Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.b####.qq.com:8011
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) a####.b####.qq.com:8012
- TCP(HTTP/1.1) c####.bs.g####.####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
- TCP(HTTP/1.1) nav.cn.ron####.com:80
- UDP(NTP) 0.a####.p####.####.org:123
- UDP(NTP) 1.cn.p####.####.org:123
- TCP(TLS/1.0) av1.x####.com:443
- TCP(TLS/1.0) c####.x####.com:443
- TCP(TLS/1.0) gd-s####.j####.cn:443
- TCP(TLS/1.0) s####.cn.ron####.com:443
- TCP(TLS/1.0) hotfix####.aliy####.com:443
- TCP(TLS/1.0) na61-####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) t####.j####.cn:443
- TCP(TLS/1.0) me.x####.com:443
- TCP(TLS/1.0) s####.j####.cn:443
- TCP(TLS/1.0) 2564####.la####.me:443
- UDP 63.1####.109.47:44463
- UDP 63.1####.109.47:44450
- UDP 63.1####.109.47:44460
- UDP 1####.168.105.1:137
- UDP 63.1####.109.47:44444
- TCP c####.g####.ig####.com:5225
- TCP 1####.198.21.224:7003
- UDP 63.1####.109.47:44453
- UDP 63.1####.109.47:44461
- UDP 63.1####.109.47:44481
- UDP 63.1####.109.47:44477
- UDP 63.1####.109.47:44452
- UDP 63.1####.109.47:44462
- UDP 63.1####.109.47:44480
- TCP sdk.o####.t####.####.com:5224
- UDP 63.1####.109.47:44455
- UDP 63.1####.109.47:44454
- UDP 63.1####.109.47:44464
- UDP 63.1####.109.47:44479
- UDP 63.1####.109.47:44465
- UDP 63.1####.109.47:44478
- UDP 63.1####.109.47:44466
- UDP 63.1####.109.47:44447
- UDP 63.1####.109.47:44467
- UDP 63.1####.109.47:44458
- UDP 63.1####.109.47:44468
- UDP 63.1####.109.47:44469
- UDP 63.1####.109.47:44459
- UDP 63.1####.109.47:44487
- UDP 63.1####.109.47:44476
- UDP 63.1####.109.47:44488
- UDP 63.1####.109.47:44475
- UDP 63.1####.109.47:44446
- UDP 63.1####.109.47:44474
- UDP s.j####.cn:19000
- UDP 63.1####.109.47:44457
- UDP 63.1####.109.47:44486
- UDP 63.1####.109.47:44473
- UDP 63.1####.109.47:44448
- UDP 63.1####.109.47:44456
- UDP 63.1####.109.47:44449
- UDP 63.1####.109.47:44484
- UDP 63.1####.109.47:44445
- UDP 63.1####.109.47:44471
- UDP 63.1####.109.47:44472
- UDP 63.1####.109.47:44485
- UDP 63.1####.109.47:44470
- TCP 1####.92.36.75:8619
- UDP 63.1####.109.47:44482
- UDP 63.1####.109.47:44451
- UDP 63.1####.109.47:44483
- 0.a####.p####.####.org
- 1.cn.p####.####.org
- 2564####.la####.me
- 7j####.c####.z0.####.com
- a####.b####.qq.com
- a####.man.aliy####.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- av1.x####.com
- c####.g####.ig####.com
- c####.x####.com
- c-h####.g####.com
- gd-s####.j####.cn
- hotfix####.aliy####.com
- i.t####.com
- jk.la####.me
- me.x####.com
- nav.cn.ron####.com
- plb####.u####.com
- s####.cn.ron####.com
- s####.j####.cn
- s.j####.cn
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- sec.u####.com
- t####.j####.cn
- trac####.m####.p####.com
- u####.u####.com
- t####.c####.q####.####.com/tdata_bca864
- t####.c####.q####.####.com/tdata_fyR930
- ti####.c####.l####.####.com/config/hz-hzv3.conf
- a####.b####.qq.com:8011/rqd/async
- a####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- c####.bs.g####.####.com/trackingdata/checkapptracking.htm
- c-h####.g####.com/api.php?format=####&t=####
- nav.cn.ron####.com/navipush.json
- sdk.o####.p####.####.com/api.php?format=####&t=####
- sh.wagbr####.aliyun####.com/man/api?ak=####&s=####
- /data/anr/traces.txt
- /data/data/####/-1760617689947167793
- /data/data/####/.imprint
- /data/data/####/1543773001978_2284
- /data/data/####/1543773002051_2284
- /data/data/####/1543773007691_2358
- /data/data/####/1543773007742_2459
- /data/data/####/1543773007773_2394
- /data/data/####/1543773007789_2416
- /data/data/####/1543773010664_2284
- /data/data/####/1543773019096_2284
- /data/data/####/1543773020040_2564
- /data/data/####/1543773020886_2822
- /data/data/####/1543773023088_3054
- /data/data/####/1543773025330_3169
- /data/data/####/1543773026473_3054
- /data/data/####/1543773028304_3352
- /data/data/####/1543773028319_3352
- /data/data/####/1543773029900_3468
- /data/data/####/1543773030813_3515
- /data/data/####/1543773030857_3515
- /data/data/####/1543773036465_3779
- /data/data/####/1543773038754_3779
- /data/data/####/1543773040493_3893
- /data/data/####/1543773040620_3971
- /data/data/####/1543773043114_3971
- /data/data/####/1543773050897_4222
- /data/data/####/1543773051190_4222
- /data/data/####/1543773053336_4338
- /data/data/####/1543773069400_4589
- /data/data/####/1543773069657_4589
- /data/data/####/1543773072925_4716
- /data/data/####/1d90f9e8-4d5d-40c7-9f0a-468409f67838
- /data/data/####/2fe25dea-c530-4c2c-bb20-de8ff278d0f7
- /data/data/####/47f2ceda-48d3-4df4-bef3-066c4c42e8b5
- /data/data/####/4f686b27-2832-4fe4-bdf8-a8cd72b2af84
- /data/data/####/7921bbd9-328a-4cb6-90a9-ab0a64db5f3a
- /data/data/####/Alvin2.xml
- /data/data/####/COUNTLY_STORE.xml
- /data/data/####/ContextData.xml
- /data/data/####/FwLog.xml
- /data/data/####/JPushSA_Config.xml
- /data/data/####/L3VtcHhfZXJyb3JzXzE1NDM3NzMwMjc4NzA=;
- /data/data/####/L3VtcHhfZXJyb3JzXzE1NDM3NzMwMjk2NTI=;
- /data/data/####/L3VtcHhfZXJyb3JzXzE1NDM3NzMwMzY1NjY=;
- /data/data/####/L3VtcHhfZXJyb3JzXzE1NDM3NzMwNDA1MTY=;
- /data/data/####/L3VtcHhfZXJyb3JzXzE1NDM3NzMwNDA5NDU=;
- /data/data/####/L3VtcHhfZXJyb3JzXzE1NDM3NzMwNTA4NDY=;
- /data/data/####/L3VtcHhfZXJyb3JzXzE1NDM3NzMwNTMzOTA=;
- /data/data/####/L3VtcHhfZXJyb3JzXzE1NDM3NzMwNzMwMTc=;
- /data/data/####/MultiDex.lock
- /data/data/####/RongPush.xml
- /data/data/####/Statistics.xml
- /data/data/####/TDCloudSettingsConfig00C730F690C3863E25A5B5C7693F5AB9.xml
- /data/data/####/TD_app_pefercen_profile.xml
- /data/data/####/TDpref_longtime.xml
- /data/data/####/TDpref_longtime.xml (deleted)
- /data/data/####/TDpref_longtime0.xml
- /data/data/####/TDpref_shorttime.xml
- /data/data/####/TDpref_shorttime.xml (deleted)
- /data/data/####/TDpref_shorttime0.xml
- /data/data/####/TalingDataConfig00C730F690C3863E25A5B5C7693F5AB9.xml
- /data/data/####/a==7.4.0&&3.4.14_1543773032111_envelope.log
- /data/data/####/appPackageNames_v2
- /data/data/####/ba4cc07f-0e66-4715-95b4-f355d6d6f861
- /data/data/####/be7b7b05-7ca6-433e-b4b8-e26585aa3a9b
- /data/data/####/bugly_db_legu-journal
- /data/data/####/cn.jpush.android.user.profile.xml
- /data/data/####/cn.jpush.android.user.profile.xml (deleted)
- /data/data/####/cn.jpush.preferences.v2.rid.xml
- /data/data/####/cn.jpush.preferences.v2.xml
- /data/data/####/cn.jpush.preferences.v2.xml (deleted)
- /data/data/####/com.jiujiuyun.laijie_preferences.xml
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQzNzczMDE5MTY4;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQzNzczMDI0NDY2;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQzNzczMDI3OTg1;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQzNzczMDM2NzUy;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQzNzczMDMxODg1;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQzNzczMDQxMTA3;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQzNzczMDU4MDcz;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQzNzczMDUxMTU1;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQzNzczMDY5NjY1;
- /data/data/####/download_file.db-journal
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/i==1.2.0&&3.4.14_1543773019908_envelope.log
- /data/data/####/i==1.2.0&&3.4.14_1543773028291_envelope.log
- /data/data/####/i==1.2.0&&3.4.14_1543773043021_envelope.log
- /data/data/####/info.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/jiujiuyun_creativelocker.pref.xml
- /data/data/####/jiujiuyun_net_db-journal
- /data/data/####/jiujiuyun_user.xml
- /data/data/####/journal.tmp
- /data/data/####/jpush_device_info.xml
- /data/data/####/jpush_stat_cache.json
- /data/data/####/jpush_stat_cache_history.json
- /data/data/####/jpush_uncaughtexception_file
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/locale.config.xml
- /data/data/####/mix.dex
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/polling_conf.xml
- /data/data/####/ppdai_loan.xml
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/sp_sophix.xml
- /data/data/####/tdata_bca864
- /data/data/####/tdata_bca864.jar
- /data/data/####/tdata_fyR930
- /data/data/####/tdata_fyR930.jar
- /data/data/####/tdid.xml
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umexecption.json
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.cca.dat
- /data/media/####/.nomedia
- /data/media/####/.push_deviceid
- /data/media/####/.tcookieid
- /data/media/####/.umm.dat
- /data/media/####/255633e1-f975-458f-b4f0-e0c2f879ad1f
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.jiujiuyun.laijie.bin
- /data/media/####/com.jiujiuyun.laijie.db
- /data/media/####/rong_sdk.log
- /data/media/####/rong_sdk_debug.log
- /data/media/####/sysid.dat
- /data/media/####/tdata_bca864
- /data/media/####/tdata_fyR930
- /data/media/####/test.log (deleted)
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.push.GTPushService 25037 300 0
- chmod 700 /data/user/0/<Package>/tx_shell/libnfix.so
- chmod 700 /data/user/0/<Package>/tx_shell/libshella-2.9.0.2.so
- chmod 700 /data/user/0/<Package>/tx_shell/libufix.so
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- ls /sys/class/thermal
- ps
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.push.GTPushService 25037 300 0
- Bugly
- RongIMLib
- getuiext3
- jcore125
- jcrypto
- libnfix
- libshella-2.9.0.2
- libufix
- nfix
- securityenv
- ufix
- umeng_error_catch
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS7Padding
- AES-GCM-NoPadding
- DES-CBC-PKCS5Padding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-NoPadding
- AES-GCM-NoPadding
- DES-CBC-PKCS5Padding
- PBEWithSHAAnd3-KeyTripleDES-CBC