Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) 2564####.la####.me:8081
- TCP(HTTP/1.1) c####.bs.g####.####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
- TCP(HTTP/1.1) nav.cn.ron####.com:80
- UDP(NTP) 1.cn.p####.####.org:123
- UDP(NTP) 0.a####.p####.####.org:123
- TCP(TLS/1.0) av1.x####.com:443
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) c####.x####.com:443
- TCP(TLS/1.0) s####.cn.ron####.com:443
- TCP(TLS/1.0) hotfix####.aliy####.com:443
- TCP(TLS/1.0) na61-####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) 1####.217.17.78:443
- TCP(TLS/1.0) 2564####.la####.me:443
- TCP c####.g####.ig####.com:5225
- UDP 1####.168.112.1:137
- TCP sdk.o####.t####.####.com:5224
- TCP 1####.92.22.235:8630
- 0.a####.p####.####.org
- 1.cn.p####.####.org
- 2564####.la####.me
- 7j####.c####.z0.####.com
- a####.man.aliy####.com
- and####.b####.qq.com
- av1.x####.com
- c####.g####.ig####.com
- c####.x####.com
- c-h####.g####.com
- hotfix####.aliy####.com
- i.t####.com
- jk.la####.me
- nav.cn.ron####.com
- plb####.u####.com
- s####.cn.ron####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- sec.u####.com
- trac####.m####.p####.com
- u####.u####.com
- 2564####.la####.me:8081/LaiJieImgServer//upload/images/2017-12-08/201712...
- 2564####.la####.me:8081/LaiJieImgServer//upload/images/2018-05-29/201805...
- 2564####.la####.me:8081/LaiJieImgServer//upload/images/2018-05-31/201805...
- 2564####.la####.me:8081/LaiJieImgServer//upload/images/2018-06-04/201806...
- 2564####.la####.me:8081/LaiJieImgServer//upload/images/2018-09-20/201809...
- 2564####.la####.me:8081/LaiJieImgServer//upload/images/2018-10-06/201810...
- 2564####.la####.me:8081/LaiJieImgServer//upload/images/2018-10-08/201810...
- 2564####.la####.me:8081/LaiJieImgServer//upload/images/2018-10-19/201810...
- 2564####.la####.me:8081/LaiJieImgServer//upload/images/2018-10-23/201810...
- 2564####.la####.me:8081/LaiJieImgServer//upload/images/2018-10-24/201810...
- 2564####.la####.me:8081/LaiJieImgServer//upload/images/2018-10-25/201810...
- 2564####.la####.me:8081/LaiJieImgServer//upload/images/2018-10-26/201810...
- t####.c####.q####.####.com/config/hz-hzv3.conf
- t####.c####.q####.####.com/tdata_MkX219
- t####.c####.q####.####.com/tdata_iGj879
- and####.b####.qq.com/rqd/async
- c####.bs.g####.####.com/trackingdata/checkapptracking.htm
- c-h####.g####.com/api.php?format=####&t=####
- nav.cn.ron####.com/navipush.json
- sdk.o####.p####.####.com/api.php?format=####&t=####
- sh.wagbr####.aliyun####.com/man/api?ak=####&s=####
- /data/data/####/-1760617689947167793
- /data/data/####/.imprint
- /data/data/####/03cabc6c7782be4654c25653248d271687beb8bedc5dc5e....0.tmp
- /data/data/####/0c9f2bf65504a1d9b747d8836096759db1ed1463c357d6e....0.tmp
- /data/data/####/0caca542df2b69f88670f30ccd02e400105ea016c167a9f....0.tmp
- /data/data/####/0cce66dc4dda5d84c510a54cb63da395a65cbb16c76d6a2....0.tmp
- /data/data/####/10144a9eae19fad085b68900a6693037153ab4749370db9....0.tmp
- /data/data/####/10b0e26f184dfbec26f2199366d287d7bc509bc0286371c....0.tmp
- /data/data/####/1540653390267_2273
- /data/data/####/1540653390460_2273
- /data/data/####/1540653392252_2273
- /data/data/####/1540653392434_2353
- /data/data/####/1540653392434_2353 (deleted)
- /data/data/####/1540653392927_2353
- /data/data/####/1540653394904_2430
- /data/data/####/1540653395057_2407
- /data/data/####/1540653395134_2430
- /data/data/####/1540653395348_2407
- /data/data/####/1540653395875_2497
- /data/data/####/1540653396379_2273
- /data/data/####/1540653397977_2680
- /data/data/####/1540653399783_2871
- /data/data/####/1540653400189_2871
- /data/data/####/1540653401942_2992
- /data/data/####/1540653404829_3136
- /data/data/####/1540653405108_3136
- /data/data/####/1540653407080_3248
- /data/data/####/1540653447624_3455
- /data/data/####/1540653447856_3455
- /data/data/####/1540653450221_3574
- /data/data/####/20e7ced1bc7c10a23ff8e4f9084f6112511571fcbf55465....0.tmp
- /data/data/####/2151031dd785eaf48bb008e071b228f6acf10001702d90d....0.tmp
- /data/data/####/2254a5d2eb121c12043a76c00b4c617c059efec42296433....0.tmp
- /data/data/####/38216294f34e7a0a4aad301a5b579c22fc4e7fe2a947584....0.tmp
- /data/data/####/4cd497d757740416452349c642dcca28f594729390a083c....0.tmp
- /data/data/####/59e5a0e2e530f76ecb1ecaec0588523b840c3aa6c1416e3....0.tmp
- /data/data/####/63dbca7adb2572ad65bb85183d180360161bc0b5c977e8a....0.tmp
- /data/data/####/69bf647396a1f1c75a2e7aa4c1f1b9c5948a49b0993ec64....0.tmp
- /data/data/####/6e08da8553353950f403ad19a533b64be7f55797dd252a2....0.tmp
- /data/data/####/6e25af4531a00c172af8b2194a2ba9a98696ce28e1d94e2....0.tmp
- /data/data/####/6f2d503bbd007b85839eba171d74fd466fbff6a52d46861....0.tmp
- /data/data/####/750c69970c5d970d12357444133f142bfa5fcbd2bfb460a....0.tmp
- /data/data/####/7fb552daa676b626bf22a4ff86ec395e4af2477f8ecfae4....0.tmp
- /data/data/####/80df1712de7f8e5f2c124186e4b6aa20bf4c6029ec98a09....0.tmp
- /data/data/####/88efe674de1c8aa6be8804eeb114fd99144350723069fc0....0.tmp
- /data/data/####/8b1f6c1a8a90dd81530befba09655f4514f15c65e029f7a....0.tmp
- /data/data/####/8ff3db1caa6818a80dd6faecf2835b1c7e13b124c60a9d4....0.tmp
- /data/data/####/9870844e39c27cf5a316104c2dcf2706784489da384e990....0.tmp
- /data/data/####/9b75a0fe879ae03570994efbd6e70a5f351f7eee0f92a82....0.tmp
- /data/data/####/Alvin2.xml
- /data/data/####/COUNTLY_STORE.xml
- /data/data/####/ContextData.xml
- /data/data/####/FwLog.xml
- /data/data/####/MultiDex.lock
- /data/data/####/RongPush.xml
- /data/data/####/Statistics.xml
- /data/data/####/TDCloudSettingsConfig00C730F690C3863E25A5B5C7693F5AB9.xml
- /data/data/####/TD_app_pefercen_profile.xml
- /data/data/####/TDpref_longtime.xml
- /data/data/####/TDpref_longtime.xml (deleted)
- /data/data/####/TDpref_longtime0.xml
- /data/data/####/TDpref_shorttime.xml
- /data/data/####/TDpref_shorttime0.xml
- /data/data/####/TalingDataConfig00C730F690C3863E25A5B5C7693F5AB9.xml
- /data/data/####/a53ab5726c5a0c948a2fc74f34689cfb56ee6f36a034cce....0.tmp
- /data/data/####/a7c80413e56790046bd38ae2481d8df84e755d0909f25fa....0.tmp
- /data/data/####/a82fb6a9e6c02e5e416a09e087555c29764b9d84b2ad00c....0.tmp
- /data/data/####/a==7.4.0&&3.4.13_1540653402667_envelope.log
- /data/data/####/b0335d77152e935ce967c0117822b14e5acff2b5bfc082b....0.tmp
- /data/data/####/b78a542b368ec30d552cebd2d2c12375a01e44bfa294d20....0.tmp
- /data/data/####/be7b7b05-7ca6-433e-b4b8-e26585aa3a9b
- /data/data/####/bf714c36a299e8dfc7ea41c780e9f220f1954bb8b3d9ef3....0.tmp
- /data/data/####/bugly_db_legu-journal
- /data/data/####/c5112f1d4222d9a8df0925a35552476760ba3a9e66418c6....0.tmp
- /data/data/####/cb31a6c9f0c2741eb219329ea8e4830af2ab92cc05c61a4....0.tmp
- /data/data/####/com.jiujiuyun.laijie_preferences.xml
- /data/data/####/d234aed5a7dd228466f0cddfedf88dec44cdfb4aa628f51....0.tmp
- /data/data/####/d403747b703639372d59c034636ac2fd56446d937db19a0....0.tmp
- /data/data/####/d7a94d2010d0beceae793a1e1cf16de2d47e57c1152785e....0.tmp
- /data/data/####/dc49e92a982a571a8aea5a5f06f6ecc930de7014570fb32....0.tmp
- /data/data/####/download_file.db-journal
- /data/data/####/e40e04699ec86e18402b29bbb4acebd10a38c4fe4f9fda4....0.tmp
- /data/data/####/e885595080d71743466d58a9b5f0bfd54302e8840098b8b....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/fa53897c752aa54120d75975579064e278a3b73d152664f....0.tmp
- /data/data/####/fdb75519f81b8394d5c625351b4c677d8cdb6b51f651d85....0.tmp
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/i==1.2.0&&3.4.13_1540653396702_envelope.log
- /data/data/####/i==1.2.0&&3.4.13_1540653448112_envelope.log
- /data/data/####/info.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/jiujiuyun_creativelocker.pref.xml
- /data/data/####/jiujiuyun_islan.pref.xml
- /data/data/####/jiujiuyun_net_db-journal
- /data/data/####/jiujiuyun_user.xml
- /data/data/####/journal.tmp
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.8.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/locale.config.xml
- /data/data/####/mix.dex
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/polling_conf.xml
- /data/data/####/ppdai_loan.xml
- /data/data/####/ppdai_loan.xml.bak (deleted)
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/sp_sophix.xml
- /data/data/####/tdata_MkX219
- /data/data/####/tdata_MkX219.jar
- /data/data/####/tdata_iGj879
- /data/data/####/tdata_iGj879.jar
- /data/data/####/tdid.xml
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umexecption.json
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.cca.dat
- /data/media/####/.nomedia
- /data/media/####/.tcookieid
- /data/media/####/.umm.dat
- /data/media/####/255633e1-f975-458f-b4f0-e0c2f879ad1f
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.jiujiuyun.laijie.bin
- /data/media/####/com.jiujiuyun.laijie.db
- /data/media/####/rong_sdk.log
- /data/media/####/rong_sdk_debug.log
- /data/media/####/sysid.dat
- /data/media/####/tdata_MkX219
- /data/media/####/tdata_iGj879
- /data/media/####/test.log
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.ui.service.GeTuiService 25037 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.8.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- ls /sys/class/thermal
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.ui.service.GeTuiService 25037 300 0
- Bugly
- RongIMLib
- getuiext2
- jcrypto
- libnfix
- libshella-2.8
- libufix
- nfix
- securityenv
- ufix
- umeng_error_catch
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- DES-CBC-PKCS5Padding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- DES-CBC-PKCS5Padding
- PBEWithSHAAnd3-KeyTripleDES-CBC