Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) api.b####.mytok####.com:5050
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) oc.u####.com:80
- TCP(HTTP/1.1) api.lb.myt####.org:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) sni.c####.q####.####.net:80
- TCP(TLS/1.0) api.w####.com:443
- TCP(TLS/1.0) tinyq####.ove####.b0.####.com:443
- TCP(TLS/1.0) api.lb.myt####.org:443
- TCP(TLS/1.0) gl####.d.kunl####.####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5227
- 7j####.c####.z0.####.com
- a####.u####.com
- and####.b####.qq.com
- api.b####.mytok####.com
- api.lb.myt####.org
- api.w####.com
- c####.g####.ig####.com
- c-h####.g####.com
- cdn.myt####.org
- oc.u####.com
- p1nzz####.bkt.clo####.com
- pub-####.qin####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- we####.myt####.org
- api.b####.mytok####.com:5050/
- api.lb.myt####.org/media/categorylist?timestamp=####&code=####&device_os...
- api.lb.myt####.org/ticker/allpairlist?timestamp=####&code=####&device_os...
- api.lb.myt####.org/ticker/legalcurrencylist?timestamp=####&code=####&dev...
- sni.c####.q####.####.net/config/hz-hzv3.conf
- sni.c####.q####.####.net/tdata_rRG322
- sni.c####.q####.####.net/tdata_vHH584
- t####.c####.q####.####.com/bigone_logo.png
- t####.c####.q####.####.com/bitfinex_logo.png
- t####.c####.q####.####.com/coinw_logo.png
- t####.c####.q####.####.com/gateio_logo.png
- t####.c####.q####.####.com/hitbtc_logo.png
- t####.c####.q####.####.com/tdata_EDT356
- t####.c####.q####.####.com/zblogo.png
- a####.u####.com/app_logs
- and####.b####.qq.com/rqd/async
- api.lb.myt####.org/config/appconfig?timestamp=####&code=####
- api.lb.myt####.org/config/topnavigation?timestamp=####&code=####
- api.lb.myt####.org/exchange/exchangelist?timestamp=####&code=####
- api.lb.myt####.org/user/login?timestamp=####&code=####
- c-h####.g####.com/api.php?format=####&t=####
- oc.u####.com/v2/check_config_update
- oc.u####.com/v2/get_update_time
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.imprint
- /data/data/####/ApplicationCache.db-journal
- /data/data/####/MultiDex.lock
- /data/data/####/bdb51b01638f
- /data/data/####/bugly_db_legu
- /data/data/####/bugly_db_legu-journal
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/com.hash.mytoken.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.8.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/mix.dex
- /data/data/####/multidex.version.xml
- /data/data/####/mytoken2.db-journal
- /data/data/####/native_record_lock
- /data/data/####/onlineconfig_agent_online_setting_com.hash.mytokenpro.xml
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/tdata_rRG322
- /data/data/####/tdata_rRG322.jar
- /data/data/####/tdata_vHH584
- /data/data/####/tdata_vHH584.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/.nomedia
- /data/media/####/2018-08-01Log.txt
- /data/media/####/2aac6yk5zmc64r3q1boudxdul0.tmp
- /data/media/####/2cpto7xg3mvtixujvc3ouw4hq0.tmp
- /data/media/####/2h3f1v7hf9sa5cz8quwow7f8q0.tmp
- /data/media/####/2jze3lqwk59fyspk07nf713q10.tmp
- /data/media/####/2m7esgndxutzmk07ebk27ome80.tmp
- /data/media/####/2vgsuui5fdn8wux8tda6ivj5r0.tmp
- /data/media/####/351bl9q3htqqo3dyq6sugykt70.tmp
- /data/media/####/393cl9y1n39faq4que0vb0ens0.tmp
- /data/media/####/3g96i7he34z7rjj9a0s8z4xj0.tmp
- /data/media/####/3ilvvhqttv72omp5x6z024skb0.tmp
- /data/media/####/3izm69xypbrrp3y28stamu1ip0.tmp
- /data/media/####/3l7kd2b3r6bo0wf35vrr45icx0.tmp
- /data/media/####/3ouu086z1evb5hmmv74bxy8y70.tmp
- /data/media/####/4car1lb84lf666v5x8tmug8he0.tmp
- /data/media/####/4fau7nbk7trwqmjn2smk635hi0.tmp
- /data/media/####/4te168um59wsjvxxmrppe1bbl0.tmp
- /data/media/####/4y43f6e9wuw32yxmuiff6isc50.tmp
- /data/media/####/4yc2syasbm07okdt612ynaqmj0.tmp
- /data/media/####/51fymlmr6emuz1xxgii0ffwo70.tmp
- /data/media/####/54a3wgrvs6f3vw77hrkgb94t80.tmp
- /data/media/####/568ytbq1yrwk9tlpp8bcqakhi0.tmp
- /data/media/####/5h6symyzk5f2410e0u0hvoaif0.tmp
- /data/media/####/5of6kmr5obab3fsvmxzipbcnv0.tmp
- /data/media/####/5sdj3u0x08rwawlikunskqdyf0.tmp
- /data/media/####/5u918tt4etxcot40mab2pyxys0.tmp
- /data/media/####/5vh0kc2w57h0rrcx9lcb8jlrs0.tmp
- /data/media/####/602wxnzgjdoy8i72c9fqdkylu0.tmp
- /data/media/####/62ksza4unk5qgzjc999ge74220.tmp
- /data/media/####/682m6iylsfsx2x60wusvwa4lt0.tmp
- /data/media/####/68n7fj5bccfc4z2c0s5nuxeu30.tmp
- /data/media/####/69h0oz20hsx1lh08yvv03xdqm0.tmp
- /data/media/####/6bnt70wnb7gy2b7dfqxxhm5ig0.tmp
- /data/media/####/6eqp945p6r3pnksd2veiva0p20.tmp
- /data/media/####/6l4qtpt9r0zfhw8uug8xntj670.tmp
- /data/media/####/6pbsvapiwykdhf3kamncvlct70.tmp
- /data/media/####/6q54ssi9uq0jwxwoitz4a0vd60.tmp
- /data/media/####/6xpwafb37vcztz2og17cjftq10.tmp
- /data/media/####/6z0ydhgnwtengoivsaxjq72fs0.tmp
- /data/media/####/717kgv4ss8shmz7o22osn88j00.tmp
- /data/media/####/73r1up668huob8jidacnt04ub0.tmp
- /data/media/####/744sn5s5utrkp8tr2l58817jz0.tmp
- /data/media/####/7bkfji7v0xfnwpye6452zrmn0.tmp
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.hash.mytokenpro.bin
- /data/media/####/com.hash.mytokenpro.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/it7lsnydc4rgb7d1eh9equ4w0.tmp
- /data/media/####/journal.tmp
- /data/media/####/lb6r1nvtv0ljwgq9dmr2rlwp0.tmp
- /data/media/####/ounw2uofjta40e431examj1k0.tmp
- /data/media/####/rh9v0fa8lp4vz3nyqrs7vaw00.tmp
- /data/media/####/tdata_rRG322
- /data/media/####/tdata_vHH584
- /data/media/####/test.log
- /data/media/####/wpr3gwlf0d6krwv8cc9lvefs0.tmp
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.hash.mytoken.push.GeTuiPushService 24943 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.8.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- mount
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/com.hash.mytoken.push.GeTuiPushService 24943 300 0
- Bugly
- getuiext2
- libnfix
- libshella-2.8
- libufix
- nfix
- ufix
- weibosdkcore
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding