####/.timestamp
- /data/media/####/app.db
- /data/media/####/cn.e23.volunteer.bin
- /data/media/####/cn.e23.volunteer.db
- /data/media/####/cn_e23_wei_hai_logo.png
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/gkt-journal
- /data/media/####/gktper
- /data/media/####/tdata_LsR975
- /data/media/####/tdata_RyW085
- /data/media/####/tdata_YYn966
- /data/media/####/tdata_lOE499
- /data/media/####/test.log
- /system/bin/cat /proc/cpuinfo
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.PushService 24499 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- getprop ro.build.display.id
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.miui.ui.version.name
- getprop ro.smartisan.version
- getprop ro.vivo.os.version
- sh
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.PushService 24499 300 0
- BaiduMapSDK_base_v5_1_0
- crash_analysis
- getuiext2
- libjiagu1812818403
- neh
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS5Padding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS5Padding