Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) aries####.g2s.cn:80
- TCP(HTTP/1.1) sh.wagbr####.alibaba####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) sni.c####.q####.####.net:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) nav.cn.ron####.com:80
- TCP(HTTP/1.1) i####.g2s.cn:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(TLS/1.0) h####.b####.com:443
- TCP(TLS/1.0) schedul####.yo####.com:443
- TCP(TLS/1.0) 1####.217.17.46:443
- TCP(TLS/1.0) s####.cn.ron####.com:443
- TCP 1####.92.119.142:8621
- TCP c####.g####.ig####.com:5227
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.g2s.cn
- a####.u####.com
- and####.b####.qq.com
- aries####.g2s.cn
- c####.g####.ig####.com
- c-h####.g####.com
- h####.b####.com
- h5.yo####.com
- i####.g2s.cn
- log.u####.com
- nav.cn.ron####.com
- pub-####.qin####.com
- s####.cn.ron####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- tj.youza####.com
- aries####.g2s.cn/openads/getAppAdsList?clientType=####&uid=####
- i####.g2s.cn/zhs_yanfa_150820/ablecommons/demo/201808/10dab3ed3a6745638d...
- i####.g2s.cn/zhs_yanfa_150820/ablecommons/demo/201808/857deb06f5a4458193...
- i####.g2s.cn/zhs_yanfa_150820/ablecommons/demo/201808/8b18c83938ae4c0180...
- i####.g2s.cn/zhs_yanfa_150820/ablecommons/demo/201808/b6143071c495463591...
- i####.g2s.cn/zhs_yanfa_150820/ariescourse/demo/201808/0027a584a0f44e9cbb...
- i####.g2s.cn/zhs_yanfa_150820/ariescourse/demo/201808/5d4cd997527b4c0083...
- i####.g2s.cn/zhs_yanfa_150820/ariescourse/demo/201808/a33e1d71fbfd4b9ca9...
- i####.g2s.cn/zhs_yanfa_150820/ariescourse/demo/201808/c4d9b1febc47463b80...
- i####.g2s.cn/zhs_yanfa_150820/ariescourse/demo/201808/d3880ae66157419ab0...
- i####.g2s.cn/zhs_yanfa_150820/ariesmanageoperation/demo/201805/a604ecd56...
- i####.g2s.cn/zhs_yanfa_150820/ariesmanageoperation/demo/201806/cfe6d5482...
- i####.g2s.cn/zhs_yanfa_150820/ariesmanageoperation/demo/201807/5030863d5...
- i####.g2s.cn/zhs_yanfa_150820/ariesmanageoperation/demo/201807/8a9bc55d4...
- i####.g2s.cn/zhs_yanfa_150820/createcourse/demo/201808/3f70f30276cb4a628...
- i####.g2s.cn/zhs_yanfa_150820/createcourse/demo/201808/46e86836d9b3489a9...
- i####.g2s.cn/zhs_yanfa_150820/createcourse/demo/201808/5de55594412e466eb...
- i####.g2s.cn/zhs_yanfa_150820/createcourse/demo/201808/9a75f9294c724ab5b...
- i####.g2s.cn/zhs_yanfa_150820/createcourse/demo/201808/acc2ce16263249d1b...
- sh.wagbr####.alibaba####.com/bar/get/5aaa67fef43e486b980003b1/?ud_get=####
- sni.c####.q####.####.net/config/hz-hzv3.conf
- sni.c####.q####.####.net/tdata_YYn966
- sni.c####.q####.####.net/tdata_eOt091
- t####.c####.q####.####.com/tdata_EDT356
- a####.u####.com/app_logs
- and####.b####.qq.com/rqd/async?aid=####
- aries####.g2s.cn/about/queryAboutList
- aries####.g2s.cn/activity/activityByType?type=####
- aries####.g2s.cn/activity/teamLearning
- aries####.g2s.cn/ariesAudio/getAudioRecom
- aries####.g2s.cn/banner/listBannerData?type=####
- aries####.g2s.cn/discovery/discoveryBannerSort
- aries####.g2s.cn/discovery/listType?lastId=####&sourceId=####&type=####
- aries####.g2s.cn/interaction/dailyShowDynamicData?showIdList=####
- aries####.g2s.cn/interaction/dailyShowStaticData
- aries####.g2s.cn/queryAppVersionV2?clientType=####&versionCode=####
- aries####.g2s.cn/shopBook/commodityList
- aries####.g2s.cn/tmCourse/getCourseDetails?courseId=####
- aries####.g2s.cn/tmCourse/listOfType?typeId=####
- aries####.g2s.cn/vedioList?vedios=####
- c-h####.g####.com/api.php?format=####&t=####
- nav.cn.ron####.com/navipush.json
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/1004
- /data/data/####/Alvin2.xml
- /data/data/####/COUNTLY_STORE.xml
- /data/data/####/ContextData.xml
- /data/data/####/FwLog.xml
- /data/data/####/MultiDex.lock
- /data/data/####/RongPush.xml
- /data/data/####/RongPushAppConfig.xml
- /data/data/####/Statistics.xml
- /data/data/####/__Baidu_Stat_SDK_SendRem.xml
- /data/data/####/__local_ap_info_cache.json
- /data/data/####/__local_last_session.json
- /data/data/####/__local_stat_cache.json
- /data/data/####/__send_data_1534026504614
- /data/data/####/__send_data_1534026512340
- /data/data/####/__send_data_1534026519537
- /data/data/####/__send_data_1534026533623
- /data/data/####/aa13a97fa84c
- /data/data/####/baidu_mtj_sdk_record.xml
- /data/data/####/bugly_db_-journal
- /data/data/####/cache_sp.xml
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/com.youzan.mobile.AnalyticsPrefs.xml
- /data/data/####/com.zhihuishu.aries_preferences.xml
- /data/data/####/com_zhihuishu_aries_module_fragment_main_study_...ew.xml
- /data/data/####/crashrecord.xml
- /data/data/####/events
- /data/data/####/events-journal
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/greendao_2-journal
- /data/data/####/gx_sp.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libcuid.so
- /data/data/####/libjiagu812653718.so
- /data/data/####/local_crash_lock
- /data/data/####/locale.config.xml
- /data/data/####/multidex.version.xml
- /data/data/####/push.pid
- /data/data/####/push_daemon
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/qihoo_jiagu_crash_report.xml
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/tdata_YYn966
- /data/data/####/tdata_YYn966.jar
- /data/data/####/tdata_eOt091
- /data/data/####/tdata_eOt091.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_socialize.xml
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/.confd
- /data/media/####/.confd-journal
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.nomedia
- /data/media/####/.timestamp
- /data/media/####/02a3f3ee40140a74f249be437526e958c75c5bd25afeb2....0.tmp
- /data/media/####/03902dfef8d0759d31a8305ff23ac49f5d22a9874501e5....0.tmp
- /data/media/####/1939e129ce01ca0ddfe70fab6fa0c3fdf6549ce3f6aea7....0.tmp
- /data/media/####/1f9861becaefbdf7fe1216beadbbbf726c4f2efdd7cdd5....0.tmp
- /data/media/####/2857e53cbcd63744abd60d1524cc8e4b04a8dc6168142d....0.tmp
- /data/media/####/37feadec82f2de91b1a07b7374dfb37801d706daa12f09....0.tmp
- /data/media/####/38444efd70c837d65fea698a4ba7298043fc783d0f5a34....0.tmp
- /data/media/####/3e198be42b89011b68f9722bc15de81dbd2e0114d758c5....0.tmp
- /data/media/####/435cfd05388d664df2c44a780ff9ba5545cfb452facee7....0.tmp
- /data/media/####/4cdfaa7434e1b2cf2786711601ea336ec8d54f11802bb6....0.tmp
- /data/media/####/4d060fa709c0edb1eaafe1aa1782c1110125dec33209e3....0.tmp
- /data/media/####/4df38747d499032ced6d3592bb723609
- /data/media/####/60b859e805f7e9a873e0926d0b5612ee4327719947b16c....0.tmp
- /data/media/####/64351a4abd3e70194f9241156a7dcee7bc9d8cf2f5800d....0.tmp
- /data/media/####/64f51a126cf3c233b14e4c5b4635ecb6f96e16ebd323be....0.tmp
- /data/media/####/69622ca65963f07f126e3b1455ac13f433f93d209a063f....0.tmp
- /data/media/####/6d52769df00cbf32bf2629a693f2706137f437ceb1af91....0.tmp
- /data/media/####/78fedd2c4925b93088851f79470175d82e8e9d93508be3....0.tmp
- /data/media/####/79d48bc6f8703c3ee2e60fa2ddf1fa49786c2e6ba14f91....0.tmp
- /data/media/####/7c0fbf51937be296160ea1e03f5afe5f5677acb530a7c3....0.tmp
- /data/media/####/7d2409cc63dc2f66b4e08b358c024fc8d804bdd8bad479....0.tmp
- /data/media/####/7e82f28e0da66ce509df990fdf3db22a438bf1203a7c3b....0.tmp
- /data/media/####/7eb1f5494907811f9a7a8090f0083700556d4896ad281c....0.tmp
- /data/media/####/9ed751c47060840096abf4c1e4517d43ae426b348218b0....0.tmp
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/a27a3fd7fcd9b53779c9f86bbc6a7197fa6d3db400024d....0.tmp
- /data/media/####/app.db
- /data/media/####/b57740c0d65966ba54b91f12ded7aeefec6e3aea655588....0.tmp
- /data/media/####/b60cd28f8fa1d98618e397b4e215dd22d5658b38163ecd....0.tmp
- /data/media/####/bc215cd5f3fa5cca3ace87d7b49f4d7ee063394c7ac173....0.tmp
- /data/media/####/cd2ba6eaef2a725e528f43babde1ae14b55cc6470d2cb6....0.tmp
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.zhihuishu.aries.bin
- /data/media/####/com.zhihuishu.aries.db
- /data/media/####/d0637328c15ddab3edb7d581fdd7ccc4547cb7e40c4171....0.tmp
- /data/media/####/d18db3f9712ebaec146aa767bcb142a87411d8e385afce....0.tmp
- /data/media/####/d61110da839eac0679fd106ccf37d502930e6a0c30f86f....0.tmp
- /data/media/####/d7c391c98d7d53243304104ceaf2d76291eb16dadc96b9....0.tmp
- /data/media/####/d98377c220a85a9fbfdc8acd65b2084ca1a95786b2910e....0.tmp
- /data/media/####/db375a6e58e5230d98d254ead82f06d0beb09380320949....0.tmp
- /data/media/####/dfed30c8b21d124b3df6beed8cf40caadd093502146ec0....0.tmp
- /data/media/####/e882b78b697721db58421696755a9a666e7a90605ed9f2....0.tmp
- /data/media/####/e9294406893a532ffaf5e4986fb5009a0510e0f9592df9....0.tmp
- /data/media/####/ebbb045d668e41388580c3942897d05270e7721d56968f....0.tmp
- /data/media/####/effa4c54b23d70118becd019bea1f652135d7dc4f6e583....0.tmp
- /data/media/####/html_data
- /data/media/####/html_data_tmp
- /data/media/####/journal
- /data/media/####/journal.tmp
- /data/media/####/tdata_YYn966
- /data/media/####/tdata_eOt091
- /data/media/####/test.log
- /system/bin/chmod 777 <Package Folder>/app_lib/x86/push_daemon
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- <Package Folder>/app_lib/x86/push_daemon <Package> io.rong.push.PushService /storage/emulated/0/.rongLock
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.getui.GeTuiPushService 24936 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu812653718.so
- getprop
- getprop ro.build.display.id
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.miui.ui.version.name
- getprop ro.smartisan.version
- getprop ro.vivo.os.version
- logcat -d -v threadtime
- mount
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.getui.GeTuiPushService 24936 300 0
- Bugly
- RongIMLib
- getuiext2
- ijkffmpeg
- libjiagu812653718
- native-lib
- push
- AES-CBC-NoPadding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-NoPadding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding