Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) wap.monte####.com:81
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8012
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) p####.mma####.com:80
- TCP(HTTP/1.1) pin####.qq.com:80
- TCP(HTTP/1.1) sni.c####.q####.####.net:80
- TCP(HTTP/1.1) a####.b####.qq.com:8011
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) pi####.qq.com:80
- TCP(HTTP/1.1) p####.mma####.com:8081
- TCP(TLS/1.0) wap.cmpass####.com:8443
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5227
- 7j####.c####.z0.####.com
- a####.b####.qq.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- c####.g####.ig####.com
- c-h####.g####.com
- i1.mm####.com
- p####.mma####.com
- p####.mma####.com
- pi####.qq.com
- pin####.qq.com
- pub-####.qin####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- wap.cmpass####.com
- wap.monte####.com
- p####.mma####.com/AssPage/common/common.js?v=####
- p####.mma####.com/AssPage/resources/jquery/jquery-3.3.1.min.js
- p####.mma####.com/AssPage/resources/js/base64.js
- p####.mma####.com/AssPage/resources/mui/css/mui.min.css
- p####.mma####.com/AssPage/resources/mui/fonts/mui.ttf
- p####.mma####.com/AssPage/resources/mui/js/mui.min.js
- p####.mma####.com/AssPage/scanner/css/index.css?v=####
- p####.mma####.com/AssPage/scanner/images/i-circular.png
- p####.mma####.com/AssPage/scanner/images/i-command.png
- p####.mma####.com/AssPage/scanner/images/i-des01.png
- p####.mma####.com/AssPage/scanner/images/loading1.gif
- p####.mma####.com/AssPage/scanner/images/mm-info.png
- p####.mma####.com/AssPage/scanner/images/to-top.png
- p####.mma####.com/AssPage/scanner/index.html?ma=####
- p####.mma####.com/AssPage/scanner/index/index.js?v=####
- p####.mma####.com/AssPage/scanner/js/scanner.js?v=####
- p####.mma####.com/MobileAss/resources//MMPIC/16/300009954216/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/18/300011858318/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/21/300011006621/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/22/300009642222/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/23/300011853723/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/30/300002797930/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/31/300011854031/logo5_src.jpg
- p####.mma####.com/MobileAss/resources//MMPIC/35/300000863435/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/37/300010936337/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/38/300010148338/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/47/300002584247/logo5_src.jpg
- p####.mma####.com/MobileAss/resources//MMPIC/47/300009970247/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/50/300008926150/logo5_src.jpg
- p####.mma####.com/MobileAss/resources//MMPIC/51/300002577051/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/53/300011852553/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/57/300010060457/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/6/300001141606/logo140x1401...
- p####.mma####.com/MobileAss/resources//MMPIC/6/300011847206/logo140x1408...
- p####.mma####.com/MobileAss/resources//MMPIC/62/300010040362/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/63/300011857763/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/65/300011853065/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/65/300011857765/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/69/300001502369/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/72/300010176372/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/77/300011007277/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/8/300002575008/logo5_src.jpg
- p####.mma####.com/MobileAss/resources//MMPIC/85/300009598185/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/86/300009362186/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/88/300010994488/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/90/300011857990/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/92/300011524392/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/94/300011852494/logo140x140...
- p####.mma####.com/MobileAss/resources//MMPIC/96/300009630196/logo140x140...
- p####.mma####.com/MobileAss/resources/upload/adpic/a6f428a5-998b-4b85-a1...
- p####.mma####.com/MobileAss/resources/upload/adpic/ace13bb2-0176-4e65-86...
- p####.mma####.com/download/android/32360b0d-a578-41ad-b5eb-4c794a412788....
- p####.mma####.com/download/android/3e134a7e-c4e2-4d3d-95d5-636f81d63138....
- p####.mma####.com/download/android/80b56f23-938c-441d-81c4-3223456084f1....
- p####.mma####.com/download/android/a411240b-aff5-4296-9cd8-0e310c0995b5....
- p####.mma####.com/download/android/ace4ac0d-d8e1-4890-b9ac-ca1c7fa035ce....
- p####.mma####.com/download/android/bd731554-3659-4785-bc17-e1f559802aa8....
- p####.mma####.com/download/android/c13fecc4-2a14-40ea-b624-93178adbcf75....
- p####.mma####.com/download/android/c5c1b975-b070-447d-aff6-b4341755bba1....
- p####.mma####.com/download/jar/GetChangeIMSIJar.jar
- sni.c####.q####.####.net/config/hz-hzv3.conf
- sni.c####.q####.####.net/tdata_YYn966
- sni.c####.q####.####.net/tdata_eOt091
- t####.c####.q####.####.com/tdata_EDT356
- wap.monte####.com:81/p/l/?s=####&p=####&c=####&j=####&callback=####&head...
- a####.b####.qq.com:8011/rqd/async
- aexcep####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- c-h####.g####.com/api.php?format=####&t=####
- p####.mma####.com/AssPage/commonjson.html
- p####.mma####.com/MobileAss/getTime.html
- p####.mma####.com/Webservice/httpjson
- p####.mma####.com/Webservice/interfaces
- p####.mma####.com:8081/currentTime.do
- p####.mma####.com:8081/fusionUpPhone.do
- p####.mma####.com:8081/residentFusion.do
- pi####.qq.com/mstat/report/?index=####
- pin####.qq.com/request
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/1d0af94e45e41b67f0d38bb2ab08987a2bdd26f0aeb3cda....0.tmp
- /data/data/####/1d96c710bc08cc344d7db95c09489f70f63bd28b7f21123....0.tmp
- /data/data/####/2b24dac39644a678775d09c2e1dce51fa2c109db63f931f....0.tmp
- /data/data/####/33e2ca2daa89a37cd9824b822d44aed62b80e33e7df236c....0.tmp
- /data/data/####/37d69c206f4d
- /data/data/####/5c771cd13652bc66957efa5a816f90967879afc177c7e86....0.tmp
- /data/data/####/78bef7e6061c82997f3bab3fda9475d575ce5fdabeee5b8....0.tmp
- /data/data/####/92189b7d308966e3e58fb9a8270d63086a1fbe55ff982a3....0.tmp
- /data/data/####/b1321f6717b0b8d29d86080f9770658c8c1f7342badc572....0.tmp
- /data/data/####/b8b26b06af5500dde6432212006d6c3c2c081c8336539aa....0.tmp
- /data/data/####/b8d8bce9d8b5e4e193ec1d0addc5cb532aaa5c75b7313ed....0.tmp
- /data/data/####/bugly_db_legu-journal
- /data/data/####/ca67a3b22552eac141ba3fbdcdbd90a7a88aa211205f1e9....0.tmp
- /data/data/####/com.cmic.mmassistant.mid.world.ro.xml
- /data/data/####/com.cmic.mmassistant.xml
- /data/data/####/com.cmic.mmassistant_preferences.xml
- /data/data/####/d85f5e37a562e8c12aa25479ea3b3ca1f32c4abecfc8879....0.tmp
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/legu_tencent_analysis.db_com.cmic.mmassistant-journal
- /data/data/####/libkh_x86_5.4.2.3.soo
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/local_crash_lock
- /data/data/####/mix.dex
- /data/data/####/mm_db-journal
- /data/data/####/native_record_lock
- /data/data/####/pri_legu_tencent_analysis.db_com.cmic.mmassistant-journal
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/quick_login_android_5.4.2.3.180707.jar
- /data/data/####/run.pid
- /data/data/####/scan_assist-journal
- /data/data/####/sdk.db-journal
- /data/data/####/security_info
- /data/data/####/ssoconfigs.xml
- /data/data/####/tdata_YYn966
- /data/data/####/tdata_YYn966.jar
- /data/data/####/tdata_eOt091
- /data/data/####/tdata_eOt091.jar
- /data/data/####/triffi_stat3-journal
- /data/data/####/updateconfig.xml
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/.mid.txt
- /data/media/####/.mid.txt1000001
- /data/media/####/GetChangeIMSIJar.jar
- /data/media/####/app.db
- /data/media/####/applog
- /data/media/####/com.cmic.mmassistant.bin
- /data/media/####/com.cmic.mmassistant.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/tdata_YYn966
- /data/media/####/tdata_eOt091
- /data/media/####/test.log
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/cn.richinfo.scanassist.push.PushServiceEx 25027 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- mount
- Bugly
- FieldAssistant
- MMKey
- MtaNativeCrash
- getuiext2
- libkh_x86_5.4.2.3
- libnfix
- libshella-2.9.0.2
- libufix
- mmtraffic
- nfix
- ufix
- AES-CFB-NoPadding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- RSA-NONE-PKCS1PADDING
- AES-CFB-NoPadding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding