Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.umengc####.com:80
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) l####.tbs.qq.com:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) a####.b####.qq.com:8012
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) oss.newairc####.com:80
- TCP(HTTP/1.1) a####.b####.qq.com:8011
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) h5.newairc####.com:80
- TCP(TLS/1.0) oss.newairc####.com:443
- TCP(TLS/1.0) s####.ml####.cc:443
- TCP(TLS/1.0) h5.newairc####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5224
- 7j####.c####.z0.####.com
- a####.b####.qq.com
- a####.u####.com
- a####.umengc####.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- c####.g####.ig####.com
- c-h####.g####.com
- h5.newairc####.com
- img.newairc####.com
- l####.tbs.qq.com
- oss.newairc####.com
- s####.ml####.cc
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- h5.newairc####.com/api/getArticleAdv?sid=####&cid=####&v=####
- h5.newairc####.com/api/getComments?sid=####&rootID=####&sourceType=####&...
- oss.newairc####.com/wzsb/pic/201704/10/6c3c4500-e3f5-481b-8112-dd4c1f7c5...
- oss.newairc####.com/wzsb/pic/201704/10/e89bde07-3bdc-4a6e-bb6c-cdaad9b05...
- oss.newairc####.com/wzsb/pic/201705/04/0ca2266f-1ab3-4b15-a018-10d01053a...
- ti####.c####.l####.####.com/config/hz-hzv3.conf
- a####.b####.qq.com:8011/rqd/async
- a####.b####.qq.com:8012/rqd/async
- a####.u####.com/app_logs
- a####.umengc####.com/app_logs
- and####.b####.qq.com/rqd/async
- c-h####.g####.com/api.php?format=####&t=####
- h5.newairc####.com/api/event
- l####.tbs.qq.com/ajax?c=####&k=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/-1312716470
- /data/data/####/-1383909353
- /data/data/####/-1383910538
- /data/data/####/-1383910560
- /data/data/####/-1383910561
- /data/data/####/-1383910562
- /data/data/####/-1383910563
- /data/data/####/-1383910564
- /data/data/####/-1383910565
- /data/data/####/-1383910567
- /data/data/####/-1383910569
- /data/data/####/-1383911242
- /data/data/####/-1383911243
- /data/data/####/-147392250
- /data/data/####/-1688379949
- /data/data/####/-525331557
- /data/data/####/04d677cdbef103ae4ef3325ae7d1fa7772642c696ef8e4f....0.tmp
- /data/data/####/06c690bce781797dcc2dbb7b63c632a5ebd8444feea2521....0.tmp
- /data/data/####/09cc3364a2ec609be00717b70d0f832d25023a5c093c52a....0.tmp
- /data/data/####/0e4f2b590c7ff469614bf1307a7b606d31394fc1e5124b1....0.tmp
- /data/data/####/1007795164
- /data/data/####/1370902812
- /data/data/####/1389023919
- /data/data/####/1526646622
- /data/data/####/1602f28c6e774903a7ea7144e7c91047ffe1076ca34906e....0.tmp
- /data/data/####/1695857311
- /data/data/####/1864066650
- /data/data/####/2014265893
- /data/data/####/2432ef65227c34bab09c7bd44c30121e1c1c603dabead4f....0.tmp
- /data/data/####/2709e274d5460aad5930ae6dc9b93563bc708d237432621....0.tmp
- /data/data/####/30a1e679dd26b0faf909dbdd484a0437f3834b441d86865....0.tmp
- /data/data/####/337525857
- /data/data/####/386967948
- /data/data/####/3a5b50f99b257ba73fc1015d9f5b275f536bdb4788de7c2....0.tmp
- /data/data/####/409288795
- /data/data/####/418e17da141185f10b16ecc5e642c83cd4acbc5c4919cae....0.tmp
- /data/data/####/471328409
- /data/data/####/49
- /data/data/####/492204155
- /data/data/####/4ba2ec1113b91aceb8d86b8c042fb616edd70ae5d355df2....0.tmp
- /data/data/####/4c53b907c9df5f32e59ff31f9f2bdebac450434606f3557....0.tmp
- /data/data/####/533368023
- /data/data/####/564387830
- /data/data/####/57346c273e527984d70883ab3097101fd0bdc160e98958d....0.tmp
- /data/data/####/595407637
- /data/data/####/5b62a784a60351c46a96d55a908477d1839655fd1aa490f....0.tmp
- /data/data/####/626427444
- /data/data/####/627393b6f7500f8502f2d9df261ffc8d8dd945cf2b8598d....0.tmp
- /data/data/####/627393b6f7500f8502f2d9df261ffc8d8dd945cf2b8598d...8c2d.0
- /data/data/####/6472852_article.js
- /data/data/####/657447251
- /data/data/####/688467058
- /data/data/####/6b3d4ff4834de6de166db76dfa2ac485c94b24aff7ef09b....0.tmp
- /data/data/####/722611682
- /data/data/####/7eac47f9337992e97d4d87dc4ccced1b7e836dc90bb1da2....0.tmp
- /data/data/####/8593e1f5e17fc9a12b9fb13dd473814929af46ef69c93f2....0.tmp
- /data/data/####/8b4f201422a3967ed07656bb24926994b65a3299cf59a8e....0.tmp
- /data/data/####/976775357
- /data/data/####/978508812
- /data/data/####/98fdb8ef1906b26acaa35c4709e58e32be0eca95c4bf2e4....0.tmp
- /data/data/####/9f657e4da2abf2116856f6f92f7bae3f5f36eb51a200495....0.tmp
- /data/data/####/FZLTXHK-GBK_YS.ttf
- /data/data/####/QQ_3x.png
- /data/data/####/a15c70d9802424cc53b4ccda1ae0ed62a85ed11ffe7dbb1....0.tmp
- /data/data/####/add630c44a84c010d1957ca9add1f7ed18b2468f354ec93....0.tmp
- /data/data/####/afb76a8bd31087f7dfc1ce4b13838eba1f73429e6fdd7bf....0.tmp
- /data/data/####/amazeui.min.css
- /data/data/####/amazeui.min.js
- /data/data/####/angular1.4.6.min.js
- /data/data/####/article.js
- /data/data/####/b34e370a9d0dfe1077b5043a27db533699d2f1c692bb831....0.tmp
- /data/data/####/b50d9c23f732aacfceb1598f180bd40e6237d47ccaf704b....0.tmp
- /data/data/####/base.css
- /data/data/####/bd6ff4386225892e72982193a1c11faf28490badd6e49d3....0.tmp
- /data/data/####/bugly_db_legu-journal
- /data/data/####/c48f507930f8de250dae38027acf727edd521574088a650....0.tmp
- /data/data/####/c57a01927e22dac74b61c37c8e0d16b84f5256696a4bec4....0.tmp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/cdbb62467ff9709634adf05d40d40c11c335018f4aaa77a....0.tmp
- /data/data/####/columnId.xml
- /data/data/####/com.founder.wenzhoushangbao-1.apk.classes1291540224.zip
- /data/data/####/core_info
- /data/data/####/d4f573bd51a71e2d6bba6ac54723907efdc329f37c5c288....0.tmp
- /data/data/####/d4f573bd51a71e2d6bba6ac54723907efdc329f37c5c288...63f2.0
- /data/data/####/da8729657e38c8bf61a336dce2acde152fbc377c4e5a07c....0.tmp
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/db_founder0-journal
- /data/data/####/debug.conf
- /data/data/####/device_id.xml.xml
- /data/data/####/ea8c974b56c6d2e6d1339890f7fdaf8becf086db7c8b1a1....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f68e2c8320560925c4d6d172b60593b81205bcec5292711....0.tmp
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/fcde07916b268155eff73a80f4734084a19dc8343747bfd....0.tmp
- /data/data/####/file__0.localstorage-journal
- /data/data/####/fontawesome-webfont.ttf
- /data/data/####/getui_sp.xml
- /data/data/####/great_button.png
- /data/data/####/great_cancel_button.png
- /data/data/####/helpMsg.xml
- /data/data/####/icon-images.png
- /data/data/####/icon_audio_play.png
- /data/data/####/icon_file.png
- /data/data/####/icon_file_down.png
- /data/data/####/icon_meta_voice.png
- /data/data/####/icon_praise.png
- /data/data/####/icon_praiseStar.png
- /data/data/####/icon_selector_normal.png
- /data/data/####/icon_selector_press.png
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/jquery.min2.2.0.js
- /data/data/####/js.combine.min.js
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.10.1.so
- /data/data/####/libufix.so
- /data/data/####/loading.png
- /data/data/####/local_crash_lock
- /data/data/####/mix.dex
- /data/data/####/multidex.version.xml
- /data/data/####/mwsdk_analytics.db-journal
- /data/data/####/native_record_lock
- /data/data/####/news_detail.html
- /data/data/####/persistent_data.xml
- /data/data/####/play.png
- /data/data/####/push.pid
- /data/data/####/pushsdk.db-journal
- /data/data/####/reader.db-journal
- /data/data/####/run.pid
- /data/data/####/sanjiaoxing.png
- /data/data/####/security_info
- /data/data/####/shareTimeline_3x.png
- /data/data/####/sina_3x.png
- /data/data/####/tbs_download_config.xml
- /data/data/####/tbs_download_stat.xml
- /data/data/####/tbscoreinstall.txt
- /data/data/####/tbslock.txt
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_cache_1551457563970.env
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/video.png
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/wx_3x.png
- /data/media/####/.nomedia
- /data/media/####/app.db
- /data/media/####/com.founder.wenzhoushangbao.bin
- /data/media/####/com.founder.wenzhoushangbao.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/journal.tmp
- /data/media/####/localTemplate.zip
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.10.1.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.product.cpu.abi
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- Bugly
- getuiext2
- libnfix
- libshella-2.10.1
- libufix
- nfix
- ufix
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding