Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) norma-e####.m####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) api.soulb####.cn:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) api.soulb####.cn:443
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5225
- TCP ope####.3g.qq.com:443
- TCP 58.2####.137.13:20164
- TCP 1####.51.131.30:20164
- 7j####.c####.z0.####.com
- a####.u####.com
- and####.b####.qq.com
- api.soulb####.cn
- c####.g####.ig####.com
- c-h####.g####.com
- log.u####.com
- norma-e####.m####.com
- ope####.3g.qq.com
- plb####.u####.com
- reso####.soulb####.cn
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- u####.u####.com
- api.soulb####.cn/public/images/home_321_6060.png
- api.soulb####.cn/public/images/home_322_6060.png
- api.soulb####.cn/public/images/home_323_6060.png
- api.soulb####.cn/public/images/home_324_6060.png
- api.soulb####.cn/public/images/home_329_6060.png
- api.soulb####.cn/public/images/home_330_6060.png
- api.soulb####.cn/public/images/home_331_6060.png
- api.soulb####.cn/public/images/home_332_6060.png
- api.soulb####.cn/public/uploads/article_img/1901040550435c2f2c73b63c8.jpg
- api.soulb####.cn/public/uploads/article_img/1901040551515c2f2cb72397d.jpg
- api.soulb####.cn/public/uploads/article_img/1901040552145c2f2ccec4848.jpg
- api.soulb####.cn/public/uploads/avatar/180802112728_5b6322e0f01fc_thumb....
- api.soulb####.cn/public/uploads/avatar/180904032120_5b8e327032ed1_thumb....
- api.soulb####.cn/public/uploads/real/171117063418_5a0ebb2ab9c75_thumb.jpg
- api.soulb####.cn/public/uploads/real/180627100154_5b3398d251a39_thumb.jpg
- api.soulb####.cn/public/uploads/real/180803083736_5b63a3d049be5_thumb.jpg
- api.soulb####.cn/public/uploads/real/180829082249_5b86901928fcd_thumb.png
- api.soulb####.cn/public/uploads/real/180915104056_5b9d19f84222a_thumb.jpg
- api.soulb####.cn/public/uploads/real/180918022433_5ba09a219f76d_thumb.jpg
- api.soulb####.cn/public/uploads/real/180918075304_5ba0e720bfc20_thumb.jpg
- api.soulb####.cn/public/uploads/real/181020070620_5bcb0c2ca4f90_thumb.jpg
- api.soulb####.cn/public/uploads/real/181102111434_5bdbc11a6a2c0_thumb.jpg
- api.soulb####.cn/public/uploads/real/181124104504_5bf8bb30e4e7f_thumb.jpg
- api.soulb####.cn/public/uploads/real/181202093815_5c03e04770e0a_thumb.jpg
- api.soulb####.cn/public/uploads/real/181227044232_5c24907897adb_thumb.jpg
- api.soulb####.cn/public/uploads/real/190112120339_5c39671befd7f_thumb.png
- api.soulb####.cn/public/uploads/real/190120024354_5c4418aa4d41d_thumb.jpg
- api.soulb####.cn/public/uploads/real/190123081535_5c485ae739e83_thumb.jpg
- api.soulb####.cn/public/uploads/real/190125061223_5c4ae107a84fc_thumb.jpg
- api.soulb####.cn/public/uploads/real/3f987e300774830235c5f1333267db49.jpg
- api.soulb####.cn/public/uploads/real/7688bf3f289a5fcc29c225675fa699d3.jpg
- api.soulb####.cn/public/uploads/real/8bf70ec90fb0a98e973506e2cfd00228.jpg
- api.soulb####.cn/public/uploads/real/96a1b6452845ade6b1ae7e68ecaaaad1.jpg
- api.soulb####.cn/public/uploads/real/abc904ebe4a1a5cd392343820319eb56.jpg
- api.soulb####.cn/public/uploads/real/c0019563e3b831436daccbf461be6296.png
- api.soulb####.cn/public/uploads/real/d124635189f105cfe91024a689b0668a.jpg
- api.soulb####.cn/public/uploads/real/e079ebf6fd5bcda41455df51dadd1cce.jpg
- api.soulb####.cn/public/uploads/real/ea1b362d6cb2316b3a02b24c6d3b78dc.jpg
- norma-e####.m####.com/android/exchange/getpublickey.do
- t####.c####.q####.####.com/config/hz-hzv3.conf
- t####.c####.q####.####.com/tdata_OPb601
- t####.c####.q####.####.com/tdata_YYn966
- a####.u####.com/app_logs
- and####.b####.qq.com/rqd/async?aid=####
- c-h####.g####.com/api.php?format=####&t=####
- norma-e####.m####.com/push/android/external/add.do
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/1004
- /data/data/####/44d3377cbfa8a4fc7ee3676ef20687a7_v4.msgstore-journal
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/MSF.C.NetConnInfoCenter.xml
- /data/data/####/MultiDex.lock
- /data/data/####/QALConfigStore.dat
- /data/data/####/TLS_DEVICE_INFO.xml
- /data/data/####/WLOGIN_DEVICE_INFO.xml
- /data/data/####/a5de5cd3fbb93e2689a4961df02b2f5dd523339dd50a447....0.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/com.tencent.liteav.dev_uuid.xml
- /data/data/####/core_info
- /data/data/####/crashrecord.xml
- /data/data/####/d25f7a66fbf79013181809bffab3d7752f01fbfe75a42c0....0.tmp
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ4NDM2NDY2MTA5;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ4NDM2NTEwNTg5;
- /data/data/####/dW1weF9zaGFyZV8xNTQ4NDM2NDY4MDQ0;
- /data/data/####/dW1weF9zaGFyZV8xNTQ4NDM2NDY5MTYz;
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/guigui.xml
- /data/data/####/gx_sp.xml
- /data/data/####/i==1.2.0&&2.5.8_1548436466666_envelope.log
- /data/data/####/info.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libjiagu-1049669241.so
- /data/data/####/local_crash_lock
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/qal_monitor.db-journal
- /data/data/####/qalimid_v2
- /data/data/####/report_v5.msgstore-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/share.db-journal
- /data/data/####/sobot_config.xml
- /data/data/####/soul.db-journal
- /data/data/####/tbs_download_config.xml
- /data/data/####/tbscoreinstall.txt
- /data/data/####/tbslock.txt
- /data/data/####/tdata_OPb601
- /data/data/####/tdata_OPb601.jar
- /data/data/####/tdata_YYn966
- /data/data/####/tdata_YYn966.jar
- /data/data/####/tls_device.dat
- /data/data/####/tls_sdk.db-journal
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_socialize.xml
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/wlogin_device.dat
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.cca.dat
- /data/media/####/.umm.dat
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/app.19.01.25.17.log
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.guigui.soulmate.bin
- /data/media/####/com.guigui.soulmate.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/ilivesdk_20190125.log
- /data/media/####/imsdk_20190125.log
- /data/media/####/sdk.19.01.25.17.log
- /data/media/####/spuid
- /data/media/####/sysid.dat
- /data/media/####/tbslog.txt
- /data/media/####/tdata_OPb601
- /data/media/####/tdata_YYn966
- /data/media/####/test.log
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.GeTuiPushService 24935 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- getprop
- getprop ro.product.cpu.abi
- ls /sys/class/thermal
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.GeTuiPushService 24935 300 0
- Bugly
- _imcore_jni_gyp
- dr
- getuiext2
- libjiagu-1049669241
- libwtcrypto
- qalcodecwrapper
- qalmsfboot
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- DES-CBC-PKCS5Padding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding