Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) sdk.c####.g####.####.cn:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) cdn-sdk####.g####.com.####.cn:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) sdk-ope####.g####.com:80
- TCP(HTTP/1.1) sdk.yol####.hk:80
- TCP(TLS/1.0) res####.a####.com:443
- TCP(TLS/1.0) def####.ovs.us.####.com:443
- TCP(TLS/1.0) l####.l####.com:443
- TCP(TLS/1.0) and####.google####.com:443
- TCP(TLS/1.0) 1####.250.150.102:443
- TCP(TLS/1.0) rr9---s####.g####.com:443
- TCP(TLS/1.0) qy-swa####.qi####.com:443
- TCP(TLS/1.0) rr2---s####.g####.com:443
- TCP(TLS/1.0) 64.2####.165.94:443
- TCP(TLS/1.0) api.growi####.com:443
- TCP(TLS/1.0) t.growi####.com:443
- TCP(TLS/1.2) 1####.194.73.139:443
- TCP(TLS/1.2) 64.2####.165.94:443
- TCP(TLS/1.2) and####.google####.com:443
- TCP(TLS/1.2) 1####.250.150.102:443
- UDP and####.google####.com:443
- TCP l####.l####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP cm-1####.g####.com:5225
- 7j####.c####.z0.####.com
- and####.b####.qq.com
- and####.google####.com
- api.growi####.com
- c-h####.g####.com
- cdn-sdk####.g####.com
- cm-1####.g####.com
- gmscomp####.google####.com
- l####.l####.com
- qy-swa####.qi####.com
- res####.a####.com
- rr2---s####.g####.com
- rr9---s####.g####.com
- sdk-ope####.g####.com
- sdk.c####.g####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- sdk.yol####.hk
- t.growi####.com
- y####.al####.com
- cdn-sdk####.g####.com.####.cn/tdata_EDB102
- cdn-sdk####.g####.com.####.cn/tdata_svG098
- cdn-sdk####.g####.com.####.cn/tdata_zNZ623
- sdk-ope####.g####.com/api/addr.htm
- sdk.c####.g####.####.cn/config/hzv9.conf
- t.growi####.com:443/app/9eabefbaddd8e63a/android/devices?u=####&dm=####&...
- and####.b####.qq.com/rqd/async?aid=####
- api.growi####.com:443/v2/9eabefbaddd8e63a/android/action?stm=####
- api.growi####.com:443/v2/9eabefbaddd8e63a/android/pv?stm=####
- c-h####.g####.com/api.php?format=####&t=####
- def####.ovs.us.####.com:443/saveWb.json
- res####.a####.com:443/v3/iasdkauth?key=####&ts=####&scode=####
- sdk-ope####.g####.com/api.php?format=####&t=####
- sdk-ope####.g####.com/api.php?format=####&t=####&d=####&k=####
- sdk.yol####.hk/api/v5/commons/get_business_app_id
- /data/data/####/.jg.ic
- /data/data/####/0a231bd8575dcf72.txt
- /data/data/####/1004
- /data/data/####/21c22f492aba3de8.lock
- /data/data/####/30113144068405.0
- /data/data/####/81113083633944.0
- /data/data/####/87f75c18
- /data/data/####/930a31b34bd52c08.lock
- /data/data/####/BC1850C1C65B865C89600D295B24F366E60BBE14EB04655...2EC748
- /data/data/####/Q0VSVC5SU0EK.txt
- /data/data/####/SGMANAGER_DATA2
- /data/data/####/SGMANAGER_DATA2.tmp
- /data/data/####/apisdk_baseinfo_new.xml
- /data/data/####/apisdk_divice_id_new.xml
- /data/data/####/apisdk_imei_new.xml
- /data/data/####/apisdk_imsi_new.xml
- /data/data/####/app_config
- /data/data/####/bugly_db_-journal
- /data/data/####/c6a720fd0340
- /data/data/####/classes.dex
- /data/data/####/classes.oat
- /data/data/####/classes2.dex
- /data/data/####/classes3.dex
- /data/data/####/classes4.dex
- /data/data/####/com.leoao.fitness.xml
- /data/data/####/com.qiyukf.analytics.xml
- /data/data/####/core_info
- /data/data/####/crashrecord.xml
- /data/data/####/dc374f27dd9f7231
- /data/data/####/getui_sp.xml
- /data/data/####/gkt-journal
- /data/data/####/growing.db-journal
- /data/data/####/growing_ecsid.xml
- /data/data/####/growing_persist_data.xml
- /data/data/####/growing_profile.xml
- /data/data/####/growing_profile.xml.bak
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/libjiagu.so
- /data/data/####/libsgmain_315522000000.dex
- /data/data/####/libsgmain_315522000000.dex.flock (deleted)
- /data/data/####/libsgmainso-5.3.38.so
- /data/data/####/libsgsecuritybody_315522000000.dex
- /data/data/####/libsgsecuritybody_315522000000.dex.flock (deleted)
- /data/data/####/libsgsecuritybodyso-5.3.27.so
- /data/data/####/local_crash_lock
- /data/data/####/lock.lock
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/native_record_lock
- /data/data/####/pref.xml
- /data/data/####/proc_auxv
- /data/data/####/push.pid
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/sp.lock
- /data/data/####/tbs_download_config.xml
- /data/data/####/tbscoreinstall.txt
- /data/data/####/tbslock.txt
- /data/data/####/tdata_svG098
- /data/data/####/tdata_svG098.dex
- /data/data/####/tdata_svG098.dex.flock (deleted)
- /data/data/####/tdata_svG098.jar
- /data/data/####/tdata_zNZ623
- /data/data/####/tdata_zNZ623.dex
- /data/data/####/tdata_zNZ623.dex.flock (deleted)
- /data/data/####/tdata_zNZ623.jar
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_general_config.xml.bak (deleted)
- /data/data/####/unicorn#cheese#
- /data/media/####/.nomedia
- /data/media/####/0.2a6f80a9eb5c157f8fc5.js
- /data/media/####/1.9f1fbb379ae838ce4737.js
- /data/media/####/10.f32dd31c561936e5d70a.js
- /data/media/####/11.e1e975584c39b5112fc2.js
- /data/media/####/12.ae947068420d0a44d99e.js
- /data/media/####/13.6aded1f391cd8ab0fac5.js
- /data/media/####/14.562b632855b6c44896f1.js
- /data/media/####/15.3498baf9e71654928030.js
- /data/media/####/16.a2e7b5c8fb4b8b32e918.js
- /data/media/####/17.61c0dc2d551f8ce59cc3.js
- /data/media/####/18.7efb73d925a9ab70b00f.js
- /data/media/####/19.04cddeb830a6615ce33e.js
- /data/media/####/2.e221b33a165a96fa1ca4.js
- /data/media/####/20.1f148e5a2417d7a40f84.js
- /data/media/####/21.1bdced601bd30a386fc0.js
- /data/media/####/22.7ad09d76079eb7aecc41.js
- /data/media/####/23.25eda5997cde79d72983.js
- /data/media/####/24.14a8b7059e071f1775f2.js
- /data/media/####/25.b8a3f1f9fcbb8403c2bc.js
- /data/media/####/26.b496f790d6e216bb90de.js
- /data/media/####/27.857607f4af0a544eeef9.js
- /data/media/####/28.6db7aab0b01e9b43928f.js
- /data/media/####/29.dbd7baba8d365b7120a0.js
- /data/media/####/3.e69806556a7a22d85692.js
- /data/media/####/30.688ed6feb63f703161ae.js
- /data/media/####/31.4a02e3c6cf3832ee11d8.js
- /data/media/####/32.24953e1ce4abe8121ece.js
- /data/media/####/33.03dd0ba0308ac4f716fe.js
- /data/media/####/34.ca82d54fae0424212fc2.js
- /data/media/####/35.f2e437b37d7f43ca9b22.js
- /data/media/####/36.a9cad927a5c28604570c.js
- /data/media/####/37.326e0fd03c51dd6ef6af.js
- /data/media/####/38.9aac27ce51a7f74c54d6.js
- /data/media/####/39.b454a2fce377ea2f0ceb.js
- /data/media/####/4.ab943d435cc26624f289.js
- /data/media/####/40.02b8ff03515a4c60f0af.js
- /data/media/####/41.9f0d58e4fa1cc9a4e440.js
- /data/media/####/42.e9f6b491570f62e8fa0d.js
- /data/media/####/43.ee86d435ed6828bff3bf.js
- /data/media/####/44.d590f95a6525f0846a54.js
- /data/media/####/45.13f97820c3f8a46631ab.js
- /data/media/####/46.f4caf39081887720fede.js
- /data/media/####/47.bc7cd2438ea757b4d937.js
- /data/media/####/48.0ac75835bb0b62905b8c.js
- /data/media/####/49.9083319374121fb2c8a4.js
- /data/media/####/5.568bcb920fa4a1e2a756.js
- /data/media/####/50.8a6dde68d68defb94683.js
- /data/media/####/51.6bb1262173c5105965fe.js
- /data/media/####/52.ca4eaf9c644b2901b72e.js
- /data/media/####/53.e80ef081de8969f827e3.js
- /data/media/####/54.4ce23803c634f675f76f.js
- /data/media/####/55.a04359e3e603f9a4f478.js
- /data/media/####/56.732b34a1a8499f088938.js
- /data/media/####/57.71c1078a55870c1c4c79.js
- /data/media/####/58.0dc0f40465a32170640c.js
- /data/media/####/59.15f8113091d269c01e9f.js
- /data/media/####/6.01b818b0d42a031c56a8.js
- /data/media/####/60.cc2dcad9bd7a95c09d2f.js
- /data/media/####/61.b99ece85889c1e31fb20.js
- /data/media/####/62.577422ad81975dd4e4b7.js
- /data/media/####/63.8a02fb8b37d1a99515f0.js
- /data/media/####/64.332ed931c5443fc26421.js
- /data/media/####/65.4e9e2d7b8455a70e457f.js
- /data/media/####/66.4e03a3ba191866ab1fa6.js
- /data/media/####/67.4080c781fa55cc71a277.js
- /data/media/####/68.0bfbe118cd2196908aab.js
- /data/media/####/69.aa01c7f0e88eb9f76012.js
- /data/media/####/7.51fea9516a6b1d3cdbe2.js
- /data/media/####/70.983df9a697cb0119bc72.js
- /data/media/####/71.2add57ce6125f64d942f.js
- /data/media/####/72.1bf2013a396f8f3b643e.js
- /data/media/####/73.15ba1a6a878483b7a711.js
- /data/media/####/74.20d28fd5e77175018cfd.js
- /data/media/####/8.91e496fa437898d22a0d.js
- /data/media/####/9.047ca33946201ff261c9.js
- /data/media/####/Updating2BackupTags
- /data/media/####/als.db
- /data/media/####/als.db-journal
- /data/media/####/app.4279e866b175c4fc2e54e52dac395f2c.css
- /data/media/####/app.4b2edf56161903b090db.js
- /data/media/####/app.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.leoao.fitness.bin
- /data/media/####/com.leoao.fitness.db
- /data/media/####/config.json
- /data/media/####/dd7893586a493dc3
- /data/media/####/default-1.f3e7287.png
- /data/media/####/din-bold_-webfont.d6a9ad3.woff2
- /data/media/####/din-bold_-webfont.fddaec2.woff
- /data/media/####/gkt
- /data/media/####/gkt-journal
- /data/media/####/gktper (deleted)
- /data/media/####/hid.dat
- /data/media/####/hybrid.json
- /data/media/####/iconfont.5198956.svg
- /data/media/####/iconfont.69970fe.eot
- /data/media/####/img_yhqbg_red.ff36c90.png
- /data/media/####/index.html
- /data/media/####/journal
- /data/media/####/locationRightBg.539e4c4.png
- /data/media/####/locationSprite.2090e9f.png
- /data/media/####/manifest.372e47b76d6612885595.js
- /data/media/####/o_1bpd1192j1bid1e031th92eoj8i8.zip
- /data/media/####/payBearLuckImg.89eba2b.jpg
- /data/media/####/plain-report.txt
- /data/media/####/release.json
- /data/media/####/tbslog.txt
- /data/media/####/tdata_svG098
- /data/media/####/tdata_zNZ623
- /data/media/####/tmp_c_20240415
- /data/media/####/tmp_u_20240415
- /data/media/####/vendor.2f8b25dd3f06e45b5c41.js
- /data/misc/####/primary.prof
- /data/user/0/<Package>/files/dc374f27dd9f7231
- /system/bin/cat /proc/cpuinfo
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- cat /proc/self/cgroup
- chmod 755 /data/user/0/<Package>/.jiagu/libjiagu.so
- chmod 777 /data/user/0/<Package>/files/dc374f27dd9f7231
- getprop
- getprop ro.product.cpu.abi
- mount
- sh
- libBugly
- libgetuiext2
- libjiagu
- libsgmainso-5.3.38
- libsgsecuritybodyso-5.3.27
- libyolanda_calc
- AES
- AES-CBC-PKCS5Padding
- AES-CFB-NoPadding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- RC4
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding