Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) 29e9d7b####.cdn.so####.####.com:80
- TCP(HTTP/1.1) gd.a.s####.com:80
- TCP(HTTP/1.1) api.s####.mob.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) 643108e####.cdn.so####.####.com:80
- TCP(HTTP/1.1) a####.exc.mob.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) m.d####.mob.com:80
- TCP(HTTP/1.1) 1####.254.154.169:80
- TCP(HTTP/1.1) c.cdn.s####.####.com:80
- TCP(HTTP/1.1) sni.c####.q####.####.net:80
- TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
- TCP(TLS/1.0) 643108e####.cdn.so####.####.com:443
- TCP(TLS/1.0) c.cdn.s####.####.com:443
- TCP(TLS/1.0) res####.a####.com:443
- TCP(TLS/1.0) regi####.xm####.xi####.com:443
- TCP(TLS/1.0) gs.a.s####.com:443
- TCP(TLS/1.0) gd.a.s####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5226
- 643108e####.cdn.so####.com
- 7j####.c####.z0.####.com
- a####.exc.mob.com
- amap####.cn-hang####.oss####.####.com
- and####.b####.qq.com
- api.s####.mob.com
- c####.g####.ig####.com
- c-h####.g####.com
- c.cdn.s####.com
- c.s####.com
- htt####.so####.com
- m.d####.mob.com
- p.cdn.s####.com
- pub-####.qin####.com
- r.ads.s####.com
- regi####.xm####.xi####.com
- res####.a####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- ss.s####.com
- t.ads.s####.com
- x1.go.s####.com
- 29e9d7b####.cdn.so####.####.com/<Package>/v0.1.0
- 643108e####.cdn.so####.####.com/tdata_EDT356
- c.cdn.s####.####.com/570d99e4/1e70103d4df37365bde2a16f35fe8920.png
- c.cdn.s####.####.com/article/6425541587840795649
- c.cdn.s####.####.com/o_convert,f_webp,c_fill,w_165,h_120,q_70/covers/ima...
- c.cdn.s####.####.com/o_convert,f_webp,c_fill,w_165,h_120,q_70/images/201...
- c.cdn.s####.####.com/o_convert,f_webp,c_fill,w_508,h_246,q_70/570d99e4/c...
- m.d####.mob.com/v3/cconf?appkey=####&plat=####&apppkg=####&appver=####&n...
- sh.wagbr####.aliyun####.com/sdkcoor/android/x86/libJni_wgs2gcj.so
- sni.c####.q####.####.net/config/hz-hzv3.conf
- sni.c####.q####.####.net/tdata_Soq141
- sni.c####.q####.####.net/tdata_vxj811
- a####.exc.mob.com/errconf
- and####.b####.qq.com/rqd/async?aid=####
- api.s####.mob.com/conf5
- api.s####.mob.com/conn
- api.s####.mob.com/log4
- api.s####.mob.com/snsconf
- c-h####.g####.com/api.php?format=####&t=####
- gd.a.s####.com/config/getConfigByVer
- gd.a.s####.com/config/hotwords/get
- gd.a.s####.com/config/showActivitiesInfo
- gd.a.s####.com/engine/channelrec
- gd.a.s####.com/engine/recommend
- gd.a.s####.com/log/report
- gd.a.s####.com/point/getRewardRules
- gd.a.s####.com/point/getWithdrawRules
- gd.a.s####.com/tab/getTabs
- gd.a.s####.com/tab/getVideoTabs
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/-529637153-978532344
- /data/data/####/.jg.ic
- /data/data/####/.lock
- /data/data/####/.mrecord
- /data/data/####/.mrlock
- /data/data/####/.statistics
- /data/data/####/1004
- /data/data/####/7943510004000.0
- /data/data/####/9db29e849733
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/HttpDNSConstantsJson.xml
- /data/data/####/MessageStore.db-journal
- /data/data/####/MsgLogStore.db-journal
- /data/data/####/ThrowalbeLog.db-journal
- /data/data/####/article-db-journal
- /data/data/####/bugly_db_-journal
- /data/data/####/com.admaster.sdk.other.xml
- /data/data/####/com.admaster.sdk.sdkconfig.xml
- /data/data/####/com.sohu.infonews.db-journal
- /data/data/####/com.sohu.infonews_preferences.xml
- /data/data/####/com.util.sputil.xml
- /data/data/####/com.util.sputil.xml.bak
- /data/data/####/common-db-journal
- /data/data/####/compass_info.db-journal
- /data/data/####/crashrecord.xml
- /data/data/####/gdaemon_20161017
- /data/data/####/geofencing.db
- /data/data/####/geofencing.db-journal
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/libjiagu1859141543.so
- /data/data/####/local_crash_lock
- /data/data/####/loctemp.so
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/mipush.xml
- /data/data/####/mipush_extra.xml
- /data/data/####/mob_commons_1
- /data/data/####/mob_sdk_exception_1
- /data/data/####/multidex.version.xml
- /data/data/####/mzSdkProfilePrefs.xml
- /data/data/####/mzmonitor
- /data/data/####/mzmonitor-journal
- /data/data/####/native_record_lock
- /data/data/####/pref.xml
- /data/data/####/preload_news_ad.db
- /data/data/####/preload_news_ad.db-journal
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/sc_preload_resource.xml
- /data/data/####/sc_tracking.db
- /data/data/####/sc_tracking.db-journal
- /data/data/####/security_info
- /data/data/####/share_sdk_1
- /data/data/####/sharesdk.db-journal
- /data/data/####/tdata_Soq141
- /data/data/####/tdata_Soq141.jar
- /data/data/####/tdata_vxj811
- /data/data/####/tdata_vxj811.jar
- /data/data/####/webview.db-journal
- /data/media/####/.di
- /data/media/####/.dic_lock
- /data/media/####/.duid
- /data/media/####/.globalLock
- /data/media/####/.mps
- /data/media/####/.nomedia
- /data/media/####/.nulplt
- /data/media/####/.pkg_lock
- /data/media/####/.rcTag
- /data/media/####/.rc_lock
- /data/media/####/0c65e24721996d5037719740cfd73daff0a9aa2f50d46e....0.tmp
- /data/media/####/1efab6d6f0d5847b6152190f2df0ffb5ddb8b35e8a3401....0.tmp
- /data/media/####/451abcb56879f7134a8d477327131426e2f713df548d6d....0.tmp
- /data/media/####/482dd6ca8aef3a02d959d614deca8dffb9f79b3a0328fb....0.tmp
- /data/media/####/4c807e118c38b3e1d0c658bcb7034c1757f2b5a1695243....0.tmp
- /data/media/####/6ee9f92ce30f743da6a1a0a5bbda949aeeb07aa8b7761a....0.tmp
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/INSTALLATION
- /data/media/####/als.db
- /data/media/####/als.db-journal
- /data/media/####/app.db
- /data/media/####/cdf255afd00d71049197d459eac45b50d14be87c3a49b7....0.tmp
- /data/media/####/cf755df232fa159b05a759ed7e698283fe5abef677f303....0.tmp
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.sohu.infonews.bin
- /data/media/####/com.sohu.infonews.db
- /data/media/####/com.sohu.infonews.log
- /data/media/####/d7cd4e3757aa974613d7da58e3c734fc43d8fe36f3fd82....0.tmp
- /data/media/####/e3a3dd6f589902a53383f21d1c6c1a8299050636a03281....0.tmp
- /data/media/####/eded94b79a3b8246d44126b7aa2241f8d4cf33479c2554....0.tmp
- /data/media/####/journal.tmp
- /data/media/####/tdata_Soq141
- /data/media/####/tdata_vxj811
- /data/media/####/test.log
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.sohu.quicknews.pushModel.service.GetTuiPushService 24731 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu1859141543.so
- getprop
- ls -l /system/bin/su
- mount
- sh
- Bugly
- GNaviMapex
- getuiext2
- libjiagu1859141543
- neh
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-ECB-NoPadding
- AES-GCM-NoPadding