Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) nav.cn.ron####.com:80
- TCP(HTTP/1.1) www.go####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) img.2####.cn:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) cgi.con####.qq.com:80
- TCP(TLS/1.0) ssl.gst####.com:443
- TCP(TLS/1.0) loc.map.b####.com:443
- TCP(TLS/1.0) t.growi####.com:443
- TCP(TLS/1.0) s####.cn.ron####.com:443
- TCP(TLS/1.0) api.w####.com:443
- TCP(TLS/1.0) 2####.oss-cn-####.aliy####.com:443
- TCP(TLS/1.0) www.go####.com:443
- TCP(TLS/1.0) www.gst####.com:443
- TCP(TLS/1.0) as####.growi####.com.####.net:443
- TCP(TLS/1.0) s####.tc.qq.com:443
- TCP(TLS/1.0) u.zhug####.com:443
- TCP(TLS/1.0) ta.2####.cn:443
- TCP(TLS/1.0) ue.2####.cn:443
- TCP(TLS/1.0) api.map.b####.com:443
- TCP(TLS/1.0) cras####.growi####.com:443
- TCP(TLS/1.0) api.growi####.com:443
- TCP(TLS/1.0) 1####.217.17.110:443
- TCP(TLS/1.0) a####.2####.cn:443
- TCP(TLS/1.0) www.go####.nl:443
- TCP(TLS/1.0) img.2####.cn:443
- TCP(TLS/1.0) adser####.go####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5226
- TCP 1####.92.36.75:8619
- 2####.oss-cn-####.aliy####.com
- 7j####.c####.z0.####.com
- a####.2####.cn
- adser####.go####.com
- and####.b####.qq.com
- api.growi####.com
- api.map.b####.com
- api.w####.com
- as####.growi####.com
- c####.g####.ig####.com
- c-h####.g####.com
- cgi.con####.qq.com
- cras####.growi####.com
- img.2####.cn
- loc.map.b####.com
- nav.cn.ron####.com
- r####.wx.qq.com
- s####.cn.ron####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- ssl.gst####.com
- t.growi####.com
- ta.2####.cn
- u.zhug####.com
- ue.2####.cn
- www.go####.com
- www.go####.nl
- www.gst####.com
- cgi.con####.qq.com/qqconnectopen/openapi/policy_conf?sdkv=####&appid=###...
- img.2####.cn/house_info_img/3aec6716d30379fdc85e54f6001f8a2e.jpg
- t####.c####.q####.####.com/config/hz-hzv3.conf
- t####.c####.q####.####.com/tdata_Soq141
- t####.c####.q####.####.com/tdata_vxj811
- www.go####.com/complete/search?hl=####&client=####&q=####
- and####.b####.qq.com/rqd/async?aid=####
- c-h####.g####.com/api.php?format=####&t=####
- nav.cn.ron####.com/navipush.json
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.jg.ic
- /data/data/####/0qFMGALgXP_qcWrerdFf2cLHGKs.1587496954.tmp
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/13e2e7c8d824f1ff2fb0ccb9d100bfd8.0.tmp
- /data/data/####/13e2e7c8d824f1ff2fb0ccb9d100bfd8.1.tmp
- /data/data/####/1SmrJ3VJMaWKY-xS8kFwd7C-fy8.-1886123385.tmp
- /data/data/####/1f00866b431234e513d644c652c1e10b.0.tmp
- /data/data/####/1f00866b431234e513d644c652c1e10b.1.tmp
- /data/data/####/1idvSGG9ld8crhquqhAxGlpHSlA.1083658961.tmp
- /data/data/####/3580a8967984c05c6f2f9af31e333173.0.tmp
- /data/data/####/3580a8967984c05c6f2f9af31e333173.1.tmp
- /data/data/####/3xmSjSe7sNADXBHg1hnGmDTIvFw.1091056168.tmp
- /data/data/####/4bc985d1db1103e19196a59b2ba6f708.0.tmp
- /data/data/####/4bc985d1db1103e19196a59b2ba6f708.1.tmp
- /data/data/####/4d3c0786c5ebdfdd036f8f42f28000d3.0.tmp
- /data/data/####/4d3c0786c5ebdfdd036f8f42f28000d3.1.tmp
- /data/data/####/55UbLgCq5l-DCfpzqBfP0mATRJE.788529677.tmp
- /data/data/####/5ae58aa787286fdbb50721cbbd1db717.0.tmp
- /data/data/####/5ae58aa787286fdbb50721cbbd1db717.1.tmp
- /data/data/####/6gHcAsZoIKDcaBmrOpf8aCgJS9Q.290000415.tmp
- /data/data/####/7536aac2afa6c8b21090a2d88754df32.0.tmp
- /data/data/####/7536aac2afa6c8b21090a2d88754df32.1.tmp
- /data/data/####/77057e1b77a6eeb245cce61a78288440.0.tmp
- /data/data/####/77057e1b77a6eeb245cce61a78288440.1.tmp
- /data/data/####/9f9968167d959133d713e78992c34a58.0.tmp
- /data/data/####/9f9968167d959133d713e78992c34a58.1.tmp
- /data/data/####/AktpZitJl9zdsi1us55xQ7cVd7o.-1905598221.tmp
- /data/data/####/Avv9hlNNj9IfA509bG1xOQXyXjo.1086557234.tmp
- /data/data/####/BUGLY_COMMON_VALUES.xml
- /data/data/####/COUNTLY_STORE.xml
- /data/data/####/EGGsMxeV1-Ok3SvPAYkkvNQXhvQ.-1491455914.tmp
- /data/data/####/FwLog.xml
- /data/data/####/IQbtsThONa6Sz3q2Td-xwku69n8.1082315676.tmp
- /data/data/####/KHfRAFjc9lchI9-_GtlFrZkJmak.1776591762.tmp
- /data/data/####/MqE1WeGebXPZi68P4qwkiVUOHTQ.266178260.tmp
- /data/data/####/MultiDex.lock
- /data/data/####/ORAEA_rGSfEKtKzhjGiiC5vIx5Y.-2142313004.tmp
- /data/data/####/OWiRHCtc-uXiCnoPJ_DcHGOOY7E.-1003360472.tmp
- /data/data/####/RongPush.xml
- /data/data/####/S-b1XNPgj5nlIrAG-f5dMjThyes.1926262192.tmp
- /data/data/####/SMB8AP_u8cDpWmPGehI7o1pkLbI.761057112.tmp
- /data/data/####/SP_AROUTER_CACHE.xml
- /data/data/####/Statistics.xml
- /data/data/####/TTsUxQXaP3hhYowQmpgSoEDUK_o.80278632.tmp
- /data/data/####/VcpWLhRr93XUUNqr5lDgOJjLQTc.-2052924965.tmp
- /data/data/####/Vjr1DSEHNXWbJ0x8r6P5luWXp50.-180522590.tmp
- /data/data/####/ab9b27b8bd792e7f658821df5f2f85a2.0.tmp
- /data/data/####/ab9b27b8bd792e7f658821df5f2f85a2.1.tmp
- /data/data/####/authStatus_com.rabbit.doctor.xml
- /data/data/####/authStatus_com.rabbit.doctor;remote.xml
- /data/data/####/b60a51b9f9999fac56bb62dbc8ef7ac4.0.tmp
- /data/data/####/b60a51b9f9999fac56bb62dbc8ef7ac4.1.tmp
- /data/data/####/b93c5d8e9d9fbd4ab0e18e2cec165fa3.0.tmp
- /data/data/####/b93c5d8e9d9fbd4ab0e18e2cec165fa3.1.tmp
- /data/data/####/bIVNFY9kCFrxi2udIDn_8y86zEw.-1585137625.tmp
- /data/data/####/bdf717685846760d5bcc5ccb56defbb5.0.tmp
- /data/data/####/bdf717685846760d5bcc5ccb56defbb5.1.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/com.rabbit.doctor.BETA_VALUES.xml
- /data/data/####/com.rabbit.doctor77c127e4d0b14712a7049ccfb9f55ffa.xml
- /data/data/####/com.tencent.open.config.json.1105066502
- /data/data/####/crashrecord.xml
- /data/data/####/d2822ed6b3fb5d2d08f9976f29266f9b.0.tmp
- /data/data/####/d2822ed6b3fb5d2d08f9976f29266f9b.1.tmp
- /data/data/####/d90c074b6ea81004bc0da359b77e1dea.0.tmp
- /data/data/####/d90c074b6ea81004bc0da359b77e1dea.1.tmp
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/dc0d95df8ce6d7212bb81fb2a62fc5a1.0.tmp
- /data/data/####/dc0d95df8ce6d7212bb81fb2a62fc5a1.1.tmp
- /data/data/####/device_id.xml.xml
- /data/data/####/docRabPro_shared.xml
- /data/data/####/dso_deps
- /data/data/####/dso_lock
- /data/data/####/dso_manifest
- /data/data/####/dso_state
- /data/data/####/e1c0306770ab98860749c415c821faad.0.tmp
- /data/data/####/e1c0306770ab98860749c415c821faad.1.tmp
- /data/data/####/e40936933f087ee41b4a613d54db6681.0.tmp
- /data/data/####/e40936933f087ee41b4a613d54db6681.1.tmp
- /data/data/####/e5abf9b1dd9be14997f1ee08238d9d3b.0.tmp
- /data/data/####/e5abf9b1dd9be14997f1ee08238d9d3b.1.tmp
- /data/data/####/e6d8b8a1f4f2137040c13c5621078df3.0.tmp
- /data/data/####/e6d8b8a1f4f2137040c13c5621078df3.1.tmp
- /data/data/####/e962d3f971f864eccf79c7912e12fdda.0.tmp
- /data/data/####/e962d3f971f864eccf79c7912e12fdda.1.tmp
- /data/data/####/f2800f17b15c994a4ce39a25791d2740.0.tmp
- /data/data/####/f2800f17b15c994a4ce39a25791d2740.1.tmp
- /data/data/####/f415c27365a82dd35dd8aa4bcfee5d74.0.tmp
- /data/data/####/f415c27365a82dd35dd8aa4bcfee5d74.1.tmp
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/f_00000b
- /data/data/####/f_00000c
- /data/data/####/f_00000d
- /data/data/####/f_00000e
- /data/data/####/f_00000f
- /data/data/####/f_000010
- /data/data/####/f_000011
- /data/data/####/f_000012
- /data/data/####/f_000013
- /data/data/####/f_000014
- /data/data/####/f_000015
- /data/data/####/f_000016
- /data/data/####/f_000017
- /data/data/####/f_000018
- /data/data/####/f_000019
- /data/data/####/f_00001a
- /data/data/####/f_00001b
- /data/data/####/f_00001c
- /data/data/####/f_00001d
- /data/data/####/f_00001e
- /data/data/####/f_00001f
- /data/data/####/f_000020
- /data/data/####/f_000021
- /data/data/####/f_000022
- /data/data/####/f_000023
- /data/data/####/f_000024
- /data/data/####/f_000025
- /data/data/####/f_000026
- /data/data/####/f_000027
- /data/data/####/f_000028
- /data/data/####/f_000029
- /data/data/####/f_00002a
- /data/data/####/f_00002b
- /data/data/####/f_00002c
- /data/data/####/f_00002d
- /data/data/####/f_00002e
- /data/data/####/f_00002f
- /data/data/####/f_000030
- /data/data/####/f_000031
- /data/data/####/f_000032
- /data/data/####/firll.dat
- /data/data/####/fqCuCgwCz5un2E1xlXIekKS9jFQ.781275268.tmp
- /data/data/####/gal.db
- /data/data/####/gal.db-journal
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/growing.db-journal
- /data/data/####/growing_ecsid.xml
- /data/data/####/growing_persist_data.xml
- /data/data/####/growing_profile.xml
- /data/data/####/growingio_diagnose.xml
- /data/data/####/growingio_diagnose.xml.bak
- /data/data/####/gx_sp.xml
- /data/data/####/hst.db
- /data/data/####/hst.db-journal
- /data/data/####/iha2Zvblw_p-454Iblh0dyv7YwY.1341773077.tmp
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/jw41jCNe57qMLvSxZ9ykAWx6AlA.720685922.tmp
- /data/data/####/l-SbXZO1T7zfE0t-r2Jaxb3vKac.-946742421.tmp
- /data/data/####/l9P0Jy83kMuvwT6v4Z4RaedlXMw.cnt
- /data/data/####/libcuid.so
- /data/data/####/libjiagu350148090.so
- /data/data/####/local_crash_lock
- /data/data/####/locale.config.xml
- /data/data/####/m8aFiEv_VUcJ6CwW5mUz66uWtE8.-1221469027.tmp
- /data/data/####/multidex.version.xml
- /data/data/####/n8gTDawaiUPjPj1_Cj_5xt4iZv0.1808624056.tmp
- /data/data/####/native_record_lock
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/q7RTjUizHex8O18w_rUQB95XBDs.-1909629112.tmp
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/sp_channel.xml
- /data/data/####/t3A6b-QNj1JUCBFzS_kZ6Q1rUdU.454391395.tmp
- /data/data/####/tdata_Soq141
- /data/data/####/tdata_Soq141.jar
- /data/data/####/tdata_vxj811
- /data/data/####/tdata_vxj811.jar
- /data/data/####/theTKFsCOS9tLEOq-PXLQp7EjhQ.-552019752.tmp
- /data/data/####/tv95KJtrEVAq2mhjGHLJNk3KEQ8.-1075314733.tmp
- /data/data/####/ubt_db-journal
- /data/data/####/ubt_info.xml
- /data/data/####/vAmBqxpPNgZWGWj27IEKe_LZbnE.1190773308.tmp
- /data/data/####/wDLwdeTL3SrDCG3mqojDtD66ga8.930854610.tmp
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/webviewCookiesChromiumPrivate.db-journal
- /data/data/####/weibo_sdk_aid1
- /data/data/####/x5MYLhs7tZWoFTMsfdPN0GnU0OA.1213504254.tmp
- /data/data/####/yVlqLBHY25Uc4VFESiZz1MQPnHc.158740846.tmp
- /data/data/####/zVCWAFX7jzCQSm4KaYv80JBt9U4.-300879742.tmp
- /data/data/####/zhuge
- /data/data/####/zhuge-journal
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.nomedia
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.rabbit.doctor.bin
- /data/media/####/com.rabbit.doctor.db
- /data/media/####/conlts.dat
- /data/media/####/share_logo
- /data/media/####/tdata_Soq141
- /data/media/####/tdata_vxj811
- /data/media/####/test.log
- /data/media/####/yoh.dat
- /data/media/####/yol.dat
- /data/media/####/yom.dat
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.push.getui.GeTuiPushService 24690 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu350148090.so
- BaiduMapSDK_base_v5_0_0
- Bugly
- RongIMLib
- getuiext2
- libimagepipeline
- libjiagu350148090
- locSDK7b
- weibosdkcore
- AES-CBC-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-GCM-NoPadding