Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) s####.magicwi####.cn:80
- UDP(NTP) 1.cn.p####.####.org:123
- TCP(TLS/1.0) api.growi####.com:443
- TCP(TLS/1.0) ti####.c####.l####.####.com:443
- TCP(TLS/1.0) si####.ixi####.com:443
- TCP(TLS/1.0) c####.x####.com:443
- TCP(TLS/1.0) t####.growi####.com:443
- TCP(TLS/1.0) t.growi####.com:443
- 1.cn.p####.####.org
- a####.u####.com
- and####.b####.qq.com
- api.growi####.com
- c####.x####.com
- i.t####.com
- morgoth####.ixi####.com
- s####.magicwi####.cn
- si####.ixi####.com
- t####.growi####.com
- t.growi####.com
- a####.u####.com/app_logs
- and####.b####.qq.com/rqd/async?aid=####
- s####.magicwi####.cn/marketing/v2
- s####.magicwi####.cn/ts
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/1004
- /data/data/####/1542478701259_2285
- /data/data/####/1542478701356_2285
- /data/data/####/1542478701935_2285
- /data/data/####/MultiDex.lock
- /data/data/####/QALConfigStore.dat
- /data/data/####/TDCloudSettingsConfigCFCDE2853092648B49AC6355911FD0BF.xml
- /data/data/####/TD_app_pefercen_profile.xml
- /data/data/####/TDpref_longtime.xml
- /data/data/####/TDpref_longtime0.xml
- /data/data/####/TDpref_shorttime.xml
- /data/data/####/TDpref_shorttime0.xml
- /data/data/####/TLS_DEVICE_INFO.xml
- /data/data/####/WLOGIN_DEVICE_INFO.xml
- /data/data/####/bugly_db_-journal
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/com.mei.wood.spcache.xml
- /data/data/####/crashrecord.xml
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/growing.db-journal
- /data/data/####/growing_ecsid.xml
- /data/data/####/growing_persist_data.xml
- /data/data/####/growing_profile.xml
- /data/data/####/growing_server_pref.xml
- /data/data/####/libjiagu-2054058581.so
- /data/data/####/local_crash_lock
- /data/data/####/multidex.version.xml
- /data/data/####/persistent_data.xml
- /data/data/####/pili_qos_index.json
- /data/data/####/pili_qos_log.0
- /data/data/####/preferences.xml
- /data/data/####/qalimid_v2
- /data/data/####/qos.xml
- /data/data/####/report_v5.msgstore-journal
- /data/data/####/security_info
- /data/data/####/tdid.xml
- /data/data/####/tls_device.dat
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/wlogin_device.dat
- /data/media/####/.tcookieid
- /data/media/####/727f06303cfd87cbf6e41cc6e84cac21b47453ae187a30....0.tmp
- /data/media/####/app.18.11.17.18.log
- /data/media/####/b2da5bc5087315dfcb467b256975ea78fdfc3201c0d0fc....0.tmp
- /data/media/####/init.cfg
- /data/media/####/journal.tmp
- /data/media/####/sdk.18.11.17.18.log
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- getprop
- Bugly
- _imcore_group_ext_gyp
- _imcore_jni_gyp
- _imcore_msg_ext_gyp
- _imcore_sns_ext_gyp
- gnustl_shared
- libjiagu-2054058581
- libwtcrypto
- qalcodecwrapper
- qalmsfboot
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- DES-CBC-PKCS5Padding
- RSA-ECB-PKCS1Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding