Technical information
- Adware.Gexin.3.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) www.yunha####.com:80
- TCP(HTTP/1.1) www.sq####.com:80
- TCP(HTTP/1.1) ada####.m.ta####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) img.al####.com:80
- TCP(HTTP/1.1) ad####.m.ta####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) tin####.c####.l####.####.com:80
- TCP(HTTP/1.1) sq####.com:80
- TCP(HTTP/1.1) ser####.dc####.net.cn:80
- TCP(HTTP/1.1) qin####.com.www.####.com:80
- TCP(HTTP/1.1) sdk-ope####.g####.com:80
- TCP(TLS/1.0) nbsdk-b####.al####.com:443
- TCP(TLS/1.0) 2####.58.208.110:443
- TCP(TLS/1.0) www.yunha####.com:443
- TCP(TLS/1.0) gm.mm####.com:443
- TCP(TLS/1.0) ser####.dc####.net.cn:443
- TCP(TLS/1.0) img.al####.com:443
- TCP(TLS/1.0) hk.wagbr####.non####.####.com:443
- TCP c####.g####.ig####.com:5226
- TCP sdk.o####.t####.####.com:5224
- ad####.m.ta####.com
- ada####.m.ta####.com
- and####.b####.qq.com
- c####.g####.ig####.com
- c-h####.g####.com
- img.al####.com
- img.haod####.com
- nbsdk-b####.al####.com
- pub-####.qin####.com
- sdk-ope####.g####.com
- sdk.c####.ig####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- ser####.dc####.net.cn
- sq####.com
- st####.dc####.net.cn
- wgo.mm####.com
- www.sq####.com
- www.yunha####.com
- y####.al####.com
- ad####.m.ta####.com/rest/gc2?ak=####&av=####&c=####&d=####&sv=####&t=###...
- img.al####.com/imgextra/i1/13524570/TB2j7oNsMxlpuFjy0FoXXa.lXXa_!!135245...
- img.al####.com/imgextra/i1/184704080/O1CN011g0gPr9vr6wqw9N_!!184704080.jpg
- img.al####.com/imgextra/i1/3526550661/TB232QQt9MmBKNjSZTEXXasKpXa_!!3526...
- img.al####.com/imgextra/i1/3870252610/O1CN019Kl2wV1V9QDPEo1u5_!!38702526...
- img.al####.com/imgextra/i1/4008607165/O1CN01fXG5PQ22ncKnXZTkE_!!40086071...
- img.al####.com/imgextra/i1/4075600979/O1CN01IBUWic1J6QFD9XG0I_!!0-item_p...
- img.al####.com/imgextra/i1/843464748/O1CN01bHzA101kwd18kJ9lx_!!843464748...
- img.al####.com/imgextra/i2/2875149611/TB24..GnlHH8KJjy0FbXXcqlpXa_!!2875...
- img.al####.com/imgextra/i2/3044853858/O1CN016LM01G1eN0XHPVGAB_!!30448538...
- img.al####.com/imgextra/i2/3944090103/O1CN01jgNT7G1CdDKG9fTqW_!!39440901...
- img.al####.com/imgextra/i2/4132243098/O1CN01jsx4aa1YkvXAh4MSF_!!41322430...
- img.al####.com/imgextra/i2/680042718/TB2ZDNAb2ImBKNjSZFlXXc43FXa_!!68004...
- img.al####.com/imgextra/i2/843464748/O1CN012xqHHg1kwd29Nuw4N_!!843464748...
- img.al####.com/imgextra/i3/1705470948/TB2kbU0wBjTBKNjSZFwXXcG4XXa_!!1705...
- img.al####.com/imgextra/i3/2200696084005/O1CN01i1eJAq1fSKkkGocw5_!!22006...
- img.al####.com/imgextra/i3/4013484674/TB2bTFaJr9YBuNjy0FgXXcxcXXa_!!4013...
- img.al####.com/imgextra/i3/713703406/TB2Qid4HkCWBuNjy0FaXXXUlXXa_!!71370...
- img.al####.com/imgextra/i4/1773705656/O1CN01gcV5FJ1reUfqD0qdi_!!17737056...
- img.al####.com/imgextra/i4/2200772630217/O1CN01jkZo9g1DTQSvF9AJu_!!22007...
- img.al####.com/imgextra/i4/2421981497/TB2Z_aLX9zqK1RjSZFLXXcn2XXa_!!2421...
- img.al####.com/imgextra/i4/2810002261/TB2TywxaHMlyKJjSZFAXXbkLXXa_!!2810...
- img.al####.com/imgextra/i4/2850616171/O1CN01ZAzeiO1vSMeYLq5hl_!!28506161...
- img.al####.com/imgextra/i4/440514425/O1CN01uE8ASV1iYh6h4xfsi_!!440514425...
- img.al####.com/imgextra/i4/772461325/TB2I0WqiYSYBuNjSspfXXcZCpXa_!!77246...
- qin####.com.www.####.com/tdata_EDT356
- sq####.com/Public/Admin/Uploads/AppNotice/5cdd34c3f056a.png
- sq####.com/Public/Admin/Uploads/AppNotice/5ce675204f111.png
- t####.c####.q####.####.com/config/hz-hzv6.conf
- tin####.c####.l####.####.com/oimg_587515407809_1558755920.jpg
- tin####.c####.l####.####.com/oimg_592075033400_1559006336.jpg
- www.sq####.com/Public/Admin/Uploads/App/5cece19b1112e.apk
- www.sq####.com/index.php?s=####
- www.sq####.com/index.php?s=####&version=####&vendor=####
- www.yunha####.com/Public/Admin/Uploads/Cates/1558410108.png
- www.yunha####.com/Public/Admin/Uploads/Cates/1558410186.png
- www.yunha####.com/Public/Admin/Uploads/Cates/1558410212.png
- www.yunha####.com/Public/Admin/Uploads/Cates/1558410491.png
- www.yunha####.com/Public/Admin/Uploads/Cates/1558411244.png
- www.yunha####.com/Public/Admin/Uploads/Cates/1558411249.png
- www.yunha####.com/Public/Admin/Uploads/Cates/1558411252.png
- www.yunha####.com/Public/Admin/Uploads/Cates/1558411420.png
- ada####.m.ta####.com/rest/sur?ak=####&av=####&c=####&v=####&s=####&d=###...
- and####.b####.qq.com/rqd/async
- c-h####.g####.com/api.php?format=####&t=####
- sdk-ope####.g####.com/api.php?format=####&t=####
- ser####.dc####.net.cn/device/location
- /data/data/####/.imei.txt
- /data/data/####/056cbe9061f7
- /data/data/####/0a231bd8575dcf72.txt
- /data/data/####/21c22f492aba3de8.lock
- /data/data/####/930a31b34bd52c08.lock
- /data/data/####/945T0vsNniY-Hl8FAo1wiXdU4gY.-152082183.tmp
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/Dhy7U1my3Et_EfL99z1ms4pwOlQ.105251141.tmp
- /data/data/####/E7STn3fuhVY69ktLcg7G9BrCM6s.2110616816.tmp
- /data/data/####/Ip6IZ46H4J4fF11jhTfL2ucZ1vA.42499924.tmp
- /data/data/####/IzIS9Id4BX14HrdukkBseNS1vho.179366928.tmp
- /data/data/####/JnjsiwFbBSpEcYfq40WPYFfjEqc.-714976222.tmp
- /data/data/####/JyHydT1IchXu0CzyoEwGTe3NBBE.203313395.tmp
- /data/data/####/K39u-ANdCR0eHL10urv5NildedQ.324428061.tmp
- /data/data/####/KLcknyZG1TlUGUBfTAAZMz9NVEQ.-1389611018.tmp
- /data/data/####/KNgZbsws1EKcHEj_42QrRa3Yu7Q.405927014.tmp
- /data/data/####/MMPQ0DexlTylpDRidSlA0V_IXuE.-1793999693.tmp
- /data/data/####/MultiDex.lock
- /data/data/####/NnAFQzFlsUpnNbkdpQzxFdwNKXg.1632691030.tmp
- /data/data/####/O4kv2AnjR3iPrjIfwkmfCoGqQUA.320687581.tmp
- /data/data/####/P7UvAN9cLNX38alHLhHznhJ3lvo.1400210000.tmp
- /data/data/####/Q0VSVC5SU0EK.txt910
- /data/data/####/Q_qMGpWJXjH_k94qPGelRE9I_pQ.-261815777.tmp
- /data/data/####/SGMANAGER_DATA2.tmp
- /data/data/####/UTCommon.xml
- /data/data/####/__UNI__225ABE7.xml
- /data/data/####/__UNI__225ABE7_download_dcloud.xml
- /data/data/####/__UNI__225ABE7_storages.xml
- /data/data/####/_adio.dcloud.feature.ad.a.a.xml
- /data/data/####/aizpVU-QnuD93BFxhqGcA68mYuQ.-1709294962.tmp
- /data/data/####/aliTradeConfigSP.xml
- /data/data/####/ap.Lock
- /data/data/####/auth_sdk_device.xml
- /data/data/####/bugly_db_legu-journal
- /data/data/####/clientid_igexin.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/dc_ad_type_key.xml
- /data/data/####/disk_entries_list_image_cache_1890513809.xml
- /data/data/####/eje3cnc
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/f_00000b
- /data/data/####/f_00000c
- /data/data/####/f_00000d
- /data/data/####/f_00000e
- /data/data/####/f_00000f
- /data/data/####/f_000010
- /data/data/####/f_000011
- /data/data/####/f_000012
- /data/data/####/f_000013
- /data/data/####/f_000014
- /data/data/####/f_000015
- /data/data/####/f_000016
- /data/data/####/f_000017
- /data/data/####/f_000018
- /data/data/####/f_000019
- /data/data/####/f_00001a
- /data/data/####/f_00001b
- /data/data/####/f_00001c
- /data/data/####/f_00001d
- /data/data/####/f_00001e
- /data/data/####/f_00001f
- /data/data/####/f_000020
- /data/data/####/f_000021
- /data/data/####/f_000022
- /data/data/####/f_000023
- /data/data/####/f_000024
- /data/data/####/f_000025
- /data/data/####/f_000026
- /data/data/####/f_000027
- /data/data/####/f_000028
- /data/data/####/f_000029
- /data/data/####/f_00002a
- /data/data/####/f_00002b
- /data/data/####/f_00002c
- /data/data/####/f_00002d
- /data/data/####/f_00002e
- /data/data/####/f_00002f
- /data/data/####/f_000030
- /data/data/####/f_000031
- /data/data/####/f_000032
- /data/data/####/f_000033
- /data/data/####/f_000034
- /data/data/####/f_000035
- /data/data/####/f_000036
- /data/data/####/f_000037
- /data/data/####/f_000038
- /data/data/####/f_000039
- /data/data/####/f_00003a
- /data/data/####/f_00003b
- /data/data/####/f_00003c
- /data/data/####/f_00003d
- /data/data/####/f_00003e
- /data/data/####/f_00003f
- /data/data/####/f_000040
- /data/data/####/f_000041
- /data/data/####/f_000042
- /data/data/####/f_000043
- /data/data/####/f_000044
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/html5Geo.xml
- /data/data/####/i17uaj-ll9miWM2L3RurVbZOXuk.-1556499883.tmp
- /data/data/####/imei.xml
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/io.dcloud.H513BBB44_preferences.xml
- /data/data/####/jfTM-A6ECApnNJJk2FG-_LOgxrk.404307304.tmp
- /data/data/####/jjvxK5otw9KT3IMUj1KoiXs-oUE.-1878230182.tmp
- /data/data/####/jsb.version
- /data/data/####/k6jWI8RXBP1TRoceiTAtTd_KNmA.-1386011847.tmp
- /data/data/####/kj_bip1lXYo7iWU4p5VZtUalAWg.2006090537.tmp
- /data/data/####/libnfix.so
- /data/data/####/libsgmainso-5.3.80.so.tmp.2320
- /data/data/####/libshella-2.9.1.2.so
- /data/data/####/libufix.so
- /data/data/####/libweexjsb.so
- /data/data/####/local_crash_lock
- /data/data/####/lock.lock
- /data/data/####/mix.dex
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/pdr.xml
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/sp.lock
- /data/data/####/start_statistics_data.xml
- /data/data/####/stream_permission.xml
- /data/data/####/test_app
- /data/data/####/timestamp
- /data/data/####/tr6wILqNJcvB7lywWhnBXi0cOhY.-425301695.tmp
- /data/data/####/ut.db
- /data/data/####/ut.db-journal
- /data/data/####/vTcVF0LxpG6N1FBFjfCLDFTzYVQ.1222413477.tmp
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/webviewCookiesChromiumPrivate.db-journal
- /data/data/####/yCR8lnL5ECCss9bUXFHY5cjObkg.-266657787.tmp
- /data/data/####/yvKHU6zgIVHfFd39I0XaMjk9iEE.-970276986.tmp
- /data/media/####/.imei.txt
- /data/media/####/1559087551078
- /data/media/####/5cece19b1112e.apk
- /data/media/####/AdEnable.dat
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/app.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/dd7893586a493dc3
- /data/media/####/dt341559087562529.download
- /data/media/####/hid.dat
- /data/media/####/io.dcloud.H513BBB44.bin
- /data/media/####/io.dcloud.H513BBB44.db
- /data/media/####/test.log
- /data/app-lib/<Package>-1//libweexjsb.so 74 75 1 <Package Folder>/app_crash/crash_dump.log
- /data/app-lib/<Package>-1//libweexjsb.so 75 76 1 <Package Folder>/app_crash/crash_dump.log
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/io.dcloud.feature.apsGt.GTNormalPushService 24470 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.1.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- mount
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/io.dcloud.feature.apsGt.GTNormalPushService 24470 300 0
- Bugly
- getuiext3
- imagepipeline
- libnfix
- libshella-2.9.1.2
- libufix
- nfix
- sgmainso-5.3
- ufix
- ut_c_api
- weexcore
- AES-CBC-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-GCM-NoPadding