Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) i####.haos####.net.####.cn:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) gm.mm####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) c.c####.com:80
- TCP(HTTP/1.1) pco####.ta####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8011
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8012
- TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) m.api.haos####.net:443
- TCP(TLS/1.0) 404da40####.bug####.com:443
- TCP(TLS/1.0) i####.haos####.net.####.cn:443
- TCP(TLS/1.0) res####.a####.com:443
- TCP(TLS/1.0) s####.tc.qq.com:443
- TCP(TLS/1.0) gl####.w.kunl####.####.com:443
- TCP(TLS/1.0) hm.b####.com:443
- TCP c####.g####.ig####.com:5225
- TCP sdk.o####.t####.####.com:5224
- 404da40####.bug####.com
- 7j####.c####.z0.####.com
- a####.b####.qq.com
- aexcep####.b####.qq.com
- amap####.cn-hang####.oss####.####.com
- and####.b####.qq.com
- c####.g####.ig####.com
- c####.mm####.com
- c-h####.g####.com
- c.c####.com
- hm.b####.com
- i####.haos####.net
- i####.haos####.net
- m.api.haos####.net
- pco####.c####.com
- plb####.u####.com
- r####.wx.qq.com
- res####.a####.com
- s13.c####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- u####.u####.com
- c.c####.com/core.php?web_id=####&t=####
- c.c####.com/z_stat.php?id=####
- gm.mm####.com/9.gif?abc=####&rnd=####
- i####.haos####.net.####.cn/ma0f028cca3ec92c8fbff2141bafcf3dfa.jpg
- i####.haos####.net.####.cn/ma324d4024d4f0a0c94fa69a5c62b81152.jpg?imageV...
- i####.haos####.net.####.cn/ma35fc3f9e9471c69cd50756454b1ed2e8.jpg
- i####.haos####.net.####.cn/ma3eb894ffb88c9eb85b1763ea958e3951.jpg?imageV...
- i####.haos####.net.####.cn/ma42ac9dd0375b812d1bddee16c9505cbc.jpg
- i####.haos####.net.####.cn/ma526922009b283c99854fb6e7a64e82d2.jpg
- i####.haos####.net.####.cn/ma55d0775b63b961c63fff40d3b1c9ada8.jpg
- i####.haos####.net.####.cn/ma576baed7f5b1b1ee5290a39c799101eb.jpg?imageV...
- i####.haos####.net.####.cn/ma5880e07f310cdce07d1eb5b99e935380.jpg?imageV...
- i####.haos####.net.####.cn/ma6921a675d86a685f029cbdb0c8df4d82.jpg?imageV...
- i####.haos####.net.####.cn/ma6a3a0d1fe93711597104f806769ba2d9.jpg?imageV...
- i####.haos####.net.####.cn/ma6f06aa448e010629d26a87d94b1a9b48.jpg?imageV...
- i####.haos####.net.####.cn/ma7da568a79872b5481b3652e896410201.jpg?imageV...
- i####.haos####.net.####.cn/ma8546fc68f8655ac67b6ae8958e15c1e2.jpg?imageV...
- i####.haos####.net.####.cn/ma88a7b73672484afc08e7c38efd8406ae.jpg?imageV...
- i####.haos####.net.####.cn/ma8a5295ef938d19c06f3dfbbe4347cd18.jpg
- i####.haos####.net.####.cn/ma9063229171ff9533a76e04cda27c9a57.jpg?imageV...
- i####.haos####.net.####.cn/ma9726edece81bfcaf12fd9c0658b85cf5.jpg?imageV...
- i####.haos####.net.####.cn/ma9d232915988ec0d45cd40535d4fce0d2.jpg?imageV...
- i####.haos####.net.####.cn/ma9fb8c8794ab2efa42d719c7fd5e596a5.jpg?imageV...
- i####.haos####.net.####.cn/maa1db58eebe7fc7ba985401bfa6cb2cf5.jpg?imageV...
- i####.haos####.net.####.cn/maa8996353585e48a45f037b13d4a0b2b0.jpg
- i####.haos####.net.####.cn/mab3a3b19f4d688b39d2577e348b8bfd81.jpg
- i####.haos####.net.####.cn/mac63563dadf58c5776b8f63383a861c67.jpg?imageV...
- i####.haos####.net.####.cn/mad4fceb74cd4443e5503794a7aeedeb18.jpg
- i####.haos####.net.####.cn/madfa520c61302197654b11596cbcbbf1d.jpg?imageV...
- i####.haos####.net.####.cn/maea0fa35aca1df199d3f6c6c524ecbf2c.jpg?imageV...
- i####.haos####.net.####.cn/maeb97e8b928186032e1b9e836e1755e54.jpg?imageV...
- i####.haos####.net.####.cn/maee39e37995156a155b4a4899f53f513d.jpg?imageV...
- i####.haos####.net.####.cn/maf35bd2843d0250eb7be289abb956b09a.jpg
- i####.haos####.net.####.cn/maf3726026ab899a3bbc9156f5ebf42e4a.jpg
- i####.haos####.net.####.cn/maf9aef430497d325bd3147736dc7a6867.jpg
- pco####.ta####.com/app.gif?&cna=####
- sh.wagbr####.aliyun####.com/sdkcoor/android/x86/libJni_wgs2gcj.so
- t####.c####.q####.####.com/config/hz-hzv3.conf
- t####.c####.q####.####.com/tdata_MkX219
- t####.c####.q####.####.com/tdata_iGj879
- aexcep####.b####.qq.com:8011/rqd/async
- aexcep####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.imprint
- /data/data/####/11124816157041.0
- /data/data/####/3BtTgvnUWv--JXHBw-96u72PRS0.-1610574399.tmp
- /data/data/####/3o9o4Ll8xLat7-t4wwzesQ9qR_w.-1931184033.tmp
- /data/data/####/6YdwZrksLg1nrBKafHSls3CWc-Y.-1103974978.tmp
- /data/data/####/8123020075603.0
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/CookiePrefsFile.xml
- /data/data/####/Cookies_Prefs.xml
- /data/data/####/SgfyYnwARNJK90QWg0D6sW2iwpo.1937351266.tmp
- /data/data/####/Ty0Ayh4fAjo_DsjI0anzT2LFZ94.554367395.tmp
- /data/data/####/a==7.5.0&&3.6.2_1542486152673_envelope.log
- /data/data/####/bugly_db_legu-journal
- /data/data/####/d32fc602490e6a45efa628c1249acad.0.tmp
- /data/data/####/d32fc602490e6a45efa628c1249acad.1.tmp
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MTU0OTYx;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MTU3Nzgz;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MTUwMjYy;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MTY0NDM5;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MTY2ODI1;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MTYyMTA1;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MTc3Mzkw;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MTczMTc3;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MTg1NjY5;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MTg4NjUz;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MTgyMjM5;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MTk1Mzc5;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MTk5Mzk0;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MTkyNTI3;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MjA0Mzc0;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MjA4MTU3;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQyNDg2MjAyMjQ5;
- /data/data/####/dafile.db
- /data/data/####/dafile.db-journal
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/dhR2MBZuLYAELeSLhVLudFK3s_o.496711184.tmp
- /data/data/####/dso_deps
- /data/data/####/dso_lock
- /data/data/####/dso_manifest
- /data/data/####/dso_state
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/fGAav7zNEQVuhXOcxWBieK1UURg.330476423.tmp
- /data/data/####/f_000001
- /data/data/####/getui_sp.xml
- /data/data/####/haoshiqiPreference.xml
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/i==1.2.0&&3.6.2_1542486150464_envelope.log
- /data/data/####/i==1.2.0&&3.6.2_1542486155068_envelope.log
- /data/data/####/i==1.2.0&&3.6.2_1542486173220_envelope.log
- /data/data/####/iT0bUPF7ZyMDkQstqv-7FtVCOWI.718851280.tmp
- /data/data/####/index
- /data/data/####/info.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/loctemp.so
- /data/data/####/log_report.db-journal
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/mix.dex
- /data/data/####/mtnU529rDaZ_doyCpW5AEN-vfVQ.16808053.tmp
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/org.piwik.sdk_70FCE53CD49EFF83C08C20E8401EB932....leted)
- /data/data/####/org.piwik.sdk_70FCE53CD49EFF83C08C20E8401EB932.xml
- /data/data/####/pref.xml
- /data/data/####/push.pid
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/sp_sophix.xml
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/webviewCookiesChromiumPrivate.db-journal
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.cca.dat
- /data/media/####/.nomedia
- /data/media/####/.umm.dat
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/alsn.db
- /data/media/####/alsn.db-journal
- /data/media/####/app.db
- /data/media/####/com.doweidu.android.haoshiqi.bin
- /data/media/####/com.doweidu.android.haoshiqi.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/error_2018-11-17_0.log
- /data/media/####/f5f5e2d80c4759b807d891448e02e4ca6c7df47f051f56....0.tmp
- /data/media/####/journal
- /data/media/####/plain_2018-11-17_0.log
- /data/media/####/sysid.dat
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- ls /sys/class/thermal
- Bugly
- Bugtags
- getuiext2
- libgifimage
- libimagepipeline
- libnfix
- libshella-2.9.0.2
- libufix
- nfix
- ufix
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding