Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) i.t####.com:80
- TCP(HTTP/1.1) p####.tc.qq.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) s####.e.qq.com:80
- TCP(HTTP/1.1) c.g####.qq.com:80
- TCP(HTTP/1.1) mi.g####.qq.com:80
- TCP(HTTP/1.1) d.g####.qq.com:80
- TCP(HTTP/1.1) s####.tc.qq.com:80
- TCP(TLS/1.0) av1.x####.com:443
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) c####.x####.com:443
- and####.b####.qq.com
- av1.x####.com
- c####.x####.com
- c####.x####.com
- c.api.ni####.com
- c.g####.qq.com
- d.g####.qq.com
- i.t####.com
- imgc####.qq.com
- log.u####.com
- mi.g####.qq.com
- p####.ugd####.com
- plb####.u####.com
- qzones####.g####.cn
- s####.e.qq.com
- u####.u####.com
- c.g####.qq.com/gdt_mclick.fcg?viewid=####&jtype=####&i=####&os=####&asi=...
- d.g####.qq.com/fcg-bin/gdt_appdetail.fcg?ico=####&op_appid=####
- i.t####.com/a/3a661b85c570e430f99478b867740b4b9
- mi.g####.qq.com/gdt_mview.fcg?posw=####&spsa=####&posh=####&count=####&r...
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android02/images/tsa_ad_logo.png
- p####.tc.qq.com/qzone/biz/gdt/mod/android/AndroidAllInOne/proguard/his/r...
- s####.tc.qq.com/gdt/0/DAAD72KAKAAPAAApBbjS57B44zn5rU.jpg/0?ck=####
- s####.tc.qq.com/gdt/0/DAAfFBjAKAAPAABTBb3C9fAk07-M4m.jpg/0?ck=####
- s####.tc.qq.com/gdt/0/DAAfFBjAKAAPAABXBb3C7hCDl9WT6W.jpg/0?ck=####
- s####.tc.qq.com/gdt/0/DAAfFBjAKAAPAABXBb5AhsBoZFT6x5.jpg/0?ck=####
- s####.tc.qq.com/gdt/0/DAAfs1OAKAAPAABaBbmh5ACD5g-aXH.jpg/0?ck=####
- and####.b####.qq.com/rqd/async
- and####.b####.qq.com/rqd/async?aid=####
- s####.e.qq.com/activate
- s####.e.qq.com/click
- s####.e.qq.com/launch
- s####.e.qq.com/msg
- s####.e.qq.com/update
- /data/data/####/.imprint
- /data/data/####/02419932e6ae5573cd4e0a95a3969c88.temp
- /data/data/####/1004
- /data/data/####/1542013110349_2280
- /data/data/####/1542013110850_2280
- /data/data/####/1542013111361_2280
- /data/data/####/1542013111780_2280
- /data/data/####/1542013111975_2280
- /data/data/####/1542013114120_2427
- /data/data/####/1542013115495_2427
- /data/data/####/1542013115737_2427
- /data/data/####/1542013118183_2584
- /data/data/####/1542013120521_2584
- /data/data/####/1542013123173_2755
- /data/data/####/1542013125403_2755
- /data/data/####/1542013129180_2920
- /data/data/####/1542013132328_2920
- /data/data/####/1542013136759_3091
- /data/data/####/1542013139335_3091
- /data/data/####/1542013141877_3250
- /data/data/####/1542013145488_3250
- /data/data/####/1542013147552_3427
- /data/data/####/1542013150782_3427
- /data/data/####/1542013153168_3594
- /data/data/####/1542013157285_3594
- /data/data/####/1542013159924_3751
- /data/data/####/1542013164017_3751
- /data/data/####/1542013166328_3917
- /data/data/####/1542013172389_3917
- /data/data/####/1542013173262_3917
- /data/data/####/1542013173781_3917
- /data/data/####/1542013182149_3917
- /data/data/####/2280.yaqcookie
- /data/data/####/2427.yaqcookie
- /data/data/####/2584.yaqcookie
- /data/data/####/2755.yaqcookie
- /data/data/####/2920.yaqcookie
- /data/data/####/3091.yaqcookie
- /data/data/####/3250.yaqcookie
- /data/data/####/3427.yaqcookie
- /data/data/####/3594.yaqcookie
- /data/data/####/3751.yaqcookie
- /data/data/####/3917.yaqcookie
- /data/data/####/5ead7c1916e321af3ee0d7d6aa595238.temp
- /data/data/####/73d31aacb906928c683840ff55e2d410.temp
- /data/data/####/Archimedes_p1
- /data/data/####/Archimedes_p2
- /data/data/####/Archimedes_p3
- /data/data/####/Archimedes_p4
- /data/data/####/Archimedes_p5
- /data/data/####/BuglySdkInfos.xml
- /data/data/####/GDTSDK.db
- /data/data/####/GDTSDK.db-journal
- /data/data/####/MultiDex.lock
- /data/data/####/TDCloudSettingsConfig3C66CFC876494DB5986935FC23E5BE63.xml
- /data/data/####/TD_app_pefercen_profile.xml
- /data/data/####/TDpref_cloudcontrol1.xml
- /data/data/####/TDpref_longtime.xml
- /data/data/####/TDpref_longtime0.xml
- /data/data/####/TDpref_shorttime.xml
- /data/data/####/TDpref_shorttime0.xml
- /data/data/####/TalingDataConfig3C66CFC876494DB5986935FC23E5BE63.xml
- /data/data/####/a==7.5.3&&1.0.5.9_1542013111233_envelope.log
- /data/data/####/abf14a036e732c6684a5e73feaa0aa02.temp
- /data/data/####/bugly_db_-journal
- /data/data/####/bugly_db_legu-journal
- /data/data/####/com.tiantiankan.video_preferences.xml
- /data/data/####/crashrecord.xml
- /data/data/####/d8e67ec7102dca09281249c880d77711.temp
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyMDEzMTE3OTgw;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyMDEzMTEwMTMx;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyMDEzMTEzOTE3;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyMDEzMTI5MDE2;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyMDEzMTIyOTUz;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyMDEzMTM2NTMy;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyMDEzMTQ3MzI0;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyMDEzMTQxNzA4;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyMDEzMTU5NzQz;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyMDEzMTUyOTgy;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyMDEzMTY2MjM4;
- /data/data/####/dW1weF9zaGFyZV8xNTQyMDEzMTE1OTAy;
- /data/data/####/dW1weF9zaGFyZV8xNTQyMDEzMTE1OTc1;
- /data/data/####/devCloudSetting.cfg
- /data/data/####/devCloudSetting.sig
- /data/data/####/dexMethod.10168385.dat
- /data/data/####/dexMethod.56647468.dat
- /data/data/####/dso_deps
- /data/data/####/dso_lock
- /data/data/####/dso_manifest
- /data/data/####/dso_state
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/fa801c93c1e273f432166156c072421e.temp
- /data/data/####/gdt_config.cfg
- /data/data/####/gdt_plugin.dex (deleted)
- /data/data/####/gdt_plugin.jar
- /data/data/####/gdt_plugin.jar.sig
- /data/data/####/gdt_plugin.tmp
- /data/data/####/gdt_plugin.tmp.sig
- /data/data/####/gdt_stat.db
- /data/data/####/gdt_stat.db-journal
- /data/data/####/gdt_suid
- /data/data/####/i==1.2.0&&1.0.5.9_1542013110184_envelope.log
- /data/data/####/i==1.2.0&&1.0.5.9_1542013118051_envelope.log
- /data/data/####/info.xml
- /data/data/####/iv
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/libufix.so
- /data/data/####/libyaqbasic.10168385.so
- /data/data/####/libyaqbasic.56647468.so
- /data/data/####/libyaqpro.10168385.so
- /data/data/####/libyaqpro.56647468.so
- /data/data/####/local_crash_lock
- /data/data/####/mix.dex
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/salt
- /data/data/####/sdkCloudSetting.cfg
- /data/data/####/sdkCloudSetting.sig
- /data/data/####/security_info
- /data/data/####/share.db-journal
- /data/data/####/share_date.xml
- /data/data/####/tdid.xml
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_socialize.xml
- /data/data/####/update_lc
- /data/data/####/yaqsdkcookie
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.cca.dat
- /data/media/####/.nomedia
- /data/media/####/.tcookieid
- /data/media/####/.umm.dat
- /data/media/####/phone.cache
- /data/media/####/sysid.dat
- /data/media/####/testdream-1126137974.temp
- /data/media/####/testdream-1361146695.temp
- /data/media/####/testdream-1738476565.temp
- /data/media/####/testdream-192537232.temp
- /data/media/####/testdream-355634937.temp
- /data/media/####/testdream-77699818.temp
- /data/media/####/testdream1324493584.temp
- /data/media/####/testdream1731910848.temp
- /data/media/####/testdream1841551178.temp
- /data/media/####/testdream2004657041.temp
- /data/media/####/testdream798829103.temp
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- ls /sys/class/thermal
- Bugly
- libimagepipeline
- libnfix
- libshella-2.9.0.2
- libufix
- libyaqbasic.10168385
- libyaqbasic.56647468
- libyaqpro.10168385
- libyaqpro.56647468
- nfix
- ufix
- AES
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- AES
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding