Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) c####.g####.com:80
- TCP(HTTP/1.1) q####.c####.l####.####.com:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) b####.g####.com:80
- TCP(HTTP/1.1) ap####.g####.com:80
- TCP(HTTP/1.1) cdn-sdk####.g####.com.####.com:80
- TCP(HTTP/1.1) gs.g####.com:80
- TCP(TLS/1.0) api.zhuliqi####.com:443
- TCP(TLS/1.0) mtjso####.b####.com:443
- TCP(TLS/1.0) one####.gee####.com:443
- TCP(TLS/1.0) h####.b####.com:443
- TCP(TLS/1.0) dxp.b####.com:443
- TCP(TLS/1.0) i####.zhuliqi####.com:443
- TCP(TLS/1.0) gs.g####.com:443
- TCP(TLS/1.0) 2####.107.41.32:443
- TCP cm-1####.ig####.com:5225
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.u####.com
- ap####.g####.com
- api.zhuliqi####.com
- b####.g####.com
- b####.g####.com
- c####.g####.com
- c####.g####.com
- c####.g####.com
- c-h####.g####.com
- cdn-sdk####.g####.com
- cm-1####.ig####.com
- dxp.b####.com
- gs.g####.com
- h####.b####.com
- i####.zhuliqi####.com
- mtjso####.b####.com
- one####.gee####.com
- sdk-ope####.g####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- b####.g####.com/api/addr.htm
- cdn-sdk####.g####.com.####.com/tdata_EDB102
- cdn-sdk####.g####.com.####.com/tdata_fPG280
- cdn-sdk####.g####.com.####.com/tdata_pZO822
- cdn-sdk####.g####.com.####.com/tdata_uED964
- q####.c####.l####.####.com/config/hz-hzv6.conf
- q####.c####.l####.####.com/tdata_tYM194
- a####.u####.com/app_logs
- ap####.g####.com/bd
- ap####.g####.com/rp
- b####.g####.com/api.php?format=####&t=####
- b####.g####.com/api.php?format=####&t=####&d=####&k=####
- c####.g####.com/api.php?format=####&t=####
- gs.g####.com/geshu/sdk/getBaseConfs
- gs.g####.com/geshu/sdkStatistics/bd
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/7c62884cc30f
- /data/data/####/A3AEECD8.dex
- /data/data/####/Geetest_OneLogin.xml
- /data/data/####/MultiDex.lock
- /data/data/####/WindVane_wv_main_configcommonwv-data
- /data/data/####/WindVane_wv_main_configdomainwv-data
- /data/data/####/__Baidu_Stat_SDK_SendRem.xml
- /data/data/####/__local_ap_info_cache.json
- /data/data/####/__local_last_session.json
- /data/data/####/__local_stat_cache.json
- /data/data/####/__local_stat_full_cache.json
- /data/data/####/__send_data_1579309846374
- /data/data/####/__send_data_1579309846435
- /data/data/####/__send_data_1579309851846
- /data/data/####/baidu_mtj_sdk_record.xml
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/com.zlqb.app_preferences.xml
- /data/data/####/daa28f6bc27aa16ea86de16a23c62f5f6de690431c439a2....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gin.db-journal
- /data/data/####/gis.db-journal
- /data/data/####/gtc.db-journal
- /data/data/####/gx_sp.xml
- /data/data/####/ias.db-journal
- /data/data/####/ias_sp.xml
- /data/data/####/ias_sp.xml.bak
- /data/data/####/imei.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libcuid.so
- /data/data/####/libjiagu-393502113.so
- /data/data/####/multidex.version.xml
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/pushservice__local_last_session.json
- /data/data/####/pushservice__local_stat_cache.json
- /data/data/####/run.pid
- /data/data/####/sobot_config.xml
- /data/data/####/tdata_fPG280
- /data/data/####/tdata_fPG280.jar
- /data/data/####/tdata_pZO822-1940621960.tmp
- /data/data/####/tdata_pZO822.jar
- /data/data/####/tdata_uED964
- /data/data/####/tdata_uED964.jar
- /data/data/####/trace_circle.data
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_general_config.xml.bak
- /data/data/####/umeng_it.cache
- /data/data/####/update.xml
- /data/data/####/webview.db-journal
- /data/data/####/wv_web_info.dat
- /data/media/####/.confd
- /data/media/####/.confd-journal
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.timestamp
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.zlqb.app.bin
- /data/media/####/com.zlqb.app.db
- /data/media/####/com.zlqb.app_.db
- /data/media/####/onelogin_log.txt
- /data/media/####/tdata_fPG280
- /data/media/####/tdata_pZO822
- /data/media/####/tdata_uED964
- /data/media/####/test.log
- /system/bin/cat /proc/cpuinfo
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.GeTPushService 24173 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- getprop ro.build.display.id
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.miui.ui.version.name
- getprop ro.smartisan.version
- getprop ro.vivo.os.version
- mount
- sh
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.GeTPushService 24173 300 0
- A3AEECD8
- getuiext2
- libjiagu-393502113
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-CFB-NoPadding
- AES-ECB-PKCS5Padding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding