Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) pub-####.qin####.com:80
- TCP(HTTP/1.1) p.s.3####.cn:80
- TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) bjdt####.b####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) s####.s.360.cn:80
- TCP(HTTP/1.1) sdk.l####.360.cn:80
- TCP(TLS/1.0) c####.b####.com:443
- TCP(TLS/1.0) p1.ssl.cdn.####.com:443
- TCP(TLS/1.0) res####.a####.com:443
- TCP(TLS/1.0) api.app.b####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5224
- 7j####.c####.z0.####.com
- amap####.cn-hang####.oss####.####.com
- and####.b####.qq.com
- api.app.b####.com
- api.b####.com
- bjdt####.b####.com
- c####.b####.com
- c####.g####.ig####.com
- c-h####.g####.com
- p.s.3####.cn
- p0.ssl.cdn.####.com
- p1.ssl.cdn.####.com
- p2.ssl.cdn.####.com
- p3.ssl.cdn.####.com
- p4.ssl.cdn.####.com
- pub-####.qin####.com
- res####.a####.com
- s####.s.360.cn
- sdk.c####.ig####.com
- sdk.l####.360.cn
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- bjdt####.b####.com/
- pub-####.qin####.com/tdata_EDT356
- s####.s.360.cn/ak/a0a080f42e6f13b3a2df133f073095dd.html?m2=####
- sdk.l####.360.cn/codec?model=####&pid=####&mid=####&ver=####&bid=####&sd...
- sh.wagbr####.aliyun####.com/sdkcoor/android/x86/libJni_wgs2gcj.so
- t####.c####.q####.####.com/tdata_YYn966
- t####.c####.q####.####.com/tdata_eOt091
- ti####.c####.l####.####.com/config/hz-hzv3.conf
- and####.b####.qq.com/rqd/async
- c-h####.g####.com/api.php?format=####&t=####
- p.s.3####.cn/pstat/plog.php
- p.s.3####.cn/update/update.php?p=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/033c81743f72d7ff2c283ab91ed0ba58
- /data/data/####/057af21fc6ff11920296d6ddea13e5f5
- /data/data/####/0641ae6dd6ce02085aa43f5150bca0727266f69e7d877e6....0.tmp
- /data/data/####/08fc44f9d0d2527c128a8c9fd3097539
- /data/data/####/094359e08322985bfb917c17bf8da3a8
- /data/data/####/0bb94f4be1440efe459a56deefdc69f3380b7b12f003bc0....0.tmp
- /data/data/####/13ddb2c7d7d705db6ae680511560e5e7b995700a36616c5....0.tmp
- /data/data/####/168302ef6bb210902d5461fe0d693b074dd1914f82ed9e3....0.tmp
- /data/data/####/17662b6a04542eb45c369fa303ee731f
- /data/data/####/1c796f2cb756556995585a8e6eee17e1
- /data/data/####/21af13e2e997bb19f6052c1aa8e8bef4
- /data/data/####/22a37095fdd68ae6017ced84349c51c9
- /data/data/####/256cbab5c114115bb9d47116ec30231e
- /data/data/####/25d8cef7d6fcd0a48508a1441a6bf1629aa3c1a6585fc7f....0.tmp
- /data/data/####/286c26844a28fd038a51b8fcfaf84368e66a13b8140b45e....0.tmp
- /data/data/####/32127777200270.0
- /data/data/####/32abeba458528fb84e89a6ab060a70c49ed4c6bbcbca6e7....0.tmp
- /data/data/####/34512d8d08ae7d2a856dcb9ac550cf2bcc42fba36fb2a68....0.tmp
- /data/data/####/36aca1726afaada1c7ecd8ddff0d84f1
- /data/data/####/4086b55457dd62e46756f68c8709dd741441ce2e9a6c4cb....0.tmp
- /data/data/####/4c66f0ffe76cad988d5fa973585061e3d9f1748c057940b....0.tmp
- /data/data/####/4e4215dae4bb1de8c549dda4f54f3c4f
- /data/data/####/51fe55023a18dc625cc847120bb10dd8
- /data/data/####/5269955fbef160e95bc530ce79d2bf37c30cbe5bb2d8d24....0.tmp
- /data/data/####/5551ca78f8fdbd1583292195ebdf98ec
- /data/data/####/5897301611491.0
- /data/data/####/5cf27de1b8370c9933608f72ee38e922d1cb313b9999a9a....0.tmp
- /data/data/####/703c5f6eb5d9a416c362bd0676750bd9609e69e0f85f480....0.tmp
- /data/data/####/71a9a01ec74668626b8e6e8769c439b9
- /data/data/####/74589eb5f0a22223d4eb61e7dd8aff3ea6fbd1230e77579....0.tmp
- /data/data/####/76cd84ee7b57e86ccd1ec0dcc1b556170fab8204d5dd9a9....0.tmp
- /data/data/####/78e01efea1cbfc447670f876497c3748318213abfc13b78....0.tmp
- /data/data/####/7a38cf4d20dc838960b6a7ae2e19cf63
- /data/data/####/7c5eec01a66b622f57db3c66c4108b54
- /data/data/####/7f31faaa49f7e67a988e4523ebdce878
- /data/data/####/8528b3cbfcefd6a3efa36c5b60d0772642516a98c16b94e....0.tmp
- /data/data/####/858161fc03dbedaa82e03996be7c554c
- /data/data/####/8db95807559d94ae4c3a6f739c66004cdb06b784f7741cb....0.tmp
- /data/data/####/912084d762b58e9cfc9207de0db51c0c
- /data/data/####/953036e7e492d1c98f2bd1d48d141dda6332a0e499a2f0b....0.tmp
- /data/data/####/9772e9405e5cd6b537c7eb3a2761b0a6f85d429186871dc....0.tmp
- /data/data/####/9834526ce381259cd62254b172eb56ec
- /data/data/####/QHA_JSON_PERSISTER_a0a080f42e6f13b3a2df133f073095dd
- /data/data/####/QH_DeviceSDK.xml
- /data/data/####/QH_SDK_M2.xml
- /data/data/####/QH_SDK_UserDataa0a080f42e6f13b3a2df133f073095dd.xml
- /data/data/####/QH_SDK_sessionIDa0a080f42e6f13b3a2df133f073095dd.xml
- /data/data/####/RefactorNewsItemDbModel.realm
- /data/data/####/RefactorNewsItemDbModel.realm.lock
- /data/data/####/WalletPlugin.apk
- /data/data/####/Y29tLmJ0aW1lLmJqdGltZQ==.tick.lock
- /data/data/####/a106685e2d5797dd609595136a120309
- /data/data/####/access_control.control.mx
- /data/data/####/access_control.write.mx
- /data/data/####/ace4723c1716627032820d86843e99036f53a10767beb7e....0.tmp
- /data/data/####/ad2ba1b68476d87c3461b41ece116ecc954cdc777cae6df....0.tmp
- /data/data/####/b2cd0ad13713b79afb1d9681e696ed9ad8583c1150ecb61....0.tmp
- /data/data/####/b76d77858b0b6a8c18601c2bba7bb0b6
- /data/data/####/bc7e9feb374eba5da99125ae1ef823de
- /data/data/####/btime_multi_theme.xml
- /data/data/####/btime_netmode_debug.xml
- /data/data/####/bugly_db_legu-journal
- /data/data/####/c0fc733be90a027acdcfe55ebb707331
- /data/data/####/c662d4b76502977c9b3c1ac45f56cdf9
- /data/data/####/c99c872c0b088745c8861d26f9d5efb6
- /data/data/####/ca7da49008de518795f575efae7373a9cec23908d8a6d82....0.tmp
- /data/data/####/d06b43763ad4f64f586889207fb6fecf
- /data/data/####/d75db197a686879e9def4f5912ab40fb
- /data/data/####/d82aeb6e5798940b2d9e96f85711db89
- /data/data/####/d90ea2f861e2ae868eaa4c434a4267e0
- /data/data/####/dafile.db
- /data/data/####/dafile.db-journal
- /data/data/####/df0899e3a3e9f06e5e6a1ac25dc37089
- /data/data/####/f839fe91f532b3e7a58c42709df25855
- /data/data/####/fa2e76a41ecf13bf4e6c72782126d8ed
- /data/data/####/fa4e7554e04227cc9232df786d6c29336ac2e097021231e....0.tmp
- /data/data/####/fc37b6888e09825019d9807b87c3e3e7
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/loctemp.so
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/mix.dex
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/pref.xml
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/tdata_YYn966
- /data/data/####/tdata_YYn966.jar
- /data/data/####/tdata_eOt091
- /data/data/####/tdata_eOt091.jar
- /data/data/####/tray.db-journal
- /data/data/####/webview.db-journal
- /data/media/####/.deviceId
- /data/media/####/.iddata
- /data/media/####/AjW
- /data/media/####/AjW (deleted)
- /data/media/####/Y29tLmJ0aW1lLmJqdGltZQ==
- /data/media/####/Y29tLmJ0aW1lLmJqdGltZQ== (deleted)
- /data/media/####/a0a080f42e6f13b3a2df133f073095dd
- /data/media/####/alsn.db
- /data/media/####/alsn.db-journal
- /data/media/####/app.db
- /data/media/####/applog.txt
- /data/media/####/com.btime.bjtime.bin
- /data/media/####/com.btime.bjtime.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/data.lock
- /data/media/####/logs.txt
- /data/media/####/report.lock
- /data/media/####/tdata_YYn966
- /data/media/####/tdata_eOt091
- /data/media/####/test.log
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.btime.common.push.BTPushService 24575 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- mount
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/com.btime.common.push.BTPushService 24575 300 0
- Bugly
- getuiext2
- libnfix
- libshella-2.9.0.2
- libufix
- nfix
- openh264
- publisher
- realm-jni
- transcore
- ufix
- viewer
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- desede-ECB-PKCS5Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding