Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) o####.map.b####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) api.sj####.net:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) img.sj####.net:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(TLS/1.0) api.map.b####.com:443
- TCP(TLS/1.0) h####.b####.com:443
- TCP c####.g####.ig####.com:5226
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.u####.com
- and####.b####.qq.com
- api.map.b####.com
- api.sj####.net
- c####.g####.ig####.com
- c-h####.g####.com
- h####.b####.com
- img.sj####.net
- loc.map.b####.com
- o####.map.b####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- vec####.map.b####.com
- we####.sj####.net
- api.sj####.net/Common/GetBanner?typeid=####&top=####
- api.sj####.net/Res/GetList
- img.sj####.net/Article/GetArticleList/18?size=####&page=####
- img.sj####.net/Article/GetArticleList/20
- img.sj####.net/Article/GetArticleList/42?size=####&page=####
- img.sj####.net/Article/GetDetailsByClass/17
- img.sj####.net/Article/GetHomeNews/40?top=####
- img.sj####.net/Article/GetTopNews/48?top=####
- img.sj####.net/ResIco/1706211738292318863.png
- img.sj####.net/ResIco/1706211739002203959.png
- img.sj####.net/ResIco/1706220950519296586.png
- img.sj####.net/ResIco/1706220951233014707.png
- img.sj####.net/ResIco/1706220952063972368.png
- img.sj####.net/ResIco/1706220953111173454.png
- img.sj####.net/ResIco/1706281535072025070.png
- img.sj####.net/ResIco/1710271713105345301.png
- img.sj####.net/ResIco/1712211501587469513.png
- img.sj####.net/article/thumb/
- img.sj####.net/article/thumb/1706211639204171277.jpg
- img.sj####.net/article/thumb/1706211640418244293.jpg
- img.sj####.net/article/thumb/1706211641579552584.jpg
- img.sj####.net/article/thumb/1706211645106478115.jpg
- img.sj####.net/article/thumb/1706211646585455426.jpg
- img.sj####.net/article/thumb/1706211648219758554.jpg
- img.sj####.net/article/thumb/1706211650479206948.jpg
- img.sj####.net/article/thumb/1808020927360963864.jpg
- img.sj####.net/article/thumb/1808021653164933534.jpg
- img.sj####.net/banner/1706220912503206998.png
- img.sj####.net/banner/1706220913235117713.png
- img.sj####.net/v1/Common/GetServicesData
- t####.c####.q####.####.com/config/hz-hzv3.conf
- t####.c####.q####.####.com/tdata_Soq141
- t####.c####.q####.####.com/tdata_vxj811
- a####.u####.com/app_logs
- and####.b####.qq.com/rqd/async
- and####.b####.qq.com/rqd/async?aid=####
- c-h####.g####.com/api.php?format=####&t=####
- o####.map.b####.com/offline_loc
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.imprint
- /data/data/####/02b75310878793bd8cdc038e1e87de7289fd395d0850469....0.tmp
- /data/data/####/048a624b3afb65bf4050b0fafacde89577282844625f6d0....0.tmp
- /data/data/####/05db847d37699be2bc5c4cb785d457d3.0.tmp
- /data/data/####/05db847d37699be2bc5c4cb785d457d3.1.tmp
- /data/data/####/0779658c6eae6861fcf3d4bffa5df8e920e44068a060105....0.tmp
- /data/data/####/0808372f01b94e686db37d5a898e22ae.0.tmp
- /data/data/####/0808372f01b94e686db37d5a898e22ae.1.tmp
- /data/data/####/0aed5393c5d272e91786325b0d9bc3c10da49ee31290f3e....0.tmp
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/198a1d1e543826a347c1d350703e7c00.0.tmp
- /data/data/####/198a1d1e543826a347c1d350703e7c00.1.tmp
- /data/data/####/19d89345122ad92b1872357e50af399868ad82c2ad9afbb....0.tmp
- /data/data/####/1dcde73bb5de6af21a5b90112d3e03614f74a9436c9a605....0.tmp
- /data/data/####/33074085b95a9aab20d684cd89fe808c89e4a898b4010b5....0.tmp
- /data/data/####/37650bea0bbcadc6ca62abd79ebba2138f5de6df8bbbdd1....0.tmp
- /data/data/####/3fe3e486e8fe5e4eec41dcfa1b16318902b0f3cdfe97bb6....0.tmp
- /data/data/####/4640c41a4d9a1c61ef63d7d9d88dc21dfb37eba61fc25a6....0.tmp
- /data/data/####/576766b09908d6209641b62a78366d4ac096f336bda868e....0.tmp
- /data/data/####/5a7ec0ef790be96453e98ed5db495c26.0.tmp
- /data/data/####/5a7ec0ef790be96453e98ed5db495c26.1.tmp
- /data/data/####/5b8c2de6d0b819b9482fc6fa1590a3f89a850eb6d0f03ed....0.tmp
- /data/data/####/64152fc8a9873b3d2ea809b93a598bdb.0.tmp
- /data/data/####/64152fc8a9873b3d2ea809b93a598bdb.1.tmp
- /data/data/####/6a3dfae130e45bcc4b99ad1efb6844cb9d7a953742daafe....0.tmp
- /data/data/####/80cfe8b2abf54a4c7f2a1fbf203560dac7028733d32c0df....0.tmp
- /data/data/####/8173b63c46d9f828a88baafceb2de05e1530a58fd5be96c....0.tmp
- /data/data/####/86d92c5f1d8d1ef22add0fb23cf89d8f19fc33646cc2d34....0.tmp
- /data/data/####/8727ffdcb7260c968a86ac2b010d842399bc9a479de75a1....0.tmp
- /data/data/####/89e6b2c4d25392eb1609d409e6fea46912f880efa0b25b3....0.tmp
- /data/data/####/9779cca57674fece991eda9b54ea11d743aa8210cbf1fe7....0.tmp
- /data/data/####/979af6267db14fa558acbf429e1b6d0404548e84b0702a4....0.tmp
- /data/data/####/97ac3d0ed93989040bbd200fa7eca157128fe1366561c0a....0.tmp
- /data/data/####/990a1fb7ee2477b7e60c34e0d5a0f13401064fb57f24a6d....0.tmp
- /data/data/####/CustomIndex
- /data/data/####/DVDirectory.cfg
- /data/data/####/DVHotMap.cfg
- /data/data/####/DVHotcity.cfg
- /data/data/####/DVIndoor.cfg
- /data/data/####/DVSDirectory.cfg
- /data/data/####/DVVersion.cfg
- /data/data/####/ResPackIndoorMap.rs
- /data/data/####/__Baidu_Stat_SDK_SendRem.xml
- /data/data/####/__local_ap_info_cache.json
- /data/data/####/__local_last_session.json
- /data/data/####/__local_stat_cache.json
- /data/data/####/__send_data_1541955185898
- /data/data/####/__send_data_1541955198132
- /data/data/####/__send_data_1541955201089
- /data/data/####/a2a1bc06d356f4329c0beb9b13287375ab79861851d0472....0.tmp
- /data/data/####/a4cec7abcd39bae92dbdcc418ccf18ba.0.tmp
- /data/data/####/a4cec7abcd39bae92dbdcc418ccf18ba.1.tmp
- /data/data/####/authStatus_com.hualu.slibrary.xml
- /data/data/####/authStatus_com.hualu.slibrary;pushservice.xml
- /data/data/####/authStatus_com.hualu.slibrary;remote.xml
- /data/data/####/b7e4dd6b876282bfe5dd59847c98206d.0.tmp
- /data/data/####/b7e4dd6b876282bfe5dd59847c98206d.1.tmp
- /data/data/####/baidu_mtj_sdk_record.xml
- /data/data/####/baseindoormap.sty
- /data/data/####/bugly_db_-journal
- /data/data/####/bugly_db_legu-journal
- /data/data/####/bus.sty
- /data/data/####/c4c4bab0d0be9c88edfe813a28ef6ac5.0.tmp
- /data/data/####/c4c4bab0d0be9c88edfe813a28ef6ac5.1.tmp
- /data/data/####/c6b0200a3a6fd42c6369e465162e951676d87e4bd81095c....0.tmp
- /data/data/####/car.sty
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/cc109f0f5bfeef3de9f911e7e7f91f4cd7f2a423327be2b....0.tmp
- /data/data/####/cd0ff1daa25095e8de79d32c171ff253406582f14fff232....0.tmp
- /data/data/####/com.hualu.slibrary.BETA_VALUES.xml
- /data/data/####/crashrecord.xml
- /data/data/####/cycle.sty
- /data/data/####/dbdb1b886cb98809078440ead249a4935031a28adc6b71e....0.tmp
- /data/data/####/e27b2b579861b4f32ca99dca28e544ae95cd18ffa8a1d4c....0.tmp
- /data/data/####/efbb121b441daa4809021d260302b1fe18d4cc9567be17e...3489.0
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f6c6f92219014c4df7f8dd04e6dc083faa4ffef2fd37a4a....0.tmp
- /data/data/####/ff97c45f4ed5b9088eb459a9a0db2358.0.tmp
- /data/data/####/ff97c45f4ed5b9088eb459a9a0db2358.1.tmp
- /data/data/####/firll.dat
- /data/data/####/gal.db
- /data/data/####/gal.db-journal
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/hst.db
- /data/data/####/hst.db-journal
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libcuid.so
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.8.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/map.rs
- /data/data/####/map.sty
- /data/data/####/map_pref.xml
- /data/data/####/mix.dex
- /data/data/####/native_record_lock
- /data/data/####/ofl.config
- /data/data/####/ofl_location.db
- /data/data/####/ofl_location.db-journal
- /data/data/####/ofl_statistics.db
- /data/data/####/ofl_statistics.db-journal
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/reduct.rs
- /data/data/####/reduct.sty
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/tdata_Soq141
- /data/data/####/tdata_Soq141.jar
- /data/data/####/tdata_vxj811
- /data/data/####/tdata_vxj811.jar
- /data/data/####/traffic.rs
- /data/data/####/traffic.sty
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/ver.dat
- /data/data/####/webview.db-journal
- /data/media/####/.confd
- /data/media/####/.confd-journal
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.nomedia
- /data/media/####/.timestamp
- /data/media/####/DTTempdat.dat
- /data/media/####/DTTempdat.idx
- /data/media/####/HMTempdat.dat
- /data/media/####/HMTempdat.idx
- /data/media/####/ITTempdat.dat
- /data/media/####/ITTempdat.idx
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.hualu.slibrary.bin
- /data/media/####/com.hualu.slibrary.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/ls.db
- /data/media/####/ls.db-journal
- /data/media/####/tdata_Soq141
- /data/media/####/tdata_vxj811
- /data/media/####/test.0
- /data/media/####/test.log
- /data/media/####/yoh.dat
- /data/media/####/yol.dat
- /data/media/####/yom.dat
- /system/bin/sh -c getprop
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.other.GeTuiPushService 24826 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.8.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.display.id
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.smartisan.version
- getprop ro.vivo.os.build.display.id
- getprop ro.vivo.os.version
- getprop ro.yunos.version
- logcat -d -v threadtime
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.other.GeTuiPushService 24826 300 0
- BaiduMapSDK_base_v4_3_1
- BaiduMapSDK_map_for_bikenavi_v4_3_1
- Bugly
- crash_analysis
- getuiext2
- libnfix
- libshella-2.8
- libufix
- locSDK7a
- nfix
- ufix
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding