Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) qin####.com.www.####.com:80
- TCP(HTTP/1.1) a####.exc.mob.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) qzs####.e23.cn:80
- TCP(HTTP/1.1) m.d####.mob.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(TLS/1.0) 2####.58.212.174:443
- TCP(TLS/1.0) api.map.b####.com:443
- TCP(TLS/1.0) o####.map.b####.com:443
- TCP(TLS/1.0) loc.map.b####.com:443
- TCP(TLS/1.0) and####.cli####.go####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5227
- 7j####.c####.z0.####.com
- a####.exc.mob.com
- and####.cli####.go####.com
- api.map.b####.com
- c####.g####.ig####.com
- c-h####.g####.com
- loc.map.b####.com
- m.d####.mob.com
- o####.map.b####.com
- pub-####.qin####.com
- qzs####.e23.cn
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- m.d####.mob.com/v3/cconf?appkey=####&plat=####&apppkg=####&appver=####&n...
- qin####.com.www.####.com/tdata_EDT369
- qzs####.e23.cn/index.php?m=####&c=####&a=####&size=####&type=####
- qzs####.e23.cn/uploadfile/2019/0220/20190220105212612.png
- qzs####.e23.cn/uploadfile/2019/0312/20190312042344532.jpg
- qzs####.e23.cn/uploadfile/2019/0314/20190314024550984.jpeg
- qzs####.e23.cn/uploadfile/2019/0314/20190314031944794.jpeg
- qzs####.e23.cn/uploadfile/2019/0315/20190315025748778.jpg
- qzs####.e23.cn/uploadfile/2019/0315/20190315045921843.jpg
- qzs####.e23.cn/uploadfile/2019/0317/20190317091755328.jpg
- qzs####.e23.cn/uploadfile/2019/0318/20190318043752842.jpg
- qzs####.e23.cn/uploadfile/2019/0321/20190321113127487.jpg
- qzs####.e23.cn/uploadfile/2019/0321/20190321113127812.jpg
- qzs####.e23.cn/uploadfile/2019/0321/20190321113127834.jpg
- qzs####.e23.cn/uploadfile/2019/0321/20190321113127876.jpg
- qzs####.e23.cn/uploadfile/2019/0321/20190321113128445.jpg
- qzs####.e23.cn/uploadfile/2019/0321/20190321113128553.jpg
- qzs####.e23.cn/uploadfile/2019/0322/20190322111222320.jpg
- qzs####.e23.cn/uploadfile/avatar/35.jpg?155362####
- t####.c####.q####.####.com/tdata_Cta775
- t####.c####.q####.####.com/tdata_YYn966
- t####.c####.q####.####.com/tdata_lOE499
- t####.c####.q####.####.com/tdata_nmo636
- ti####.c####.l####.####.com/config/hz-hzv3.conf
- a####.exc.mob.com/errconf
- c-h####.g####.com/api.php?format=####&t=####
- qzs####.e23.cn/index.php?m=####&c=####&a=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####&d=####&k=####
- /data/data/####/.jg.ic
- /data/data/####/.lock
- /data/data/####/01102823481df93ffd76fa867b065ef01f88f755c326e31....0.tmp
- /data/data/####/022c26a2f6d4
- /data/data/####/050fee029e71316d3776d6bf6ce1cb6a21ebd2a2c6ff96b....0.tmp
- /data/data/####/0b860126c527aaa8081e6b2dc5d15651be95ccc334b05d6....0.tmp
- /data/data/####/0d97732e112744456ce358caed804e157b2758458ae7ca4....0.tmp
- /data/data/####/2899382d686919027c570fe5f1fec397296a47e488516a9....0.tmp
- /data/data/####/34d55c1add27482fc0daf463a31d7a5b952e919219bcf33....0.tmp
- /data/data/####/34d55c1add27482fc0daf463a31d7a5b952e919219bcf33...02f2.0
- /data/data/####/3f291c46eea829c42b65ec6cefd4fe709e53a96b079c720....0.tmp
- /data/data/####/46a6a811ba110363fac0cf1b7cfcb0af06148683ac5e912....0.tmp
- /data/data/####/4d787266c4e2d0404b37973b8c347cbe1d866bd6d296717....0.tmp
- /data/data/####/51d8eba6caa59ec9c7ccfca89436e7dcdcc5a916e4d7aee....0.tmp
- /data/data/####/52d73536d325509acb0f13f20ca385b75773134142730c5....0.tmp
- /data/data/####/59ab0b007acd5e4f1915fe2013fbe5295f0cf3339dc1b3e....0.tmp
- /data/data/####/5e0fcfadf99358712bcdd2348e8f66198aa22c331c1ffa5....0.tmp
- /data/data/####/62630f93fd8d188f7bef5eb8e63a5471d1173a48fb1ab0c....0.tmp
- /data/data/####/671301f64298bff7c8f8e74c002a65e42b88ac766eaa25d....0.tmp
- /data/data/####/68d95265ae26f7ce9a0da42fb16d8eeb6309c10e76a092c....0.tmp
- /data/data/####/6f8a97ea47f84b428062a7528fbd0528afa62a2ff3af4b5....0.tmp
- /data/data/####/7ee94c4a7b0f81058bbf185e732660f30f80e837715265c....0.tmp
- /data/data/####/842d039267658f84651c30103f77078a0e3228c946ddba9....0.tmp
- /data/data/####/879d5cef082778074a3cfd6503e40eeeee49c967a14b6eb....0.tmp
- /data/data/####/8c38a2a143c1bbc9f340a518bf37dadb95d4d2eed9f25bb....0.tmp
- /data/data/####/92ede0b4f7f306223322180ab93507f4ddb6a2d8ee9c24f....0.tmp
- /data/data/####/9cb53237936d1a315f3c4e1d0cc3cb0a8cbe6b1d65e00ef....0.tmp
- /data/data/####/a73b93cfecec2c25338fd46004f32cbb9b507fe6dd6328d....0.tmp
- /data/data/####/a88de48f52b05a4fa018e174f8afe672f31ddb9a8e2c088....0.tmp
- /data/data/####/ad00dfe6ba07ab31b1689da1103736de3b0db87c1b26596....0.tmp
- /data/data/####/authStatus_cn.e23.eggplant.xml
- /data/data/####/authStatus_cn.e23.eggplant;pushservice.xml
- /data/data/####/authStatus_cn.e23.eggplant;remote.xml
- /data/data/####/b53c1c7b2fe4f8e85f5c836d5c188c7c53c0fcf30c0b1e8....0.tmp
- /data/data/####/b53c1c7b2fe4f8e85f5c836d5c188c7c53c0fcf30c0b1e8...c9e6.0
- /data/data/####/be442964d27a3f1085e4895ab47e63556bee18913e9595d....0.tmp
- /data/data/####/c0a9cfe068f4b0494355758557467bf4c2ede5645ddc655....0.tmp
- /data/data/####/db384a1188d70fdb7c2db670a5fc0d6af1df91f7f866059....0.tmp
- /data/data/####/dcfe4adc291a2b6ed97c55fc421d8d8f0619bf3ccd2db94....0.tmp
- /data/data/####/e5ce01cd8aa9704060f37cac2d70b75c9d06648e2c2f87a....0.tmp
- /data/data/####/e73ce2947a7908ba8e6cc9689c7ccd9ef9365dd9708e21f....0.tmp
- /data/data/####/eggplant.db-journal
- /data/data/####/f893a97c08d92e429bbc9c5786fbe440fea4266e64e4cd8....0.tmp
- /data/data/####/f9b754c3ac81a7ecb956d2c23ae3949b4bba35df6f30f42....0.tmp
- /data/data/####/fbbb790fc1ae1b3d7c9844a45cf98ef36d6d784c1bf0bf3....0.tmp
- /data/data/####/firll.dat
- /data/data/####/gal.db
- /data/data/####/gal.db-journal
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gkt-journal
- /data/data/####/gx_sp.xml
- /data/data/####/hst.db
- /data/data/####/hst.db-journal
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libcuid.so
- /data/data/####/libjiagu-1976283793.so
- /data/data/####/mob_commons_1
- /data/data/####/mob_sdk_exception_1
- /data/data/####/multidex.version.xml
- /data/data/####/ofl.config
- /data/data/####/ofl_location.db
- /data/data/####/ofl_location.db-journal
- /data/data/####/ofl_statistics.db
- /data/data/####/ofl_statistics.db-journal
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushk.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/tdata_Cta775
- /data/data/####/tdata_Cta775.jar
- /data/data/####/tdata_YYn966
- /data/data/####/tdata_YYn966.jar
- /data/data/####/tdata_lOE499
- /data/data/####/tdata_lOE499.jar
- /data/data/####/tdata_nmo636
- /data/data/####/tdata_nmo636.jar
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.dic_lock
- /data/media/####/.duid
- /data/media/####/.globalLock
- /data/media/####/.nomedia
- /data/media/####/.nulplt
- /data/media/####/.pkg_lock
- /data/media/####/.rcTag
- /data/media/####/.rc_lock
- /data/media/####/app.db
- /data/media/####/cn.e23.eggplant.bin
- /data/media/####/cn.e23.eggplant.db
- /data/media/####/cn_e23_wei_hai_logo.png
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/conlts.dat
- /data/media/####/gkt-journal
- /data/media/####/gktper
- /data/media/####/ls.db
- /data/media/####/ls.db-journal
- /data/media/####/tdata_Cta775
- /data/media/####/tdata_YYn966
- /data/media/####/tdata_lOE499
- /data/media/####/tdata_nmo636
- /data/media/####/test.log
- /data/media/####/yoh.dat
- /data/media/####/yol.dat
- /data/media/####/yom.dat
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.PushService 24353 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- mount
- sh
- BaiduMapSDK_base_v5_1_0
- getuiext2
- libjiagu-1976283793
- locSDK7b
- neh
- AES-CBC-PKCS5Padding
- AES-CFB-NoPadding
- AES-ECB-PKCS5Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-ECB-NoPadding
- AES-ECB-PKCS5Padding