Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) z####.sin####.com:8088
- TCP(HTTP/1.1) m.d####.mob.com:80
- TCP(HTTP/1.1) p158-####.oss-cn-####.aliy####.com:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) a####.exc.mob.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) log.ifl####.com:80
- TCP(HTTP/1.1) caro####.sin####.com:80
- TCP(HTTP/1.1) api.s####.mob.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) car####.sin####.com:18686
- TCP(TLS/1.0) d####.52b####.com:443
- TCP(TLS/1.0) res####.a####.com:443
- TCP(TLS/1.0) chua####.sin####.com:8080
- a####.exc.mob.com
- a####.u####.com
- and####.b####.qq.com
- api.s####.mob.com
- car####.sin####.com
- caro####.sin####.com
- chua####.sin####.com
- d####.52b####.com
- log####.ifl####.com
- log.ifl####.com
- m.d####.mob.com
- p158-####.oss-cn-####.aliy####.com
- res####.a####.com
- sdk.o####.p####.####.com
- z####.sin####.com
- car####.sin####.com:18686/rest/user/through/getUserInfo?versionNo=####
- m.d####.mob.com/v2/cconf?appkey=####&plat=####&apppkg=####&appver=####&n...
- p158-####.oss-cn-####.aliy####.com/clms/10779529-ceaa-4eff-b03a-d50c2751...
- p158-####.oss-cn-####.aliy####.com/clms/31e19bf8-43ff-41a0-80ec-b962317b...
- p158-####.oss-cn-####.aliy####.com/clms/415c21b3-0940-4b4e-b621-18b67922...
- p158-####.oss-cn-####.aliy####.com/clms/43a02e0e-c86e-4152-8ae7-2f00bc5a...
- p158-####.oss-cn-####.aliy####.com/clms/4c7f4e8b-d802-4910-bdd7-28716e3b...
- p158-####.oss-cn-####.aliy####.com/clms/59e3bc34-2607-4ab8-8405-43b1e9eb...
- p158-####.oss-cn-####.aliy####.com/clms/62554610-b726-46e9-afec-1b7e1a4d...
- p158-####.oss-cn-####.aliy####.com/clms/70ed5c43-0e05-485d-9c6f-f8788a54...
- p158-####.oss-cn-####.aliy####.com/clms/7828b40a-5bec-4139-9668-20949b2d...
- p158-####.oss-cn-####.aliy####.com/clms/98eabfa5-34ba-4b70-821a-22f82b78...
- p158-####.oss-cn-####.aliy####.com/clms/b72508e1-c10a-4014-99a1-0d64a1b7...
- p158-####.oss-cn-####.aliy####.com/clms/ba2a6d8a-7ec2-4b46-b2b6-2a1290f0...
- p158-####.oss-cn-####.aliy####.com/clms/c18f1235-402c-45a3-aea1-f683f948...
- p158-####.oss-cn-####.aliy####.com/clms/cec8b10e-5048-44cb-af90-ac1ac4b4...
- a####.exc.mob.com/errconf
- a####.u####.com/app_logs
- and####.b####.qq.com/rqd/async
- and####.b####.qq.com/rqd/async?aid=####
- api.s####.mob.com/conf5
- api.s####.mob.com/conn
- api.s####.mob.com/log4
- car####.sin####.com:18686/rest/carlive/bulletin
- car####.sin####.com:18686/rest/carlive/shangShan
- car####.sin####.com:18686/rest/commonAddress/serachCommonAddress
- car####.sin####.com:18686/rest/commonConfig/serachByConfigName
- car####.sin####.com:18686/rest/doorStringController/newserachDoorString
- car####.sin####.com:18686/rest/user/update
- caro####.sin####.com/WebContent/AdvertisementServlet
- caro####.sin####.com/WebContent/AuGetTokenServlet
- caro####.sin####.com/WebContent/ClaimsRedEnvelopesServlet
- caro####.sin####.com/WebContent/IntelligentDispatchServlet?actionType=####
- caro####.sin####.com/WebContent/NonCarServlet
- caro####.sin####.com/WebContent/TopMessageServlet
- caro####.sin####.com/WebContent/UserLoginTrackServlet?actionType=####
- log.ifl####.com/hotupdate
- log.ifl####.com/log?product=####&appid=####&size=####&platform=####&sour...
- sdk.o####.p####.####.com/api.php?format=####&t=####
- z####.sin####.com:8088/APIPOOL/
- /data/data/####/-150392002
- /data/data/####/.imprint
- /data/data/####/.lock
- /data/data/####/.mrecord
- /data/data/####/.mrlock
- /data/data/####/.statistics
- /data/data/####/1004
- /data/data/####/1ad0d17e1c0ee92a2f00672f8c82511a7e85e18695b329c....0.tmp
- /data/data/####/1d2b904cbeadfb72ed9546111a231c85.0
- /data/data/####/233efa73978453693c531ff758ea5e51cad3baad05e3060....0.tmp
- /data/data/####/37f2a4dc7018d7ace2a8220d6d744ef86b6010bf0e98b93....0.tmp
- /data/data/####/54b02afc58cf8a046258efa4dea14830eddd95d77114973....0.tmp
- /data/data/####/5e7ad2b214244447d5bf6d32886fc4e8eea31de8d8d13de....0.tmp
- /data/data/####/778a43ac2a758cc1feb73945e5799596f7148fe96e63178....0.tmp
- /data/data/####/7e644e5ca6e5e0fb377d86300123f5cd2431bc37e41539a....0.tmp
- /data/data/####/816bf2ea1d8e6b0d4c8585b46fa11bc3e115fabd813e4e0....0.tmp
- /data/data/####/9fd06fe66bfa5183c6b4f7611abbbfca88d60268d96667a....0.tmp
- /data/data/####/MultiDex.lock
- /data/data/####/ThrowalbeLog.db-journal
- /data/data/####/ZLS.db-journal
- /data/data/####/a94723e6a353446857e5416e4a09818917fc88fff141ecf....0.tmp
- /data/data/####/ac731e1c65fc452d2f9c245b8928945289ca3b9e7424343....0.tmp
- /data/data/####/afinal.db-journal
- /data/data/####/b2d8edb61632297705f0e38f3842c49310ef4b64211e58f....0.tmp
- /data/data/####/banma.db-journal
- /data/data/####/bfccc729fa81cf364ba4d1b3ab2211bbcd8b71fe077bf19....0.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/bugly_db_legu-journal
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/cef54a97a8ab1116d3a9e1ff67b6a42ac35f6c6aaa00c04....0.tmp
- /data/data/####/com.dheaven.mscapp.SIGFFCNFN811fcba80c3b48b4a9a...d1.xml
- /data/data/####/com.dheaven.mscapp.SIGFFCNFN;live811fcba80c3b48...d1.xml
- /data/data/####/com.dheaven.mscapp.SIGFFCNFN;pushservice811fcba...d1.xml
- /data/data/####/com.dheaven.mscapp.SIGFFCNFN;work811fcba80c3b48...d1.xml
- /data/data/####/com.iflytek.id.xml
- /data/data/####/com.iflytek.msc.xml
- /data/data/####/configFile.xml
- /data/data/####/crashrecord.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/ea1f855e94a44e9a0a0739a0a20e70be09ccd43f34cb12d....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f77b79db20fbc4c99274b6ff4bcb6d91.0
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/fe21549278737d75204d7cf54184b7a8ea59754c90b2908....0.tmp
- /data/data/####/fead64b6b435aa1af277cb6331108597e060d74448f49d4....0.tmp
- /data/data/####/getui_sp.xml
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/iflytek_collect_state.xml
- /data/data/####/iflytek_device_info.jar
- /data/data/####/index
- /data/data/####/init_c1.pid
- /data/data/####/init_er.pid
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/k.store
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.1.2.so
- /data/data/####/local_crash_lock
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/mix.dex
- /data/data/####/mob_commons_1.xml
- /data/data/####/mob_sdk_exception_1.xml
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/notes-db-journal
- /data/data/####/okgo_cookie.xml
- /data/data/####/pref.xml
- /data/data/####/sdk_share_data.xml
- /data/data/####/security_info
- /data/data/####/share_sdk_1.xml
- /data/data/####/sharesdk.db-journal
- /data/data/####/sunshinecarlife.db
- /data/data/####/sunshinecarlife.db-journal
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/userInfo.xml
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/zebrasdk_file.xml
- /data/data/####/zhuge
- /data/data/####/zhuge-journal
- /data/media/####/.dic_lock
- /data/media/####/.dk
- /data/media/####/.duid
- /data/media/####/.globalLock
- /data/media/####/.nulplt
- /data/media/####/.pkg_lock
- /data/media/####/.rcTag
- /data/media/####/.rc_lock
- /data/media/####/1554603725905.db
- /data/media/####/alsn20170807.db
- /data/media/####/alsn20170807.db-journal
- /data/media/####/iflyworkdir_test
- /data/media/####/location
- /data/media/####/silent.mp3
- /system/bin/sh -c getprop
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.1.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- sh
- Bugly
- getuiext3
- libnfix
- libshella-2.9.1.2
- libufix
- msc
- neh
- nfix
- sensor
- sensorjni
- ufix
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-ECB-PKCS7Padding
- AES-GCM-NoPadding
- DES-CBC-PKCS5Padding
- RSA-ECB-PKCS1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-NoPadding
- AES-GCM-NoPadding