Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) norma-e####.m####.com:80
- TCP(HTTP/1.1) b####.g####.com:80
- TCP(HTTP/1.1) gs.g####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) ap####.g####.com:80
- TCP(HTTP/1.1) c####.g####.com:80
- TCP(HTTP/1.1) sdk.c####.g####.####.cn:80
- TCP(HTTP/1.1) cdn-sdk####.g####.com.####.cn:80
- TCP(TLS/1.0) xbl####.yo####.com:443
- TCP(TLS/1.0) rr6---s####.g####.com:443
- TCP(TLS/1.0) uploa####.yo####.com:443
- TCP(TLS/1.0) rr9---s####.g####.com:443
- TCP(TLS/1.0) and####.google####.com:443
- TCP(TLS/1.0) and####.a####.go####.com:443
- TCP(TLS/1.0) 2####.58.211.227:443
- TCP(TLS/1.0) xblco####.yo####.com:443
- TCP(TLS/1.0) xbleng####.yo####.com:443
- TCP(TLS/1.0) h####.b####.com:443
- TCP(TLS/1.2) and####.google####.com:443
- TCP(TLS/1.2) 2####.58.211.227:443
- TCP(TLS/1.2) 2####.58.209.206:443
- TCP(TLS/1.2) 74.1####.205.95:443
- TCP cm-1####.g####.com:5224
- TCP sdk.o####.t####.####.com:5224
- UDP and####.google####.com:443
- UDP rr2---s####.g####.com:443
- UDP www.gst####.com:443
- and####.a####.go####.com
- and####.b####.qq.com
- and####.google####.com
- ap####.g####.com
- b####.g####.com
- b####.g####.com
- c####.g####.com
- c####.g####.com
- c####.g####.com
- c-h####.g####.com
- cdn-sdk####.g####.com
- cm-1####.g####.com
- gmscomp####.google####.com
- gs.g####.com
- h####.b####.com
- m####.go####.com
- norma-e####.m####.com
- rr2---s####.g####.com
- rr6---s####.g####.com
- rr9---s####.g####.com
- safebro####.google####.com
- sdk.api.o####.####.cn
- sdk.c####.g####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- uploa####.yo####.com
- www.gst####.com
- xb####.yo####.com
- xbl####.yo####.com
- xblco####.yo####.com
- xbleng####.yo####.com
- xblengl####.yo####.com
- b####.g####.com/api/addr.htm
- cdn-sdk####.g####.com.####.cn/tdata_XYq933
- cdn-sdk####.g####.com.####.cn/tdata_pKN446
- cdn-sdk####.g####.com.####.cn/tdata_pZO822
- cdn-sdk####.g####.com.####.cn/tdata_trp703
- cdn-sdk####.g####.com.####.cn/tdata_xEA084
- norma-e####.m####.com/android/exchange/getpublickey.do
- sdk.c####.g####.####.cn/config/hzv9.conf
- and####.b####.qq.com/rqd/async?aid=####
- ap####.g####.com/bd
- b####.g####.com/api.php?format=####&t=####
- c####.g####.com/api.php?format=####&t=####
- gs.g####.com/encryption/key/fetch
- gs.g####.com/geshu/sdk/getBaseConfs
- gs.g####.com/geshu/sdkStatistics/bd
- gs.g####.com/geshu/sdkStatistics/ubi
- h####.b####.com:443/app.gif
- norma-e####.m####.com/push/android/external/add.do
- uploa####.yo####.com:443/xblenglish.php
- xbl####.yo####.com:443/account/common/data
- xbl####.yo####.com:443/session/login/visitor
- xbl####.yo####.com:443/user/member
- xblco####.yo####.com:443/bag/record/get
- xblco####.yo####.com:443/bag/record/set
- xbleng####.yo####.com:443/ad/buypicture
- xbleng####.yo####.com:443/ad/coinexperience
- xbleng####.yo####.com:443/app/getbaginfo
- xbleng####.yo####.com:443/app/level2navigation
- xbleng####.yo####.com:443/app/recommendinfo
- /data/data/####/.cl
- /data/data/####/.hptc_kache_uban.xblenglish
- /data/data/####/.jg.ic
- /data/data/####/1004
- /data/data/####/2ji2018.info
- /data/data/####/39285EFA.dex
- /data/data/####/39285EFA.dex.flock (deleted)
- /data/data/####/57579599
- /data/data/####/91d2d9b6
- /data/data/####/CONFIG_XTIMG_INFO.xml
- /data/data/####/Cocos2dxPrefsFile.xml
- /data/data/####/MAP_SHARE_LOGIN_TAG.xml
- /data/data/####/OutLineInfo.info
- /data/data/####/WebViewChromiumPrefs.xml
- /data/data/####/XueTanMapInfo.info
- /data/data/####/__Baidu_Stat_SDK_SendRem.xml
- /data/data/####/__Baidu_Stat_SDK_SendRem.xml.bak
- /data/data/####/__local_ap_info_cache.json
- /data/data/####/__local_last_session.json
- /data/data/####/__local_stat_cache.json
- /data/data/####/__send_data_1715149814541
- /data/data/####/a937b8f2
- /data/data/####/androidx.work.workdb-journal (deleted)
- /data/data/####/baidu_mtj_sdk_record.xml
- /data/data/####/baidu_mtj_sdk_record.xml.bak
- /data/data/####/bugly_db_-journal
- /data/data/####/classes.dex
- /data/data/####/classes.dex;classes2.dex
- /data/data/####/classes.dex;classes3.dex
- /data/data/####/classes.dex;classes4.dex
- /data/data/####/com.x.y.1.xml
- /data/data/####/com.x.y.2.xml
- /data/data/####/com.youban.xblenglish_preferences.xml
- /data/data/####/com.youban.xblenglish_preferences.xml.bak (deleted)
- /data/data/####/crashrecord.xml
- /data/data/####/getui_sp.xml
- /data/data/####/gin.db-journal
- /data/data/####/gis.db-journal
- /data/data/####/gkt-journal
- /data/data/####/goodslist.info
- /data/data/####/gtc.db-journal
- /data/data/####/ias.db-journal
- /data/data/####/ias_sp.xml
- /data/data/####/ias_sp.xml.bak
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/libcuid.so
- /data/data/####/libjiagu.so
- /data/data/####/local_crash_lock
- /data/data/####/metrics_guid
- /data/data/####/mz_push_preference.xml
- /data/data/####/native_record_lock
- /data/data/####/proc_auxv
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushgdc.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/shopImg.info
- /data/data/####/stateInfo.info
- /data/data/####/tdata_XYq933
- /data/data/####/tdata_XYq933.dex
- /data/data/####/tdata_XYq933.dex.flock (deleted)
- /data/data/####/tdata_XYq933.jar
- /data/data/####/tdata_pKN446
- /data/data/####/tdata_pKN446.dex
- /data/data/####/tdata_pKN446.dex.flock (deleted)
- /data/data/####/tdata_pKN446.jar
- /data/data/####/tdata_pZO822.dex (deleted)
- /data/data/####/tdata_pZO822.dex.flock (deleted)
- /data/data/####/tdata_pZO822.jar
- /data/data/####/tdata_pZO8221436573889.tmp
- /data/data/####/tdata_trp703
- /data/data/####/tdata_trp703.dex
- /data/data/####/tdata_trp703.dex.flock (deleted)
- /data/data/####/tdata_trp703.jar
- /data/data/####/tdata_xEA084
- /data/data/####/tdata_xEA084.dex.flock (deleted)
- /data/data/####/tdata_xEA084.jar
- /data/data/####/the-real-index
- /data/data/####/type_101.info
- /data/data/####/type_102.info
- /data/data/####/type_103.info
- /data/data/####/type_con_101.info
- /data/data/####/type_con_102.info
- /data/data/####/type_con_103.info
- /data/data/####/type_con_sub101.info
- /data/data/####/type_con_sub102.info
- /data/data/####/type_con_sub103.info
- /data/data/####/update.xml
- /data/media/####/.confd
- /data/media/####/.confd-journal
- /data/media/####/.cuid2
- /data/media/####/.nomedia
- /data/media/####/.timestamp
- /data/media/####/2017log_1_128
- /data/media/####/2017log_3_128
- /data/media/####/2017log_4_128
- /data/media/####/2017log_5_128
- /data/media/####/2017log_6_128
- /data/media/####/2024-05-08.log.txt
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.youban.xblenglish.bin
- /data/media/####/com.youban.xblenglish.db
- /data/media/####/com.youban.xblenglish_.db
- /data/media/####/gkt
- /data/media/####/gkt-journal
- /data/media/####/gktper (deleted)
- /data/media/####/list
- /data/media/####/netload.cfg
- /data/media/####/saveinfo.bin
- /data/media/####/streamio.png
- /data/media/####/tdata_XYq933
- /data/media/####/tdata_pKN446
- /data/media/####/tdata_pZO822
- /data/media/####/tdata_trp703
- /data/media/####/tdata_xEA084
- /data/media/####/temp
- /data/media/####/test.log (deleted)
- /data/media/####/usercert.dat
- /data/media/####/version.info
- /data/misc/####/primary.prof
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- getprop
- getprop ro.build.display.id
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.miui.ui.version.name
- getprop ro.smartisan.version
- getprop ro.vivo.os.version
- lib39285EFA
- libBugly
- libc++_shared
- libcocos2dcpp
- libgetuiext3
- libjiagu
- libmmkv
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding