Technical information
- Adware.Gexin.2.origin
- UDP(DNS) 8####.8.4.4:53
- TCP(HTTP/1.1) 2####.119.215.136:80
- TCP(HTTP/1.1) gl####.d.kunl####.####.com:80
- TCP(HTTP/1.1) cdn-sdk####.g####.com.####.com:80
- TCP(HTTP/1.1) beacon####.aliy####.com:80
- TCP(HTTP/1.1) 2####.119.206.46:80
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) na61-####.wagbr####.ali####.####.com:80
- TCP(HTTP/1.1) c####.g####.com:80
- TCP(HTTP/1.1) hk.wagbr####.non####.####.com:80
- TCP(HTTP/1.1) gs.g####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) 1####.205.143.143:80
- TCP(HTTP/1.1) v3.wufaz####.com:8000
- TCP(HTTP/1.1) anal####.wufaz####.cn:8002
- TCP(HTTP/1.1) tinychi####.q####.com.####.com:80
- TCP(HTTP/1.1) b####.g####.com:80
- TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
- TCP(HTTP/1.1) sdk####.ta####.com:80
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) dualsta####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) 1####.177.126.95:443
- TCP(TLS/1.0) 1####.217.218.95:443
- TCP(TLS/1.0) instant####.google####.com:443
- TCP(TLS/1.0) md####.google####.com:443
- TCP(TLS/1.0) android####.go####.com:443
- TCP(TLS/1.0) p####.google####.com:443
- TCP(TLS/1.0) www.google####.com:443
- TCP(TLS/1.2) 1####.177.126.95:443
- TCP(TLS/1.2) 1####.177.126.94:443
- TCP(TLS/1.2) 1####.194.79.138:443
- TCP(TLS/1.2) 1####.177.119.100:443
- TCP cm-1####.g####.com:5227
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.man.aliy####.com
- anal####.wufaz####.cn
- android####.go####.com
- b####.g####.com
- beacon####.aliy####.com
- c####.g####.com
- c-h####.g####.com
- cdn-sdk####.g####.com
- cm-1####.g####.com
- gs.g####.com
- i####.wufaz####.com
- instant####.google####.com
- log.u####.com
- m####.go####.com
- md####.google####.com
- p####.google####.com
- plb####.u####.com
- reso####.wufaz####.com
- s####.u####.com
- s####.u####.com.####.8
- sdk####.ta####.com
- sdk-ope####.g####.com
- sdk.c####.g####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- u####.u####.com
- v3.wufaz####.com
- wb.110.ta####.com
- www.google####.com
- y####.al####.com
- cdn-sdk####.g####.com.####.com/tdata_EAx630
- cdn-sdk####.g####.com.####.com/tdata_EDB102
- cdn-sdk####.g####.com.####.com/tdata_UNt142
- cdn-sdk####.g####.com.####.com/tdata_fPG280
- gl####.d.kunl####.####.com/FkeHGBcpv9hko1W6PBRwcG0l7T0S
- gl####.d.kunl####.####.com/FmMbjmIQbMpsg_4_UUqfli3JoaAk
- gl####.d.kunl####.####.com/FpNcpQ9V8MN6RullPL7x6vjfowXS
- gl####.d.kunl####.####.com/Fq4rm8oJ2PPYG6x6nWfPaPsRl1Yc
- gl####.d.kunl####.####.com/FtAxFaweoB6M2Rr1rJUJVAWTcCFG
- gl####.d.kunl####.####.com/FvH_W9OppTlTK9sN3sZaUAJvhVY4
- gl####.d.kunl####.####.com/badwordsV2.txt?timestamp=####
- gl####.d.kunl####.####.com/music_copyright_2_2.png
- sdk####.ta####.com/cert.htm?certName=####&version=####
- sdk####.ta####.com/sdkConfigVersion.htm?sdkVersion=####&platformName=####
- sdk.o####.p####.####.com/api/addr.htm
- ti####.c####.l####.####.com/tdata_tYM194
- tinychi####.q####.com.####.com/config/hzv9.conf
- v3.wufaz####.com:8000/api/adlist/android?channel=####&sign=####&version=...
- v3.wufaz####.com:8000/api/adplayicon/android?channel=####&sign=####&vers...
- v3.wufaz####.com:8000/api/adposlist/android?channel=####&sign=####&versi...
- v3.wufaz####.com:8000/api/adpreloadlist/android?channel=####&sign=####&v...
- v3.wufaz####.com:8000/api/channel/one/0/0?channel=####&sign=####&version...
- v3.wufaz####.com:8000/api/channel/one/2020-05-06/0?channel=####&sign=###...
- v3.wufaz####.com:8000/api/music/htmlcontent/3248?channel=####&sign=####&...
- v3.wufaz####.com:8000/api/one/config?channel=####&sign=####&version=####...
- v3.wufaz####.com:8000/api/onelist/idlist/?channel=####&sign=####&version...
- v3.wufaz####.com:8000/api/radio/active?channel=####&sign=####&version=##...
- v3.wufaz####.com:8000/api/version/android/5.0.1?channel=####&sign=####&v...
- anal####.wufaz####.cn:8002/journal?uid=####&os=####&tz=####&channel=####...
- b####.g####.com/api.php?format=####&t=####
- beacon####.aliy####.com/beacon/fetch/config/byappkey
- c####.g####.com/api.php?format=####&t=####
- gs.g####.com/encryption/key/fetch
- gs.g####.com/geshu/sdkStatistics/bindInfo
- gs.g####.com/geshu/sdkStatistics/uploadBI
- hk.wagbr####.non####.####.com/saveWb.json
- na61-####.wagbr####.ali####.####.com/api/update.do
- sdk####.ta####.com/init.htm
- sdk.o####.p####.####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####&d=####&k=####
- sh.wagbr####.aliyun####.com/man/api?ak=####&s=####
- /data/dalvik-cache/####/system@framework@am.jar@classes.dex
- /data/dalvik-cache/####/system@framework@am.jar@classes.dex.flo...leted)
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/.jgck
- /data/data/####/016801350e4b
- /data/data/####/0a231bd8575dcf72.txt
- /data/data/####/1588780944952.pluginlist
- /data/data/####/1588780961398.log
- /data/data/####/1d77ea041509fe06.lock
- /data/data/####/21c22f492aba3de8.lock
- /data/data/####/2dfe06b77689eb0682a5d5e6f8cf6151f6ed7bca1ca9633....0.tmp
- /data/data/####/7913a53fce5f8813df625dbfa0b301816e2b77695c93c2e....0.tmp
- /data/data/####/8ef9c457b3bbb403.lock
- /data/data/####/930a31b34bd52c08.lock
- /data/data/####/ALIBABA_SDK_DYNAMIC_CONFIG.xml
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/SGMANAGER_DATA2
- /data/data/####/SGMANAGER_DATA2.tmp
- /data/data/####/UM_PROBE_DATA.xml
- /data/data/####/WebViewChromiumPrefs.xml
- /data/data/####/a==8.1.2&&5.0.1_1588780970806_envelope.log
- /data/data/####/bad_words_time.xml
- /data/data/####/boas;user_auth;NONE.xml
- /data/data/####/channel_name.xml
- /data/data/####/classes.dex
- /data/data/####/classes.dex;classes2.dex
- /data/data/####/com_alibaba_aliyun_crash_defend_sdk_info
- /data/data/####/d1f0ad8d
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTg4NzgwOTYwMTUy;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTg4NzgwOTc5MzE0;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTg4NzgwOTkzNDg5;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTg4NzgxMDA4MzU2;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTg4NzgxMDM3NDM2;
- /data/data/####/diaryconfig
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/getui_sp.xml
- /data/data/####/gkt-journal
- /data/data/####/gtc.db-journal
- /data/data/####/gx_sp.xml
- /data/data/####/hotpatch_umeng_common_config.xml
- /data/data/####/i==1.2.0&&5.0.1_1588780960376_envelope.log
- /data/data/####/i==1.2.0&&5.0.1_1588780979527_envelope.log
- /data/data/####/i==1.2.0&&5.0.1_1588780993533_envelope.log
- /data/data/####/i==1.2.0&&5.0.1_1588781008295_envelope.log
- /data/data/####/i==1.2.0&&5.0.1_1588781037472_envelope.log
- /data/data/####/ias.db-journal
- /data/data/####/ias_sp.xml
- /data/data/####/ias_sp.xml.bak
- /data/data/####/info.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libjiagu.so
- /data/data/####/libsgmain_312757200000.dex
- /data/data/####/libsgmain_312757200000.dex.flock (deleted)
- /data/data/####/libsgmainso-5.1.81.so.tmp
- /data/data/####/lock.lock
- /data/data/####/one3_0.db-journal
- /data/data/####/oneStat.db-journal
- /data/data/####/one_config.xml
- /data/data/####/onesdk_device.xml
- /data/data/####/onesdk_hotpatch.xml
- /data/data/####/proc_auxv
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/pushservice_umeng_common_config.xml
- /data/data/####/run.pid
- /data/data/####/sp.lock
- /data/data/####/spUtils.xml
- /data/data/####/tdata_EAx630
- /data/data/####/tdata_EAx630.dex
- /data/data/####/tdata_EAx630.dex.flock (deleted)
- /data/data/####/tdata_EAx630.jar
- /data/data/####/tdata_UNt142
- /data/data/####/tdata_UNt142.dex
- /data/data/####/tdata_UNt142.dex.flock (deleted)
- /data/data/####/tdata_UNt142.jar
- /data/data/####/tdata_fPG280
- /data/data/####/tdata_fPG280.dex.flock (deleted)
- /data/data/####/tdata_fPG280.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_general_config.xml.bak
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_message_state.xml
- /data/data/####/umeng_message_state.xml.bak
- /data/data/####/umeng_socialize.xml
- /data/data/####/uuid.xml
- /data/data/####/xiami_device_id.xml.xml
- /data/media/####/3ibs6yhbn3wvpdsbvo54t9656.tmp
- /data/media/####/3siaodhmwfe9fzyl5ln5kaq58.tmp
- /data/media/####/4a884eqq4emwtqrqrq6urv962.tmp
- /data/media/####/4e746kujgjixmeeyqtzy944e6.tmp
- /data/media/####/6c709c11d2d46a7b
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/dd7893586a493dc3
- /data/media/####/gkt-journal
- /data/media/####/gktper
- /data/media/####/hid.dat
- /data/media/####/one.hh.oneclient.bin
- /data/media/####/one.hh.oneclient.db
- /data/media/####/one.hh.oneclient_.db
- /data/media/####/sysid.dat
- /data/media/####/tdata_EAx630
- /data/media/####/tdata_UNt142
- /data/media/####/tdata_fPG280
- /data/media/####/test.log
- /data/misc/####/primary.prof
- /system/bin/cat /proc/cpuinfo
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/dex2oat --instruction-set=x86 --dex-file=<Package Folder>/.jiagu/classes.dex --dex-file=<Package Folder>/.jiagu/classes.dex:classes2.dex --oat-file=<Package Folder>/.jiagu/classes.oat --inline-depth-limit=0 --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/app_SGLib/libsgmain_312757200000.zip --oat-fd=40 --oat-location=/data/user/0/<Package>/app_SGLib/libsgmain_312757200000.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tdata_EAx630.jar --oat-fd=67 --oat-location=/data/user/0/<Package>/files/tdata_EAx630.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tdata_UNt142.jar --oat-fd=67 --oat-location=/data/user/0/<Package>/files/tdata_UNt142.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tdata_fPG280.jar --oat-fd=55 --oat-location=/data/user/0/<Package>/files/tdata_fPG280.dex --compiler-filter=speed
- /system/bin/log -p d -t su /dev/com.android.settings/.socket3628
- /system/bin/log -p d -t su 10065 /system/bin/app_process32 executing 0 /system/bin/sh using binary /system/bin/sh : sh
- /system/bin/log -p d -t su child exited
- /system/bin/log -p d -t su client exited 0
- /system/bin/log -p d -t su connecting client 3607
- /system/bin/log -p d -t su connecting client 4273
- /system/bin/log -p d -t su connecting client 4647
- /system/bin/log -p d -t su connecting client 5044
- /system/bin/log -p d -t su db allowed
- /system/bin/log -p d -t su remote args: 1
- /system/bin/log -p d -t su remote pid: 3607
- /system/bin/log -p d -t su remote pid: 4273
- /system/bin/log -p d -t su remote pid: 4647
- /system/bin/log -p d -t su remote pid: 5044
- /system/bin/log -p d -t su remote pts_slave:
- /system/bin/log -p d -t su remote req pid: 3343
- /system/bin/log -p d -t su remote req pid: 3980
- /system/bin/log -p d -t su remote req pid: 4392
- /system/bin/log -p d -t su remote req pid: 4774
- /system/bin/log -p d -t su remote uid: 10065
- /system/bin/log -p d -t su sending code
- /system/bin/log -p d -t su starting daemon client 10065 10065
- /system/bin/log -p d -t su su invoked.
- /system/bin/log -p d -t su waiting for child exit
- /system/bin/log -p d -t su waiting for user
- /system/bin/log -p e -t su sqlite3 open /data/user_de/0/com.android.settings/databases/su.sqlite failure: 14
- cat /sys/class/net/wlan0/address
- ls /
- ls /sys/class/thermal
- mount
- sh
- su
- AES-CBC-NoPadding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-CFB-NoPadding
- AES-ECB-PKCS5Padding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-NoPadding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding