Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) reso####.msg.xi####.net:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) jzst####.you####.com.####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) thi####.q####.cn:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) jz.you####.com:80
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) regi####.xm####.gl####.####.com:443
- TCP(TLS/1.0) eco####.me####.com.####.com:443
- TCP(TLS/1.0) a####.you####.com:443
- TCP c####.g####.ig####.com:5224
- TCP sdk.o####.t####.####.com:5224
- TCP app.c####.gl####.####.net:5222
- 7j####.c####.z0.####.com
- a####.you####.com
- app.c####.gl####.####.net
- c####.g####.ig####.com
- c-h####.g####.com
- eco####.me####.com
- jz####.you####.com
- jz.you####.com
- jzst####.you####.com
- regi####.xm####.gl####.####.com
- reso####.msg.xi####.net
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- thi####.q####.cn
- u####.u####.com
- wx.q####.cn
- jz.you####.com/image//user_icon/201845/7ed9e8ae0b514ec1a1bcc553f053a91e2...
- jzst####.you####.com.####.com//jzadmin/images/15399431257144571.jpg
- jzst####.you####.com.####.com//jzadmin/images/15402775463859420.jpg
- jzst####.you####.com.####.com//jzadmin/images/15404572155371613.jpg
- jzst####.you####.com.####.com//jzadmin/images/15408685651052596.jpg
- jzst####.you####.com.####.com//jzadmin/images/15409747275876296.jpg
- jzst####.you####.com.####.com//jzadmin/images/15409748926006995.png
- jzst####.you####.com.####.com//jzadmin/images/15409749890321930.jpg
- jzst####.you####.com.####.com//jzadmin/images/15410671747228359.png
- jzst####.you####.com.####.com//jzadmin/images/15411258891265219.png
- jzst####.you####.com.####.com//jzadmin/images/15414745132987589.jpg
- jzst####.you####.com.####.com//jzadmin/images/15415785155497356.jpg
- jzst####.you####.com.####.com//jzadmin/images/15420960721385683.jpg
- jzst####.you####.com.####.com//jzadmin/images/1542101321808279.jpg
- jzst####.you####.com.####.com//jzadmin/images/1542166439516791.jpg
- jzst####.you####.com.####.com//jzadmin/images/15422773765315711.jpg
- jzst####.you####.com.####.com/jzadmin/images/15337951615664773.png
- jzst####.you####.com.####.com/jzadmin/images/15337983129436518.png
- jzst####.you####.com.####.com/jzadmin/images/15342142653149348.png
- jzst####.you####.com.####.com/jzadmin/images/15342142789493174.png
- jzst####.you####.com.####.com/jzadmin/images/15342142879068055.png
- jzst####.you####.com.####.com/jzadmin/images/15342142996741964.png
- jzst####.you####.com.####.com/jzadmin/images/15347654537417516.png
- jzst####.you####.com.####.com/jzadmin/images/15360554220979571.png
- reso####.msg.xi####.net/gslb/?ver=4.0&type=wap&conpt=dvidpodv >>4>>4>>4...
- t####.c####.q####.####.com/config/hz-hzv3.conf
- t####.c####.q####.####.com/tdata_YYn966
- t####.c####.q####.####.com/tdata_eOt091
- thi####.q####.cn/mmhead/JGYsYtric6QkkAennBpXicU69yWib7ibXaiaeQgAHiaV9XS3...
- thi####.q####.cn/mmopen/vi_32/DVuBNS8u9XibavicNw79AfOib2EicMIznFF2wzVD2z...
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/1442
- /data/data/####/1b90f19d1c42a718efd29fad4d11c077bf8854e8cbf10f5....0.tmp
- /data/data/####/26f5868df4c2c73569a803286d69eff28f658091bf8269a....0.tmp
- /data/data/####/294dcc5df4992a791913c7d5ff201a682c128c35c369013....0.tmp
- /data/data/####/2f35b2b1e723b1a0faa3341099e6b5403ae3c21d5d7e5a4....0.tmp
- /data/data/####/3997f9c0ea540450ede6213d1554a207f363c1356d5aa5b....0.tmp
- /data/data/####/51ba247d88a66ff9c3322dff831b45169305ba533b02ffe....0.tmp
- /data/data/####/5469ca22924732cbf562834c3afced79779f57c60c49a32....0.tmp
- /data/data/####/56b3499b7baa2063f87365da3cb8f23b0f377eaa7397e47....0.tmp
- /data/data/####/5d0b1f5995fabad427e834aba3daea5421b22a7974afb8f....0.tmp
- /data/data/####/6a5facf99e011e9a91295e65a51eafee51decdfae7b3e97....0.tmp
- /data/data/####/77c877bc89d2806274812fbbfb0ddfd0c32c8127ce9b930....0.tmp
- /data/data/####/7b4fde57ec964648e9edb5b9af86a5326b00be2f7d127e5....0.tmp
- /data/data/####/854316de1d701c78fd6388e94cb9a073b6672e85c0fe08d....0.tmp
- /data/data/####/881f13271c50693b65bcb28d0152ae860a91c4db561f130....0.tmp
- /data/data/####/997730c09f2c3ae08566e6c755f6424941a6bd6454e65af....0.tmp
- /data/data/####/9e58cd5f87efa66e67c704b5e3ab050f752553b16046f58....0.tmp
- /data/data/####/BuglySdkInfos.xml
- /data/data/####/CaiyiPush.xml
- /data/data/####/Meiqia.xml
- /data/data/####/MultiDex.lock
- /data/data/####/UserInfo.xml
- /data/data/####/XMPushServiceConfig.xml
- /data/data/####/a70b6850c68cf8d8cbe9ad94c61c94ef7025d57dc82501a....0.tmp
- /data/data/####/a93f958c123599bdf1820ea305eec9c7dcaca0bf572b81b....0.tmp
- /data/data/####/a==7.5.1&&4.1.0_1542464019978_envelope.log
- /data/data/####/ad_struct
- /data/data/####/c3a0618534da88d20936684ff06d18cf58a7c08897ccab8....0.tmp
- /data/data/####/c8c951868ada4437d4e56f2d86666499b0e6391073c55a7....0.tmp
- /data/data/####/com.jz.youyu;pushservice
- /data/data/####/com.jz.youyu_preferences.xml
- /data/data/####/dcae5c4b3467c1d43326b36fe5a72d086da86079fe12f55....0.tmp
- /data/data/####/de04921524439e5173ec4a82b9f7dcd1d384ad28d28288e....0.tmp
- /data/data/####/dfdcd94426cfd03c8858f0f9da37e2d01355dc47e713c40....0.tmp
- /data/data/####/e057f00a74792c097d18f74ca48c46127aa4519e7eec456....0.tmp
- /data/data/####/e308bb9bb2f793188e4ffda3a2564489bf3335f9041d047....0.tmp
- /data/data/####/ec917342a4faab87bc9f2984f23dc6c387830385b07347f....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/gdaemon_20161017
- /data/data/####/geofencing.db
- /data/data/####/geofencing.db-journal
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/jz.db-journal
- /data/data/####/jz_banner.json
- /data/data/####/libjiagu188558744.so
- /data/data/####/meiqia.db
- /data/data/####/meiqia.db-journal
- /data/data/####/message_list.json
- /data/data/####/mipush.xml
- /data/data/####/mipush_account.xml
- /data/data/####/mipush_extra.xml
- /data/data/####/mipush_region
- /data/data/####/mipush_region.lock
- /data/data/####/multidex.version.xml
- /data/data/####/pref_registered_pkg_names.xml
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/qihoo_jiagu_crash_report.xml
- /data/data/####/run.pid
- /data/data/####/sample.db
- /data/data/####/sample.db-journal
- /data/data/####/sample.zip
- /data/data/####/skin_plugin_pref.xml
- /data/data/####/sp_client_report_status.xml
- /data/data/####/tdata_YYn966
- /data/data/####/tdata_YYn966.jar
- /data/data/####/tdata_eOt091
- /data/data/####/tdata_eOt091.jar
- /data/data/####/textimg.json
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/media/####/.nomedia
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.jz.youyu.bin
- /data/media/####/com.jz.youyu.db
- /data/media/####/log.lock
- /data/media/####/log1.txt
- /data/media/####/tdata_YYn966
- /data/media/####/tdata_eOt091
- /data/media/####/test.log
- /data/media/####/yyid11
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.caiyi.push.service.GetuiPushService 24226 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- BaiduSpeechSDK
- getuiext2
- libjiagu188558744
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS7Padding