Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) 05img####.eas####.com.####.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8012
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) 03img####.eas####.com.####.com:80
- TCP(TLS/1.0) gtrad####.com:443
- TCP(TLS/1.0) www.p####.com:443
- TCP(TLS/1.0) p####.gtrad####.com:443
- TCP(TLS/1.0) res####.a####.com:443
- 00img####.eas####.com
- 03img####.eas####.com
- 05img####.eas####.com
- a####.u####.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- gtrad####.com
- p####.gtrad####.com
- res####.a####.com
- www.p####.com
- 03img####.eas####.com.####.com/mobile/20190217/20190217105223_05c35d514e...
- 03img####.eas####.com.####.com/mobile/20190217/20190217105629_19b735f45c...
- 03img####.eas####.com.####.com/mobile/20190217/20190217105901_40168b1766...
- 05img####.eas####.com.####.com/mobile/20190217/20190217104817_17ea0f342e...
- a####.u####.com/app_logs
- aexcep####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- /data/data/####/.imprint
- /data/data/####/1d2b904cbeadfb72ed9546111a231c85.0
- /data/data/####/2968aea6da4d81c83832caf55498983fa63304c1a3160b3....0.tmp
- /data/data/####/2ff0aacefb6b5adca1a15d293308375048171707a35b205....0.tmp
- /data/data/####/47a10273e0b124bf9b861cf7876ddaf3937a4b5a6f85dca....0.tmp
- /data/data/####/507b5055f6998ef28672ad7b989a030bdb58c692a593c96....0.tmp
- /data/data/####/AntSPUtil.xml
- /data/data/####/MultiDex.lock
- /data/data/####/a6932d957c4e9cd00aba964f94949d54c820aadcd142688....0.tmp
- /data/data/####/bugly_db_legu-journal
- /data/data/####/c0586a10777146560765a69231d89beb.xml
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/ce9fbc2057fb1e9fd7ad5ace48ffc997bad314025d63776....0.tmp
- /data/data/####/e2754218193ea9fa1158bb900d1a0b21da65c0f399d610e....0.tmp
- /data/data/####/e9c80a77f50635927deb1eb740c33f7e573c28709cb9e22....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/k.store
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.0.5.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/mix.dex
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/pgyersdk.xml
- /data/data/####/pref.xml
- /data/data/####/security_info
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_general_config.xml.bak (deleted)
- /data/data/####/umeng_it.cache
- /data/media/####/1550384667922.db
- /data/media/####/alsn20170807.db
- /data/media/####/alsn20170807.db-journal
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.5.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.meizu.product.model
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- Bugly
- libnfix
- libshella-2.9.0.5
- libufix
- nfix
- ufix
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- AES-CBC-ISO10126Padding
- AES-CBC-PKCS5Padding
- AES-GCM-NoPadding