Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) pub-####.qin####.com:80
- TCP(HTTP/1.1) a####.b####.qq.com:8012
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) l####.tbs.qq.com:80
- TCP(HTTP/1.1) a####.exc.mob.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) a####.b####.qq.com:8011
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) www.51ar####.com:80
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP c####.g####.ig####.com:5225
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.b####.qq.com
- a####.exc.mob.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- c####.g####.ig####.com
- c-h####.g####.com
- l####.tbs.qq.com
- plb####.u####.com
- pub-####.qin####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- u####.u####.com
- www.51ar####.com
- pub-####.qin####.com/tdata_EDT356
- t####.c####.q####.####.com/tdata_bca864
- t####.c####.q####.####.com/tdata_fyR930
- www.51ar####.com/ArtChina/p/image/loading.gif
- www.51ar####.com/ArtChina/p/js/Const.js
- www.51ar####.com/ArtChina/p/js/jweixin-1.3.2.js
- www.51ar####.com/ArtChina/p/js/page.js
- www.51ar####.com/ArtChina/p/js/tool.js
- www.51ar####.com/ArtChina/p/js/tool.js?ttime=####
- www.51ar####.com/ArtChina/p/main/home.html?userinfo=####&appver=####
- www.51ar####.com/ArtChina/p/resources/css/iconfont.css
- www.51ar####.com/ArtChina/p/resources/css/iconfont.svg?t=####
- www.51ar####.com/ArtChina/p/resources/css/iconfont.ttf?t=####
- www.51ar####.com/ArtChina/p/resources/css/mui.min.css
- www.51ar####.com/ArtChina/p/resources/css/style.css
- www.51ar####.com/ArtChina/p/resources/fonts/mui.ttf
- www.51ar####.com/ArtChina/p/resources/images/index/la-back.png
- www.51ar####.com/ArtChina/p/resources/images/index/la-circle.png
- www.51ar####.com/ArtChina/p/resources/images/la-loginbg.jpg
- www.51ar####.com/ArtChina/p/resources/images/la-logo.png
- www.51ar####.com/ArtChina/p/resources/images/la-white.png
- www.51ar####.com/ArtChina/p/resources/js/custom.js
- www.51ar####.com/ArtChina/p/resources/js/iconfont.js
- www.51ar####.com/ArtChina/p/resources/js/iscroll.js
- www.51ar####.com/ArtChina/p/resources/js/jquery-1.7.2.min.js
- www.51ar####.com/ArtChina/p/resources/js/mui.min.js
- www.51ar####.com/ArtChina/p/resources/js/navbarscroll.js
- www.51ar####.com/ArtChina/p/u/login.html?ttime=####
- www.51ar####.com/ArtChina/p/uart/myzxxq.html?i=####&ttime=####&appver=####
- www.51ar####.com/ArtChina/ueditor/jsp/upload/image/20181130/154356717902...
- www.51ar####.com/ArtChina/ueditor/jsp/upload/image/20181130/154356726338...
- www.51ar####.com/ArtChina/ueditor/jsp/upload/image/20181130/154356727930...
- www.51ar####.com/ArtChina/ueditor/jsp/upload/image/20181130/154356729145...
- www.51ar####.com/ArtChina/ueditor/jsp/upload/image/20181130/154356730454...
- www.51ar####.com/ArtChina/ueditor/jsp/upload/image/20181130/154356731786...
- www.51ar####.com/ArtChina/ueditor/jsp/upload/image/20181130/154356736133...
- www.51ar####.com/i/slt/upload/file_ls/20181029/18102915164414910061.jpeg
- www.51ar####.com/i/slt/upload/file_ls/20181102/18110201224454610047.jpeg
- www.51ar####.com/i/slt/upload/file_ls/20181104/18110411510328110170.jpg
- www.51ar####.com/i/slt/upload/file_ls/20181105/18110521594721910047.jpeg
- www.51ar####.com/i/slt/upload/file_ls/20181107/18110715113873710103.jpg
- www.51ar####.com/i/slt/upload/file_ls/20181107/18110722132316210419.jpg
- www.51ar####.com/i/slt/upload/file_ls/20181108/18110817482972210613.jpeg
- www.51ar####.com/i/slt/upload/file_ls/20181108/18110822444148710044.jpg
- www.51ar####.com/i/slt/upload/file_ls/20181109/18110914100743610085.jpeg
- www.51ar####.com/i/slt/upload/file_ls/20181110/18111021250568510679.jpeg
- www.51ar####.com/i/slt/upload/file_ls/20181114/18111410422217810331.jpg
- www.51ar####.com/i/slt/upload/file_ls/20181116/18111616554752610645.jpeg
- www.51ar####.com/i/slt/upload/file_ls/20181118/18111819583868711675.jpg
- www.51ar####.com/i/slt/upload/file_ls/20181119/18111915323012612152.jpg
- www.51ar####.com/i/slt/upload/file_ls/20181126/18112616245974810300.jpg
- www.51ar####.com/i/slt/upload/file_ls/20181204/18120420184581710679.jpg
- www.51ar####.com/i/slt/upload/file_ls/20181204/18120421114396111081.jpeg
- www.51ar####.com/i/slt/upload/file_ls/20181205/18120510574031910116.jpg
- www.51ar####.com/i/slt/upload/file_ls/20181205/18120512103557710219.jpg
- www.51ar####.com/i/slt/upload/file_ls/20181205/18120514260552410295.jpg
- www.51ar####.com/i/slt/upload/file_ls/20181205/18120517045477010428.JPG
- www.51ar####.com/i/slt/upload/file_ls/20181205/18120517510745410461.jpeg
- www.51ar####.com/i/slt/upload/file_ls/20181205/18120519440601410549.jpeg
- www.51ar####.com/i/slt/upload/file_ls/20181205/18120520581562810617.jpeg
- www.51ar####.com/i/slt/upload/file_ls/20181205/18120523322774810758.jpg
- www.51ar####.com/i/slt/upload/user/100667/192fa8fd-b0b2-4065-a8dc-54b8c6...
- www.51ar####.com/i/slt/upload/user/102267/e8a6e89e-3120-427d-af6a-c5bd35...
- www.51ar####.com/i/slt/upload/user/102769/a66c6915-e0a5-45a7-8bf7-7a8b7c...
- www.51ar####.com/i/slt/upload/user/104573/c542060d-5bf6-489e-b551-2154e9...
- www.51ar####.com/i/slt/upload/user/104806/9cf186f7-d03c-40e4-8d1a-a8ac23...
- www.51ar####.com/i/slt/upload/user/105073/636be5ba-c709-47d3-ab56-50b7ad...
- www.51ar####.com/i/slt/upload/user/1129/3af4e8ec-a8df-446a-a2fc-0ba22973...
- www.51ar####.com/i/slt/upload/user/788/8447255d-83e8-447a-938e-be252b176...
- www.51ar####.com/i/yt/upload/file_ls/20181106/18110610540426310029.jpeg
- www.51ar####.com/i/yt/upload/file_ls/20181112/18111210594305510024.jpg
- www.51ar####.com/i/yt/upload/file_ls/20181112/18111211023577410029.png
- www.51ar####.com/i/yt/upload/file_ls/20181113/18111311212540210352.png
- www.51ar####.com/i/yt/upload/file_ls/20181116/18111617035971810657.png
- www.51ar####.com/i/yt/upload/file_ls/20181119/18111914521191912127.png
- www.51ar####.com/i/yt/upload/file_ls/20181126/18112619483730210589.jpg
- www.51ar####.com/i/yt/upload/file_ls/20181130/18113000312274010029.png
- www.51ar####.com/i/yt/upload/file_ls/20181130/18113012124155110349.png
- www.51ar####.com/i/yt/upload/file_ls/20181130/18113012164566610356.png
- www.51ar####.com/i/yt/upload/file_ls/20181130/18113016383398010907.jpg
- www.51ar####.com/i/yt/upload/file_ls/20181130/18113016453842710928.jpg
- www.51ar####.com/i/yt/upload/file_ls/20181205/18120510201917610098.jpg
- www.51ar####.com/i/yt/upload/file_ls/20181205/18120510230182110100.jpg
- www.51ar####.com/i/yt/upload/file_ls/20181205/18120521561471210734.jpg
- www.51ar####.com/i/yt/upload/file_ls/20181205/18120521580453810736.jpg
- a####.b####.qq.com:8011/rqd/async
- a####.b####.qq.com:8012/rqd/async
- a####.exc.mob.com/errconf
- and####.b####.qq.com/rqd/async
- c-h####.g####.com/api.php?format=####&t=####
- l####.tbs.qq.com/ajax?c=####&k=####
- l####.tbs.qq.com/ajax?c=####&v=####&k=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- www.51ar####.com/ArtChina/s/ajaxData/initClientwid
- www.51ar####.com/ArtChina/s/ajaxData/loadAdvertisement
- www.51ar####.com/ArtChina/s/ajaxData/loadAuctionList
- www.51ar####.com/ArtChina/s/ajaxData/loadart_list
- www.51ar####.com/ArtChina/s/ajaxData/loadartistinfo
- www.51ar####.com/ArtChina/s/ajaxData/loadgdnews
- www.51ar####.com/ArtChina/s/ajaxData/loadnews_input
- www.51ar####.com/ArtChina/s/ajaxData/loadnews_list?ttime=####
- www.51ar####.com/ArtChina/s/ajaxData/loaduser?ttime=####
- /data/data/####/.duid
- /data/data/####/.imprint
- /data/data/####/.lock
- /data/data/####/.vpl_lock
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/ThrowalbeLog.db-journal
- /data/data/####/UM_PROBE_DATA.xml
- /data/data/####/WebViewSettings.xml
- /data/data/####/a==7.5.4&&2.0.3_1544037122596_envelope.log
- /data/data/####/app.xml
- /data/data/####/b56a4669e9b6
- /data/data/####/bugly_db_legu-journal
- /data/data/####/core_info
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ0MDM3MTIxNDQx;
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/debug.conf
- /data/data/####/domain_1
- /data/data/####/download_upload
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/f_00000b
- /data/data/####/f_00000c
- /data/data/####/f_00000d
- /data/data/####/f_00000e
- /data/data/####/f_00000f
- /data/data/####/f_000010
- /data/data/####/f_000011
- /data/data/####/f_000012
- /data/data/####/f_000013
- /data/data/####/f_000014
- /data/data/####/f_000015
- /data/data/####/f_000016
- /data/data/####/f_000017
- /data/data/####/f_000018
- /data/data/####/f_000019
- /data/data/####/f_00001a
- /data/data/####/f_00001b
- /data/data/####/f_00001c
- /data/data/####/f_00001d
- /data/data/####/f_00001e
- /data/data/####/f_00001f
- /data/data/####/f_000020
- /data/data/####/f_000021
- /data/data/####/f_000022
- /data/data/####/f_000023
- /data/data/####/f_000024
- /data/data/####/f_000025
- /data/data/####/f_000026
- /data/data/####/f_000027
- /data/data/####/f_000028
- /data/data/####/f_000029
- /data/data/####/f_00002a
- /data/data/####/f_00002b
- /data/data/####/f_00002c
- /data/data/####/f_00002d
- /data/data/####/f_00002e
- /data/data/####/f_00002f
- /data/data/####/f_000030
- /data/data/####/f_000031
- /data/data/####/f_000032
- /data/data/####/f_000033
- /data/data/####/f_000034
- /data/data/####/f_000035
- /data/data/####/f_000036
- /data/data/####/f_000037
- /data/data/####/f_000038
- /data/data/####/f_000039
- /data/data/####/f_00003a
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/i==1.2.0&&2.0.3_1544037121602_envelope.log
- /data/data/####/index
- /data/data/####/info.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.1.0.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/mix.dex
- /data/data/####/mob_commons_1
- /data/data/####/mob_sdk_exception_1
- /data/data/####/native_record_lock
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/tbs_download_config.xml
- /data/data/####/tbs_download_stat.xml
- /data/data/####/tbs_pv_config
- /data/data/####/tbscoreinstall.txt
- /data/data/####/tbslock.txt
- /data/data/####/tdata_bca864
- /data/data/####/tdata_bca864.jar
- /data/data/####/tdata_fyR930
- /data/data/####/tdata_fyR930.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_general_config.xml.bak
- /data/data/####/umeng_general_config.xml.bak (deleted)
- /data/data/####/umeng_it.cache
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.artc_lock
- /data/media/####/.cca.dat
- /data/media/####/.di
- /data/media/####/.dic_lock
- /data/media/####/.duid
- /data/media/####/.globalLock
- /data/media/####/.im_lock
- /data/media/####/.lesd_lock
- /data/media/####/.mn_-1464060969
- /data/media/####/.pkg_lock
- /data/media/####/.pkgs_lock
- /data/media/####/.rc_lock
- /data/media/####/.slw
- /data/media/####/.ss_lock
- /data/media/####/.umm.dat
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/app.db
- /data/media/####/cn.cmkj.artchina.bin
- /data/media/####/cn.cmkj.artchina.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/tdata_bca864
- /data/media/####/tdata_fyR930
- /data/media/####/test.log
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.MyPushService 24564 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.1.0.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.product.cpu.abi
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- ls /
- ls /sys/class/thermal
- mount
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.MyPushService 24564 300 0
- Bugly
- getuiext3
- libnfix
- libshella-2.9.1.0
- libufix
- nfix
- ufix
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS7Padding
- AES-GCM-NoPadding
- DESede-ECB-PKCS5Padding
- RSA-ECB-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS7Padding
- AES-ECB-NoPadding
- AES-GCM-NoPadding