Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) a####.exc.mob.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) api.j####.com:80
- TCP(HTTP/1.1) ws.j####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) sni.c####.q####.####.net:80
- TCP(TLS/1.0) 1####.217.17.142:443
- TCP(TLS/1.0) img.j####.com:443
- TCP(TLS/1.0) redi####.network####.com:443
- TCP(TLS/1.0) dc1.network####.com:443
- TCP(TLS/1.0) dxp.b####.com:443
- TCP(TLS/1.0) h####.b####.com:443
- TCP c####.g####.ig####.com:5225
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.exc.mob.com
- and####.b####.qq.com
- api.j####.com
- c####.g####.ig####.com
- c-h####.g####.com
- dc1.network####.com
- dxp.b####.com
- h####.b####.com
- img.j####.com
- mt####.go####.com
- redi####.network####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- ws.j####.com
- api.j####.com/v2/ad/slide_list?position=####&source=####&version=####
- api.j####.com/v2/app/new/nowActivityList?source=####&version=####
- api.j####.com/v3/topic/by_tag_list?tag=####&limit=####&topic_id=####&fla...
- api.j####.com/v4/user/follow/recommends?page=####&limit=####&source=####...
- api.j####.com/v6/catalogue/list?source=####&version=####
- api.j####.com/v6/information/list?catelogue_key=####&limit=####&informat...
- sni.c####.q####.####.net/config/hz-hzv3.conf
- sni.c####.q####.####.net/tdata_YYn966
- sni.c####.q####.####.net/tdata_eOt091
- ws.j####.com/ws
- a####.exc.mob.com/errconf
- and####.b####.qq.com/rqd/async?aid=####
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.duid
- /data/data/####/.jg.ic
- /data/data/####/.lock
- /data/data/####/.vpl_lock
- /data/data/####/05f08f4f583f7b4fd30e300a9a4aaa75e8ecf178401eb50....0.tmp
- /data/data/####/075dc3907dd7aef2ecde8d50aad55c124d954cf8cc342c8....0.tmp
- /data/data/####/0e4e790edef2ba9eb9147d482554f5d2.0.tmp
- /data/data/####/0e4e790edef2ba9eb9147d482554f5d2.1.tmp
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/12b4bcb24e5bfaf6281cc874b4f79af8a5a5dd3e3e86260....0.tmp
- /data/data/####/1afd8661c37c31246ee661a3aa236f55.0.tmp
- /data/data/####/1afd8661c37c31246ee661a3aa236f55.1.tmp
- /data/data/####/240732a26249959ffe55c6c09e05c32a1b9a62a50fdf831....0.tmp
- /data/data/####/252862daca4a9e10a9cbeb64b25e9aa5e704884ad7ad28a....0.tmp
- /data/data/####/2787b2493a7bfd28fb26e3c20e8f2ced3db0a2e308242be....0.tmp
- /data/data/####/28aac9e7ee3ad9dab737a52d397d0322c8ae4b1165033a7....0.tmp
- /data/data/####/313631e76145f3b9d17209b47df798cbd35c8d4513126e1....0.tmp
- /data/data/####/326b3554e62bfda28f8bb4f1227a1602c9f066d95fdcf76....0.tmp
- /data/data/####/43ad4fa0ab488b1500d35bd0fe8b129b.0.tmp
- /data/data/####/43ad4fa0ab488b1500d35bd0fe8b129b.1.tmp
- /data/data/####/5ec129c6baa9c181c59cb17538beb04be6e1b47149e2b7b....0.tmp
- /data/data/####/608b39fba34611b3bbeb930f087a90666226560abe41c9a....0.tmp
- /data/data/####/74dfb2a512137f618dc32e62a687ef031cb9e4934760630....0.tmp
- /data/data/####/862c82d8489e18f2189f18be9fd1771b7fa3f06c1fec6a8....0.tmp
- /data/data/####/MultiDex.lock
- /data/data/####/NBSAnrStore.xml
- /data/data/####/NBSCrashStore.xml
- /data/data/####/ThrowalbeLog.db-journal
- /data/data/####/__Baidu_Stat_SDK_SendRem.xml
- /data/data/####/__local_ap_info_cache.json
- /data/data/####/__local_last_session.json
- /data/data/####/__local_stat_cache.json
- /data/data/####/__send_data_1533198471580
- /data/data/####/a9fd277893bc1a755a84037c07ddcbeafde3ab70f1e263c....0.tmp
- /data/data/####/ad1c3766e4830a671d94eec806ab24f4394e355481a6fc2....0.tmp
- /data/data/####/b0ff33440ac16246dd01d49e9dad9c69695a09992026e66....0.tmp
- /data/data/####/baddb7ca05799d74d7729c3aa547bf55e03e7644e302ab4....0.tmp
- /data/data/####/baidu_mtj_sdk_record.xml
- /data/data/####/bd5468710c79bbafc608c51c71c95f8566d471fbbfe5c96....0.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/c08fb1b2b972e49d16de51d834d42bd4964e8dc91907b7a....0.tmp
- /data/data/####/c5a84899e46214c33cfe9979e91cd6b8dfad47d23fd99b4....0.tmp
- /data/data/####/c6068ae33dce69f74b9a27d3f5e891c547dacfa54dc18f8....0.tmp
- /data/data/####/com.google.android.gms.appid-no-backup
- /data/data/####/com.google.android.gms.appid.xml
- /data/data/####/com.google.android.gms.measurement.prefs.xml
- /data/data/####/com.jinse.app.BETA_VALUES.xml
- /data/data/####/com.networkbench.agent.impl.v2_com.jinse.app.xml
- /data/data/####/crashrecord.xml
- /data/data/####/e6d850db6fc92771e9dbc6f34041b518ca9338c4d20e796....0.tmp
- /data/data/####/ed7aa071b0291b4b158f2a191c57957e594830901133711....0.tmp
- /data/data/####/f310913ddab0489662dfe36d38fe788d674987b547d63a1....0.tmp
- /data/data/####/f3bd46acef4c8258e6b3d605661ae93a369835f33fae7d0....0.tmp
- /data/data/####/fe144a1216a590ae2969c35e6adbb8cb.0.tmp
- /data/data/####/fe144a1216a590ae2969c35e6adbb8cb.1.tmp
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/google_app_measurement_local.db
- /data/data/####/google_app_measurement_local.db-journal
- /data/data/####/gx_sp.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/jinse.xml
- /data/data/####/journal.tmp
- /data/data/####/libcuid.so
- /data/data/####/libjiagu258041337.so
- /data/data/####/local_crash_lock
- /data/data/####/mob_commons_1
- /data/data/####/mob_sdk_exception_1
- /data/data/####/mtj_autoTracker.js
- /data/data/####/multidex.version.xml
- /data/data/####/notes-db-journal
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/tdata_YYn966
- /data/data/####/tdata_YYn966.jar
- /data/data/####/tdata_eOt091
- /data/data/####/tdata_eOt091.jar
- /data/data/####/trace_circle.data
- /data/media/####/.artc_lock
- /data/media/####/.confd
- /data/media/####/.confd-journal
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.di
- /data/media/####/.dic_lock
- /data/media/####/.duid
- /data/media/####/.globalLock
- /data/media/####/.im_lock
- /data/media/####/.lecd
- /data/media/####/.lesd_lock
- /data/media/####/.mn_-1464060969
- /data/media/####/.nomedia
- /data/media/####/.pkg_lock
- /data/media/####/.pkgs_lock
- /data/media/####/.rc_lock
- /data/media/####/.slw
- /data/media/####/.ss_lock
- /data/media/####/.timestamp
- /data/media/####/01c8f90ba41db7bce2057c5608f81dd7.0.tmp
- /data/media/####/01c8f90ba41db7bce2057c5608f81dd7.1.tmp
- /data/media/####/app.db
- /data/media/####/b33274d7f5ac21c97a1a4dabe9899398.0.tmp
- /data/media/####/b33274d7f5ac21c97a1a4dabe9899398.1.tmp
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.jinse.app.bin
- /data/media/####/com.jinse.app.db
- /data/media/####/journal.tmp
- /data/media/####/tdata_YYn966
- /data/media/####/tdata_eOt091
- /data/media/####/test.log
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.JinSePushService 24269 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu258041337.so
- getprop
- getprop ro.build.display.id
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.miui.ui.version.name
- getprop ro.smartisan.version
- getprop ro.vivo.os.version
- Bugly
- crash_analysis
- getuiext2
- libjiagu258041337
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS5Padding
- AES-ECB-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-ECB-NoPadding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding