Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) pub-####.qin####.com:80
- TCP(HTTP/1.1) scs.opensp####.cn:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8011
- TCP(HTTP/1.1) img2-c####.itou####.cn:80
- TCP(HTTP/1.1) h####.opensp####.cn:80
- TCP(HTTP/1.1) beacon####.aliy####.com:80
- TCP(HTTP/1.1) l####.tbs.qq.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8012
- TCP(HTTP/1.1) cloud####.fengkon####.com:80
- TCP(HTTP/1.1) gl####.w.kunl####.####.com:80
- TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
- TCP(HTTP/1.1) f####.fengkon####.com:80
- TCP(TLS/1.0) ap####.ji####.com:443
- TCP(TLS/1.0) t####.c####.q####.####.com:443
- TCP(TLS/1.0) 2####.107.1.65:443
- TCP(TLS/1.0) ada####.m.ta####.com:443
- TCP(TLS/1.0) app-hy####.ji####.com:443
- TCP(TLS/1.0) g.al####.com:443
- TCP(TLS/1.0) 2####.107.1.97:443
- TCP(TLS/1.0) mbp.ji####.com:443
- TCP(TLS/1.0) acg####.ji####.com:443
- TCP(TLS/1.0) img####.ji####.com:443
- TCP(TLS/1.0) redi####.network####.com:443
- TCP(TLS/1.0) dc1.network####.com:443
- TCP(TLS/1.0) 2####.107.1.1:443
- TCP(TLS/1.0) a####.ji####.com:443
- TCP(TLS/1.0) img.ji####.com:443
- TCP(TLS/1.0) 1####.1.161.108:443
- TCP(TLS/1.0) sh.wagbr####.ta####.com:443
- TCP(TLS/1.0) s####.ji####.com:443
- TCP(TLS/1.0) hm.b####.com:443
- TCP(TLS/1.0) jktt####.ji####.com:443
- TCP(TLS/1.0) beacon####.aliy####.com:443
- TCP c####.g####.ig####.com:5227
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.b####.qq.com
- a####.ji####.com
- a####.man.aliy####.com
- acg####.ji####.com
- ada####.ut.ta####.com
- adas####.ut.ta####.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- ap####.ji####.com
- app-hy####.ji####.com
- beacon####.aliy####.com
- c####.g####.ig####.com
- c-h####.g####.com
- cloud####.fengkon####.com
- d####.opensp####.cn
- dc1.network####.com
- f####.fengkon####.com
- fe-acg####.ji####.com
- g.al####.com
- h####.opensp####.cn
- hm.b####.com
- hotfix####.aliy####.com
- i####.c####.itou####.cn
- i####.ji####.com
- img####.ji####.com
- img.ji####.com
- img2-c####.itou####.cn
- jktt####.ji####.com
- l####.tbs.qq.com
- mbp.ji####.com
- pub-####.qin####.com
- redi####.network####.com
- s####.ji####.com
- scs.opensp####.cn
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- w####.ji####.com
- gl####.w.kunl####.####.com/tvtouchtv/image/20170731/1501470983904780.gif
- gl####.w.kunl####.####.com/tvtouchtv/image/20170731/1501470984932924.gif
- h####.opensp####.cn/launchconfig?t=####&p=bWFsb####
- img2-c####.itou####.cn/tvtouchtv/image/20170731/touchtv76-15014709819863...
- img2-c####.itou####.cn/tvtouchtv/image/20170918/touchtv64-15057154737200...
- img2-c####.itou####.cn/tvtouchtv/image/20180526/1527298227533293.jpg
- img2-c####.itou####.cn/tvtouchtv/image/20180526/1527298227636891.jpg
- img2-c####.itou####.cn/tvtouchtv/image/20180526/1527298227941922.jpg
- img2-c####.itou####.cn/tvtouchtv/image/20181015/1539583236771842.jpg
- img2-c####.itou####.cn/tvtouchtv/image/20181127/1543289426574659.jpg
- img2-c####.itou####.cn/tvtouchtv/image/20181127/1543289746615167.jpg
- img2-c####.itou####.cn/tvtouchtv/image/20181128/1543375742734226.jpg
- img2-c####.itou####.cn/tvtouchtv/image/20181128/1543375742824822.jpg
- img2-c####.itou####.cn/tvtouchtv/image/20181128/1543375743473138.jpg
- pub-####.qin####.com/tdata_EDT356
- t####.c####.q####.####.com/tdata_bca864
- t####.c####.q####.####.com/tdata_fyR930
- aexcep####.b####.qq.com:8011/rqd/async
- aexcep####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- beacon####.aliy####.com/beacon/fetch/config/byappkey
- c-h####.g####.com/api.php?format=####&t=####
- cloud####.fengkon####.com/v2/device/conf
- f####.fengkon####.com/v2/device/profile
- l####.tbs.qq.com/ajax?c=####&k=####
- scs.opensp####.cn/index.php/clientrequest/clientcollect/isCollect
- scs.opensp####.cn/scs?cmd=####&logver=####&size=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- sh.wagbr####.aliyun####.com/man/api?ak=####&s=####
- /data/data/####/14c424f1f9c6910c5140dc03933720298684d6f88fd071c....0.tmp
- /data/data/####/1a162f8840bdf0cc3b890f6b0a3fbc70f3a40eea3fdc48f....0.tmp
- /data/data/####/1e8d92e859a8132230a9851b6d71203b93a7f1fa11eee53....0.tmp
- /data/data/####/2c115283e0551440aa4f3fe340bcc9de1c288a683937162....0.tmp
- /data/data/####/38f0c648d46ef670a53a99cd2f4986cc2a5bbd3a0e5c9f4....0.tmp
- /data/data/####/3ebecb819f6b60a01335b2f5918054465b9f286833154a0....0.tmp
- /data/data/####/3f7c14506b9d3a16f905c6dd1293ab8ee5317d5c4f52378....0.tmp
- /data/data/####/3fd256ec741c28928d8ec9ee9707169cc49e6b2b608eab1....0.tmp
- /data/data/####/596b103aeca73f316637e0a599570e4be9a079fc42d3363....0.tmp
- /data/data/####/5dca8690a1ecb5a5dba8605308f00e0850b1335884cce5f....0.tmp
- /data/data/####/681d66eb5b8bb0a997144159cf956ea9c479ca2ecf09edb....0.tmp
- /data/data/####/753cb89a906e
- /data/data/####/77ebc8643634156d2073ccb136e17c0a5439dc26533111e....0.tmp
- /data/data/####/7914eea9864745821e1d0d42d7d36c800874e058a13c66d....0.tmp
- /data/data/####/81403ce251d69b4ab18c411b09233a226abe6f8a475a074....0.tmp
- /data/data/####/8512034104bbaf27967665feec2697d2779ff4b4eeb1ac5....0.tmp
- /data/data/####/85fd60ab29268a8346f95e0f28ab59cc3e78eeed8d245ab....0.tmp
- /data/data/####/914744216faa6e882b959541ef0060f164b2ec6ffc4d8ba....0.tmp
- /data/data/####/982f795c072df3d67df49acd5caa88ebac47559f4b0d828....0.tmp
- /data/data/####/9d09cf9c2aaccf073338966cb15a2a524c10a54a3254bb9....0.tmp
- /data/data/####/Alvin2.xml
- /data/data/####/ApplicationCache.db-journal
- /data/data/####/ContextData.xml
- /data/data/####/JK_AreaRegion.xml
- /data/data/####/NBSCrashStore.xml
- /data/data/####/SP_AROUTER_CACHE.xml
- /data/data/####/UTCommon.xml
- /data/data/####/a26204e8a3ec16985e3a071c35007ecbee9cace9c88c660....0.tmp
- /data/data/####/a401d5db5eae6625ab15c23d4358133f580f664116d1f32....0.tmp
- /data/data/####/ap.Lock
- /data/data/####/b0f591684af0206000c886568c1d0e699a1e46a24f87425....0.tmp
- /data/data/####/b9b54b67cf5978e7f75c8e1a064533300d7b9eeff9b2707....0.tmp
- /data/data/####/bf2c9e43a572c0d6fc7e61fe3982ce2b79d745a3e657261....0.tmp
- /data/data/####/bugly_db_legu-journal
- /data/data/####/c8a54eca665c33160dd293bf29f87e2a1c930de87dc441e....0.tmp
- /data/data/####/cb545c6e0622f2998d91611843fce5812c903bbfc9079ea....0.tmp
- /data/data/####/ce4b22080e3bab0ffdd4787fab1843719e1fa2a60cd83f2....0.tmp
- /data/data/####/cloudms.conf.xml
- /data/data/####/com.iflytek.id.xml
- /data/data/####/com.iflytek.msc.xml
- /data/data/####/com.jiankecom.jiankemall-journal
- /data/data/####/com.jiankecom.jiankemall.cache.SplashCache.xml
- /data/data/####/com.jiankecom.jiankemall_preferences.xml
- /data/data/####/com.networkbench.agent.impl.v2_com.jiankecom.ji...ll.xml
- /data/data/####/com.sensorsdata.analytics.android.sdk.SensorsDataAPI.xml
- /data/data/####/com.shumei.xml
- /data/data/####/com_alibaba_aliyun_crash_defend_sdk_info
- /data/data/####/core_info
- /data/data/####/d9407815f2699e1d1996fdc601ba36b52aaddfbdf5316a1....0.tmp
- /data/data/####/daa3b15e59484bd2636cfd0c4a02bb35d9be73d73ff631e....0.tmp
- /data/data/####/data.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/deb3363167e9af034a151b458068f50d9ab1d579727e7e8....0.tmp
- /data/data/####/debug.conf
- /data/data/####/f6084a7484641b13051e2c592617552faa69d75cda0c94e....0.tmp
- /data/data/####/f785b2335e26419d3632d90501a6a5c0d74cd098906e4e5....0.tmp
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/f_00000b
- /data/data/####/f_00000c
- /data/data/####/f_00000d
- /data/data/####/f_00000e
- /data/data/####/f_00000f
- /data/data/####/f_000010
- /data/data/####/f_000011
- /data/data/####/f_000012
- /data/data/####/f_000013
- /data/data/####/f_000014
- /data/data/####/f_000015
- /data/data/####/f_000016
- /data/data/####/first_pref.xml
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/head_line.xml
- /data/data/####/httpdns_config_cache.xml
- /data/data/####/ifly_launch_lib.xml
- /data/data/####/iflytek_state_com.jiankecom.jiankemall.xml
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/init_tables_pref.xml
- /data/data/####/jk_appupdate_on.xml
- /data/data/####/jk_chat_setting.xml
- /data/data/####/jk_current_versioncode.xml
- /data/data/####/jk_first_install.xml
- /data/data/####/jk_mall.db-journal
- /data/data/####/jk_myheadline_domain.xml
- /data/data/####/jk_presentgift_setting.xml
- /data/data/####/jk_rxsetting.xml
- /data/data/####/jk_sp_member.xml
- /data/data/####/journal.tmp
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/mail_settings.xml
- /data/data/####/mix.dex
- /data/data/####/multidex.version.xml
- /data/data/####/my_setting_pref.xml
- /data/data/####/native_record_lock
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/sensorsdata.xml
- /data/data/####/seq.xml
- /data/data/####/sp_jk_component_setting.xml
- /data/data/####/sp_jk_dynamicdns.xml
- /data/data/####/sp_jk_is_openhttpdns.xml
- /data/data/####/sp_search_keyword.xml
- /data/data/####/sp_showphotoscan.xml
- /data/data/####/sp_sophix.xml
- /data/data/####/tbs_download_config.xml
- /data/data/####/tbs_download_stat.xml
- /data/data/####/tbscoreinstall.txt
- /data/data/####/tbslock.txt
- /data/data/####/tdata_bca864
- /data/data/####/tdata_bca864.jar
- /data/data/####/tdata_fyR930
- /data/data/####/tdata_fyR930.jar
- /data/data/####/tracker.db-journal
- /data/data/####/ut.db
- /data/data/####/ut.db-journal
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/.2F6E2C5B63F0F83B
- /data/media/####/.nomedia
- /data/media/####/.thumbcache_idx0
- /data/media/####/01526ef4bb15839b2fbfcea2d991d99f.0.tmp
- /data/media/####/01526ef4bb15839b2fbfcea2d991d99f.1.tmp
- /data/media/####/161499b0e1701965e9f8d297400902fc.0.tmp
- /data/media/####/161499b0e1701965e9f8d297400902fc.1.tmp
- /data/media/####/4b2b0a613c57067fa5f669b2eb9ff59b.0.tmp
- /data/media/####/4b2b0a613c57067fa5f669b2eb9ff59b.1.tmp
- /data/media/####/67612623a26c21c18795ca24f1463aaf.0.tmp
- /data/media/####/67612623a26c21c18795ca24f1463aaf.1.tmp
- /data/media/####/67888c5226d00cbbc374f167a09e8505.0.tmp
- /data/media/####/67888c5226d00cbbc374f167a09e8505.1.tmp
- /data/media/####/95edd49b5e5843d0187ed486c4e430f3.0.tmp
- /data/media/####/95edd49b5e5843d0187ed486c4e430f3.1.tmp
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/app.db
- /data/media/####/c42aaff01603cb775d7556613c909816.0.tmp
- /data/media/####/c42aaff01603cb775d7556613c909816.1.tmp
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.jiankecom.jiankemall.db
- /data/media/####/e82a4d24576ca116dd8ab02b1cb993d3.0.tmp
- /data/media/####/e82a4d24576ca116dd8ab02b1cb993d3.1.tmp
- /data/media/####/f514d2c0d652f16a89b6733d8732ce39.0.tmp
- /data/media/####/f514d2c0d652f16a89b6733d8732ce39.1.tmp
- /data/media/####/helpYouProductList.json
- /data/media/####/homepageListsNew.json
- /data/media/####/iflyworkdir_test
- /data/media/####/journal.tmp
- /data/media/####/navigationBarAndSearchTitleResponse.json
- /data/media/####/shumei.txt
- /data/media/####/tdata_bca864
- /data/media/####/tdata_fyR930
- /data/media/####/test.log
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.igexin.sdk.PushService 25404 300 0
- cat /proc/self/cgroup
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.product.cpu.abi
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- mount
- ps
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/com.igexin.sdk.PushService 25404 300 0
- Bugly
- getuiext3
- libnfix
- libshella-2.9.0.2
- libufix
- msc
- nfix
- smsdk
- ufix
- ut_c_api
- AES-CBC-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-GCM-NoPadding
- DES-ECB-NoPadding