Technical information
- Adware.Gexin.2.origin
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/131f4e45-1ded-49b2-a15e-53454455cf36
- /data/data/####/18afd77e-0fe2-400b-933b-31f8eddcb97b
- /data/data/####/2033145970-602345128
- /data/data/####/2289E276CADF4B0EFDC814915ACD4CDE.png
- /data/data/####/38adcaf3-1c63-452e-92d0-1eb74f6d29b9
- /data/data/####/5291a6a7-390f-4a47-b4a0-2745aaa120ee
- /data/data/####/53977faf-9c5e-49db-a13f-63d843dc4646
- /data/data/####/64165824-fee4-4451-a99f-402106ee32e1
- /data/data/####/68e933ed-e3b1-43f7-8074-b658ac116dc3
- /data/data/####/6d4c8872-3bae-41fe-be7d-600f88c60bb2
- /data/data/####/838b4914-d303-4605-9035-8b153ea46fe1
- /data/data/####/ACCS_BINDumeng;5a56c9198f4a9d0c2f0001a8.xml
- /data/data/####/ACCS_SDK.xml
- /data/data/####/ACCS_SDK_CHANNEL.xml
- /data/data/####/AGOO_BIND.xml
- /data/data/####/Agoo_AppStore.xml
- /data/data/####/Alliance.xml
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/DaemonServer
- /data/data/####/FZ.TTF
- /data/data/####/JPushSA_Config.xml
- /data/data/####/MENU_CACHE.xml
- /data/data/####/MessageStore.db-journal
- /data/data/####/MsgLogStore.db-journal
- /data/data/####/PendantConfig.xml
- /data/data/####/QHA_JSON_PERSISTER_42998cf32d552343bc8e460416382dca
- /data/data/####/QHDeviceFile
- /data/data/####/QHDeviceID.lock
- /data/data/####/QH_DeviceSDK.xml
- /data/data/####/QH_DeviceSDK.xml.bak (deleted)
- /data/data/####/QH_SDK_M2.xml
- /data/data/####/QH_SDK_UserData42998cf32d552343bc8e460416382dca.xml
- /data/data/####/QH_SDK_UserData6766aa2750c19aad2fa1b32f36ed4aee.xml
- /data/data/####/QH_SDK_sessionID42998cf32d552343bc8e460416382dca.xml
- /data/data/####/QH_SDK_sessionID42998cf32d552343bc8e460416382dca.xml.bak
- /data/data/####/TAB_CACHE.xml
- /data/data/####/UM_PROBE_DATA.xml
- /data/data/####/Y29tLmxpZ2h0c2t5LnZpZGVv.tick.lock
- /data/data/####/ab_test_config.xml
- /data/data/####/abtest_base_sp_filename42998cf32d552343bc8e4604...ca.xml
- /data/data/####/accs.db-journal
- /data/data/####/ad_config_file.xml
- /data/data/####/agoo.pid
- /data/data/####/appPackageNames_v2
- /data/data/####/app_globel_config_file.xml
- /data/data/####/auth_guide_config_sdk.xml
- /data/data/####/b32ebdb6-a3f4-4e80-9a81-2a7949654c5d
- /data/data/####/b8c4d367-1a02-4342-a38c-80a110c04d8d
- /data/data/####/banner.db-journal
- /data/data/####/cache.ttf
- /data/data/####/channel_webview.db-journal
- /data/data/####/cloud_config_file.xml
- /data/data/####/cloud_push_config_file.xml
- /data/data/####/cloud_switch_cache
- /data/data/####/cn.jpush.android.user.profile.xml
- /data/data/####/cn.jpush.android.user.profile.xml.bak (deleted)
- /data/data/####/cn.jpush.preferences.v2.rid.xml
- /data/data/####/cn.jpush.preferences.v2.xml
- /data/data/####/core_update
- /data/data/####/core_update_locker
- /data/data/####/country_info.xml
- /data/data/####/critical_service_config.xml
- /data/data/####/daemon_webview.db-journal
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/dbfocus-journal
- /data/data/####/device_collector
- /data/data/####/device_collector_locker
- /data/data/####/dso_deps
- /data/data/####/dso_lock
- /data/data/####/dso_manifest
- /data/data/####/dso_state
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f_000001
- /data/data/####/finalcore.jar
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/hotrizon_sharepref.xml
- /data/data/####/http_cookie.xml
- /data/data/####/httpdns_config_cache.xml
- /data/data/####/i==1.2.0&&1.2.28_1531614127435_envelope.log
- /data/data/####/index
- /data/data/####/info.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/jpush_device_info.xml
- /data/data/####/jpush_local_notification.db
- /data/data/####/jpush_local_notification.db-journal
- /data/data/####/jpush_local_notification.db-wal
- /data/data/####/jpush_stat_cache.json
- /data/data/####/jpush_stat_cache_history.json
- /data/data/####/jpush_statistics.db
- /data/data/####/jpush_statistics.db-journal
- /data/data/####/jpush_statistics.db-shm (deleted)
- /data/data/####/jpush_statistics.db-wal
- /data/data/####/jpushservice_webview.db-journal
- /data/data/####/libjiagu-71411075.so
- /data/data/####/light_sky_avast.xml
- /data/data/####/locker
- /data/data/####/log_reupload_task
- /data/data/####/log_reupload_task_locker
- /data/data/####/message.db-journal
- /data/data/####/message_accs_db
- /data/data/####/message_accs_db-journal
- /data/data/####/msg_queue
- /data/data/####/msplugin_ksp.xml
- /data/data/####/multidex.version.xml
- /data/data/####/p.l
- /data/data/####/privacy_config_file.xml
- /data/data/####/profile_task
- /data/data/####/profile_task_locker
- /data/data/####/profile_torch_platform
- /data/data/####/push.db-journal
- /data/data/####/push.pid
- /data/data/####/push_share.xml
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/qpush_msg.xml
- /data/data/####/run.pid
- /data/data/####/safe_user_info_file.xml
- /data/data/####/screen_conf.xml
- /data/data/####/session_base_sp_filename42998cf32d552343bc8e460...ca.xml
- /data/data/####/session_base_sp_filenameandroidID.xml
- /data/data/####/share_data.xml
- /data/data/####/shortcut_badger_sharepref.xml
- /data/data/####/sp_file_recommend_upload.xml
- /data/data/####/tab_request_name.xml
- /data/data/####/tdata_jVg168
- /data/data/####/tdata_jVg168.jar
- /data/data/####/tdata_pSF696
- /data/data/####/tdata_pSF696.jar
- /data/data/####/torch_sdk_config.xml
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_message_state.xml
- /data/data/####/uninstall_apk
- /data/data/####/uninstall_apk_locker
- /data/data/####/universalPopup.xml
- /data/data/####/videolist.db-journal
- /data/data/####/waitingDown
- /data/data/####/waitingDown_locker
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/webviewCookiesChromiumPrivate.db-journal
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.cca.dat
- /data/media/####/.deviceId
- /data/media/####/.iddata
- /data/media/####/.nomedia
- /data/media/####/.push_deviceid
- /data/media/####/.sfp
- /data/media/####/.testf
- /data/media/####/.umm.dat
- /data/media/####/0bf4e1f5904f407992b7cee552f1e43e
- /data/media/####/3uO59YuWwBC58BWmvtK78K6YFZ4.683883775.tmp
- /data/media/####/42998cf32d552343bc8e460416382dca
- /data/media/####/4K52n5ygUeZXo_uOKvWTplMS2Qo.173169073.tmp
- /data/media/####/4SsFZVT1jVAuJJRZRt6qC8ZzACs.804889191.tmp
- /data/media/####/4ne
- /data/media/####/4ne (deleted)
- /data/media/####/5sXTEdSD6pbB4EQ9QyYFVS_5Pi0.1234550770.tmp
- /data/media/####/6766aa2750c19aad2fa1b32f36ed4aee
- /data/media/####/84e60a1b24bb4f1f9039ce3da2ffa03f
- /data/media/####/89J
- /data/media/####/89J (deleted)
- /data/media/####/8bye5frUhZAvfoYreAFpWR14Kp4.1590386720.tmp
- /data/media/####/A1CMDGGoqPIhh21PZDtF0hp5Oa4.1706305811.tmp
- /data/media/####/Alvin2.xml
- /data/media/####/Alvin2.xml (deleted)
- /data/media/####/ContextData.xml
- /data/media/####/E3AmzmTPkUbKo7y4rusNxBE8iGU.-266664550.tmp
- /data/media/####/EB2
- /data/media/####/EB2 (deleted)
- /data/media/####/FW2Nbi6d76bjp_J6EN7YeiawKps.-41337973.tmp
- /data/media/####/G8HOSDGVhAFpGSso8ZxQCBnh3Yk.1564600017.tmp
- /data/media/####/IeM
- /data/media/####/IeM (deleted)
- /data/media/####/JJ61Qxl5sXtBd40uA7QZsjAvVGc.-390293176.tmp
- /data/media/####/K9PqpCg9t9dfTTzyfxqKtv0XWrw.-1479090581.tmp
- /data/media/####/KTgUEyc1s5ssMRDSEo2Rn4hcMYM.-244696028.tmp
- /data/media/####/Kx1Gpho3VH7MGM74EoIMnLL5a_4.1137505012.tmp
- /data/media/####/LKTSpwZRzYv8WZkSB3iUV-slQiY.-1575317581.tmp
- /data/media/####/LZ7god53SCQ9U3A88AMQC-ZGqFo.-318079987.tmp
- /data/media/####/NKP-Uee5s4Wgb-6Sj2VObRojPH8.10091461.tmp
- /data/media/####/OKTBX5NtrU-GMsVQ_j0e64fYec8.-1411385780.tmp
- /data/media/####/O_OhkZstdWSF9Ci9PxreK7SepK0.-950814619.tmp
- /data/media/####/R01jYLfoUFs0G1Ltx_Unl4D2NNY.1738107272.tmp
- /data/media/####/TOrS5YlK68mJMenN1VaqbIFFxj8.-1472192387.tmp
- /data/media/####/U6k
- /data/media/####/U6k (deleted)
- /data/media/####/V_Ks1FpLIxCyOy6jWtb7631OdO8.1213004148.tmp
- /data/media/####/WgRWxB4wy32yu4JTKX7fl-8cJEY.-369414295.tmp
- /data/media/####/Y29tLmxpZ2h0c2t5LnZpZGVv
- /data/media/####/Y29tLmxpZ2h0c2t5LnZpZGVv (deleted)
- /data/media/####/ZzaVKK-IJln7kFXHS20H1xbORKU.-1359235065.tmp
- /data/media/####/app.db
- /data/media/####/avast_done
- /data/media/####/b05ce39c1fe9e72dc1df70989e7e6d14
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.lightsky.video.bin
- /data/media/####/com.lightsky.video.db
- /data/media/####/data.lock
- /data/media/####/deviceToken
- /data/media/####/ecc1a4ce059d4c4f8991a93e35dec019
- /data/media/####/ekr6TsWCKekxB_K_xY2V4u3kLrI.119193835.tmp
- /data/media/####/ekr6TsWCKekxB_K_xY2V4u3kLrI.cnt
- /data/media/####/f3198d1ec968439f9ec71411b82d0b00
- /data/media/####/iz1xq3Cl7LMibS5zGT9nnAVapqI.1719012205.tmp
- /data/media/####/kjBbOeK7xZCw9lPzrU3M9hxUecE.-1124745642.tmp
- /data/media/####/mfsrRV-AFBV0btCMBcfJ3SgIHSs.-660421862.tmp
- /data/media/####/mwVn4HnSE874d2eqN4xM-A9PREg.723989680.tmp
- /data/media/####/p_JektdRrZ8r8EM9UBmssevbCEs.-1287556330.tmp
- /data/media/####/qLMModjAiHZf-9N8azSNkWsEZSk.-2099075036.tmp
- /data/media/####/report.lock
- /data/media/####/tdata_jVg168
- /data/media/####/tdata_pSF696
- /data/media/####/test.log
- /data/media/####/tnOi0ez530t3G8n0UNojRhbmasI.1934005334.tmp
- /data/media/####/uWjBaLiFHERZ7a8fe4qaC1DV0wY.-769921216.tmp
- /data/media/####/uXPLK7N3GZBQskAxDRngbbDE428.6726749.tmp
- /data/media/####/uninstall_apk_list
- /data/media/####/zyX5qmyFFxbnAsmBoYuqZgApMIE.-729808033.tmp
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/xbin/which su
- <Package Folder>/files/DaemonServer -s <Package Folder>/lib/ -n runServer -p startservice -n <Package>/com.taobao.accs.ChannelService --user 0 -f <Package Folder> -t 600 -c agoo.pid -P <Package Folder> -K 1009527 -U tb_accs_eudemon_1.1.3 -L http://agoodm.m.taobao.com/agoo/report -D {"package":"<Package>","appKey":"umeng:5a56c9198f4a9d0c2f0001a8","utdid":"W0qTqotOvIcDAGdzx1FvcVLD","sdkVersion":"221"} -I agoodm.m.taobao.com -O 80 -T -Z
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.qihoo.qpush.sdk.GeTuiPushService 24825 300 0
- cat /proc/version
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu-71411075.so
- ls /
- ls /sys/class/thermal
- sh
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/com.qihoo.qpush.sdk.GeTuiPushService 24825 300 0
- getuiext2
- jcore120
- libimagepipeline
- libjiagu-71411075
- tnet-3.1
- AES-CBC-NoPadding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS7Padding
- DES
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- RSA-None-PKCS1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-NoPadding
- DES