Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- UDP(DNS) 1####.114.114.114:53
- TCP(HTTP/1.1) 2####.92.152.13:80
- TCP(HTTP/1.1) 1####.11.250.213:80
- TCP(HTTP/1.1) 58.2####.51.11:80
- TCP(HTTP/1.1) 1####.11.209.59:80
- TCP(HTTP/1.1) pi####.qq.com:80
- TCP(HTTP/1.1) 2####.243.212.25:80
- TCP(HTTP/1.1) 47.74.1####.121:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) t####.qq.com:443
- TCP(HTTP/1.1) 58.2####.6.43:80
- TCP(HTTP/1.1) 1####.254.116.117:80
- TCP(HTTP/1.1) 58.2####.51.19:80
- TCP(HTTP/1.1) 1####.185.144.40:80
- TCP(HTTP/1.1) reso####.msg.xi####.net:80
- TCP(HTTP/1.1) 2####.119.207.126:80
- TCP(TLS/1.0) regi####.xm####.xi####.com:443
- TCP(TLS/1.0) 47.2####.23.254:443
- TCP 4####.62.94.2:443
- TCP 47.74.1####.155:5222
- TCP t####.qq.com:8080
- TCP maa####.chinane####.com:6666
- TCP 1####.185.144.40:6666
- TCP t####.qq.com:14000
- and####.b####.qq.com
- maa####.chinane####.com
- pi####.qq.com
- regi####.xm####.xi####.com
- reso####.msg.xi####.net
- t####.qq.com
- reso####.msg.xi####.net/gslb/?ver=####&type=####&conpt=####&uuid=####&li...
- and####.b####.qq.com/rqd/async
- pi####.qq.com/mstat/report/?index=####
- t####.qq.com:443/203.205.211.75:443/
- /data/data/####/-1120630569-225863295
- /data/data/####/-5605657971044170427
- /data/data/####/-lcGop2GYiIqljjmF2QDyAhTero.-63304794.tmp
- /data/data/####/.com.tuan800.tao800;pushservice.xg.stat..xml
- /data/data/####/.tpns.service.xml.xml
- /data/data/####/.tpns.settings.xml.xml
- /data/data/####/.tpush_mta.xml
- /data/data/####/0a231bd8575dcf72.txt
- /data/data/####/0zefTeOB2rdJ5T_ZnoJj2WssIlA.-1638949948.tmp
- /data/data/####/1634632487-1683221978
- /data/data/####/1d77ea041509fe06.lock
- /data/data/####/21c22f492aba3de8.lock
- /data/data/####/25-7c24eKiWPsd_SK7yEoVaYB1Q.829391744.tmp
- /data/data/####/2PbWJ3WmvsmVaPnLhkVRoSZ3tgc.-1672336437.tmp
- /data/data/####/4601248761631842734
- /data/data/####/5iFhtAk4_3ud6HYtRUmQgdUOhb8.1417528646.tmp
- /data/data/####/8524030111125605478
- /data/data/####/85dDu1ZpU5qSa8x9rFHo5HglaVg.-344590180.tmp
- /data/data/####/8ef9c457b3bbb403.lock
- /data/data/####/930a31b34bd52c08.lock
- /data/data/####/AToaYAYNZrw8Y8PupMZ8fyLl0Zw.738818771.tmp
- /data/data/####/AlibcLinkPartner.xml
- /data/data/####/Alvin2.xml
- /data/data/####/AzCG31BmN73FIQD4XMQEA5wvAQA.-1847028451.tmp
- /data/data/####/ContextData.xml
- /data/data/####/DXpWC2KU3dXPSjZnaR-YR__X8dQ.-7068713.tmp
- /data/data/####/EWwgEuEaDOS0WiiSjU91o9mccSE.950708237.tmp
- /data/data/####/Gifud8puMFt5wq-Yivx2sB4ft4k.365748262.tmp
- /data/data/####/JV5y4d-4AW1AaaI0NLlrrSDX3CA.-610098337.tmp
- /data/data/####/Kdl64QjnXK_v5mf6Q0C-vvn4SmI.-1045375733.tmp
- /data/data/####/Mrc-10V_1J4ytbQ9ez6JU4vzX7g.187981910.tmp
- /data/data/####/MultiDex.lock
- /data/data/####/N9y9MLtKu02GHNuWRyVD02jGZ_w.-411201579.tmp
- /data/data/####/PJp8vccAwkPasb073vezFv1tKX4.1891114843.tmp
- /data/data/####/QXphWMyerpFVVOojp7y0uBJL51I.-445388258.tmp
- /data/data/####/QppROp3H0QBmi9Ct-8nLtCIPRNg.1406244153.tmp
- /data/data/####/R0IUMIc3XAQkp91Qy66jQxUVUtM.-219509656.tmp
- /data/data/####/RSR3b47eRjivmhmNNCyTM2_9Ir0.1324628956.tmp
- /data/data/####/S8_99Cvpl-nT7VrxlBP_vshmjqU.708258175.tmp
- /data/data/####/SB3s2T0o2pyri1JKi9Z1NAc4FjI.-338087998.tmp
- /data/data/####/SGMANAGER_DATA2.tmp
- /data/data/####/U0ewzcs5RqYqDMSaX7VqRbnHP8g.-1984042982.tmp
- /data/data/####/UTCommon.xml
- /data/data/####/UXZVMZp9LBUMlHFXDMTvNV6U0S4.2072353956.tmp
- /data/data/####/VfQzJsy8T5K92Q9C8vLLA2Xtcd8.-1913658180.tmp
- /data/data/####/XMPushServiceConfig.xml
- /data/data/####/YlUF_xQ_oALzrn6MCp7wtPcJnCE.-488746280.tmp
- /data/data/####/YzdlvzSx5Nle0wwxymKJ6k11VBY.1957753823.tmp
- /data/data/####/aliTradeConfigSP.xml
- /data/data/####/ap.Lock
- /data/data/####/auth_sdk_device.xml
- /data/data/####/bQ0ARa749YBpzCYppvAJvgrcrN4.1403525522.tmp
- /data/data/####/bugly_db_legu-journal
- /data/data/####/com.tuan800.tao800.userCenter.xml
- /data/data/####/com.tuan800.tao800;pushservice
- /data/data/####/com.tuan800.tao800SWITCH_SP.xml
- /data/data/####/com.tuan800.tao800_homeheader.xml
- /data/data/####/com.tuan800.tao800_jump_to_h5_url.xml
- /data/data/####/com.tuan800.tao800_npi.xml
- /data/data/####/com.tuan800.tao800_order.xml
- /data/data/####/com.tuan800.tao800_pintuan.xml
- /data/data/####/com.tuan800.tao800_preferences.xml
- /data/data/####/com.tuan800.tao800_preferences.xml (deleted)
- /data/data/####/com.tuan800.tao800_preferences.xml.bak (deleted)
- /data/data/####/com.tuan800.tao800_sign.xml
- /data/data/####/com.tuan800.tao800_user_center.xml
- /data/data/####/com.tuan800.tao800collected_brand.xml
- /data/data/####/com.tuan800.tao800static_file_click_model.xml
- /data/data/####/com.tuan800.tao800static_file_exp.xml
- /data/data/####/com.tuan800.tao800static_file_mobilelog.xml
- /data/data/####/com.tuan800.tao800static_file_model.xml
- /data/data/####/com.tuan800.tao800static_file_outclick.xml
- /data/data/####/com.tuan800.tao800static_file_page.xml
- /data/data/####/com.tuan800.tao800static_file_pageclick.xml
- /data/data/####/com.tuan800.tao800static_file_setkey_value.xml
- /data/data/####/com.tuan800.tao800static_file_share.xml
- /data/data/####/com.tuan800.tao800static_file_static.xml
- /data/data/####/device_id.xml
- /data/data/####/dso_deps
- /data/data/####/dso_lock
- /data/data/####/dso_manifest
- /data/data/####/dso_state
- /data/data/####/dynamicamapfile.db
- /data/data/####/dynamicamapfile.db-journal
- /data/data/####/eA5dSUtoqRADvHLxoRM8LJPghQo.382658577.tmp
- /data/data/####/event_com.tuan800.tao800.log
- /data/data/####/f2fwMUfMGloS4vyTcgUZPP7UNxo.-1556400226.tmp
- /data/data/####/geofencing.db
- /data/data/####/geofencing.db-journal
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/izRqBtttfddNCExX_tMdYeukb4I.1158362312.tmp
- /data/data/####/libnfix.so
- /data/data/####/libsgmainso-5.1.81.so.tmp
- /data/data/####/libsgsecuritybodyso-5.1.25.so.tmp
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/lock.lock
- /data/data/####/lock.tmp
- /data/data/####/loctemp.so
- /data/data/####/mUujv4bXxw9DizZwLAxMfv-cpf0.-516716741.tmp
- /data/data/####/matosdk_preference.xml
- /data/data/####/mipush.xml
- /data/data/####/mipush_account.xml
- /data/data/####/mipush_extra.xml
- /data/data/####/mipush_region
- /data/data/####/mipush_region.lock
- /data/data/####/mix.dex
- /data/data/####/multidex.version.xml
- /data/data/####/nGK6LIrV9_IKLMb4brC3TCK1R7c.1319312254.tmp
- /data/data/####/nY-0HC40pP1aTnDAvEfGoZLt8IU.1245654175.tmp
- /data/data/####/native_record_lock
- /data/data/####/pQuwvQJxyD4b4Ev4aTJWCzvaauQ.-1243288929.tmp
- /data/data/####/pZ6Vr365Wrprpy4C4YsdqGrRhC0.203843635.tmp
- /data/data/####/ppa4JT3jZB1eZ52dd4E9tw7ziLA.-179479061.tmp
- /data/data/####/pref.xml
- /data/data/####/q79PYNBPJjQb8lxgLihsnA4Jmq8.1137111016.tmp
- /data/data/####/qlcVWKwu9fiCCqK0rAsNa1lO2YM.975144432.tmp
- /data/data/####/rdmA6KWVTz4Ck-o7moAMU-OAHOg.-1317716606.tmp
- /data/data/####/rxrtG9ZSkfI-awFK0_JxE9v_ndA.1646935846.tmp
- /data/data/####/security_info
- /data/data/####/sp.lock
- /data/data/####/sp_sophix.xml
- /data/data/####/tG_iJt-0jtxrZWa6HQxDD9ug15k.-231352254.tmp
- /data/data/####/tao800.db-journal
- /data/data/####/tao800.db-journal (deleted)
- /data/data/####/timestamp
- /data/data/####/tiny_data.data
- /data/data/####/tiny_data.lock
- /data/data/####/tpush.shareprefs.xml
- /data/data/####/ut.db
- /data/data/####/ut.db-journal
- /data/data/####/uzojjomrabCdqsKS0Hg1SY8klSQ.1873922296.tmp
- /data/data/####/vv1LVERvcfNhVbyKnGYFfqdWfqo.1359764641.tmp
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/webviewCookiesChromiumPrivate.db-journal
- /data/data/####/wspx
- /data/data/####/yyLPlFLcLtogwDugxib7PfMDC5U.983953316.tmp
- /data/data/####/z8c7FCB6XFPC7-ca5WoMksMymJw.-1965640117.tmp
- /data/data/####/zHTOOH9kmfHg2GdUeAsorGiMSOw.1366889553.tmp
- /data/media/####/.nomedia
- /data/media/####/1jr65m4qb6xv4redv1bmluj2c
- /data/media/####/1t6n8aaxesr0s494jniu1s8oi
- /data/media/####/1x4v67b3y2gs4501m0yawk0ul
- /data/media/####/42b3goe37jr22dz5cnjxlphhg
- /data/media/####/44sue9aleeoulk4i4uwm3rg3z
- /data/media/####/5gzmjcoqdnedwc3o1pyax1dky
- /data/media/####/636nz9dcje0zuytvdq16puq2n
- /data/media/####/6c709c11d2d46a7b
- /data/media/####/6rdvkzlpmeyl0zxyn39n8je0o
- /data/media/####/7i0ltkqanvjja7tqtrhbycndy
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/d6bzkjyt771vpmlpeoh94xk6
- /data/media/####/dd7893586a493dc3
- /data/media/####/hid.dat
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- sh <Package Folder>/lib/libxguardian.so <Package>,2100252513; 55222 203.205.128.130 [{ idx :0, ts :%d, et :2000, si :0, ui : <IMEI> , ky : Axg%lu , mid : 0 , ev :{ ov : 18 , sr : 600*752 , md : <System Property> , lg : en , sv : 3.12 , mf : unknown , apn : %s }}] 0 18
- Bugly
- com.maa
- libgifimage
- libimagepipeline
- libnfix
- libshella-2.9.0.2
- libufix
- nfix
- pl_droidsonroids_gif
- sgmainso-5.1
- sgsecuritybodyso-5.1
- sqlcipher
- tpnsSecurity
- ufix
- ut_c_api
- AES-CBC-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- AES-GCM-NoPadding
- DES-ECB-PKCS5Padding