Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.b####.qq.com:8012
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) a####.exc.mob.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) www.yunxiao####.com:80
- TCP(HTTP/1.1) a####.b####.qq.com:8011
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP c####.g####.ig####.com:5225
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.b####.qq.com
- a####.exc.mob.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- c####.g####.ig####.com
- c-h####.g####.com
- mt####.go####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- www.yunxiao####.com
- t####.c####.q####.####.com/config/hz-hzv3.conf
- t####.c####.q####.####.com/tdata_bca864
- t####.c####.q####.####.com/tdata_fyR930
- www.yunxiao####.com/lib/zepto/zepto.min.js
- www.yunxiao####.com/oss/image/article/picture/00094cea955f47c78a61205d37...
- www.yunxiao####.com/oss/image/article/picture/031633c93b04492eae6dd8d443...
- www.yunxiao####.com/oss/image/article/picture/07178a766c2d447bbad4db5df8...
- www.yunxiao####.com/oss/image/article/picture/0ceccc964a914aba89e11be8f3...
- www.yunxiao####.com/oss/image/article/picture/1983922fb8cb4da2ae70ac7e24...
- www.yunxiao####.com/oss/image/article/picture/199094cce8264c2e9d3fb40fce...
- www.yunxiao####.com/oss/image/article/picture/2348e9cdb4394cc8adc398ffa8...
- www.yunxiao####.com/oss/image/article/picture/29849165879b4945942b332be4...
- www.yunxiao####.com/oss/image/article/picture/57fdf31d213c405d8040f64feb...
- www.yunxiao####.com/oss/image/article/picture/5d443f75501d41f082d891b9b5...
- www.yunxiao####.com/oss/image/article/picture/5f526f22e7264639bf057520c3...
- www.yunxiao####.com/oss/image/article/picture/81aacd7c80e24b539c130d7b56...
- www.yunxiao####.com/oss/image/article/picture/85c20ea960fa4731a8e48e9fa9...
- www.yunxiao####.com/oss/image/article/picture/96d3801576064aeab50912e34d...
- www.yunxiao####.com/oss/image/article/picture/aef77fb39f1f4500b9c6d4e308...
- www.yunxiao####.com/oss/image/article/picture/d46ff21dc4e54778bfaa2d198d...
- www.yunxiao####.com/oss/image/article/picture/ddb930ea27884f458206cd6a73...
- www.yunxiao####.com/oss/image/article/picture/e33e874d780d44078af1a26fdc...
- www.yunxiao####.com/oss/image/article/picture/e4e0daba02a24cf6b8d05cda3a...
- www.yunxiao####.com/oss/image/article/picture/f69211f284414936b6a638c839...
- www.yunxiao####.com/oss/image/ueditor/04b9ae6e4f0945e687974acdae3adc3e.jpg
- www.yunxiao####.com/oss/image/ueditor/2112ece89d924429a845819136775b55.jpg
- www.yunxiao####.com/oss/image/ueditor/30943f1525b34e3f8537f012a082dc42.jpg
- www.yunxiao####.com/oss/image/ueditor/322c80a0c3af400c951ea0afd6f8e0eb.jpg
- www.yunxiao####.com/oss/image/ueditor/3e3c7bd610ac4879b8555f8cb36faeec.jpg
- www.yunxiao####.com/oss/image/ueditor/480e761d1f6c454fa4a5ef1f37ffe1de.jpg
- www.yunxiao####.com/oss/image/ueditor/613cbefcf3b8447182b6edd1317faa9d.jpg
- www.yunxiao####.com/oss/image/ueditor/70d8d6657e154d9fb59ad4f6af1d595e.jpg
- www.yunxiao####.com/oss/image/ueditor/794a2b5874f049dd95094ab33a948a13.jpg
- www.yunxiao####.com/oss/image/ueditor/83275d73c3e247c297c92a1e3613d171.jpg
- www.yunxiao####.com/oss/image/ueditor/8dbd35d1c5bb4be6a70484c4cd7a19b7.jpg
- www.yunxiao####.com/oss/image/ueditor/8ede432558554ee29eb7ede42a13a340.jpg
- www.yunxiao####.com/oss/image/ueditor/9e26bd25e3b84d7e8786905ac53ef9f8.jpg
- www.yunxiao####.com/oss/image/ueditor/ba228bf8002d441d8986543905b8f71c.jpg
- www.yunxiao####.com/oss/image/ueditor/beacf619384046d0ad9bc449825b355a.jpg
- www.yunxiao####.com/oss/image/ueditor/cad2c39d78ca424b85a7e16c5350c1f6.jpg
- www.yunxiao####.com/oss/image/ueditor/d9854fa34e954366af65861e1c003d96.jpg
- www.yunxiao####.com/oss/image/ueditor/dbc9543dcb2641999a3517d1a504bbcd.jpg
- www.yunxiao####.com/oss/image/ueditor/e31e50c34b724781a8bb1e5a6daaca0c.jpg
- www.yunxiao####.com/oss/image/ueditor/eccf9b81920a4b27af3ecb3cfa1caf6f.jpg
- www.yunxiao####.com/oss/image/ueditor/f126aca4858243d280bb0b087952785f.jpg
- www.yunxiao####.com/public/wechat/assets/article.html?id=####
- www.yunxiao####.com/public/wechat/css/article.css
- www.yunxiao####.com/public/wechat/css/index.css
- www.yunxiao####.com/yxs/articleInfo/getArticleInfoList?authToken=####&ca...
- www.yunxiao####.com/yxs/articleInfo/getArticleInfoList?categoryKeys=####...
- a####.b####.qq.com:8011/rqd/async
- a####.b####.qq.com:8012/rqd/async
- a####.exc.mob.com/errconf
- and####.b####.qq.com/rqd/async
- and####.b####.qq.com/rqd/async?aid=####
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- www.yunxiao####.com/yxs/articleInfo/getArticleItem/dedf969314e84d0b981a5...
- /data/data/####/.duid
- /data/data/####/.lock
- /data/data/####/.vpl_lock
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/1ca5dc1ca4bdfe4c02c06e200904d9d1c69e63a3067f5b2....0.tmp
- /data/data/####/20e6e91bc73c12d9e7f83757471a4e5dbd083f5d471c5ab....0.tmp
- /data/data/####/232e1a55bed80514be5e2e476e72485cb89a3afa69cd787...fa0b.0
- /data/data/####/2cf2613508ac9cc9e3a0577f0bfb88c00300c86cb759d1f....0.tmp
- /data/data/####/4c92433163b0ce5293a8a160ee2b890e11310ec67c808d9....0.tmp
- /data/data/####/5130d239bff8d8aab31f7d145813aea4d51c280cb48c424....0.tmp
- /data/data/####/5aabc9627b872e0160f77fd70509a1400506b346944eaf0....0.tmp
- /data/data/####/5b7cb1c6afd33ce0254d9f4969791ab68bab52a08807347....0.tmp
- /data/data/####/614386196b9c982fd6d04a64a4c927f475f497350101fad....0.tmp
- /data/data/####/61cb5561da7706c17a4a5240e87d2e0f1c190192f537e70....0.tmp
- /data/data/####/6908ac298e59f6941aceaaeadb038152d01c5f29255db24....0.tmp
- /data/data/####/89009ab92431e0b3e8819f908107e752b1ab7c076917e91....0.tmp
- /data/data/####/89844e7ef1462f5ef1f40728354d1b3f4e1ca4188fbadb8....0.tmp
- /data/data/####/90609e1b1ba754cae5cc5e9c39b0a910ebe801906b40c34....0.tmp
- /data/data/####/BUGLY_COMMON_VALUES.xml
- /data/data/####/ThrowalbeLog.db-journal
- /data/data/####/ab0dc4a361872e368050b0caab6dcc571d3294c07a83143....0.tmp
- /data/data/####/b1a1e621081246534f02a59d138dbf5ba5de875e81d4ac8....0.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/bugly_db_legu-journal
- /data/data/####/c51f50f051759fe6782cde77c18838d535842e563229c01....0.tmp
- /data/data/####/com.yunxiaosheng.yxs.BETA_VALUES.xml
- /data/data/####/crashrecord.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/domain_1
- /data/data/####/eaabaf7589c9ee88aa2354cd9cb3d0679a081d190e3d665....0.tmp
- /data/data/####/f08f0ad8f292b27e336dec979e48605bde916bc559787df....0.tmp
- /data/data/####/f7619de7ec31647d2412964baec9c25c6c77d8f665280da....0.tmp
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/f_00000b
- /data/data/####/f_00000c
- /data/data/####/f_00000d
- /data/data/####/f_00000e
- /data/data/####/f_00000f
- /data/data/####/f_000010
- /data/data/####/f_000011
- /data/data/####/f_000012
- /data/data/####/f_000013
- /data/data/####/f_000014
- /data/data/####/f_000015
- /data/data/####/f_000016
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.1.1.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/mix.dex
- /data/data/####/mob_commons_1
- /data/data/####/mob_sdk_exception_1
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/tdata_bca864
- /data/data/####/tdata_bca864.jar
- /data/data/####/tdata_fyR930
- /data/data/####/tdata_fyR930.jar
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/.artc_lock
- /data/media/####/.di
- /data/media/####/.dic_lock
- /data/media/####/.duid
- /data/media/####/.globalLock
- /data/media/####/.im_lock
- /data/media/####/.lesd_lock
- /data/media/####/.mn_-1464060969
- /data/media/####/.pkg_lock
- /data/media/####/.pkgs_lock
- /data/media/####/.rc_lock
- /data/media/####/.slw
- /data/media/####/.ss_lock
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.yunxiaosheng.yxs.bin
- /data/media/####/com.yunxiaosheng.yxs.db
- /data/media/####/tdata_bca864
- /data/media/####/tdata_fyR930
- /data/media/####/test.log
- /system/bin/sh -c getprop
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.AppPushService 25081 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.1.1.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- Bugly
- getuiext3
- libnfix
- libshella-2.9.1.1
- libufix
- nfix
- ufix
- AES-ECB-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-ECB-NoPadding
- AES-GCM-NoPadding