Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) a####.exc.mob.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) api.j####.com:80
- TCP(HTTP/1.1) ws.j####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(TLS/1.0) img.j####.com:443
- TCP(TLS/1.0) redi####.network####.com:443
- TCP(TLS/1.0) 1####.217.17.110:443
- TCP(TLS/1.0) dxp.b####.com:443
- TCP(TLS/1.0) h####.b####.com:443
- TCP(TLS/1.0) dc1.network####.com:443
- TCP(TLS/1.0) and####.cli####.go####.com:443
- TCP c####.g####.ig####.com:5226
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.exc.mob.com
- and####.b####.qq.com
- and####.cli####.go####.com
- api.j####.com
- c####.g####.ig####.com
- c-h####.g####.com
- dc1.network####.com
- dxp.b####.com
- h####.b####.com
- img.j####.com
- mt####.go####.com
- pub-####.qin####.com
- redi####.network####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- ws.j####.com
- api.j####.com/v2/ad/slide_list?position=####&source=####&version=####
- api.j####.com/v2/app/new/nowActivityList?source=####&version=####
- api.j####.com/v2/topic/search_keys?source=####&version=####
- api.j####.com/v3/topic/by_tag_list?tag=####&limit=####&topic_id=####&fla...
- api.j####.com/v4/user/follow/recommends?page=####&limit=####&source=####...
- api.j####.com/v6/app/marketConfigs?source=####&version=####
- api.j####.com/v6/catalogue/list?source=####&version=####
- api.j####.com/v6/coin/chance/catagolues?source=####&version=####
- api.j####.com/v6/global/getBubble?source=####&version=####
- api.j####.com/v6/information/list?catelogue_key=####&limit=####&informat...
- api.j####.com/v6/market/catalogue/list?source=####&version=####
- api.j####.com/v6/user/get_push_setting?clientId=####&source=####&version...
- t####.c####.q####.####.com/config/hz-hzv3.conf
- t####.c####.q####.####.com/tdata_EDT356
- t####.c####.q####.####.com/tdata_YYn966
- t####.c####.q####.####.com/tdata_eOt091
- ws.j####.com/ws
- a####.exc.mob.com/errconf
- and####.b####.qq.com/rqd/async?aid=####
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.duid
- /data/data/####/.jg.ic
- /data/data/####/.lock
- /data/data/####/.vpl_lock
- /data/data/####/014fdfa7494b7317d573fd92760b8cb46a8ef5169735c8f....0.tmp
- /data/data/####/0643d1d93951969c57c3922184f8814ae629452854419c2....0.tmp
- /data/data/####/072870622149d36fe997b0b0d98ffa9d.0.tmp
- /data/data/####/072870622149d36fe997b0b0d98ffa9d.1.tmp
- /data/data/####/0e12982a2e07e4826cc5903bb47a5e850dab3d594963d98....0.tmp
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/168567f48d466bc2ba8a48672eb40f1abe6720258cf8327....0.tmp
- /data/data/####/21fd05c1f71b60a3b3fd09a867bc88c053c3bd752a20f91....0.tmp
- /data/data/####/24afb52320bd247eb7906d488a6a8799.0.tmp
- /data/data/####/24afb52320bd247eb7906d488a6a8799.1.tmp
- /data/data/####/2980147bc745543a8690d877c427719f85c893d16a17afb....0.tmp
- /data/data/####/2bb35384e7543b99d5451c55899e79e81879e09e7e94955....0.tmp
- /data/data/####/3e8edd0f22daf8c377f2b2e43624dd2dde613d14163675c....0.tmp
- /data/data/####/40a87da9448ddb3c14a8ea7a9e55282a.0.tmp
- /data/data/####/40a87da9448ddb3c14a8ea7a9e55282a.1.tmp
- /data/data/####/45cf7efc93b4598dddc1feb3a3ccc30f88185f13362a88a....0.tmp
- /data/data/####/48e04827b01da5364369b6712222e596ee6b91db26cc826....0.tmp
- /data/data/####/4b427883cad5e2b29216fc885c5d40324b862efe15ff578....0.tmp
- /data/data/####/542a0c740a938639cb571758aca243ab.0.tmp
- /data/data/####/542a0c740a938639cb571758aca243ab.1.tmp
- /data/data/####/5442f99120b0d9b8c6a1a8566eb6fe79656d7000eeaa658....0.tmp
- /data/data/####/6a8f5fc982f5fa6d6335bb4e98906e76769b5ee7a2af3d0....0.tmp
- /data/data/####/77307d3c431245d4fc35a25af196f9893b084e00831b8da....0.tmp
- /data/data/####/8549f953202255673ef6407ec97e7d9054b0f15a7c94e27....0.tmp
- /data/data/####/8eaac1ad63e043ee37f860b7ec558bb43a4b0534cf36119....0.tmp
- /data/data/####/95a18560af477d4f85571789d2b18eac453f9dd7bcbfe12....0.tmp
- /data/data/####/9a5c682b3926de78e45bcb19725abbd2ffad250131eb564....0.tmp
- /data/data/####/9b3f8468b5f834258a42da53713e0ede566f021746f6d1c....0.tmp
- /data/data/####/MultiDex.lock
- /data/data/####/NBSAnrStore.xml
- /data/data/####/NBSCrashStore.xml
- /data/data/####/ThrowalbeLog.db-journal
- /data/data/####/__Baidu_Stat_SDK_SendRem.xml
- /data/data/####/__local_ap_info_cache.json
- /data/data/####/__local_last_session.json
- /data/data/####/__local_stat_cache.json
- /data/data/####/__send_data_1538316177298
- /data/data/####/a05486fca0a8c59270a9f3eb6d09f2ba248fd7e263b8b8c....0.tmp
- /data/data/####/a6b5e4fa2da1fc70c6e2f574e493cdf0.0.tmp
- /data/data/####/a6b5e4fa2da1fc70c6e2f574e493cdf0.1.tmp
- /data/data/####/a73d62cf9673a373a7b90f0f82f613b0.0.tmp
- /data/data/####/a73d62cf9673a373a7b90f0f82f613b0.1.tmp
- /data/data/####/a9c2d65d6583901b52ea99c5065ef4f420eb9b8ec379321....0.tmp
- /data/data/####/b112046b997381cac052cb06929674e27c3b6149d6822cf....0.tmp
- /data/data/####/b5d717f1bf6aa07a74b9e525b1c7c50ceb17bea5d078931....0.tmp
- /data/data/####/baidu_mtj_sdk_record.xml
- /data/data/####/bd6061f2f290c6ab752b8a3652d21df241e3c4e5f955cce....0.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/c066f8589f23df956955fd3e36d15029c20bedd90a28229....0.tmp
- /data/data/####/c3d589a7b2c05ad03c7a42808f0d23238c3b45272244c06....0.tmp
- /data/data/####/com.google.android.gms.appid-no-backup
- /data/data/####/com.google.android.gms.appid.xml
- /data/data/####/com.google.android.gms.measurement.prefs.xml
- /data/data/####/com.jinse.app.BETA_VALUES.xml
- /data/data/####/com.networkbench.agent.impl.v2_com.jinse.app.xm...leted)
- /data/data/####/com.networkbench.agent.impl.v2_com.jinse.app.xml
- /data/data/####/crashrecord.xml
- /data/data/####/d4e3575fa023bb00f7678649781324bdf0923b46fb6247c....0.tmp
- /data/data/####/d7f540d0b9a938fae131d443cbec664c728da7c260a7869....0.tmp
- /data/data/####/dc4da0f89567b857a039088f6ff74a21.0.tmp
- /data/data/####/dc4da0f89567b857a039088f6ff74a21.1.tmp
- /data/data/####/df2db5c6fb1918d3775236bb4fa62b9108d0a5d7865e29d....0.tmp
- /data/data/####/domain_1
- /data/data/####/e4d55d99c4752137bc697992105b5e0238faacb30fda44b....0.tmp
- /data/data/####/e67026e79f89190e76872689749b7f219482732a0e404c2....0.tmp
- /data/data/####/e765b432cc339f852d0fc51f5c5427e4d52a9517bbcde4a....0.tmp
- /data/data/####/e7af5f167341852a2d9f37667dfba9fd1260bdc0295de6b....0.tmp
- /data/data/####/f344849b0a233cd6f378f3ffe1ebb0083e79fc160f9d2e8....0.tmp
- /data/data/####/fc1865114347
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/google_app_measurement_local.db
- /data/data/####/google_app_measurement_local.db-journal
- /data/data/####/gx_sp.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/jinse.xml
- /data/data/####/jinse.xml (deleted)
- /data/data/####/journal.tmp
- /data/data/####/libcuid.so
- /data/data/####/libjiagu258041337.so
- /data/data/####/local_crash_lock
- /data/data/####/mob_commons_1
- /data/data/####/mob_sdk_exception_1
- /data/data/####/mtj_autoTracker.js
- /data/data/####/multidex.version.xml
- /data/data/####/notes-db-journal
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/tdata_YYn966
- /data/data/####/tdata_YYn966.jar
- /data/data/####/tdata_eOt091
- /data/data/####/tdata_eOt091.jar
- /data/data/####/trace_circle.data
- /data/media/####/.artc_lock
- /data/media/####/.confd
- /data/media/####/.confd-journal
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.di
- /data/media/####/.dic_lock
- /data/media/####/.duid
- /data/media/####/.globalLock
- /data/media/####/.im_lock
- /data/media/####/.lesd_lock
- /data/media/####/.mn_-1464060969
- /data/media/####/.pkg_lock
- /data/media/####/.pkgs_lock
- /data/media/####/.rc_lock
- /data/media/####/.slw
- /data/media/####/.ss_lock
- /data/media/####/.timestamp
- /data/media/####/218095fc132615250b73ae0b2fcea8bc.0.tmp
- /data/media/####/218095fc132615250b73ae0b2fcea8bc.1.tmp
- /data/media/####/3db61e5e96336338efc3976e1f601502.0.tmp
- /data/media/####/3db61e5e96336338efc3976e1f601502.1.tmp
- /data/media/####/6431df446c45b9c75e9552ea37e206c5.0.tmp
- /data/media/####/6431df446c45b9c75e9552ea37e206c5.1.tmp
- /data/media/####/774ae6036a1849620529b69bb856a72c.0.tmp
- /data/media/####/774ae6036a1849620529b69bb856a72c.1.tmp
- /data/media/####/9d68fe23c2f94f082a3d3c6fd689a176.0.tmp
- /data/media/####/9d68fe23c2f94f082a3d3c6fd689a176.1.tmp
- /data/media/####/a95d7db8c917d97c5c4d89f4405114e9.0.tmp
- /data/media/####/a95d7db8c917d97c5c4d89f4405114e9.1.tmp
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.jinse.app.bin
- /data/media/####/com.jinse.app.db
- /data/media/####/e73bd9a6706716d10879512063f7b72e.0.tmp
- /data/media/####/e73bd9a6706716d10879512063f7b72e.1.tmp
- /data/media/####/journal.tmp
- /data/media/####/tdata_YYn966
- /data/media/####/tdata_eOt091
- /data/media/####/test.log
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.JinSePushService 24269 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu258041337.so
- getprop
- getprop ro.build.display.id
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.miui.ui.version.name
- getprop ro.smartisan.version
- getprop ro.vivo.os.version
- mount
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.JinSePushService 24269 300 0
- Bugly
- crash_analysis
- getuiext2
- libjiagu258041337
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS5Padding
- AES-ECB-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-ECB-NoPadding
- AES-GCM-NoPadding