Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- UDP(DNS) 1####.114.114.114:53
- TCP(HTTP/1.1) reso####.msg.xi####.net:80
- TCP(HTTP/1.1) 58.2####.51.12:80
- TCP(HTTP/1.1) pi####.qq.com:80
- TCP(HTTP/1.1) 58.2####.51.6:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) 58.2####.6.43:80
- TCP(HTTP/1.1) 2####.92.152.19:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8011
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8012
- TCP(HTTP/1.1) 1####.185.145.134:80
- TCP(HTTP/1.1) 1####.185.144.40:80
- TCP(HTTP/1.1) t####.qq.com:8080
- TCP(HTTP/1.1) t####.qq.com:14000
- TCP(HTTP/1.1) t####.qq.com:80
- TCP(HTTP/1.1) 1####.254.116.117:80
- TCP(TLS/1.0) 47.2####.17.253:443
- TCP(TLS/1.0) 1####.185.144.40:443
- TCP(TLS/1.0) regi####.xm####.xi####.com:443
- TCP 4####.62.94.2:443
- TCP 47.74.1####.155:5222
- TCP t####.qq.com:8080
- TCP maa####.chinane####.com:6666
- TCP 1####.185.144.40:6666
- TCP t####.qq.com:80
- TCP t####.qq.com:443
- a####.b####.qq.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- maa####.chinane####.com
- pi####.qq.com
- regi####.xm####.xi####.com
- reso####.msg.xi####.net
- t####.qq.com
- reso####.msg.xi####.net/gslb/?ver=####&type=####&conpt=####&uuid=####&li...
- aexcep####.b####.qq.com:8011/rqd/async
- aexcep####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- pi####.qq.com/mstat/report/?index=####
- t####.qq.com/203.205.146.122:80/
- t####.qq.com:14000/203.205.211.75:14000/
- t####.qq.com:8080/203.205.146.122:8080/
- /data/data/####/-1120630569-225863295
- /data/data/####/-1375849657-1138424799
- /data/data/####/-1460420160
- /data/data/####/-40032426599101157
- /data/data/####/-40032426599101192
- /data/data/####/-5605657971044170427
- /data/data/####/-lcGop2GYiIqljjmF2QDyAhTero.117200993.tmp
- /data/data/####/-pDmrD7Dv6Y97GKCX2PjOpMLc6U.-1020637866.tmp
- /data/data/####/.com.tuan800.tao800;pushservice.xg.stat..xml
- /data/data/####/.tpns.service.xml.xml
- /data/data/####/.tpns.settings.xml.xml
- /data/data/####/.tpush_mta.xml
- /data/data/####/0a231bd8575dcf72.txt
- /data/data/####/0zefTeOB2rdJ5T_ZnoJj2WssIlA.-16321733.tmp
- /data/data/####/1400982653-939341454
- /data/data/####/1634632487-1683221978
- /data/data/####/1924619549-1966086770
- /data/data/####/1d77ea041509fe06.lock
- /data/data/####/20342923261293446306
- /data/data/####/21c22f492aba3de8.lock
- /data/data/####/230448042-526842374
- /data/data/####/25-7c24eKiWPsd_SK7yEoVaYB1Q.-1114709196.tmp
- /data/data/####/2TzE6axTeeA8U0DcP0m6xYN6ztM.1961069357.tmp
- /data/data/####/4601248761631842734
- /data/data/####/535338623311466192
- /data/data/####/5cwxlspkHwtPPjsdlF12AQ6PUPg.66867314.tmp
- /data/data/####/5iFhtAk4_3ud6HYtRUmQgdUOhb8.-2016230720.tmp
- /data/data/####/7448088071624061633
- /data/data/####/8524030111125605478
- /data/data/####/85dDu1ZpU5qSa8x9rFHo5HglaVg.557320979.tmp
- /data/data/####/8ef9c457b3bbb403.lock
- /data/data/####/930a31b34bd52c08.lock
- /data/data/####/975872557
- /data/data/####/AlibcLinkPartner.xml
- /data/data/####/Alvin2.xml
- /data/data/####/AzCG31BmN73FIQD4XMQEA5wvAQA.-1932264781.tmp
- /data/data/####/ContextData.xml
- /data/data/####/DXpWC2KU3dXPSjZnaR-YR__X8dQ.-1959084344.tmp
- /data/data/####/EWwgEuEaDOS0WiiSjU91o9mccSE.1804757472.tmp
- /data/data/####/J_d7ChpsnCbHDdK2qtzwommEc9Q.1165670033.tmp
- /data/data/####/Kdl64QjnXK_v5mf6Q0C-vvn4SmI.-1033731917.tmp
- /data/data/####/MultiDex.lock
- /data/data/####/MzlnIdvPsJyPjLjHIjfCwKGNjSo.-369780447.tmp
- /data/data/####/N9y9MLtKu02GHNuWRyVD02jGZ_w.1432170955.tmp
- /data/data/####/PJp8vccAwkPasb073vezFv1tKX4.-2111047745.tmp
- /data/data/####/PpEJ6r9Bl0VZ6IyqWU1eeA0USRE.452093874.tmp
- /data/data/####/Pw_fxi6iChX5JEb7e73T516mv4I.-177796504.tmp
- /data/data/####/QppROp3H0QBmi9Ct-8nLtCIPRNg.-1880094345.tmp
- /data/data/####/R0IUMIc3XAQkp91Qy66jQxUVUtM.-846416289.tmp
- /data/data/####/S8_99Cvpl-nT7VrxlBP_vshmjqU.1941639277.tmp
- /data/data/####/SGMANAGER_DATA2.tmp
- /data/data/####/UPR7fOWEWmXIL3UndEDteBWhbhc.-1979351559.tmp
- /data/data/####/UTCommon.xml
- /data/data/####/UWj9KPcEWc0ZE4A2wDY0Ro3k_m0.-462787130.tmp
- /data/data/####/VfQzJsy8T5K92Q9C8vLLA2Xtcd8.1503262923.tmp
- /data/data/####/W90kItTFbiHl0CAS8uaXPyIaySc.-1931922088.tmp
- /data/data/####/XGOyupRDAfAFOzkjnplHW1sVfLI.2118010767.tmp
- /data/data/####/XJ1201_u9CAPVuVqHL3zsz-jGEY.-2092090895.tmp
- /data/data/####/XMPushServiceConfig.xml
- /data/data/####/Xw9RlEUYG7e1rry4DLnx7U34fxw.-406480716.tmp
- /data/data/####/YlUF_xQ_oALzrn6MCp7wtPcJnCE.-467545983.tmp
- /data/data/####/YzdlvzSx5Nle0wwxymKJ6k11VBY.-1026948924.tmp
- /data/data/####/Z9r16WL-B2DdTOY0VOSFkODfSSU.236233053.tmp
- /data/data/####/aliTradeConfigSP.xml
- /data/data/####/ap.Lock
- /data/data/####/auth_sdk_device.xml
- /data/data/####/bQ0ARa749YBpzCYppvAJvgrcrN4.595178322.tmp
- /data/data/####/bUS-AuOD_FBHpJL5llmHPOWdHbY.470177339.tmp
- /data/data/####/bugly_db_legu
- /data/data/####/bugly_db_legu-journal
- /data/data/####/cSSNBpeYhz3d-7fmhIFxn5iLwg0.733642907.tmp
- /data/data/####/com.tuan800.tao800.userCenter.xml
- /data/data/####/com.tuan800.tao800;pushservice
- /data/data/####/com.tuan800.tao800SWITCH_SP.xml
- /data/data/####/com.tuan800.tao800_homeheader.xml
- /data/data/####/com.tuan800.tao800_jump_to_h5_url.xml
- /data/data/####/com.tuan800.tao800_npi.xml
- /data/data/####/com.tuan800.tao800_order.xml
- /data/data/####/com.tuan800.tao800_pintuan.xml
- /data/data/####/com.tuan800.tao800_preferences.xml
- /data/data/####/com.tuan800.tao800_share_info.xml
- /data/data/####/com.tuan800.tao800_sign.xml
- /data/data/####/com.tuan800.tao800_taoheader.xml
- /data/data/####/com.tuan800.tao800_user_center.xml
- /data/data/####/com.tuan800.tao800collected_brand.xml
- /data/data/####/com.tuan800.tao800static_file_click_model.xml
- /data/data/####/com.tuan800.tao800static_file_exp.xml
- /data/data/####/com.tuan800.tao800static_file_mobilelog.xml
- /data/data/####/com.tuan800.tao800static_file_model.xml
- /data/data/####/com.tuan800.tao800static_file_outclick.xml
- /data/data/####/com.tuan800.tao800static_file_page.xml
- /data/data/####/com.tuan800.tao800static_file_page.xml.bak (deleted)
- /data/data/####/com.tuan800.tao800static_file_pageclick.xml
- /data/data/####/com.tuan800.tao800static_file_setkey_value.xml
- /data/data/####/com.tuan800.tao800static_file_share.xml
- /data/data/####/com.tuan800.tao800static_file_static.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/device_id.xml
- /data/data/####/dso_deps
- /data/data/####/dso_lock
- /data/data/####/dso_manifest
- /data/data/####/dso_state
- /data/data/####/dynamicamapfile.db
- /data/data/####/dynamicamapfile.db-journal
- /data/data/####/event_com.tuan800.tao800.log
- /data/data/####/f1WtlEkR7ATx1lfxJaUEznN_61Q.607414235.tmp
- /data/data/####/fVgT70NycJ1eYUDmgbv3yfxSJkY.966508713.tmp
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/geofencing.db
- /data/data/####/geofencing.db-journal
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/hqN2Zk7pXcoufwyAjYKhcAYfXy4.998411918.tmp
- /data/data/####/index
- /data/data/####/jz7cQcjstefwFw2RFC45W83e8V4.91895885.tmp
- /data/data/####/libnfix.so
- /data/data/####/libsgmainso-5.1.81.so.tmp
- /data/data/####/libsgsecuritybodyso-5.1.25.so.tmp
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/lock.lock
- /data/data/####/lock.tmp
- /data/data/####/loctemp.so
- /data/data/####/matosdk_preference.xml
- /data/data/####/mipush.xml
- /data/data/####/mipush_account.xml
- /data/data/####/mipush_extra.xml
- /data/data/####/mipush_region
- /data/data/####/mipush_region.lock
- /data/data/####/mix.dex
- /data/data/####/mix.so
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/pQuwvQJxyD4b4Ev4aTJWCzvaauQ.-367943557.tmp
- /data/data/####/pZ6Vr365Wrprpy4C4YsdqGrRhC0.1252096318.tmp
- /data/data/####/ppa4JT3jZB1eZ52dd4E9tw7ziLA.1280741137.tmp
- /data/data/####/pref.xml
- /data/data/####/q79PYNBPJjQb8lxgLihsnA4Jmq8.-2048488166.tmp
- /data/data/####/qEllzBlBfa2ow0lG_fEJKjhNgu8.944335877.tmp
- /data/data/####/qlcVWKwu9fiCCqK0rAsNa1lO2YM.1395531528.tmp
- /data/data/####/rxrtG9ZSkfI-awFK0_JxE9v_ndA.-2080142395.tmp
- /data/data/####/security_info
- /data/data/####/sp.lock
- /data/data/####/sp_sophix.xml
- /data/data/####/tG_iJt-0jtxrZWa6HQxDD9ug15k.-1135393750.tmp
- /data/data/####/tJqYcc1JSPsSRgJZePxREr7m1WY.180908303.tmp
- /data/data/####/tao800.db-journal
- /data/data/####/timestamp
- /data/data/####/tiny_data.data
- /data/data/####/tiny_data.lock
- /data/data/####/tpush.shareprefs.xml
- /data/data/####/ut.db
- /data/data/####/ut.db-journal
- /data/data/####/uzojjomrabCdqsKS0Hg1SY8klSQ.533533507.tmp
- /data/data/####/vv1LVERvcfNhVbyKnGYFfqdWfqo.-394198468.tmp
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/webviewCookiesChromiumPrivate.db-journal
- /data/data/####/wspx
- /data/data/####/zHTOOH9kmfHg2GdUeAsorGiMSOw.1948348576.tmp
- /data/media/####/.nomedia
- /data/media/####/1jr65m4qb6xv4redv1bmluj2c
- /data/media/####/1x4v67b3y2gs4501m0yawk0ul
- /data/media/####/1xpkdo9tzugkvmqyvrugeun9w
- /data/media/####/3u8ha68w1v3suvyz3lo7kgtfk
- /data/media/####/42b3goe37jr22dz5cnjxlphhg
- /data/media/####/44sue9aleeoulk4i4uwm3rg3z
- /data/media/####/5gzmjcoqdnedwc3o1pyax1dky
- /data/media/####/636nz9dcje0zuytvdq16puq2n
- /data/media/####/6c709c11d2d46a7b
- /data/media/####/6rdvkzlpmeyl0zxyn39n8je0o
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/d6bzkjyt771vpmlpeoh94xk6
- /data/media/####/dd7893586a493dc3
- /data/media/####/hid.dat
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- sh <Package Folder>/lib/libxguardian.so <Package>,2100252513; 55561 203.205.128.130 [{ idx :0, ts :%d, et :2000, si :0, ui : <IMEI> , ky : Axg%lu , mid : 0 , ev :{ ov : 18 , sr : 600*752 , md : <System Property> , lg : en , sv : 3.12 , mf : unknown , apn : %s }}] 0 18
- Bugly
- com.maa
- libgifimage
- libimagepipeline
- libnfix
- libshella-2.9.0.2
- libufix
- nfix
- pl_droidsonroids_gif
- sgmainso-5.1
- sgsecuritybodyso-5.1
- sqlcipher
- tpnsSecurity
- ufix
- ut_c_api
- AES-CBC-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- AES-GCM-NoPadding
- DES-ECB-PKCS5Padding