Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) wx.q####.cn:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) pub-####.qin####.com:80
- TCP(HTTP/1.1) thi####.q####.cn:80
- TCP(TLS/1.0) api.growi####.com:443
- TCP(TLS/1.0) ava####.githubu####.com:443
- TCP(TLS/1.0) eco####.me####.com.####.com:443
- TCP(TLS/1.0) idu####.qini####.com:443
- TCP(TLS/1.0) c3af2e8####.c####.qingc####.com:443
- TCP(TLS/1.0) t####.growi####.com:443
- TCP(TLS/1.0) tinyali####.c####.l####.####.com:443
- TCP(TLS/1.0) t.growi####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5226
- 7j####.c####.z0.####.com
- and####.b####.qq.com
- android####.ju####.im
- api.growi####.com
- app-pow####.ju####.im
- app-ver####.ju####.im
- ava####.githubu####.com
- banner-####.ju####.im
- c####.g####.ig####.com
- c-h####.g####.com
- eco####.me####.com
- gold####.x####.io
- lc-gold####.x####.io
- pub-####.qin####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- suid-ge####.ju####.im
- t####.growi####.com
- t.growi####.com
- tag-sub####.ju####.im
- thi####.q####.cn
- timelin####.ju####.im
- user-go####.x####.io
- wx.q####.cn
- xiaoce-####.ju####.im
- pub-####.qin####.com/tdata_EDT356
- t####.c####.q####.####.com/config/hz-hzv3.conf
- t####.c####.q####.####.com/tdata_vHH584
- t####.c####.q####.####.com/tdata_wmL809
- thi####.q####.cn/mmopen/vi_32/Q0j4TwGTfTKY699wKpk7qkR9FMPDDqca13nuDgo5hl...
- wx.q####.cn/mmhead/Q3auHgzwzM5h3f21fg3AMH19hxIh1HbgQlu2ibc564UASBmficVDM...
- and####.b####.qq.com/rqd/async?aid=####
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.jg.ic
- /data/data/####/030b5f4aee14c8934b542b8fa20c257f4834146856cdd1d....0.tmp
- /data/data/####/04d42c1d534b835ba826a5d7bbc7daca6ad837dca038d40....0.tmp
- /data/data/####/064f27065692dd2b500516c2996eb9fe0798fa4effe54c1....0.tmp
- /data/data/####/0d1ad857b48fc73c05a790f61a73dc69c474cf6d74e2380....0.tmp
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/1a4568a87cc6c829647bf3026b8a789c52e2d9da3ae7db2....0.tmp
- /data/data/####/319b8dfc45b639369821154fd3d8a16eddf112486670423....0.tmp
- /data/data/####/3c1d7bbbb13fe45f74fb2d43d654c82063fc2574cc5d2aa....0.tmp
- /data/data/####/4a843063b00f131524c907f2e3b7c893f792606f7f343af....0.tmp
- /data/data/####/5de2bfd730d8aee7538a072d60f247c6af288cb93d66eb7....0.tmp
- /data/data/####/5f938854ea85c63a8e86d59940148232547b114a0edd32e....0.tmp
- /data/data/####/62650cc68881a8ec94c28397df50794ed1b8b45bcd4e838....0.tmp
- /data/data/####/6781cbb8d9cf42031f89146f8634feb8366b6a7396aadea....0.tmp
- /data/data/####/67c56ccc6e6a30c26788de78191fa3fd68dfaefcc3a99dc....0.tmp
- /data/data/####/6d60aba7180b8cdc28557d64b917c82b0f8dcb47797327e....0.tmp
- /data/data/####/6db1224f84a9c7d32f1e43bea54b9a6b54137823f4ea913....0.tmp
- /data/data/####/85dceb127a667ba9e47d71d75531d1bdb1a3559ae35d127....0.tmp
- /data/data/####/91a8f386d14695be31626f96ddefe343df4b5907a353e6d....0.tmp
- /data/data/####/93da7f73683d
- /data/data/####/970d3bac50168899244f7d53434415e326de67dfe334b1b....0.tmp
- /data/data/####/9c285aa7117d75b408db592e9c7c7f21e684db1d5fafd27....0.tmp
- /data/data/####/9c52eb90c4d1a8d50275d249c6c986890be25a0f1e93884....0.tmp
- /data/data/####/BUGLY_COMMON_VALUES.xml
- /data/data/####/BuglySdkInfos.xml
- /data/data/####/Meiqia.xml
- /data/data/####/Meiqia.xml.bak
- /data/data/####/MultiDex.lock
- /data/data/####/SP_AROUTER_CACHE.xml
- /data/data/####/a15eb06b63810f3a919f20153b1885c172f537578b675aa....0.tmp
- /data/data/####/b3073460e9635580af29b99323a1b335129207c7bfea91c....0.tmp
- /data/data/####/b610934960734f1d9637727e00c8e6888a73609bba9cef6....0.tmp
- /data/data/####/b6804b18fe402a54f6b6a18476af5b74630179129fdd135....0.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/cd6dcb7303750a9b4564adccd1048fa679651d221393c0b....0.tmp
- /data/data/####/com.daimajia.gold.BETA_VALUES.xml
- /data/data/####/com.daimajia.gold.BETA_VALUES.xml.bak
- /data/data/####/com.daimajia.gold_PushEvents.db
- /data/data/####/com.daimajia.gold_PushEvents.db-journal
- /data/data/####/com.meizu.flyme.push.xml
- /data/data/####/crashrecord.xml
- /data/data/####/d37d87608f8f1788b7b3f25a24db62c02676d9b320f6535....0.tmp
- /data/data/####/d434ab665c1b8028a5f23efa9d225bcc40148016fa8de47....0.tmp
- /data/data/####/e31592ad91d85034bbb271b3843a239fc505c6c0d8a0812....0.tmp
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gold.db-journal
- /data/data/####/growing.db
- /data/data/####/growing.db-journal
- /data/data/####/growing_ecsid.xml
- /data/data/####/growing_persist_data.xml
- /data/data/####/growing_profile.xml
- /data/data/####/growing_server_pref.xml
- /data/data/####/gx_sp.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/juejin_default.xml
- /data/data/####/juejin_device.xml
- /data/data/####/libjiagu598539105.so
- /data/data/####/local_crash_lock
- /data/data/####/local_crash_lock (deleted)
- /data/data/####/meiqia.db
- /data/data/####/meiqia.db-journal
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/tdata_vHH584
- /data/data/####/tdata_vHH584.jar
- /data/data/####/tdata_wmL809
- /data/data/####/tdata_wmL809.jar
- /data/media/####/2018-11-07.log.txt
- /data/media/####/app.db
- /data/media/####/com.daimajia.gold.bin
- /data/media/####/com.daimajia.gold.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/tdata_vHH584
- /data/media/####/tdata_wmL809
- /data/media/####/test.log
- /system/bin/sh -c getprop
- <Package Folder>/files/gdaemon_20161017 0 <Package>/im.juejin.android.push.receiver.GetuiPushReciver 24649 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- getprop
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.miui.ui.version.name
- getprop ro.smartisan.version
- getprop ro.vivo.os.version
- mount
- Bugly
- getuiext2
- libjiagu598539105
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding