Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8011
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8012
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) cn-hang####.oss####.aliyun####.com:80
- TCP(HTTP/1.1) ima####.m####.cn.####.com:80
- TCP(HTTP/1.1) res.5um####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(TLS/1.0) res.5um####.com:443
- TCP(TLS/1.0) av1.x####.com:443
- TCP(TLS/1.0) c####.x####.com:443
- TCP(TLS/1.0) app.5um####.com:443
- TCP(TLS/1.0) 1####.217.20.110:443
- TCP(TLS/1.0) res####.a####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5226
- 7j####.c####.z0.####.com
- a####.b####.qq.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- app.5um####.com
- av1.x####.com
- c####.g####.ig####.com
- c####.x####.com
- c-h####.g####.com
- cn-hang####.oss####.aliyun####.com
- i.t####.com
- ima####.m####.cn
- ima####.m####.cn
- pub-####.qin####.com
- res####.a####.com
- res.5um####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- cn-hang####.oss####.aliyun####.com/amap-api/comm/upload/CoordinateSoEnhe...
- ima####.m####.cn.####.com/uploadfile/2018/0301/20180301091946136485.jpg
- ima####.m####.cn.####.com/uploadfile/2018/0301/20180301091948508148.jpg
- ima####.m####.cn.####.com/uploadfile/2018/0617/20180617022010215701.jpg
- ima####.m####.cn.####.com/uploadfile/2018/0617/20180617022016574080.jpg
- ima####.m####.cn.####.com/uploadfile/2018/0619/20180619012442537271.jpg
- ima####.m####.cn.####.com/uploadfile/2018/0718/20180718111115672791.jpg
- ima####.m####.cn.####.com/uploadfile/2018/0718/20180718111116203442.jpg
- ima####.m####.cn.####.com/uploadfile/2018/0718/20180718111116650431.jpg
- ima####.m####.cn.####.com/uploadfile/2018/0718/20180718111116757282.jpg
- ima####.m####.cn.####.com/uploadfile/2018/0718/20180718111116779833.jpg
- ima####.m####.cn.####.com/uploadfile/2018/0718/20180718111116852500.jpg
- res.5um####.com/imgs/splash/2018/09/29/0ff7897817544317a22e45cc1866ef2f....
- res.5um####.com/imgs/thumb/2018/09/13/6658db5e1e774fdaa086c5ed661d2828.jpg
- res.5um####.com/imgs/thumb/2018/09/13/c4df33035e404ec59a28adbf7e9e4912.jpg
- res.5um####.com/imgs/thumb/2018/09/13/d1fa482e3ab84c68b5c78c8096e661b2.jpg
- t####.c####.q####.####.com/config/hz-hzv3.conf
- t####.c####.q####.####.com/tdata_EDT356
- t####.c####.q####.####.com/tdata_YYn966
- t####.c####.q####.####.com/tdata_eOt091
- aexcep####.b####.qq.com:8011/rqd/async
- aexcep####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/07442b337121
- /data/data/####/09b3025a3e0dc71c70df93bd92ecef170a587246f0272f1....0.tmp
- /data/data/####/1538218956111_2284
- /data/data/####/1538218956421_2284
- /data/data/####/1538218956957_2284
- /data/data/####/1538218957794_2284
- /data/data/####/1538218958026_2284
- /data/data/####/1538218960926_2284
- /data/data/####/1538218962823_2284
- /data/data/####/1538218969934_2385
- /data/data/####/1538219016168_2284
- /data/data/####/1d2b904cbeadfb72ed9546111a231c85.0
- /data/data/####/23c5527e14359084e7c478090b888f0504072d046412d2a....0.tmp
- /data/data/####/26aa989aaf1cf0d7bbf44374b11253c7b39fbc421e47dd3....0.tmp
- /data/data/####/2ce6b713718223ff4a388fe72c3517d5753264b5d617bbe....0.tmp
- /data/data/####/34cea18b7fd590777d009aae56e1e3914d38e5c708be34b....0.tmp
- /data/data/####/38973e78ca48de0968a16d354477328b00eff4bfc197dc1....0.tmp
- /data/data/####/47092fa4fff2f3d9760c94c810d2efcded080746dcb2682....0.tmp
- /data/data/####/58151bcef6c948d2e1aba190c161192750d20b4ad5bcbef....0.tmp
- /data/data/####/7ff5817931556a777ee54dde5063976f68d72948e567bf1....0.tmp
- /data/data/####/81a67fbd468fa7756cce0a3335f1ae7a735140ccffc737b....0.tmp
- /data/data/####/Archimedes_p1
- /data/data/####/Archimedes_p2
- /data/data/####/Archimedes_p3
- /data/data/####/Archimedes_p4
- /data/data/####/Archimedes_p5
- /data/data/####/MultiDex.lock
- /data/data/####/TD_app_pefercen_profile.xml
- /data/data/####/TDpref_cloudcontrol1.xml
- /data/data/####/TDpref_longtime.xml
- /data/data/####/TDpref_longtime0.xml
- /data/data/####/TDpref_shorttime.xml
- /data/data/####/TDpref_shorttime0.xml
- /data/data/####/Time-Online.xml
- /data/data/####/a5f7427c111907b6a745c8f3ea18248ca20105c757ee968...e87b.0
- /data/data/####/a63ad2a94e27d87d9d5b8b850503d21bb5a7ef09b67faa3....0.tmp
- /data/data/####/b913764f5530a7cca92e9196bdf809d59c8dc5cfdf6457c....0.tmp
- /data/data/####/bugly_db_legu-journal
- /data/data/####/cf3b969db851a008635c98a1bae2dadc6b2992284a2814e....0.tmp
- /data/data/####/com.ichances.umovie_preferences.xml
- /data/data/####/e5d75f876b11b87ce5c2dec6454f7f073de8e6dfcf7b0cd....0.tmp
- /data/data/####/e6e0121471658bcf87c9ef998d8aed50acccb57788888f2....0.tmp
- /data/data/####/fcb83cb9cec46d215b264b8cf7b2e06eccdf37069cbacd0....0.tmp
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/iv
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/k.store
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/libufix.so
- /data/data/####/libwgs2gcj.so
- /data/data/####/local_crash_lock
- /data/data/####/loctemp.so
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/mix.dex
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/pref.xml
- /data/data/####/pref.xml.bak
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/salt
- /data/data/####/security_info
- /data/data/####/tdata_YYn966
- /data/data/####/tdata_YYn966.jar
- /data/data/####/tdata_eOt091
- /data/data/####/tdata_eOt091.jar
- /data/data/####/tdid.xml
- /data/media/####/.tcookieid
- /data/media/####/1538218956577.db
- /data/media/####/Time-Online_welcome.jpg
- /data/media/####/alsn20170807.db
- /data/media/####/alsn20170807.db-journal
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.ichances.umovie.bin
- /data/media/####/com.ichances.umovie.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/tdata_YYn966
- /data/media/####/tdata_eOt091
- /data/media/####/test.log
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.ui.service.PushService 24902 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- mount
- Bugly
- getuiext2
- libnfix
- libshella-2.9.0.2
- libufix
- nfix
- ufix
- AES
- AES-CBC-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES
- AES-CBC-PKCS5Padding
- AES-GCM-NoPadding