Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) c####.baidust####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) p1.b####.com:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) mo####.b####.com:80
- TCP(HTTP/1.1) wap.n.sh####.com:80
- TCP(HTTP/1.1) 1####.41.114.131:8080
- TCP(HTTP/1.1) oc.u####.com:80
- TCP(HTTP/1.1) ub####.baidust####.com:80
- TCP(HTTP/1.1) wn.pos.b####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) sni.c####.q####.####.net:80
- TCP(TLS/1.0) apiwire####.58.com:443
- TCP(TLS/1.0) sdl.5####.com.####.com:443
- TCP(TLS/1.0) c####.baidust####.com:443
- TCP(TLS/1.0) hm.b####.com:443
- TCP(TLS/1.0) mobads-####.b####.com:443
- TCP c####.g####.ig####.com:5227
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.u####.com
- apiwire####.58.com
- c####.baidust####.com
- c####.baidust####.com
- c####.g####.ig####.com
- c-h####.g####.com
- hm.b####.com
- m.b####.com
- mo####.b####.com
- mobads-####.b####.com
- oc.u####.com
- p1.b####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- sdl.5####.com.cn
- ub####.baidust####.com
- wn.pos.b####.com
- c####.baidust####.com/cpro/exp/mob_exp/img/app_lu/slow_change.jpg
- c####.baidust####.com/cpro/expire/time2.js
- c####.baidust####.com/cpro/ui/luWrap/right.png
- c####.baidust####.com/cpro/ui/noexpire/css/2.1.5/img/mob-adIcon_2x.png
- c####.baidust####.com/cpro/ui/noexpire/css/2.1.5/img/mob-logo_2x.png
- c####.baidust####.com/cpro/ui/noexpire/css/2.1.5/template.min.css
- c####.baidust####.com/cpro/ui/noexpire/img/2.0.1/bd-logo4.png
- c####.baidust####.com/cpro/ui/noexpire/img/2.0.3/rs_img/image_sdk_2_1_bg...
- c####.baidust####.com/cpro/ui/noexpire/img/2.0.3/rs_img/tuwen_sdk_bc.png
- c####.baidust####.com/cpro/ui/noexpire/js/2.0.1/oojs.js
- c####.baidust####.com/cpro/ui/noexpire/js/rs/business/1.0.2/anticheat_mo...
- c####.baidust####.com/cpro/ui/noexpire/js/rs/template/component/componen...
- c####.baidust####.com/cpro/ui/noexpire/js/rs/template/logoIsShowEvents_1...
- c####.baidust####.com/cpro/ui/noexpire/js/rs/template/slide.min.js
- c####.baidust####.com/cpro/ui/noexpire/ws/3rd/esl_b150bbf.js
- c####.baidust####.com/cpro/ui/noexpire/ws/css/base_f258e90.css
- c####.baidust####.com/cpro/ui/noexpire/ws/css/ui_b99a586.css
- c####.baidust####.com/cpro/ui/noexpire/ws/images/logo/logo-mob_94da672.png
- c####.baidust####.com/cpro/ui/noexpire/ws/images/tpl/arrow_e2e41e6.png
- c####.baidust####.com/cpro/ui/noexpire/ws/images/tpl/background_e28498a....
- c####.baidust####.com/cpro/ui/noexpire/ws/images/tpl/black-dot_7119229.png
- c####.baidust####.com/cpro/ui/noexpire/ws/images/tpl/green-dot_0d815dc.png
- c####.baidust####.com/cpro/ui/noexpire/ws/images/tpl/yellow-dot_39a020d....
- c####.baidust####.com/cpro/ui/noexpire/ws/js/anticheatMob_776abb3.js
- c####.baidust####.com/cpro/ui/noexpire/ws/js/util_f199241.js
- c####.baidust####.com/cpro/ui/noexpire/ws/widget/logo_5b92275.js
- c####.baidust####.com/sync.htm?cproid=####
- mo####.b####.com/ads/ads.appcache
- mo####.b####.com/ads/css/min/main.css
- mo####.b####.com/ads/index.htm
- mo####.b####.com/ads/js/ads.trunk.js
- mo####.b####.com/ads/js/c.js
- mo####.b####.com/ads/pa/8/__pasys_remote_banner.php?bdr=####&os=####&v=#...
- mo####.b####.com/ads/pa/8/__xadsdk__remote__8.7054.jar
- mo####.b####.com/ads/preload.php
- mo####.b####.com/cpro/ui/mads.php?code2=####&b1526453964007=####
- mo####.b####.com/cpro/ui/mads.php?code2=####&b1526453981421=####
- mo####.b####.com/cpro/ui/mads.php?code2=####&b1526453981427=####
- mo####.b####.com/cpro/ui/mads.php?code2=####&b1526453982137=####
- p1.b####.com/509332/11b3ea06c9759743.png
- sni.c####.q####.####.net/config/hz-hzv3.conf
- sni.c####.q####.####.net/tdata_MkX219
- sni.c####.q####.####.net/tdata_iGj879
- ub####.baidust####.com/media/v1/0f0005256UveFhERYNkIvs.jpg
- ub####.baidust####.com/media/v1/0f000KHQSO5pdBvtU8I3Yf.jpg
- ub####.baidust####.com/media/v1/0f000KHQSl8zCRytU8I340.jpg
- ub####.baidust####.com/media/v1/0f000ZoHL-b4r5fTredb_f.jpg
- ub####.baidust####.com/media/v1/0f000Zsr2A6vwfZgTanr7f.jpg
- ub####.baidust####.com/media/v1/0f000ab8U4HCfx_V1wUDFf.jpg
- wap.n.sh####.com/mobads.php?K000000####&ck=####
- wn.pos.b####.com/adx.php?c=####&ext=####
- a####.u####.com/app_logs
- c-h####.g####.com/api.php?format=####&t=####
- oc.u####.com/v2/check_config_update
- oc.u####.com/v2/get_update_time
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/ApplicationCache.db-journal
- /data/data/####/__sdk_ral.xml
- /data/data/####/__sdk_remote_dl_2.xml
- /data/data/####/__x_adsdk_agent_header__.xml
- /data/data/####/__xadsdk__remote__final__builtin__.jar
- /data/data/####/__xadsdk__remote__final__builtinversion__.jar
- /data/data/####/__xadsdk__remote__final__e2ed8db2-bf9e-46b4-be6...93.jar
- /data/data/####/__xadsdk__remote__final__running__.jar
- /data/data/####/__xadsdk_downloaded__version__.xml
- /data/data/####/baidu_mobads_activate.xml
- /data/data/####/com.baidu.mobads.loader.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/exchangeIdentity.json
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/f_00000b
- /data/data/####/f_00000c
- /data/data/####/f_00000d
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/http_mobads.baidu.com_0.localstorage-journal
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/install_sent.xml
- /data/data/####/libjiagu61318751.so
- /data/data/####/onlineconfig_agent_online_setting_com.sshuai.lhzs.xml
- /data/data/####/peizhi.xml
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/tdata_MkX219
- /data/data/####/tdata_MkX219.jar
- /data/data/####/tdata_iGj879
- /data/data/####/tdata_iGj879.jar
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/.nomedia
- /data/media/####/42d8adbcbb1881b94821986b65b83d00.apk.tmp
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.sshuai.lhzs.bin
- /data/media/####/com.sshuai.lhzs.db
- /data/media/####/tdata_MkX219
- /data/media/####/tdata_iGj879
- /data/media/####/test.log
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.sshuai.BroadcastReceiver.MyGetuiPushService 24513 300 0
- cat /proc/cpuinfo
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu61318751.so
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/com.sshuai.BroadcastReceiver.MyGetuiPushService 24513 300 0
- getuiext2
- libjiagu61318751
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- RSA-ECB-PKCS1Padding