Technical information
Malicious functions:
Executes code of the following detected threats:
- Adware.Gexin.2.origin
Gains access to the ITelephony private interface.
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) sc.yunjigl####.com:80
- TCP(HTTP/1.1) 1####.207.168.45:80
- TCP(HTTP/1.1) gl####.w.kunl####.####.com:80
- TCP(HTTP/1.1) pi####.qq.com:80
- TCP(HTTP/1.1) m.yunjiwe####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) pin####.qq.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) 2####.107.1.1:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8011
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8012
- TCP(HTTP/1.1) 2####.107.1.65:80
- TCP(HTTP/1.1) vi####.yunjigl####.com:80
- TCP(HTTP/1.1) ta.yunjigl####.com:80
- TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
- TCP(TLS/1.0) 2####.107.1.97:443
- TCP(TLS/1.0) m.yunjiwe####.com:443
- TCP(TLS/1.0) sc.yunjigl####.com:443
- TCP(TLS/1.0) gl####.w.kunl####.####.com:443
- TCP(TLS/1.0) g.al####.com:443
- TCP(TLS/1.0) wild####.al####.com.####.net:443
- TCP c####.g####.ig####.com:5226
- TCP sdk.o####.t####.####.com:5224
DNS requests:
- 7j####.c####.z0.####.com
- 7x####.c####.z0.####.com
- a####.b####.qq.com
- a####.man.aliy####.com
- aeu.al####.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- c####.g####.ig####.com
- c-h####.g####.com
- d####.yunjiwe####.com
- erro####.yunjiwe####.com
- g.al####.com
- i####.yunjiwe####.com
- img.al####.com
- m.yunjigl####.com
- m.yunjiwe####.com
- pi####.qq.com
- pin####.qq.com
- pub-####.qin####.com
- sc.yunjigl####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- st####.yunjigl####.com
- st####.yunjiwe####.com
- ta.yunjigl####.com
- vi####.yunjigl####.com
- ys.yunjigl####.com
HTTP GET requests:
- gl####.w.kunl####.####.com/0173872314d102c1e2040297d47dc5e1.jpg
- gl####.w.kunl####.####.com/039a7261563d497d0c8d328254125ca5.jpg
- gl####.w.kunl####.####.com/03eeea7f15c6b7134d20b5e215e6471b.jpg
- gl####.w.kunl####.####.com/04ea584c535085899f07e53aebda0dfb.jpg
- gl####.w.kunl####.####.com/05b50f9295e348cbd233416ac8a58e14.jpg
- gl####.w.kunl####.####.com/069bb36c7ec218e93e6b259d0d4ad9ee.jpg
- gl####.w.kunl####.####.com/09988021c131ff470edd6af5d66553de.jpg
- gl####.w.kunl####.####.com/0d0a120e07b43ad31bb77dfc3a5a2f17.jpg?imageMo#...
- gl####.w.kunl####.####.com/0d15b83f318a737b447db4a511689a79.jpg
- gl####.w.kunl####.####.com/0e11e88ddc6a5ef114fa78baed51c902.jpg
- gl####.w.kunl####.####.com/0eba268b077aafc6a3f0fc932b6e701d.gif?imageVi#...
- gl####.w.kunl####.####.com/0f1443cffed8e5e950180bf3b9dc3c2e.jpg
- gl####.w.kunl####.####.com/0f8f7c4b614c7ec1fc53ffadf89e22d1.jpg
- gl####.w.kunl####.####.com/0fb2bc96d58ae735d65b7ae7e274c9da.jpg?imageVi#...
- gl####.w.kunl####.####.com/1150b253be82366a5bb52d55a443664a.jpg
- gl####.w.kunl####.####.com/119d3c457af60de4d810b5f47c363519.jpg?imageVi#...
- gl####.w.kunl####.####.com/1397efbb32223f425bf62bbfe1d962ba.jpg
- gl####.w.kunl####.####.com/1717d390a7b784dc6947a49cd53326ba.jpg?imageMo#...
- gl####.w.kunl####.####.com/1a158f4d00b99ac8fe959af763f6e495.jpg
- gl####.w.kunl####.####.com/1a4e784aef820fedf2433b33395e4466.jpg?imageVi#...
- gl####.w.kunl####.####.com/1b620d27ba4d8aba781a7ab73c192a64.jpg
- gl####.w.kunl####.####.com/1b73f68e9ba3cb78ff378e17611d2136.jpg
- gl####.w.kunl####.####.com/1dd3894ab610c8ee5f88765632c4ce2a.jpg
- gl####.w.kunl####.####.com/1e25ea856d451f61fd6b5b6b3cfd440d.jpg
- gl####.w.kunl####.####.com/1f460bf49e95152c413621bbd8f0aa79.jpg
- gl####.w.kunl####.####.com/250486bec672c028c465a6ac391c460c.jpg
- gl####.w.kunl####.####.com/2569931f093c33a9a1567834465a49a1.jpg
- gl####.w.kunl####.####.com/27f277a3ac48013bc20901a0b34ec4e1.jpg
- gl####.w.kunl####.####.com/282232d9ca7ff794a9c0a3ed68425d36.jpg?imageVi#...
- gl####.w.kunl####.####.com/29919005518d0040d4e964a2d13ed4dc.jpg
- gl####.w.kunl####.####.com/2ab2974a45039f45f9ffb4da19ce1cb1.jpg
- gl####.w.kunl####.####.com/2c16377c26aee4feab508a0aa84baba9.jpg
- gl####.w.kunl####.####.com/306c02667adaca415d9bf6ec1e187e74.png?imageVi#...
- gl####.w.kunl####.####.com/3162209ba70312eb16b70bba61ea49ac.jpg
- gl####.w.kunl####.####.com/31651b245671b32bbe9fb8a3c271ddc8.jpg?imageVi#...
- gl####.w.kunl####.####.com/31e1ca6324dea7690359f1210b31dac8.png?imageVi#...
- gl####.w.kunl####.####.com/338f2bea3545fbdbaa246b2fd15d08ee.jpg?imageMo#...
- gl####.w.kunl####.####.com/33e821ebe7b12a11b37ad708f982f147.jpg
- gl####.w.kunl####.####.com/36be3534034bcce24177e460103b6a02.jpg
- gl####.w.kunl####.####.com/3700d67d39e9f360d1a4dd881ea93c16.jpg
- gl####.w.kunl####.####.com/37b4539e87ebad098f16840cd39ddadf.jpg
- gl####.w.kunl####.####.com/380135d2991aa9af1728ef36911cb6b7.jpg
- gl####.w.kunl####.####.com/3a90dcc99f4a167ad46d1a3e55ac0849.jpg
- gl####.w.kunl####.####.com/3b978ff688f680e853b25fd16d5e4abc.jpg
- gl####.w.kunl####.####.com/3be269f5a89a429cfab5d2799945ea58.jpg
- gl####.w.kunl####.####.com/3eaf257dfaac04ede90ea4640b5f9418.jpg
- gl####.w.kunl####.####.com/4002367fc8e607520d03135d423eab1f.jpg
- gl####.w.kunl####.####.com/444f4c26905c8b309a81d6d57f09fdb4.jpg
- gl####.w.kunl####.####.com/468889aaf74ef0344e5b0ce6ff141794.jpg
- gl####.w.kunl####.####.com/47ed1207d6b6f8d1f3ba03ae0d8056cb.jpg
- gl####.w.kunl####.####.com/48a0e77005b15ebea0817304cb7922e2.jpg
- gl####.w.kunl####.####.com/4b3013f413368d57fae09c1f5f602316.jpg
- gl####.w.kunl####.####.com/4b51f28c48855b36d3e1e79ee951920f.jpg?imageVi#...
- gl####.w.kunl####.####.com/4d461fee8499ead3283e59bd2b1756c4.png
- gl####.w.kunl####.####.com/4dffeb53e3337be1a03e1a7ada14bd30.jpg
- gl####.w.kunl####.####.com/5112605441052627f7cde280096ced62.png?imageVi#...
- gl####.w.kunl####.####.com/5207071661047256fda084e8634e8edc.jpg
- gl####.w.kunl####.####.com/53b0db4562410530429b8051476fd926.jpg
- gl####.w.kunl####.####.com/53caaf75456adcd655a8c076de9dde4b.jpg
- gl####.w.kunl####.####.com/53d02926b707762c6578cb8b32096ae0.jpg
- gl####.w.kunl####.####.com/545ecc6e791b8a596aa621a87e9f07ce.jpg
- gl####.w.kunl####.####.com/5599a2ac7bbbaedceb4e59c6d6d5bd7d.jpg
- gl####.w.kunl####.####.com/56233e8a9d6f9d3ed84a43db6040685e.png?imageVi#...
- gl####.w.kunl####.####.com/591d672e1392990bffeaa1f04bbd90e9.jpg
- gl####.w.kunl####.####.com/5a745bb1986c8ab846a481c7bd7bd3ca.jpg
- gl####.w.kunl####.####.com/5b8cd34763d2eda78ec72e4a2a77893c.jpg
- gl####.w.kunl####.####.com/5cc1680740c25da92625fcb08bf970a8.jpg
- gl####.w.kunl####.####.com/5e35d9f6abf3b89c842e54c7a4e9332a.jpg
- gl####.w.kunl####.####.com/5fd745a9806758b86086b3cf686861ff.jpg
- gl####.w.kunl####.####.com/60188b227a4df28a34997d66e057aba7.jpg
- gl####.w.kunl####.####.com/605a03bcba21e360f1f110deb82ac7f1.jpg
- gl####.w.kunl####.####.com/61fa3c7821bc2bd10425331d7307f8bf.jpg
- gl####.w.kunl####.####.com/62500469b0652ca46e204c3f4f28a557.jpg
- gl####.w.kunl####.####.com/649382604c22e196b10ac2cc0582610b.jpg?imageVi#...
- gl####.w.kunl####.####.com/662486f1158c821bbcc00037798248cd.jpg
- gl####.w.kunl####.####.com/6802de81b723a0965e78d2335caec21a.jpg
- gl####.w.kunl####.####.com/68ef91335fb60d3108f105257e6407d1.jpg
- gl####.w.kunl####.####.com/69106fc1048dfe6eb1d686f039371206.png?imageVi#...
- gl####.w.kunl####.####.com/6b39752d3db3680a2ddcd3c1cdd11d1a.jpg
- gl####.w.kunl####.####.com/6b49ee8d1496c3c06de40876b755a9d5.jpg
- gl####.w.kunl####.####.com/6b57d82585c478d507acf146ca710488.jpg
- gl####.w.kunl####.####.com/6be841410883ba6b50666e1f0e38a3f5.jpg
- gl####.w.kunl####.####.com/6df4caf5ba249f028fdb53c2f16b9e08.jpg
- gl####.w.kunl####.####.com/7442aa94dd0d5194bfee1b05636701c3.jpg
- gl####.w.kunl####.####.com/74c7259fa240ae8643e78480da974f34.jpg
- gl####.w.kunl####.####.com/787861bc3b462715f46cdd531b95818f.jpg
- gl####.w.kunl####.####.com/79677724a4fb57c581c8dc14221e7aad.jpg
- gl####.w.kunl####.####.com/7998a6be9125d6ed5294bd34b157ad8d.jpg
- gl####.w.kunl####.####.com/79f572ca18d62e526a166a198ea4db95.jpg?imageVi#...
- gl####.w.kunl####.####.com/7a2b8fb3a8ef88b6550560bcb7da2955.jpg
- gl####.w.kunl####.####.com/7df919b3bdb593ffdf9c61d5f098954f.jpg
- gl####.w.kunl####.####.com/7ea3b8e7be7f926984acd12113f5335c.png?imageVi#...
- gl####.w.kunl####.####.com/81b3d5cc14a5373d6222f8216549468e.jpg
- gl####.w.kunl####.####.com/833294ba9212965367624b534f485fb3.jpg
- gl####.w.kunl####.####.com/85eb92090e0f2c371e9755ae06184e6c.jpg
- gl####.w.kunl####.####.com/86405d71ad6313a45d281aeba76c307f.jpg
- gl####.w.kunl####.####.com/880e42291c0c8892d667221ac3fcec55.jpg
- gl####.w.kunl####.####.com/8893960c60fe2e263f2fb9611f41c08c.jpg
- gl####.w.kunl####.####.com/8a8f2c687fa5ffd5ca68442ae3fd76b3.jpg
- gl####.w.kunl####.####.com/8aacff4b3bc1f8f27642266c7b5863de.jpg?imageVi#...
- gl####.w.kunl####.####.com/8c74d87d9813dbe8a154db402f02a1ff.jpg?imageMo#...
- gl####.w.kunl####.####.com/8e759df8dd6d19ccc262d06e3f304ae9.jpg
- gl####.w.kunl####.####.com/90def1ea4368a86e79f7ac208c7e7ee0.jpg
- gl####.w.kunl####.####.com/911f2aa549548b7cb9ffa02c8b3d3e8f.jpg?imageVi#...
- gl####.w.kunl####.####.com/9120d14399ae881fc563fcf75f798c98.jpg
- gl####.w.kunl####.####.com/91dd523e85102052345338fcce91bfb7.jpg
- gl####.w.kunl####.####.com/921a8ba79ce709399b5f37ca498c0cfc.jpg
- gl####.w.kunl####.####.com/92cd68f386e3cbd75907773d8baaec4b.jpg?imageVi#...
- gl####.w.kunl####.####.com/935990c5ac81adff36be8d1858e61e0f.jpg
- gl####.w.kunl####.####.com/95270ff2c21a3cd23d3c57d165d7187a.jpg
- gl####.w.kunl####.####.com/975e7c86223203e790a9b75f31317ac7.jpg
- gl####.w.kunl####.####.com/990fb5959bec76b8aad6b8af5f941fe6.jpg
- gl####.w.kunl####.####.com/99fba5195c79c03069b37199a9e46afb.jpg
- gl####.w.kunl####.####.com/9ad6ab6d8cedc753bfdfc2964f990a65.jpg
- gl####.w.kunl####.####.com/9afeb9fc5e7fd544c6b789e4558d898c.jpg
- gl####.w.kunl####.####.com/9c76fbafa8a8204daf45820efa1532b4.jpg
- gl####.w.kunl####.####.com/9d09a449eb47c7781ba8517f84ca6786.jpg
- gl####.w.kunl####.####.com/9eb8ce0512944cfea8eed8b995042214.jpg
- gl####.w.kunl####.####.com/a0f7bf47420790fa1b64e0afb137d8a8.jpg?imageVi#...
- gl####.w.kunl####.####.com/a202f66737f99d385c556ea6a92b10fa.jpg
- gl####.w.kunl####.####.com/a20fcd17bbfd3dfa96ffd7916c0ab0d0.jpg
- gl####.w.kunl####.####.com/a3853117f6b9b81cd06e70c04b396e4c.jpg
- gl####.w.kunl####.####.com/a4162250d78130af32af88c1602e010c.png?imageVi#...
- gl####.w.kunl####.####.com/a45aa9433c145fa5a91eeaac05d6ae86.jpg
- gl####.w.kunl####.####.com/a54faabd9655c72190f6fd4692df1d78.jpg?imageVi#...
- gl####.w.kunl####.####.com/a943ec7f8f8e761ec31a1a31a6a352a4.jpg
- gl####.w.kunl####.####.com/ac87de71a3bf95392e435eb43a58861d.jpg?imageVi#...
- gl####.w.kunl####.####.com/adf9e1682f91a74fc69c677f91d893a8.jpg
- gl####.w.kunl####.####.com/af6dbe958407f98f0722bcd3a9fc4106.jpg
- gl####.w.kunl####.####.com/b1eaeed7d1bfd87fcef792da77cb4dd9.jpg
- gl####.w.kunl####.####.com/b2172149fd8a73c7627c72aafcc6f79b.jpg
- gl####.w.kunl####.####.com/b2d5588fcdcdf89232359002a9a24bb8.jpg
- gl####.w.kunl####.####.com/b3638130d5a2e21819679040747497ad.jpg
- gl####.w.kunl####.####.com/b3d06160dd3d1897f630aed425f7f5da.png
- gl####.w.kunl####.####.com/b3dc540e4284e5c4f487b9cfaae0b25f.jpg
- gl####.w.kunl####.####.com/b5096741f0548bb6a9211f7eed8dd692.jpg
- gl####.w.kunl####.####.com/b5387dfb0e698a08278ead2330958f2d.jpg
- gl####.w.kunl####.####.com/b642daf09a7899626c72000f92ba8db2.png?imageVi#...
- gl####.w.kunl####.####.com/ba6b19394eee07ef2b0030ad1468f406.jpg
- gl####.w.kunl####.####.com/ba7b5e6f8606cd6e9fdc15bbdfdee579.jpg
- gl####.w.kunl####.####.com/bb76f4c37f1cf2b707a0f30d38640fa1.jpg
- gl####.w.kunl####.####.com/bd35f998c152a81222eaae44294b8f41.png?imageVi#...
- gl####.w.kunl####.####.com/be6377277431a7d51ca4de57b52d3d2a.jpg
- gl####.w.kunl####.####.com/bf3df60b223badac9108113fb91fb755.jpg
- gl####.w.kunl####.####.com/c1ca0c24c8750566a6b76fad06d76b8d.jpg?imageVi#...
- gl####.w.kunl####.####.com/c22fd6bce1d0bdb47f3b9e63d0b5cb2e.jpg
- gl####.w.kunl####.####.com/c395e08b79cd197c1048f7c912b3c26e.jpg
- gl####.w.kunl####.####.com/c40739a3464a96dd8d98d02e6f5443e3.jpg
- gl####.w.kunl####.####.com/c42496d6696b3e9dd59b6e1dcc0d0b44.jpg
- gl####.w.kunl####.####.com/c4e6822875e14d5ddc88352719bef626.png
- gl####.w.kunl####.####.com/c83df05d66747f06e532066dd3b10b77.jpg
- gl####.w.kunl####.####.com/c858156d95753677547f6df672aab5ad.jpg?imageVi#...
- gl####.w.kunl####.####.com/ccc8cd4b2b3d0f643329775a4e0c5ab7.jpg
- gl####.w.kunl####.####.com/cdc5584edf8c91607de46f05cdbe2b15.png?imageVi#...
- gl####.w.kunl####.####.com/ce96b3f48ff3d07efc497c46364bddcb.jpg
- gl####.w.kunl####.####.com/cefa1c73fd57fa44a1d2951aefb66045.jpg?imageVi#...
- gl####.w.kunl####.####.com/cf1519a6cb82f2073ad5e9e0ad3f9535.jpg?imageVi#...
- gl####.w.kunl####.####.com/d2c750dfbbc65e235d69cc2f91e1d689.jpg
- gl####.w.kunl####.####.com/d31db6795814be59d35d18223b43d082.jpg
- gl####.w.kunl####.####.com/d5636b0fd11f25a8d7be27db3afc343f.jpg
- gl####.w.kunl####.####.com/d5c4d490940eb06a937ba358a4b7f4df.png?imageVi#...
- gl####.w.kunl####.####.com/d736bc2e4aad40b8b8f954c1b4fabfa8.jpg?imageMo#...
- gl####.w.kunl####.####.com/d85a6ee4d4b975118194ed1f7246c0fe.png?imageVi#...
- gl####.w.kunl####.####.com/d9cd37c73562c3b39ca4f96b4dae15c3.png
- gl####.w.kunl####.####.com/db33ed7ce14ab270a20bc40f69b4bf10.jpg
- gl####.w.kunl####.####.com/db467cd5de33d684c9e5f729819178ca.jpg
- gl####.w.kunl####.####.com/dc7fd0bee593eef308b3d3abe88cfd73.jpg
- gl####.w.kunl####.####.com/dcc3b56261c335d27f2abfa4e8fd7a2e.jpg
- gl####.w.kunl####.####.com/dcea252fa8d56a81b5bee49247fb78ca.jpg
- gl####.w.kunl####.####.com/df46b00a8cefa41813efe74904195ee8.jpg
- gl####.w.kunl####.####.com/e07abae71816b0f720438cbb47ffbadb.jpg
- gl####.w.kunl####.####.com/e23148bddec9d1a275259fb26c303f36.jpg?imageVi#...
- gl####.w.kunl####.####.com/e23af7505f10f3465289c991b21223d8.jpg
- gl####.w.kunl####.####.com/e274b537c1010f1cd5c6f49408a33117.jpg
- gl####.w.kunl####.####.com/e30e8340bc6b574f6123aed82b764695.jpg
- gl####.w.kunl####.####.com/e4580ea31027c3ba2cab6d2fdb965fee.jpg?imageMo#...
- gl####.w.kunl####.####.com/e4ce03c4433f16d78e3e3bfd15a502d2.jpg?imageVi#...
- gl####.w.kunl####.####.com/e5dacbea4f784c1168d8c80c8a4c486b.jpg
- gl####.w.kunl####.####.com/e6c858031aebd0d9deb9c8760c7041f3.jpg
- gl####.w.kunl####.####.com/ec72ccf2b43a9402f8745d604b8a2371.jpg
- gl####.w.kunl####.####.com/ec929fd032adfbced35d1a7dff98bc67.jpg
- gl####.w.kunl####.####.com/ed54acd2d02218dc182952b1aa9e9d9e.jpg
- gl####.w.kunl####.####.com/edc3fe246d6c8cf8a1d92e9e73d49b20.jpg
- gl####.w.kunl####.####.com/eed130ad9513aae22b126dd3ff54915d.jpg?imageVi#...
- gl####.w.kunl####.####.com/f063c5cc5637ed49ab2accab94131f25.jpg
- gl####.w.kunl####.####.com/f13686997e960a5ca67e7bea572c732f.jpg?imageVi#...
- gl####.w.kunl####.####.com/f2e109900dd0899d70cdbdf5019d3e8c.jpg
- gl####.w.kunl####.####.com/f3a35dce30313e632e2c02f1e4c8a90a.jpg
- gl####.w.kunl####.####.com/f3b0f4eb61571802f796a7509f6fe8b0.jpg
- gl####.w.kunl####.####.com/f4f344285991b6f3bb03d146ac256d10.jpg
- gl####.w.kunl####.####.com/f78148617c23cc1373e26b17eab7f9ee.jpg
- gl####.w.kunl####.####.com/fb645860683997fa85102ca86ed7c752.jpg
- gl####.w.kunl####.####.com/fc8bfd51e1c6c778a2265b12ee01dcfd.jpg
- gl####.w.kunl####.####.com/item_idc/02f4fe6774e434f4eee4dcc42308af08.jpg...
- gl####.w.kunl####.####.com/item_idc/053a649924c1b1103c0cf5cdaee78d76.jpg...
- gl####.w.kunl####.####.com/item_idc/0550cc108602caec24fce66f66c5c42c.jpg...
- gl####.w.kunl####.####.com/item_idc/07e146ddded3199e6750d03880eb415c.jpg...
- gl####.w.kunl####.####.com/item_idc/0d4a6fefb186e8b43c9e31d22d092296.jpg...
- gl####.w.kunl####.####.com/item_idc/1617842f5c30f39eac3fc83eaaf29482.jpg...
- gl####.w.kunl####.####.com/item_idc/161fede87eefdb2f30fd3c9041701350.jpg...
- gl####.w.kunl####.####.com/item_idc/163c1718517a8c620f0ee954061f2e6e.jpg...
- gl####.w.kunl####.####.com/item_idc/18c6c330be3f91178a20c411b20bdcaa.jpg...
- gl####.w.kunl####.####.com/item_idc/1a249af0caef5cb88f0e26a7597409f1.jpg...
- gl####.w.kunl####.####.com/item_idc/1c35ce4f884c555db8eae19c3fdfb0c7.jpg...
- gl####.w.kunl####.####.com/item_idc/1d069fa2a3107ee53db80ae3241e0acf.jpg...
- gl####.w.kunl####.####.com/item_idc/200139544ce03c33ea28dd268ec22a2e.jpg...
- gl####.w.kunl####.####.com/item_idc/24a234b9452a594273f56219987da386.jpg...
- gl####.w.kunl####.####.com/item_idc/24c34cb38be897336805add109ea50fc.jpg...
- gl####.w.kunl####.####.com/item_idc/2ae2c61c41f7b46c96ecf015055c27f7.jpg...
- gl####.w.kunl####.####.com/item_idc/2b01e62e8c85d2744120a2f4ab2e1f4f.jpg...
- gl####.w.kunl####.####.com/item_idc/2b9841f7625d3ecb5567be3da7f1db95.jpg...
- gl####.w.kunl####.####.com/item_idc/2ee31e83ffb6f94ec31dbf5b26239977.jpg...
- gl####.w.kunl####.####.com/item_idc/2f32233cfd1209587fe7faec7be9dc50.jpg...
- gl####.w.kunl####.####.com/item_idc/2fb1f804cfbb9daf0cf6dddc3b955dd8.jpg...
- gl####.w.kunl####.####.com/item_idc/31aeb1e9ca4f5a424980dfb51acbed49.jpg...
- gl####.w.kunl####.####.com/item_idc/32413ab845f8804c11b0abe4ed6c54d9.jpg...
- gl####.w.kunl####.####.com/item_idc/3367abe62135628f03afe5535d032075.jpg...
- gl####.w.kunl####.####.com/item_idc/35c0f65f540252ac84bc267f9f1da119.jpg...
- gl####.w.kunl####.####.com/item_idc/364105aa2e19f1de42532bac53a944a4.jpg...
- gl####.w.kunl####.####.com/item_idc/372e9fe58588b5de14772bf67d905f93.jpg...
- gl####.w.kunl####.####.com/item_idc/3a00a5312e3cf50f31f03397a53d9890.jpg...
- gl####.w.kunl####.####.com/item_idc/3a9abf43bd622440452e3760fa7c0cd5.jpg...
- gl####.w.kunl####.####.com/item_idc/41f3c0d96243811e45f05ffd6ffaec35.jpg...
- gl####.w.kunl####.####.com/item_idc/422d1d82cf4a16f65e106bffb3fc9edb.jpg...
- gl####.w.kunl####.####.com/item_idc/427120cccc649dc418939a060326c2bf.jpg...
- gl####.w.kunl####.####.com/item_idc/44701a9d3df132801c2be04f69323d92.jpg...
- gl####.w.kunl####.####.com/item_idc/477370a5b43ccb1ca5844da3e66cc75f.jpg...
- gl####.w.kunl####.####.com/item_idc/4b652f1605b9d7b2692ffbbab6b05491.jpg...
- gl####.w.kunl####.####.com/item_idc/4c57fb06d10bf44dd2f18974b11a4620.jpg...
- gl####.w.kunl####.####.com/item_idc/4de467b50603ce323d8563ea59211f95.jpg...
- gl####.w.kunl####.####.com/item_idc/50d4253a650ebf38a3dc11aa37e8773f.jpg...
- gl####.w.kunl####.####.com/item_idc/50fa92a4114cdc27ff25a1fa2461300a.jpg...
- gl####.w.kunl####.####.com/item_idc/52c9f21591811e6bbba77235043b7a53.jpg...
- gl####.w.kunl####.####.com/item_idc/553afcc04c5d632748d97ec3221fa52c.jpg...
- gl####.w.kunl####.####.com/item_idc/5658a98ba0bccb94fb7916d62cafee56.jpg...
- gl####.w.kunl####.####.com/item_idc/5781d170ccbc91b4f762eb94fa8f87b1.jpg...
- gl####.w.kunl####.####.com/item_idc/59f55278318f88ce377cd2522a6f244d.jpg...
- gl####.w.kunl####.####.com/item_idc/5c96a943809265699ee0d0c63344741c.jpg...
- gl####.w.kunl####.####.com/item_idc/5d9a34375bb9e0e480ebc7cc031d6864.jpg...
- gl####.w.kunl####.####.com/item_idc/60d8a5a16147d48a217de9ce188e6ab5.jpg...
- gl####.w.kunl####.####.com/item_idc/61dafb35c5e95b664251f722390ae1bc.jpg...
- gl####.w.kunl####.####.com/item_idc/631467639c0e9b76a5dbcb8be7e92861.jpg...
- gl####.w.kunl####.####.com/item_idc/64b7c92e819d005ce29209a2ef9eef6a.jpg...
- gl####.w.kunl####.####.com/item_idc/683239b638dfb7019e26f7a5138406cb.jpg...
- gl####.w.kunl####.####.com/item_idc/6e7b7259f9049740ea941c05e83482cd.jpg...
- gl####.w.kunl####.####.com/item_idc/7172f5aaf0265405a44f3a3c2d071027.jpg...
- gl####.w.kunl####.####.com/item_idc/717db9a68b40364b673f04399af2433d.jpg...
- gl####.w.kunl####.####.com/item_idc/723516e756038edcaec53b6d3d34b98c.jpg...
- gl####.w.kunl####.####.com/item_idc/755f8a35190f56d281d45054364ce913.jpg...
- gl####.w.kunl####.####.com/item_idc/7c411f7e44ba6e3150c4c36452b107ae.jpg...
- gl####.w.kunl####.####.com/item_idc/7c8d55f4728bd3c50a66afb6872d074b.jpg...
- gl####.w.kunl####.####.com/item_idc/7dd375c9c03e483ef73f418359ffecf5.jpg...
- gl####.w.kunl####.####.com/item_idc/8505d262681695a93aea3cc066708d80.jpg...
- gl####.w.kunl####.####.com/item_idc/86951eb7d464a8350f7d71c958e49bec.jpg...
- gl####.w.kunl####.####.com/item_idc/880f492cca0d225a0345807f4a52805e.jpg...
- gl####.w.kunl####.####.com/item_idc/8a47e48eb40192a3fce4c7020a62d463.jpg...
- gl####.w.kunl####.####.com/item_idc/8b579b035d80113afcb4ece9f1e1576c.jpg...
- gl####.w.kunl####.####.com/item_idc/8d1f7e43eabd90d0864c5e50bfb96a86.jpg...
- gl####.w.kunl####.####.com/item_idc/90616000dc513d1f805e9718e4140581.jpg...
- gl####.w.kunl####.####.com/item_idc/9107655fd2c4d8bccef4988a73b0e59e.jpg...
- gl####.w.kunl####.####.com/item_idc/9159fdb1d676f2770edaeab3b796d04c.jpg...
- gl####.w.kunl####.####.com/item_idc/944c57fc8d3ec47cecee4907f88b6d0e.jpg...
- gl####.w.kunl####.####.com/item_idc/95644b2ee97093ead5f2fcc442430827.jpg...
- gl####.w.kunl####.####.com/item_idc/96e1802ebaff238b9f2b34894c54bbe2.jpg...
- gl####.w.kunl####.####.com/item_idc/9834c7a7a76e5c38aa4854ad4b970b49.jpg...
- gl####.w.kunl####.####.com/item_idc/9a95216f4eeac9bdc1ed486073c73944.jpg...
- gl####.w.kunl####.####.com/item_idc/9b0047f49d280eebc9eca2d22291827f.jpg...
- gl####.w.kunl####.####.com/item_idc/9e287fd81cf3d572642f77fc8f403d4b.jpg...
- gl####.w.kunl####.####.com/item_idc/9f45089364789f200eb3c5265da0297d.jpg...
- gl####.w.kunl####.####.com/item_idc/a240d8cd08114c5c7fe9c4cd0202a4cc.jpg...
- gl####.w.kunl####.####.com/item_idc/a34c0a560b7b6b3bf8ad123308bd9840.jpg...
- gl####.w.kunl####.####.com/item_idc/a51ea83ecb8a05f6a439f3741dde1884.jpg...
- gl####.w.kunl####.####.com/item_idc/a5719e49704b94c5e4ffaf49d40abedd.jpg...
- gl####.w.kunl####.####.com/item_idc/a59b5d2feafbcf6e24a2363e4d3b8c5e.jpg...
- gl####.w.kunl####.####.com/item_idc/a87479638642cb64a558f9b047ca1dfc.jpg...
- gl####.w.kunl####.####.com/item_idc/a934c0b2e6c0f610b92cdc077ce251a5.jpg...
- gl####.w.kunl####.####.com/item_idc/af5c07950c4fdcc2e6d4c6b4c151f60c.jpg...
- gl####.w.kunl####.####.com/item_idc/b0cce62cb170b4caa605f5c9064ffca6.jpg...
- gl####.w.kunl####.####.com/item_idc/b7c7b31a1649a347733ea5f507c3fbb3.jpg...
- gl####.w.kunl####.####.com/item_idc/bb6b0ee84e88cfc766347ea5d930534a.jpg...
- gl####.w.kunl####.####.com/item_idc/bd7e7d611c953a13228ff724f6327796.jpg...
- gl####.w.kunl####.####.com/item_idc/be4af7420042286f855cd04148161fac.jpg...
- gl####.w.kunl####.####.com/item_idc/befefb6b43713a1ce6bd5153793110c6.jpg...
- gl####.w.kunl####.####.com/item_idc/c33e72ca84b4736e689d43eadabdc7d4.jpg...
- gl####.w.kunl####.####.com/item_idc/c540d35911fd76535c70b11f8460ba9c.jpg...
- gl####.w.kunl####.####.com/item_idc/cb018e0919cb46c0124c9ab11b080746.jpg...
- gl####.w.kunl####.####.com/item_idc/cc3ba07eaa5142bc481e17db999dea91.jpg...
- gl####.w.kunl####.####.com/item_idc/ce123bb0dd5d8f50f626e93a11ea14a6.jpg...
- gl####.w.kunl####.####.com/item_idc/d06fbb6013e9cc58fbf35f0ed9d4a317.jpg...
- gl####.w.kunl####.####.com/item_idc/d16be02a39c4b178e6a732ec350d6544.jpg...
- gl####.w.kunl####.####.com/item_idc/d57fc01d7d57133463c275ae0d744dc7.jpg...
- gl####.w.kunl####.####.com/item_idc/d5df0fb1dd4d42b016dc4a920d0aa9a1.jpg...
- gl####.w.kunl####.####.com/item_idc/d7652f372d829712a30895c70b1632b0.jpg...
- gl####.w.kunl####.####.com/item_idc/d7b5a4e4b3b93650ea740b15848b97ad.jpg...
- gl####.w.kunl####.####.com/item_idc/db26a767976ced8e09e691df3a8af358.jpg...
- gl####.w.kunl####.####.com/item_idc/dca4ead8c77a9b4665d67b87774192ed.jpg...
- gl####.w.kunl####.####.com/item_idc/dd0e5c9287604eefb7f0387919d4f795.jpg...
- gl####.w.kunl####.####.com/item_idc/e19c56ce21d03a582fc5bea914d9a326.jpg...
- gl####.w.kunl####.####.com/item_idc/e2316fc75a5602d1c3c1f4464fe1be53.jpg...
- gl####.w.kunl####.####.com/item_idc/e8567dfb972452856b657b1aded4f61a.jpg...
- gl####.w.kunl####.####.com/item_idc/ea2a462612ad2cd236bf1fb78e003050.jpg...
- gl####.w.kunl####.####.com/item_idc/eaa84abe05224b7455e0ef515bb1a1e8.jpg...
- gl####.w.kunl####.####.com/item_idc/eb14e515a84f1d5360707fc0cf9cb5b6.jpg...
- gl####.w.kunl####.####.com/item_idc/ec929bf064315449fd3af98712f17c0b.jpg...
- gl####.w.kunl####.####.com/item_idc/ed96c4c54076f1fbba5425d557f38db5.jpg...
- gl####.w.kunl####.####.com/item_idc/f9c4481f7479d2a1577e1087e83ab768.jpg...
- gl####.w.kunl####.####.com/item_idc/fac401de38f97a7fd1a71054536e5d27.jpg...
- gl####.w.kunl####.####.com/item_idc/fefcd31157c5e9d3ff02198d0e7e1b4e.jpg...
- gl####.w.kunl####.####.com/item_idc/ff3def5d3ba1aced44e71352905a4acc.jpg...
- m.yunjiwe####.com/yunjilog/admin/jslog.json?msg={"flag":"H5","errorUrl":...
- sc.yunjigl####.com/yunjiapp4buyer/app4buyer/buyervip/startPage.json?vers...
- sc.yunjigl####.com/yunjiapp4buyer/app4buyer/queryExistToBeExpiredCoupon....
- t####.c####.q####.####.com/20180620202343416625.jpg
- t####.c####.q####.####.com/20180813094409993078.jpg?imageVi####
- t####.c####.q####.####.com/20180813095402490467.jpg?imageVi####
- t####.c####.q####.####.com/20180813100240726179.jpg?imageVi####
- t####.c####.q####.####.com/20180813102254562350.jpg?imageVi####
- t####.c####.q####.####.com/20180813105615636114.jpg?imageVi####
- t####.c####.q####.####.com/20180813111648167493.jpg?imageVi####
- t####.c####.q####.####.com/20180813115828674134.jpg?imageVi####
- t####.c####.q####.####.com/20180813132142596522.jpg?imageVi####
- t####.c####.q####.####.com/20180813133651369706.jpg?imageVi####
- t####.c####.q####.####.com/20180817103903402263.jpg?imageVi####
- t####.c####.q####.####.com/20180824180347869483.jpg?imageVi####
- t####.c####.q####.####.com/20180831165956124059.jpg?imageVi####
- t####.c####.q####.####.com/20180903093820505316.jpg?imageVi####
- t####.c####.q####.####.com/20180906104842395492.jpg?imageVi####
- t####.c####.q####.####.com/20180906105406512130.jpg?imageVi####
- t####.c####.q####.####.com/20180906105834362033.jpg?imageVi####
- t####.c####.q####.####.com/201809061101483156.jpg?imageVi####
- t####.c####.q####.####.com/20180906110734704189.jpg?imageVi####
- t####.c####.q####.####.com/201809101742027503.jpg?imageVi####
- t####.c####.q####.####.com/2018091709082982270.jpg?imageVi####
- t####.c####.q####.####.com/20180917092338856597.jpg?imageVi####
- t####.c####.q####.####.com/20180917092744976160.jpg?imageVi####
- t####.c####.q####.####.com/config/hz-hzv3.conf
- t####.c####.q####.####.com/tdata_EDT356
- t####.c####.q####.####.com/tdata_YYn966
- t####.c####.q####.####.com/tdata_eOt091
- ta.yunjigl####.com/config?appid=####
- ta.yunjigl####.com/sync_js?&data=ey####&ext=crc####
- vi####.yunjigl####.com/yunjiapp4buyer/app4buyer/buyervip/startPage.json?...
- vi####.yunjigl####.com/yunjiapp4buyer/app4buyer/global/queryByActivityBo...
- vi####.yunjigl####.com/yunjiapp4buyer/app4buyer/global/queryByUrlPath.js...
HTTP POST requests:
- aexcep####.b####.qq.com:8011/rqd/async
- aexcep####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- and####.b####.qq.com/rqd/async?aid=####
- c-h####.g####.com/api.php?format=####&t=####
- m.yunjiwe####.com/yunjidata/data/reportByJsonString.json
- pi####.qq.com/mstat/report/?index=####
- pin####.qq.com/request
- sc.yunjigl####.com/yunjidata/data/reportByJsonString.json
- sdk.o####.p####.####.com/api.php?format=####&t=####
- sh.wagbr####.aliyun####.com/man/api?ak=####&s=####
- ta.yunjigl####.com/sync
- vi####.yunjigl####.com/yunjidata/data/reportByJsonString.json
Modified file system:
Creates the following files:
- /data/data/####/-1037359673
- /data/data/####/-1674496260
- /data/data/####/0.1.1.bak
- /data/data/####/0.1.2.bak
- /data/data/####/04c6899a2916074199c1b338fc4f629a.0.tmp
- /data/data/####/04c6899a2916074199c1b338fc4f629a.1.tmp
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/201809300847650.v1.crash
- /data/data/####/201809300847767.v1.crash
- /data/data/####/21d95595c4a32d0d8b18950bfb25ac35.0.tmp
- /data/data/####/21d95595c4a32d0d8b18950bfb25ac35.1.tmp
- /data/data/####/2ed6959d434e56e370022988d432cf56.0.tmp
- /data/data/####/2ed6959d434e56e370022988d432cf56.1.tmp
- /data/data/####/5118e25f3e36b2201f16959643c5b4c9.0.tmp
- /data/data/####/5118e25f3e36b2201f16959643c5b4c9.1.tmp
- /data/data/####/5971c1036c3f5a1b8ba5a0bf94b87c14b1bcae81a4ea64b....0.tmp
- /data/data/####/7027bbe6d84e
- /data/data/####/761511270
- /data/data/####/798081204
- /data/data/####/7fK2SKyBM0dRXtTqlK8nNELhCuM.929508159.tmp
- /data/data/####/859658193
- /data/data/####/Alvin2.xml
- /data/data/####/BUGLY_COMMON_VALUES.xml
- /data/data/####/ContextData.xml
- /data/data/####/ErVAzONnMouSXXwMv6n03VNcuwI.-1717447476.tmp
- /data/data/####/LdN_NZiV7mE1iahPfL6U8HapZVs.-738780967.tmp
- /data/data/####/MQc2RmvkO6mqrAPJRnzXYGFNSKM.146812573.tmp
- /data/data/####/UP_app_pefercen_profile.xml
- /data/data/####/UPpref_longtime.xml
- /data/data/####/UPpref_shorttime.xml
- /data/data/####/UPtcagent.db
- /data/data/####/UPtcagent.db-journal
- /data/data/####/VDkjCraHs6v3wM7_yOCYxJG7hNA.48486333.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/bugly_db_legu-journal
- /data/data/####/com.thinkingdata.analyse.xml
- /data/data/####/com.yunjibuyer.yunji-journal
- /data/data/####/com.yunjibuyer.yunji.BETA_VALUES.xml
- /data/data/####/com.yunjibuyer.yunji.BETA_VALUES.xml.bak
- /data/data/####/com.yunjibuyer.yunji.mid.world.ro.xml
- /data/data/####/com.yunjibuyer.yunji_preferences.xml
- /data/data/####/crashrecord.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/dso_deps
- /data/data/####/dso_lock
- /data/data/####/dso_manifest
- /data/data/####/dso_state
- /data/data/####/ed338df3fe91465fb2c5eeadedc7bf81.0.tmp
- /data/data/####/ed338df3fe91465fb2c5eeadedc7bf81.1.tmp
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/f_00000b
- /data/data/####/f_00000c
- /data/data/####/f_00000d
- /data/data/####/f_00000e
- /data/data/####/f_00000f
- /data/data/####/f_000010
- /data/data/####/f_000011
- /data/data/####/f_000012
- /data/data/####/f_000013
- /data/data/####/f_000014
- /data/data/####/f_000015
- /data/data/####/f_000016
- /data/data/####/f_000017
- /data/data/####/f_000018
- /data/data/####/f_000019
- /data/data/####/f_00001a
- /data/data/####/f_00001b
- /data/data/####/f_00001c
- /data/data/####/f_00001d
- /data/data/####/f_00001e
- /data/data/####/f_00001f
- /data/data/####/f_000020
- /data/data/####/f_000021
- /data/data/####/f_000022
- /data/data/####/f_000023
- /data/data/####/f_000024
- /data/data/####/f_000025
- /data/data/####/f_000026
- /data/data/####/f_000027
- /data/data/####/f_000028
- /data/data/####/f_000029
- /data/data/####/f_00002a
- /data/data/####/f_00002b
- /data/data/####/f_00002c
- /data/data/####/f_00002d
- /data/data/####/f_00002e
- /data/data/####/f_00002f
- /data/data/####/f_000030
- /data/data/####/f_000031
- /data/data/####/f_000032
- /data/data/####/f_000033
- /data/data/####/f_000034
- /data/data/####/f_000035
- /data/data/####/f_000036
- /data/data/####/f_000037
- /data/data/####/f_000038
- /data/data/####/f_000039
- /data/data/####/f_00003a
- /data/data/####/f_00003b
- /data/data/####/f_00003c
- /data/data/####/f_00003d
- /data/data/####/f_00003e
- /data/data/####/f_00003f
- /data/data/####/f_000040
- /data/data/####/f_000041
- /data/data/####/f_000042
- /data/data/####/f_000043
- /data/data/####/f_000044
- /data/data/####/f_000045
- /data/data/####/f_000046
- /data/data/####/f_000047
- /data/data/####/f_000048
- /data/data/####/f_000049
- /data/data/####/f_00004a
- /data/data/####/f_00004b
- /data/data/####/f_00004c
- /data/data/####/f_00004d
- /data/data/####/f_00004e
- /data/data/####/f_00004f
- /data/data/####/f_000050
- /data/data/####/f_000051
- /data/data/####/f_000052
- /data/data/####/f_000053
- /data/data/####/f_000054
- /data/data/####/f_000055
- /data/data/####/f_000056
- /data/data/####/f_000057
- /data/data/####/f_000058
- /data/data/####/f_000059
- /data/data/####/f_00005a
- /data/data/####/f_00005b
- /data/data/####/f_00005c
- /data/data/####/f_00005d
- /data/data/####/f_00005e
- /data/data/####/f_00005f
- /data/data/####/f_000060
- /data/data/####/f_000061
- /data/data/####/f_000062
- /data/data/####/f_000063
- /data/data/####/f_000064
- /data/data/####/f_000065
- /data/data/####/f_000066
- /data/data/####/f_000067
- /data/data/####/f_000068
- /data/data/####/f_000069
- /data/data/####/f_00006a
- /data/data/####/f_00006b
- /data/data/####/f_00006c
- /data/data/####/f_00006d
- /data/data/####/f_00006e
- /data/data/####/f_00006f
- /data/data/####/f_000070
- /data/data/####/f_000071
- /data/data/####/f_000072
- /data/data/####/f_000073
- /data/data/####/f_000074
- /data/data/####/f_000075
- /data/data/####/f_000076
- /data/data/####/f_000077
- /data/data/####/f_000078
- /data/data/####/f_000079
- /data/data/####/f_00007a
- /data/data/####/f_00007b
- /data/data/####/f_00007c
- /data/data/####/f_00007d
- /data/data/####/f_00007e
- /data/data/####/f_00007f
- /data/data/####/f_000080
- /data/data/####/f_000081
- /data/data/####/f_000082
- /data/data/####/f_000083
- /data/data/####/f_000084
- /data/data/####/f_000085
- /data/data/####/f_000086
- /data/data/####/f_000087
- /data/data/####/f_000088
- /data/data/####/f_000089
- /data/data/####/f_00008a
- /data/data/####/f_00008b
- /data/data/####/f_00008c
- /data/data/####/f_00008d
- /data/data/####/f_00008e
- /data/data/####/f_00008f
- /data/data/####/f_000090
- /data/data/####/f_000091
- /data/data/####/f_000092
- /data/data/####/f_000093
- /data/data/####/f_000094
- /data/data/####/f_000095
- /data/data/####/f_000096
- /data/data/####/f_000097
- /data/data/####/f_000098
- /data/data/####/f_000099
- /data/data/####/f_00009a
- /data/data/####/f_00009b
- /data/data/####/f_00009c
- /data/data/####/f_00009d
- /data/data/####/f_00009e
- /data/data/####/f_00009f
- /data/data/####/f_0000a0
- /data/data/####/f_0000a1
- /data/data/####/f_0000a2
- /data/data/####/f_0000a3
- /data/data/####/f_0000a4
- /data/data/####/f_0000a5
- /data/data/####/f_0000a6
- /data/data/####/f_0000a7
- /data/data/####/f_0000a8
- /data/data/####/f_0000a9
- /data/data/####/f_0000aa
- /data/data/####/f_0000ab
- /data/data/####/f_0000ac
- /data/data/####/f_0000ad
- /data/data/####/f_0000ae
- /data/data/####/f_0000af
- /data/data/####/f_0000b0
- /data/data/####/f_0000b1
- /data/data/####/f_0000b2
- /data/data/####/f_0000b3
- /data/data/####/f_0000b4
- /data/data/####/f_0000b5
- /data/data/####/f_0000b6
- /data/data/####/f_0000b7
- /data/data/####/f_0000b8
- /data/data/####/f_0000b9
- /data/data/####/f_0000ba
- /data/data/####/f_0000bb
- /data/data/####/f_0000bc
- /data/data/####/f_0000bd
- /data/data/####/f_0000be
- /data/data/####/f_0000bf
- /data/data/####/f_0000c0
- /data/data/####/f_0000c1
- /data/data/####/f_0000c2
- /data/data/####/f_0000c3
- /data/data/####/f_0000c4
- /data/data/####/f_0000c5
- /data/data/####/f_0000c6
- /data/data/####/fa99270fc86b800ec711b111466f3122.0.tmp
- /data/data/####/fa99270fc86b800ec711b111466f3122.1.tmp
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/httpdns_config_cache.xml
- /data/data/####/httpdns_config_cache.xml.bak
- /data/data/####/index
- /data/data/####/index.android.bundle
- /data/data/####/index.android.pat
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/lM8tXJQiwkaIAVWoqLgQSSi4x14.-351060460.tmp
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/mix.dex
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/pri_tencent_analysis.db_com.yunjibuyer.yunji-journal
- /data/data/####/pri_tencent_analysis.db_com.yunjibuyer.yunji;pu...ournal
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/td.lock
- /data/data/####/tdata_YYn966
- /data/data/####/tdata_YYn966.jar
- /data/data/####/tdata_eOt091
- /data/data/####/tdata_eOt091.jar
- /data/data/####/tdid.xml
- /data/data/####/tencent_analysis.db_com.yunjibuyer.yunji-journal
- /data/data/####/tencent_analysis.db_com.yunjibuyer.yunji;pushse...ournal
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/webviewCookiesChromiumPrivate.db-journal
- /data/data/####/yj_bundle.zip
- /data/data/####/yunji_buyer.db-journal
- /data/data/####/yunjibuyer_config.xml.xml
- /data/media/####/.mid.txt
- /data/media/####/.mid.txt1000001
- /data/media/####/.mid.txt3
- /data/media/####/.tcookieid
- /data/media/####/0f7e6d72bd17881e813da7f36cd68e0c.0.tmp
- /data/media/####/0f7e6d72bd17881e813da7f36cd68e0c.1.tmp
- /data/media/####/2634635c3f45a069cf157a8c747a3bd1.0.tmp
- /data/media/####/2634635c3f45a069cf157a8c747a3bd1.1.tmp
- /data/media/####/37c1020f69721fa4d66a83f824a884b1.0.tmp
- /data/media/####/37c1020f69721fa4d66a83f824a884b1.1.tmp
- /data/media/####/39ea8203958914f2eaf5dd47dc9e8d07.0
- /data/media/####/4c4c1ff2ea298a2956d70d274450ff3a.0.tmp
- /data/media/####/4c4c1ff2ea298a2956d70d274450ff3a.1.tmp
- /data/media/####/50cae9e3d2b04be6df1e80c9c73d79db.0.tmp
- /data/media/####/50cae9e3d2b04be6df1e80c9c73d79db.1.tmp
- /data/media/####/661554a03c8b05e1f7b386f6c5d3ddbe.0.tmp
- /data/media/####/661554a03c8b05e1f7b386f6c5d3ddbe.1.tmp
- /data/media/####/6754d2ae86945b4dfa6a0bfd936a4ede.0.tmp
- /data/media/####/6754d2ae86945b4dfa6a0bfd936a4ede.1.tmp
- /data/media/####/67cd12f8978026cdc3e0aecb5ba18838.0.tmp
- /data/media/####/67cd12f8978026cdc3e0aecb5ba18838.1.tmp
- /data/media/####/7029f93bad0e66370876115bbca56bcf.0.tmp
- /data/media/####/7029f93bad0e66370876115bbca56bcf.1.tmp
- /data/media/####/8af44d710b44e78f0e5e0ed1e29630b3.0.tmp
- /data/media/####/8af44d710b44e78f0e5e0ed1e29630b3.1.tmp
- /data/media/####/8e51fc9ea574da61c849969795380bb6.0.tmp
- /data/media/####/8e51fc9ea574da61c849969795380bb6.1.tmp
- /data/media/####/90e69a2c4f5b7f1d7cb6652214939c1a.0.tmp
- /data/media/####/90e69a2c4f5b7f1d7cb6652214939c1a.1.tmp
- /data/media/####/94b862ef920f3173a8cdcb49c8c8ad1b.0.tmp
- /data/media/####/94b862ef920f3173a8cdcb49c8c8ad1b.1.tmp
- /data/media/####/94e99028ea64e2820bb1c18c4e7b2707.0.tmp
- /data/media/####/94e99028ea64e2820bb1c18c4e7b2707.1.tmp
- /data/media/####/9b2f40538e24e681aa0d6caade11027f.0.tmp
- /data/media/####/9b2f40538e24e681aa0d6caade11027f.1.tmp
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/app.db
- /data/media/####/b6043d3a7926299af58f3f7d5b3e98f1.0.tmp
- /data/media/####/b6043d3a7926299af58f3f7d5b3e98f1.1.tmp
- /data/media/####/c4a5adf4c7139dc9d04d9dfd42645aa3.0.tmp
- /data/media/####/c4a5adf4c7139dc9d04d9dfd42645aa3.1.tmp
- /data/media/####/c63d3e70e89eed732b071b0a6dce1b3d.0.tmp
- /data/media/####/c63d3e70e89eed732b071b0a6dce1b3d.1.tmp
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.yunjibuyer.yunji.bin
- /data/media/####/com.yunjibuyer.yunji.db
- /data/media/####/d5c8f992a86ca08bf310b975fe972776.0.tmp
- /data/media/####/d5c8f992a86ca08bf310b975fe972776.1.tmp
- /data/media/####/e4a41317d7e77f07aa07bdda271b5643.0.tmp
- /data/media/####/e4a41317d7e77f07aa07bdda271b5643.1.tmp
- /data/media/####/f88d37a9e91c4dad79ac7e582669be5c.0.tmp
- /data/media/####/f88d37a9e91c4dad79ac7e582669be5c.1.tmp
- /data/media/####/journal
- /data/media/####/journal.tmp
- /data/media/####/log_20180930.txt
- /data/media/####/tdata_YYn966
- /data/media/####/tdata_eOt091
- /data/media/####/test.log
Miscellaneous:
Executes next shell scripts:
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.yunji.imaginer.yjpush.YJGTPushService 25080 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -c
- logcat -d -v threadtime
- logcat -d -v time
- mount
Loads the following dynamic libraries:
- Bugly
- MtaNativeCrash_v2
- eiu-bspatch
- entryexpro
- getuiext2
- imagepipeline
- libnfix
- libreactnativejni
- libshella-2.9.0.2
- libufix
- nfix
- ufix
Uses the following algorithms to encrypt data:
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-CFB-NoPadding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- RSA-NONE-PKCS1PADDING
Uses the following algorithms to decrypt data:
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-CFB-NoPadding
- AES-GCM-NoPadding
Uses special library to hide executable bytecode.
Gains access to geolocation.
Gains access to network information.
Gains access to telephone information (number, imei, etc.).
Gains access to information about installed applications.
Adds tasks to the system scheduler.
Displays its own windows over windows of other applications.