Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) a####.exc.mob.com:80
- TCP(HTTP/1.1) wild####.q####.cn.####.net:80
- TCP(HTTP/1.1) www.l####.com:80
- TCP(HTTP/1.1) nav.cn.ron####.com:80
- TCP(HTTP/1.1) sni.c####.q####.####.net:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) esf.l####.com:80
- TCP(TLS/1.0) api.map.b####.com:443
- TCP(TLS/1.0) mp.we####.qq.com:443
- TCP(TLS/1.0) wild####.q####.cn.####.net:443
- TCP(TLS/1.0) s####.tc.qq.com:443
- TCP(TLS/1.0) b####.weixinb####.com:443
- TCP(TLS/1.0) s####.cn.ron####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP 1####.92.86.86:8610
- TCP c####.g####.ig####.com:5227
- TCP c####.g####.ig####.com:5226
- 2####.l####.com
- 7j####.c####.z0.####.com
- a####.exc.mob.com
- a####.u####.com
- api.map.b####.com
- b####.weixinb####.com
- c####.g####.ig####.com
- c####.g####.ig####.com
- c-h####.g####.com
- esf.l####.com
- m####.q####.cn
- m.l####.com
- mp.we####.qq.com
- nav.cn.ron####.com
- r####.wx.qq.com
- s####.cn.ron####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- www.l####.com
- z####.f####.net
- esf.l####.com//editor/uploadfile/20180820101422690.jpg
- esf.l####.com//editor/uploadfile/20180822114208678.jpg
- esf.l####.com//editor/uploadfile/20180822115111779.jpg
- esf.l####.com//editor/uploadfile/20180822115924633.jpg
- esf.l####.com/Api/AppData/getAppTabIcon
- esf.l####.com/Api/AppData/getIndexData?page=####&offset=####
- esf.l####.com/Api/AppData/getPowerImage
- esf.l####.com/data/upload/admin/20180613/5b208c96ec0b1.png
- esf.l####.com/data/upload/default/20180524/5b0627bcbb203.jpg
- esf.l####.com/three/housepic/20151210111957.jpg
- esf.l####.com/three/housepic/2017424141226.jpg
- esf.l####.com/three/housepic/201839141957.jpg
- esf.l####.com/three/housepic/201839142052.jpg
- esf.l####.com/three/housepic/2018518151033.jpg
- sni.c####.q####.####.net/config/hz-hzv3.conf
- sni.c####.q####.####.net/tdata_rRG322
- sni.c####.q####.####.net/tdata_vHH584
- wild####.q####.cn.####.net/mmbiz_jpg/LHicPIzeV8Lc8Bra2qZG4XcLbwrrggJ6Udi...
- wild####.q####.cn.####.net/mmbiz_png/DbN1ibSM2Hy9YktwqSzWzaI5yiaFnlyV9hZ...
- www.l####.com/Api/AppData/new_jiaodiantu?prjid=####
- www.l####.com/Api/AppData/new_lpmx?prjid=####
- www.l####.com/Api/AppData/new_map_other?prjid=####
- www.l####.com/Api/AppData/new_project?prjid=####
- www.l####.com/Api/AppData/syhdp
- www.l####.com/Api/AppData/synews
- www.l####.com/Api/AppData/sytjlp
- www.l####.com/data/upload/admin/20180508/5af0fb20c8b91.jpg
- www.l####.com/data/upload/admin/20180716/5b4c0e1043c9a.jpg
- a####.exc.mob.com/errconf
- a####.u####.com/app_logs
- c-h####.g####.com/api.php?format=####&t=####
- esf.l####.com/Api/AppData/getVersion
- nav.cn.ron####.com/navipush.json
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.duid
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/.lock
- /data/data/####/.vpl_lock
- /data/data/####/02efafd61f5c83819dd6e696148ab6ff.0.tmp
- /data/data/####/02efafd61f5c83819dd6e696148ab6ff.1.tmp
- /data/data/####/284ee8ad640d225f26bde2de9a2f9274.0.tmp
- /data/data/####/284ee8ad640d225f26bde2de9a2f9274.1.tmp
- /data/data/####/3eeae4b6634135135be7f7fab84c342c.0.tmp
- /data/data/####/3eeae4b6634135135be7f7fab84c342c.1.tmp
- /data/data/####/4d4446d8580857276cf464d0d0fb437d301c41d5fefa38e....0.tmp
- /data/data/####/4fa846a22e39d8e46e23dfd23c850ac7.0.tmp
- /data/data/####/4fa846a22e39d8e46e23dfd23c850ac7.1.tmp
- /data/data/####/52f2eeb19fbd9e51d0e585e22ac802d3b1ed07f3df5eb76....0.tmp
- /data/data/####/5efcca6d9c87d3e2a031c6d9820efb6e.0.tmp
- /data/data/####/5efcca6d9c87d3e2a031c6d9820efb6e.1.tmp
- /data/data/####/8a1b428b0743dc924a9ea4ada230a4c6.0.tmp
- /data/data/####/8a1b428b0743dc924a9ea4ada230a4c6.1.tmp
- /data/data/####/8d73f3d33ff928b6d23c7f228e4da087.0.tmp
- /data/data/####/8d73f3d33ff928b6d23c7f228e4da087.1.tmp
- /data/data/####/9613c48b11fd724674067428b8022bec.0.tmp
- /data/data/####/9613c48b11fd724674067428b8022bec.1
- /data/data/####/App.xml
- /data/data/####/App.xml.bak
- /data/data/####/COUNTLY_STORE.xml
- /data/data/####/CustomIndex
- /data/data/####/DVDirectory.cfg
- /data/data/####/DVHotMap.cfg
- /data/data/####/DVHotcity.cfg
- /data/data/####/DVIndoor.cfg
- /data/data/####/DVSDirectory.cfg
- /data/data/####/DVVersion.cfg
- /data/data/####/FwLog.xml
- /data/data/####/MultiDex.lock
- /data/data/####/ResPackIndoorMap.sdkrs
- /data/data/####/RongPush.xml
- /data/data/####/RongPush.xml.bak
- /data/data/####/RongPushAppConfig.xml
- /data/data/####/Statistics.xml
- /data/data/####/ThrowalbeLog.db-journal
- /data/data/####/ad38a904ff308d6b933b693bfc0d6a4f.0.tmp
- /data/data/####/ad38a904ff308d6b933b693bfc0d6a4f.1
- /data/data/####/authStatus_com.clkj.secondhouse.xml
- /data/data/####/authStatus_com.clkj.secondhouse;ipc.xml
- /data/data/####/authStatus_io.rong.push.xml
- /data/data/####/baseindoormap.sty
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/dabc63b19c0cad360e0fbe6b3b31b6c9.0.tmp
- /data/data/####/dabc63b19c0cad360e0fbe6b3b31b6c9.1.tmp
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/e76f4ccfea1e42258db7ecdb3b7cbbcc.0.tmp
- /data/data/####/e76f4ccfea1e42258db7ecdb3b7cbbcc.1.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f2e89a136b15a519f92612636685ac07.0.tmp
- /data/data/####/f2e89a136b15a519f92612636685ac07.1
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libcuid.so
- /data/data/####/libjiagu1558695183.so
- /data/data/####/locale.config.xml
- /data/data/####/map.rs
- /data/data/####/map.sty
- /data/data/####/map_pref.xml
- /data/data/####/mob_commons_1
- /data/data/####/mob_sdk_exception_1
- /data/data/####/multidex.version.xml
- /data/data/####/push.pid
- /data/data/####/push_daemon
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/qihoo_jiagu_crash_report.xml
- /data/data/####/reduct.rs
- /data/data/####/reduct.sty
- /data/data/####/run.pid
- /data/data/####/tdata_rRG322
- /data/data/####/tdata_rRG322.jar
- /data/data/####/tdata_vHH584
- /data/data/####/tdata_vHH584.jar
- /data/data/####/traffic.rs
- /data/data/####/traffic.sty
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/ver.dat
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/.artc_lock
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.di
- /data/media/####/.dic_lock
- /data/media/####/.duid
- /data/media/####/.globalLock
- /data/media/####/.im_lock
- /data/media/####/.lecd
- /data/media/####/.lesd_lock
- /data/media/####/.mn_-1464060969
- /data/media/####/.nomedia
- /data/media/####/.pkg_lock
- /data/media/####/.pkgs_lock
- /data/media/####/.rc_lock
- /data/media/####/.slw
- /data/media/####/.ss_lock
- /data/media/####/DTTempdat.dat
- /data/media/####/DTTempdat.idx
- /data/media/####/DVUserdat.cfg
- /data/media/####/ads.png
- /data/media/####/app.db
- /data/media/####/com.clkj.secondhouse.bin
- /data/media/####/com.clkj.secondhouse.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/rong_sdk.log
- /data/media/####/rong_sdk_debug.log
- /data/media/####/tdata_rRG322
- /data/media/####/tdata_vHH584
- /data/media/####/test.0
- /data/media/####/test.log
- /system/bin/chmod 777 <Package Folder>/app_lib/x86/push_daemon
- <Package Folder>/app_lib/x86/push_daemon <Package> io.rong.push.PushService /storage/emulated/0/.rongLock
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.MyService 25015 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu1558695183.so
- getprop ro.miui.ui.version.name
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.MyService 25015 300 0
- BaiduMapSDK_base_v5_1_0
- BaiduMapSDK_map_v5_1_0
- RongIMLib
- getuiext2
- libjiagu1558695183
- push
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS7Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-NoPadding