Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) pub-####.qin####.com:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) app.s####.v89.com:80
- TCP(HTTP/1.1) i####.v89.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) a####.b####.qq.com:8011
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5224
- 7j####.c####.z0.####.com
- a####.b####.qq.com
- a####.u####.com
- and####.b####.qq.com
- app.s####.v89.com
- c####.g####.ig####.com
- c-h####.g####.com
- i####.v89.com
- pub-####.qin####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- i####.v89.com/group1/M00/00/00/rBIy0lu6uAGAaIw3AADXHDx4K2E952_162*162.png
- i####.v89.com/group1/M00/00/00/rBIy0luHhNCALWWrAAFD8955lBE530_480*960.jpg
- i####.v89.com/group1/M00/00/00/rBIy0lut6NWAFfXZAAC7ahWyfm4333_640*640.jpg
- i####.v89.com/group1/M00/00/00/rBIy0lutgNeAcMDAAADiDlUe1Ls392_640*640.JPG
- i####.v89.com/group1/M00/00/00/rBIy0lvSr5CAZrlTAAR5cgq3TYU492_640*640.png
- i####.v89.com/group1/M00/00/00/rBIy0lvSsGSAUyE0AARAEZox3G0743_640*640.png
- i####.v89.com/group1/M00/00/00/rBIy0lvW0cyAYrdBAACGdcLbZug250_600*240.jpg
- i####.v89.com/group1/M01/00/00/rBIy0lu6uAaANzr0AADR7G_rnCw582_162*162.png
- i####.v89.com/group1/M01/00/00/rBIy0luHhNGAQ1MgAAC6FZ9a_L0353_480*833.jpg
- i####.v89.com/group1/M01/00/00/rBIy0lvSY7qAWjBhAABghNuLccM698_640*300.jpg
- i####.v89.com/group1/M01/00/00/rBIy0lvSsHCAQZvDAAQ6z4Xo7vc468_640*640.png
- i####.v89.com/group1/M01/00/00/rBIy0lvW0dqAX14aAABzHt-yM4M240_600*240.jpg
- i####.v89.com/group1/M02/00/00/rBIy0lu6uAuAW1hSAACmnT5OLZo768_162*162.png
- i####.v89.com/group1/M02/00/00/rBIy0lvSsIGAI_1CAARD5SnkeOY908_640*640.png
- i####.v89.com/group1/M03/00/00/rBIy0lu6uBGAFnafAACNilfS47c813_162*162.png
- i####.v89.com/group1/M04/00/00/rBIy0lu6uBiAQqXOAADP5PtiiBA129_162*162.png
- i####.v89.com/group1/M04/00/00/rBIy0lvWpPCAeolwAAA2tHQti-s674_320*240.jpg
- i####.v89.com/group1/M05/00/00/rBIy0lu6uB6ADWwrAADsrLGoKDo868_162*162.png
- i####.v89.com/group1/M05/00/00/rBIy0lvNeH-AJf5JAAB6VaN0S2c978_640*300.jpg
- i####.v89.com/group1/M05/00/00/rBIy0lvSsAWAWsi-AAVeqfkuC8g643_640*640.png
- i####.v89.com/group1/M05/00/00/rBIy0lvSsNaAI-fsAAU2yqWLxz0460_640*640.png
- i####.v89.com/group1/M05/00/00/rBIy0lvWpP2AD45WAAAnawOn5lo848_320*240.jpg
- i####.v89.com/group1/M06/00/00/rBIy0lu6t-6AXG4qAACxF009M8Y044_162*162.png
- i####.v89.com/group1/M06/00/00/rBIy0lu6uCKAO2W5AACoEv8BduM831_162*162.png
- i####.v89.com/group1/M06/00/00/rBIy0luHlECAHBVEAAEbwOYn0JA354_480*960.jpg
- i####.v89.com/group1/M06/00/00/rBIy0lut1muANZoFAAEn0ieMWQo064_640*640.jpg
- i####.v89.com/group1/M06/00/00/rBIy0lvSY1iAMP3bAABduf93x-s866_640*300.jpg
- i####.v89.com/group1/M06/00/00/rBIy0lvSd_uAeCLvAAB0D4iqOlk409_600*240.jpg
- i####.v89.com/group1/M06/00/00/rBIy0lvSsO6AUdxpAASW0sZtDuU128_640*640.png
- i####.v89.com/group1/M07/00/00/rBIy0luHlFmAQVTVAAECc-tG1VA818_480*960.jpg
- i####.v89.com/group1/M07/00/00/rBIy0lutgbaAetnAAAD0vj3kEP4480_640*640.jpg
- i####.v89.com/group1/M07/00/00/rBIy0lutlHSAHTXOAADewhOz3r4394_640*640.jpg
- i####.v89.com/group1/M08/00/00/rBIy0lu6t_uARxLOAADTJS-iYHY305_162*162.png
- i####.v89.com/group1/M08/00/00/rBIy0luHhM6ACF1fAAFL0i2KoFw845_480*960.jpg
- i####.v89.com/group1/M08/00/00/rBIy0luHlFuACxf4AAC5svNcpec136_480*833.jpg
- i####.v89.com/group1/M08/00/00/rBIy0lutgzKAZMFZAAEGAmDwxC8169_640*640.JPG
- i####.v89.com/group1/M08/00/00/rBIy0lvSY3SAIiWuAACELJ_TODI854_640*300.jpg
- i####.v89.com/group1/M08/00/00/rBIy0lvSeBWAAYPSAABtpNrSMvQ363_600*240.jpg
- i####.v89.com/group1/M08/00/00/rBIy0lvSr2OACPbYAASITHq11gs289_640*640.png
- i####.v89.com/group1/M08/00/00/rBIy0lvSsD-ARlphAAXLEAYG-_o997_640*640.png
- i####.v89.com/group1/M08/00/00/rBIy0lvWspmAbOU6AAVQyktCWrw405_640*640.png
- pub-####.qin####.com/tdata_EDT356
- t####.c####.q####.####.com/config/hz-hzv3.conf
- t####.c####.q####.####.com/tdata_MkX219
- t####.c####.q####.####.com/tdata_iGj879
- a####.b####.qq.com:8011/rqd/async?aid=####
- a####.u####.com/app_logs
- and####.b####.qq.com/rqd/async?aid=####
- app.s####.v89.com/appInvite/getIsInviteFriend
- app.s####.v89.com/community/getCartInfo
- app.s####.v89.com/community/getCartInfoByGoodsInfo
- app.s####.v89.com/community/getCommodityDetail
- app.s####.v89.com/community/getCommunityServicePhone
- app.s####.v89.com/community/getDistributionCommunityList
- app.s####.v89.com/community/getMyStoreOrderCount
- app.s####.v89.com/community/getNewCommodityCategoryList
- app.s####.v89.com/community/getNewCommodityPage
- app.s####.v89.com/community/getUsableStoreCoupons
- app.s####.v89.com/community/getVersion
- app.s####.v89.com/community/getWebHomePageMenus
- app.s####.v89.com/community/homePage
- app.s####.v89.com/community/touristLogin
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/488992e62cc0
- /data/data/####/Hawk
- /data/data/####/Hawk-journal
- /data/data/####/bugly_db_-journal
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/com.ydh.wuye.BETA_VALUES.xml
- /data/data/####/com.ydh.wuye_preferences.xml
- /data/data/####/crashrecord.xml
- /data/data/####/db_default_job_manager-journal
- /data/data/####/disk_entries_list_LinJuImagePipelineCacheDefaul...54.xml
- /data/data/####/disk_entries_list_LinJuImagePipelineCacheSmall_...03.xml
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/libjiagu-675290566.so
- /data/data/####/local_crash_lock
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/tdata_MkX219
- /data/data/####/tdata_MkX219.jar
- /data/data/####/tdata_iGj879
- /data/data/####/tdata_iGj879.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/media/####/-10441855471758659187
- /data/media/####/-1516168681315621134
- /data/media/####/-1601062257-1108068484
- /data/media/####/-1850023988-1190700458
- /data/media/####/-1850023988-560712144
- /data/media/####/-744383834364732069
- /data/media/####/0L0SMaT8qlTIAbGCmqNenJN-dU8.-1761959051.tmp
- /data/media/####/0WnIgnSgg9THUYfOd6D6w43sPAs.451205338.tmp
- /data/media/####/0soG_9qrbgacY9F6EKkXHwJpGFc.799081895.tmp
- /data/media/####/1116542598573509635
- /data/media/####/15600381531547800073
- /data/media/####/15600381532103746865
- /data/media/####/1989986458-1271095828
- /data/media/####/1989986458-76376178
- /data/media/####/19899864581874529506
- /data/media/####/2530822791328946579
- /data/media/####/3LjrSsCGEzFAP03ChJ-IGqVvX-w.-1391164416.tmp
- /data/media/####/53ef666fbd9fa108abc0c31ebb989645.0.tmp
- /data/media/####/6330584661731112048
- /data/media/####/6eae1e38240ec8a2f198b1dd7469d33e.0.tmp
- /data/media/####/6h-9lubM_WOTDPH6GCngt7yUZG8.-2020941237.tmp
- /data/media/####/70a6d98f0a82224963882d301a3e145.0.tmp
- /data/media/####/86cf5ad9f08f875736be7c3b6e95b908.0.tmp
- /data/media/####/8i5a0yK7c9eQdUF0QHoF8bkQ9dg.-1672125325.tmp
- /data/media/####/A7uzvmEY9KXJWomnWS8WtKU_1EE.140293047.tmp
- /data/media/####/B_jc2EXaCkQvRR4zBvXYX32JEcs.-1034973247.tmp
- /data/media/####/Eyja4iYlSDzhNrzd_YsjRthPH6A.1986128596.tmp
- /data/media/####/F33gq361eq-viwldIcHUGMZen8o.883050757.tmp
- /data/media/####/FgRvGGQUhViu739tZ6eU2vIFGXU.21565182.tmp
- /data/media/####/FmNad4B0H-cWvPGtE0fhrURZYpE.-1593522026.tmp
- /data/media/####/MWhuoOLKV7KZPOx_Qv41qfZRog4.-167819020.tmp
- /data/media/####/NMaQl4yK2tzmt5dYosDXBJpI5Fk.-1110779002.tmp
- /data/media/####/NPBbblZ1mKzzalDSfkatONg-XUM.1799349145.tmp
- /data/media/####/O4NH4THxOiYLzsGY-N5y_WitKN4.-1435484606.tmp
- /data/media/####/OVPXK49cVbbZzTuR8QMq0D07zlg.-669613480.tmp
- /data/media/####/RHUUnNqLwYHJkNa5LfC5Xx5scwE.-1329026583.tmp
- /data/media/####/XEBKEPTfuv7eZ8B_vkWnqXS506g.-1116228809.tmp
- /data/media/####/Y_B2c6z2o3KANVfw8ilp_geYuZw.547972040.tmp
- /data/media/####/YauvVUWVM9bksjBG1P4dx0c_BuI.-1876107909.tmp
- /data/media/####/a119bde067b667b9d7b7b17f85add207.0.tmp
- /data/media/####/aLZXCAmJuMB1kdxwDjbWyteeLJg.1360304140.tmp
- /data/media/####/app.db
- /data/media/####/cOY-2X0oGPXEpXhP9CycmHyBBHM.337910885.tmp
- /data/media/####/cb702c35a5a62d87480455a5e9aa64ba.0.tmp
- /data/media/####/ce58bdd32272a23305d88651c04f1c25.0.tmp
- /data/media/####/cgfPZiRlt6IlDCtV8I5gENgFzKM.-2143951351.tmp
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.ydh.wuye.bin
- /data/media/####/com.ydh.wuye.db
- /data/media/####/ekyO4IDWsoSMlKqdtxl2HJrew_I.1892905667.tmp
- /data/media/####/hXcGJ5F9wvdf5mD4oOA7ZXCQKsw.1542173417.tmp
- /data/media/####/iIMrREUSFaMZfB-mC9Avh_7-I1I.-589037101.tmp
- /data/media/####/journal.tmp
- /data/media/####/l0UK5lnBZxv3N5FAIGMhETYu6_g.-1089946976.tmp
- /data/media/####/mEUEzazJ-RsSyCxG2TAc9CiVAAU.1188870082.tmp
- /data/media/####/mI4si3t4ntSZ6heNyoFWR3pCvWg.-1846069479.tmp
- /data/media/####/o6Uxphc4a3XvY59f_gDUhYZyqGw.1314603288.tmp
- /data/media/####/rdYR_9G6E6WDPWI3DCKtt96b11Q.-180051099.tmp
- /data/media/####/tdata_MkX219
- /data/media/####/tdata_iGj879
- /data/media/####/test.log
- /data/media/####/vvboFDyuMffVd0ogIDpxyvA4nV8.1725350572.tmp
- /data/media/####/yUSbkeKjw0WlR0xGBfOXL9oQcpU.506104771.tmp
- /data/media/####/yl-UfGQwQktjRYbuaqtbZRKLTsY.1340218465.tmp
- /data/media/####/zFNHxBuVJElwSKipwWHByIkFEb4.-1347294120.tmp
- /system/bin/sh -c getprop
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.receiver.PushService 24194 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- getprop
- mount
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.receiver.PushService 24194 300 0
- Bugly
- getuiext2
- imagepipeline
- libjiagu-675290566
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding