Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) q####.c####.l####.####.com:80
- TCP(HTTP/1.1) cdn-sdk####.g####.com.####.com:80
- TCP(HTTP/1.1) norma-e####.m####.com:80
- TCP(HTTP/1.1) o####.jd.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) sf3-ttc####.ps####.com:80
- TCP(HTTP/1.1) cdn.yueta####.com:80
- TCP(HTTP/1.1) app.yueta####.com:80
- TCP(HTTP/1.1) sf1-ttc####.ps####.com:80
- TCP(SSL/3.0) dig.b####.net:443
- TCP(SSL/3.0) d####.k.jd.com:443
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) all.t####.httpdn####.####.net:443
- TCP(TLS/1.0) dualsta####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) ada####.m.ta####.com:443
- TCP(TLS/1.0) ke####.jd.com:443
- TCP(TLS/1.0) sf3-ttc####.ps####.com:443
- TCP(TLS/1.0) d####.k.jd.com:443
- TCP(TLS/1.0) user####.al####.com:443
- TCP(TLS/1.0) h-adash####.ut.ta####.com:443
- TCP(TLS/1.0) www.j####.com:443
- TCP(TLS/1.0) dig.b####.net:443
- TCP(TLS/1.0) baichua####.al####.com:443
- TCP(TLS/1.0) img.al####.com:443
- TCP(TLS/1.0) secgw-n####.wagbr####.ali####.####.com:443
- TCP cm-1####.ig####.com:5225
- TCP sdk.o####.t####.####.com:5224
- UDP 1####.0.16.1:137
- 7j####.c####.z0.####.com
- ada####.ut.ta####.com
- adas####.ut.ta####.com
- app.yueta####.com
- baichua####.al####.com
- bds.sn####.com
- c-h####.g####.com
- cdn-sdk####.g####.com
- cdn.yueta####.com
- cm-1####.ig####.com
- d####.k.jd.com
- dgst####.jd.com
- dig.b####.net
- ex####.sn####.com
- img.al####.com
- is.sn####.com
- ke####.jd.com
- log.sn####.com
- log.u####.com
- norma-e####.m####.com
- o####.jd.com
- plb####.u####.com
- s####.sn####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- sf1-ttc####.ps####.com
- sf3-ttc####.ps####.com
- to####.ctobsn####.com
- u####.u####.com
- user####.al####.com
- y####.al####.org
- cdn-sdk####.g####.com.####.com/tdata_cpZ817
- cdn-sdk####.g####.com.####.com/tdata_lbt428
- cdn-sdk####.g####.com.####.com/tdata_ycm942
- cdn.yueta####.com/ctaobao/file/image/201902/20190225120020.png
- cdn.yueta####.com/ctaobao/file/image/201902/20190225120028.png
- cdn.yueta####.com/ctaobao/file/image/201902/20190225120039.png
- cdn.yueta####.com/ctaobao/file/image/201902/20190225120100.png
- cdn.yueta####.com/ctaobao/file/image/201902/20190225120109.png
- cdn.yueta####.com/ctaobao/file/image/201902/20190225120117.png
- cdn.yueta####.com/ctaobao/file/image/201902/20190225120126.png
- cdn.yueta####.com/ctaobao/file/image/201902/20190225120138.png
- cdn.yueta####.com/ctaobao/file/image/201902/20190225120147.png
- cdn.yueta####.com/ctaobao/file/image/201902/20190225120159.png
- cdn.yueta####.com/ctaobao/file/image/201902/20190225120218.png
- cdn.yueta####.com/ctaobao/file/image/201903/20190305153152.png
- cdn.yueta####.com/ctaobao/file/image/201903/20190305153208.png
- cdn.yueta####.com/ctaobao/file/image/201903/20190305153217.png
- cdn.yueta####.com/ctaobao/file/image/201903/20190305153224.png
- cdn.yueta####.com/ctaobao/file/image/202004/20200401174950.png
- cdn.yueta####.com/ctaobao/file/image/202004/20200402181419.jpg
- cdn.yueta####.com/ctaobao/file/image/202004/20200413110500.png
- cdn.yueta####.com/ctaobao/file/image/202004/20200416142303.png
- norma-e####.m####.com/android/exchange/getpublickey.do
- q####.c####.l####.####.com/config/hz-hzv6.conf
- q####.c####.l####.####.com/tdata_RTc910
- sdk.o####.p####.####.com/api/addr.htm
- sf1-ttc####.ps####.com/img/ad.union.api/51a3da2d3ae3ee943471358ea1ccb485...
- app.yueta####.com/ctaobao/api/earnOrder/appEarnHongBaoDepositInit
- app.yueta####.com/ctaobao/api/notice/noticeNum
- app.yueta####.com/ctaobao/api/shareTask/firstCopy
- app.yueta####.com/ctaobao/api/shop/appShop
- app.yueta####.com/ctaobao/brank/appBrankList
- app.yueta####.com/ctaobao/challenge/appShowJinbi
- app.yueta####.com/ctaobao/mainAdv/appGetMainAdvList
- app.yueta####.com/ctaobao/shop/appSearch
- app.yueta####.com/ctaobao/shopType/appShopType
- app.yueta####.com/ctaobao/snatch/appUserSnatchNum
- app.yueta####.com/ctaobao/sys/appLoginAdvertising
- app.yueta####.com/ctaobao/sys/appshengqianImg
- app.yueta####.com/ctaobao/user/appUserStat
- c-h####.g####.com/api.php?format=####&t=####
- norma-e####.m####.com/push/android/external/add.do
- o####.jd.com/upload
- sdk.o####.p####.####.com/api.php?format=####&t=####
- sf3-ttc####.ps####.com/service/2/app_log_exception/?openudid=####&versio...
- /data/data/####/-1127729055-1266689676
- /data/data/####/.bak
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/.jg.ri
- /data/data/####/.jg.store.report_cf
- /data/data/####/.old_file_converted
- /data/data/####/0634e6f3388ec7a3cbeccd24074a825211647bb30c3cbeb....0.tmp
- /data/data/####/0a231bd8575dcf72.txt
- /data/data/####/1021689741840853517
- /data/data/####/143970178-1509997924
- /data/data/####/1587022042710
- /data/data/####/1587022054941
- /data/data/####/98aa6072bbe6b832db3fe8b50c10c792664f32d1adbce6d....0.tmp
- /data/data/####/A3AEECD8.dex
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/JX0WDG83P1ZN.txt859
- /data/data/####/SGMANAGER_DATA2
- /data/data/####/SGMANAGER_DATA2.tmp
- /data/data/####/SG_INNER_DATA
- /data/data/####/UTCommon.xml
- /data/data/####/aa00bc91eef913dc97009231d90ff24d43d6a07b0cbdb2d....0.tmp
- /data/data/####/ap.Lock
- /data/data/####/auth_sdk_device.xml
- /data/data/####/auth_shared.xml
- /data/data/####/avmp_315435600.pkgInfo
- /data/data/####/avmp_315435600.pkgInfo.tmp
- /data/data/####/bc_config
- /data/data/####/bd_embed_tea_agent.db
- /data/data/####/bd_embed_tea_agent.db-journal
- /data/data/####/bytedance_downloader.db
- /data/data/####/bytedance_downloader.db-journal
- /data/data/####/cid
- /data/data/####/com.beweyk.ctaobao_preferences.xml
- /data/data/####/com.x.y.1.xml
- /data/data/####/com.x.y.2.xml
- /data/data/####/d242b532e763fc205518c368354287be686f620d0d2328b...5991.0
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTg3MDIyMDE4Nzg3;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTg3MDIyMDU0Mzg0;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTg3MDIyMDg1ODUw;
- /data/data/####/dc7bd9fe007effffe7
- /data/data/####/dc7dff3dc67cfff825
- /data/data/####/dc7dffa0ce7fffba3a
- /data/data/####/dc7e76c0007cf6be27
- /data/data/####/dc7f7f9fc27dff97e1
- /data/data/####/dc9e90aefef8053464
- /data/data/####/deviceid_prefs.xml
- /data/data/####/embed_applog_stats.xml
- /data/data/####/embed_last_sp_session.xml
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f9d9a7e0b29b5d7a33478b5fffec0e96be14beec35f5740....0.tmp
- /data/data/####/filedownloader.db-journal
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gkt-journal
- /data/data/####/i==1.2.0&&2.1.0_1587022019033_envelope.log
- /data/data/####/info.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/kepler_public.xml
- /data/data/####/libjiagu-91133361.so
- /data/data/####/libsgavmp_315435600000.dex
- /data/data/####/libsgavmpso-5.4.36.so
- /data/data/####/libsgavmpso-5.4.36.so.tmp.2137
- /data/data/####/libsgavmpso-5.4.36.so.tmp.2304
- /data/data/####/libsgmain_315435600000.dex
- /data/data/####/libsgmainso-5.4.171.so.tmp.2137
- /data/data/####/libsgmainso-5.4.171.so.tmp.2304
- /data/data/####/libsgsecuritybody_315435600000.dex
- /data/data/####/libsgsecuritybodyso-5.4.99.so.tmp.2137
- /data/data/####/libsgsecuritybodyso-5.4.99.so.tmp.2304
- /data/data/####/libsgsgmiddletierso-5.4.7.so.tmp.2137
- /data/data/####/libsgsgmiddletierso-5.4.7.so.tmp.2304
- /data/data/####/lock.lock
- /data/data/####/main_315435600.pkgInfo
- /data/data/####/main_315435600.pkgInfo.tmp
- /data/data/####/mipush_country_code
- /data/data/####/mipush_country_code.lock
- /data/data/####/mipush_region
- /data/data/####/mipush_region.lock
- /data/data/####/mz_push_preference.xml
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/qihoo_jiagu_crash_report.xml
- /data/data/####/run.pid
- /data/data/####/securitybody_315435600.pkgInfo
- /data/data/####/securitybody_315435600.pkgInfo.tmp
- /data/data/####/settings.xml
- /data/data/####/sgFile.lock
- /data/data/####/sgmiddletier_315435600.pkgInfo
- /data/data/####/sgmiddletier_315435600.pkgInfo.tmp
- /data/data/####/share.db
- /data/data/####/share.db-journal
- /data/data/####/smart_link_sp.xml
- /data/data/####/snssdk_openudid.xml
- /data/data/####/sp.lock
- /data/data/####/sp_push_time.xml
- /data/data/####/tdata_cpZ817
- /data/data/####/tdata_cpZ817.jar
- /data/data/####/tdata_lbt428
- /data/data/####/tdata_lbt428.jar
- /data/data/####/tdata_ycm942
- /data/data/####/tdata_ycm942.jar
- /data/data/####/timestamp
- /data/data/####/tt_dns_settings.xml
- /data/data/####/tt_sdk_settings.xml
- /data/data/####/tt_sp_app_list.xml
- /data/data/####/ttopenadsdk.xml
- /data/data/####/ttopenadsdk.xml (deleted)
- /data/data/####/ttopensdk.db
- /data/data/####/ttopensdk.db-journal
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_socialize.xml
- /data/data/####/update.xml
- /data/data/####/ut.db
- /data/data/####/ut.db-journal
- /data/data/####/webview.db
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/webviewCookiesChromium.db-journal (deleted)
- /data/data/####/webviewCookiesChromiumPrivate.db-journal
- /data/data/####/webviewCookiesChromiumPrivate.db-journal (deleted)
- /data/data/####/xUtils_http_cookie.db
- /data/data/####/xUtils_http_cookie.db-journal
- /data/data/####/xUtils_http_cookie.db-shm (deleted)
- /data/data/####/xUtils_http_cookie.db-wal
- /data/data/####/xian_wan_sp_config_table.xml
- /data/data/####/yuetaobuy_db
- /data/data/####/yuetaobuy_db-journal
- /data/data/####/yuetaobuy_db-shm (deleted)
- /data/data/####/yuetaobuy_db-wal
- /data/media/####/-1608974320.tmp
- /data/media/####/.0
- /data/media/####/.3deaedc28469674418c57af6b7cc832b
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.cca.dat
- /data/media/####/.lock
- /data/media/####/.nomedia
- /data/media/####/.umm.dat
- /data/media/####/1770783665.tmp
- /data/media/####/1797565774.tmp
- /data/media/####/1855747597.tmp
- /data/media/####/1883453227.tmp
- /data/media/####/18d2ed21a6e7170c48de5438de9b9d8e
- /data/media/####/1913929420.tmp
- /data/media/####/2020-04-16.log.txt
- /data/media/####/67d63b68ed918c0dc9b79edb8a56bbcc.tmp
- /data/media/####/67d63b68ed918c0dc9b79edb8a56bbcc.tmp (deleted)
- /data/media/####/753139719.tmp
- /data/media/####/932226597.tmp
- /data/media/####/939614765.tmp
- /data/media/####/969167437.tmp
- /data/media/####/@gs_1241_com.beweyk.ctaobao_
- /data/media/####/@gs_1241_com.beweyk.ctaobao_.lock
- /data/media/####/Alvin2.xml
- /data/media/####/Alvin2.xml (deleted)
- /data/media/####/ContextData.xml
- /data/media/####/app.db
- /data/media/####/clientudid.dat
- /data/media/####/com.beweyk.ctaobao.bin
- /data/media/####/com.beweyk.ctaobao.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/config.txt
- /data/media/####/d41d8cd98f00b204e9800998ecf8427e
- /data/media/####/dfe55732e3ae9e6e6f3a4348457e1ba7
- /data/media/####/ffde76ceccf50f6f148d9c6ab74f3f9a.tmp
- /data/media/####/gktper
- /data/media/####/hid.dat.new
- /data/media/####/sysid.dat
- /data/media/####/tdata_cpZ817
- /data/media/####/tdata_lbt428
- /data/media/####/tdata_ycm942
- /data/media/####/temp_pkg_info.json
- /data/media/####/test.log
- /data/media/####/tt_crash_count.properties
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- <Package Folder>/files/cid
- <Package Folder>/files/dc7bd9fe007effffe7
- <Package Folder>/files/dc7dff3dc67cfff825
- <Package Folder>/files/dc7e76c0007cf6be27
- <Package Folder>/files/dc7f7f9fc27dff97e1
- <Package Folder>/files/dc9e90aefef8053464
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.tools.DemoPushService 24787 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 777 <Package Folder>/files/cid
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.letv.release.version
- getprop ro.miui.ui.version.name
- getprop ro.smartisan.version
- getprop ro.vivo.os.build.display.id
- getprop ro.vivo.os.version
- ls /
- ls /sys/class/thermal
- sh
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.tools.DemoPushService 24787 300 0
- A3AEECD8
- getuiext2
- libjiagu-91133361
- nms
- pl_droidsonroids_gif
- sgavmpso-5.4
- sgmainso-5.4
- sgsecuritybodyso-5.4
- sgsgmiddletierso-5.4
- tobEmbedEncrypt
- ut_c_api
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding