Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) l####.tbs.qq.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) h####.opensp####.cn:80
- TCP(HTTP/1.1) oss.newairc####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) h5.newairc####.com:80
- TCP(HTTP/1.1) d####.opensp####.cn:80
- TCP(TLS/1.0) www.go####.com:443
- TCP(TLS/1.0) oss.newairc####.com:443
- TCP(TLS/1.0) s####.ml####.cc:443
- TCP(TLS/1.0) www.gst####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5227
- 7j####.c####.z0.####.com
- a####.u####.com
- c####.g####.ig####.com
- c-h####.g####.com
- d####.opensp####.cn
- h####.opensp####.cn
- h5.newairc####.com
- img.newairc####.com
- l####.tbs.qq.com
- oss.newairc####.com
- s####.ml####.cc
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- ssl.gst####.com
- www.go####.com
- www.gst####.com
- h####.opensp####.cn/launchconfig?t=####&p=####
- h5.newairc####.com/api/getArticleAdv?sid=####&cid=####&v=####
- h5.newairc####.com/api/getArticleStat?sid=####&aid=####
- h5.newairc####.com/api/getArticles?sid=####&cid=####&lastFileID=####&row...
- h5.newairc####.com/api/getColumns?sid=####&cid=####
- h5.newairc####.com/api/getComments?sid=####&rootID=####&sourceType=####&...
- h5.newairc####.com/api/getConfig?sid=####
- oss.newairc####.com/zgbxb/article/201812/03/c5497782.json
- oss.newairc####.com/zgbxb/pic/201702/20/31e05ba3-f07e-4e99-973b-72b82690...
- oss.newairc####.com/zgbxb/pic/201702/20/ab226571-a345-4df3-be74-44ccf778...
- oss.newairc####.com/zgbxb/pic/201702/20/ace70ca4-2d6b-41dc-bad3-1e77b53e...
- oss.newairc####.com/zgbxb/pic/201702/20/dd0b1423-1d6d-4bad-ab75-67991bc2...
- oss.newairc####.com/zgbxb/pic/201707/07/0c0f6ae1-9b39-4ba9-9be5-f312a644...
- oss.newairc####.com/zgbxb/pic/201812/03/3d8766fb-929c-402a-afec-c497244e...
- t####.c####.q####.####.com/tdata_Soq141
- t####.c####.q####.####.com/tdata_vxj811
- ti####.c####.l####.####.com/config/hz-hzv3.conf
- a####.u####.com/app_logs
- c-h####.g####.com/api.php?format=####&t=####
- d####.opensp####.cn/index.php/clientrequest/clientcollect/isCollect
- h5.newairc####.com/api/event
- l####.tbs.qq.com/ajax?c=####&k=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/-1300163636
- /data/data/####/-1312716470
- /data/data/####/-1383106118
- /data/data/####/-1383999812
- /data/data/####/-414934061
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/014438dec93098e9fc7c56186421e02b999c2e55972749c....0.tmp
- /data/data/####/090433e06745c3aa1521d3178b06b25316df2040b35c7de....0.tmp
- /data/data/####/0eadeae7b0f38ba48a162435bddb8016251ba188dafbac2....0.tmp
- /data/data/####/1196305038
- /data/data/####/129dd30adf8507014f895aa0626dc409c5f04c9a9b97a23....0.tmp
- /data/data/####/1389023919
- /data/data/####/1695857311
- /data/data/####/2014177322
- /data/data/####/20df2c2e0704df95717239c615c1b0463dbbcf35bb7c7f0....0.tmp
- /data/data/####/337525857
- /data/data/####/34e534638f292d94bb3c086a8e6d4bd51e8d5516407c477....0.tmp
- /data/data/####/386967948
- /data/data/####/3a6e566d9a2e775f075c7000698df35ad78cfb3c657b975....0.tmp
- /data/data/####/40f8c8356c09c748a522916cf7aafc17afb13946c470e9c....0.tmp
- /data/data/####/430ceab426300847b9a4ed6b7877fbc31efa70e9c9d7478....0.tmp
- /data/data/####/446683a90f7b5ce6ed78d3a296410a16f5027a9816f117c....0.tmp
- /data/data/####/49
- /data/data/####/492115584
- /data/data/####/52b44ca2d037d9668fcba90aee736bc2037a5d265690ae2....0.tmp
- /data/data/####/5497782_article.js
- /data/data/####/6b1f2ddc0790a26305653bdf2edbb0faa565680c9e212f1....0.tmp
- /data/data/####/6c945d343f7b50ffd304bfba20cbfbbe54df2afb638d8bf....0.tmp
- /data/data/####/722523111
- /data/data/####/83da45bd3dcf07c48841c07eb830356687df689c3a4e26b....0.tmp
- /data/data/####/8b5a787a0aacd1f8bafa7928a183e95e910cc12a61c375c....0.tmp
- /data/data/####/90642330f63011d4dba7ddb528fdae60bf98bc181d58f75....0.tmp
- /data/data/####/9e19202210faed3a619e55a1a09567d7f3b4669f62b432c....0.tmp
- /data/data/####/FZLTXHK-GBK_YS.ttf
- /data/data/####/QQ_3x.png
- /data/data/####/a20abb265a9c0e1ae3a5d0754ae27d22dea39bfa36139b4....0.tmp
- /data/data/####/a3a77402608e7291d2ef935953f5b5e08012b06b68031cf....0.tmp
- /data/data/####/a694b680d9e43cb7e1e7b6943fa8f9096d29e286abe7ab8....0.tmp
- /data/data/####/afc2b11ab7c43fc6b83bf49ea40f78a6e45861f4b0a4811....0.tmp
- /data/data/####/amazeui.min.css
- /data/data/####/amazeui.min.js
- /data/data/####/angular1.4.6.min.js
- /data/data/####/article.js
- /data/data/####/b060af26131cdfedd660bd3ebd79d27e47ca17112ed7920....0.tmp
- /data/data/####/b0b29563db013f05681a320c990721cb56ee15367cc9751....0.tmp
- /data/data/####/b37562627602e91839324eebe1c4f79b9b6f0ee287442ba....0.tmp
- /data/data/####/b3d567e689acb87397dcb6270ea2acda1c9106725176746....0.tmp
- /data/data/####/base.css
- /data/data/####/c0f78cfb8d5365603c5a0135204e88123c744b24dab5b43....0.tmp
- /data/data/####/cb34c9f54baf73828667912d524586e1c62a6147ef4d889....0.tmp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/ce535903180208a54c19f44fba497f66d17f4aa951ddd38....0.tmp
- /data/data/####/columnId.xml
- /data/data/####/com.iflytek.id.xml
- /data/data/####/com.iflytek.msc.xml
- /data/data/####/core_info
- /data/data/####/d354bb0f502b36e6c397082501aba2f6bb40a2dc4c49ced....0.tmp
- /data/data/####/d9dae83755d567a353d9ca74a731888cedf524d676b1e2e....0.tmp
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/db_founder0-journal
- /data/data/####/debug.conf
- /data/data/####/e39b407e7dd892a91a2b577e1129d03182efbaf398747eb....0.tmp
- /data/data/####/e6406f422a91fadd6992641e00a8441503b014a80bf83e5....0.tmp
- /data/data/####/eb295e0b27991d952ce3298ae191f3023e37e5cf27aeeaf....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f90f1a61d5615270ab1d2caf322a674a0b5e27ec86e7b9d....0.tmp
- /data/data/####/f_000001
- /data/data/####/fee8a9c89fe15156ef1c588ac273cd4fe40c94e097b35a3....0.tmp
- /data/data/####/file__0.localstorage-journal
- /data/data/####/fontawesome-webfont.ttf
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/great_button.png
- /data/data/####/great_cancel_button.png
- /data/data/####/gx_sp.xml
- /data/data/####/helpMsg.xml
- /data/data/####/icon-images.png
- /data/data/####/icon_audio_play.png
- /data/data/####/icon_file.png
- /data/data/####/icon_file_down.png
- /data/data/####/icon_meta_voice.png
- /data/data/####/icon_praise.png
- /data/data/####/icon_praiseStar.png
- /data/data/####/icon_selector_normal.png
- /data/data/####/icon_selector_press.png
- /data/data/####/ifly_launch_lib.xml
- /data/data/####/iflytek_state_com.founder.zgbxj.xml
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/jquery.min2.2.0.js
- /data/data/####/js.combine.min.js
- /data/data/####/libjiagu.so
- /data/data/####/loading.png
- /data/data/####/multidex.version.xml
- /data/data/####/mwsdk_analytics.db-journal
- /data/data/####/news_detail.html
- /data/data/####/persistent_data.xml
- /data/data/####/play.png
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/reader.db-journal
- /data/data/####/run.pid
- /data/data/####/sanjiaoxing.png
- /data/data/####/shareTimeline_3x.png
- /data/data/####/sina_3x.png
- /data/data/####/tbs_download_config.xml
- /data/data/####/tbs_download_stat.xml
- /data/data/####/tbscoreinstall.txt
- /data/data/####/tbslock.txt
- /data/data/####/tdata_Soq141
- /data/data/####/tdata_Soq141.jar
- /data/data/####/tdata_vxj811
- /data/data/####/tdata_vxj811.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/video.png
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/wx_3x.png
- /data/media/####/.nomedia
- /data/media/####/app.db
- /data/media/####/com.founder.zgbxj.bin
- /data/media/####/com.founder.zgbxj.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/iflyworkdir_test
- /data/media/####/journal.tmp
- /data/media/####/localTemplate.zip
- /data/media/####/tdata_Soq141
- /data/media/####/tdata_vxj811
- /data/media/####/test.log
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.push.GeTuiPushService 24715 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu.so
- getprop ro.product.cpu.abi
- getuiext2
- libjiagu
- msc
- AES-CBC-PKCS7Padding
- RSA-ECB-NoPadding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS7Padding