Техническая информация
- Android.Backdoor.627.origin
- Android.Xiny.1.origin
- Android.Xiny.222
- Android.Xiny.231.origin
- Android.Xiny.232.origin
- Android.Xiny.233.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) sjs.perfon####.com:80
- TCP(HTTP/1.1) d.billyaf####.com:80
- TCP(HTTP/1.1) 2####.177.13.68:8288
- TCP(HTTP/1.1) s####.brv####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) ea.sno####.1####.com:8088
- TCP(HTTP/1.1) www.zfr####.com:80
- TCP(HTTP/1.1) ea.sno####.1####.com:18088
- TCP(HTTP/1.1) offer####.online:80
- TCP(HTTP/1.1) www.mmmmmm####.com:80
- TCP(HTTP/1.1) www.cu####.com:80
- TCP(HTTP/1.1) ali.f####.cdn.####.com:80
- TCP(HTTP/1.1) www.admobim####.com:80
- TCP(HTTP/1.1) cpgnrot####.com:80
- TCP(HTTP/1.1) en.sno####.1####.com:8088
- TCP(TLS/1.0) a####.m.ta####.com:443
- TCP(TLS/1.0) smarto####.site:443
- TCP(TLS/1.0) api.info####.me:443
- TCP(TLS/1.0) bcd.lk####.com:443
- TCP(TLS/1.0) api-####.coo####.org:443
- TCP(TLS/1.0) cde.lk####.com:443
- a####.m.ta####.com
- a####.u####.com
- ag####.m.ta####.com
- ali.f####.cdn.####.com
- and####.b####.qq.com
- api-####.coo####.org
- api.info####.me
- bcd.lk####.com
- cde.lk####.com
- cpgnrot####.com
- d.billyaf####.com
- ea.sno####.1####.com
- en.sno####.1####.com
- mt####.go####.com
- offer####.online
- s####.brv####.com
- sjs.perfon####.com
- smarto####.site
- umen####.m.ta####.com
- umengj####.m.ta####.com
- www.admobim####.com
- www.cu####.com
- www.mmmmmm####.com
- www.zfr####.com
- s####.brv####.com/click/s/?id=####&aff_click_id=####&aff_sub_id=####&_uu...
- and####.b####.qq.com/rqd/async
- and####.b####.qq.com/rqd/async?aid=####
- ea.sno####.1####.com:18088/ping
- ea.sno####.1####.com:18088/sdk/api/msg/error
- ea.sno####.1####.com:18088/sdk/api/regclient
- ea.sno####.1####.com:8088/sdk/api/log/record
- www.mmmmmm####.com/osp/oaen_reg.action
- www.zfr####.com/up.do?enc=####
- /data/anr/traces.txt
- <Package Folder>/app_crashrecord/1004
- <Package Folder>/app_db/ck.db-journal
- <Package Folder>/cache/####/data_0
- <Package Folder>/cache/####/data_1
- <Package Folder>/cache/####/data_2
- <Package Folder>/cache/####/data_3
- <Package Folder>/cache/####/index
- <Package Folder>/databases/MessageStore.db-journal
- <Package Folder>/databases/MsgLogStore.db-journal
- <Package Folder>/databases/accs.db-journal
- <Package Folder>/databases/bugly_db_-journal
- <Package Folder>/databases/bugly_db_legu-journal
- <Package Folder>/databases/cc.db
- <Package Folder>/databases/cc.db-journal
- <Package Folder>/databases/db_snowfox.db
- <Package Folder>/databases/db_snowfox.db-journal
- <Package Folder>/databases/message_accs_db
- <Package Folder>/databases/message_accs_db-journal
- <Package Folder>/databases/my.db
- <Package Folder>/databases/my.db-journal
- <Package Folder>/databases/snowfoxad_msg.db
- <Package Folder>/databases/snowfoxad_msg.db-journal
- <Package Folder>/databases/ua.db
- <Package Folder>/databases/ua.db-journal
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/databases/webviewCookiesChromium.db-journal
- <Package Folder>/databases/webviewCookiesChromiumPrivate.db-journal
- <Package Folder>/eudemon
- <Package Folder>/files/####/exchangeIdentity.json
- <Package Folder>/files/####/sf_file_provider.dat
- <Package Folder>/files/613495.jar
- <Package Folder>/files/970892467.jar
- <Package Folder>/files/<Package>.zip
- <Package Folder>/files/DaemonServer
- <Package Folder>/files/agoo.pid
- <Package Folder>/files/d.zip
- <Package Folder>/files/dat.dat
- <Package Folder>/files/exid.dat
- <Package Folder>/files/intermediate859715078.jar
- <Package Folder>/files/intermediate859715149.jar
- <Package Folder>/files/lib.dat
- <Package Folder>/files/local_crash_lock
- <Package Folder>/files/mesosphere.jar
- <Package Folder>/files/native_record_lock
- <Package Folder>/files/native_record_lock (deleted)
- <Package Folder>/files/ob.zip
- <Package Folder>/files/security_info
- <Package Folder>/files/snowfox_mid.so
- <Package Folder>/files/snowfox_sdk_so-v22h.jar
- <Package Folder>/files/snowfox_v22h.jar
- <Package Folder>/files/snowfox_v22h.so
- <Package Folder>/files/umeng_it.cache
- <Package Folder>/mix.dex
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/ACCS_SDK.xml
- <Package Folder>/shared_prefs/ACCS_SDK_CHANNEL.xml
- <Package Folder>/shared_prefs/ACCS_SDK_CHANNEL.xml.bak (deleted)
- <Package Folder>/shared_prefs/ActivatePreUtil.xml
- <Package Folder>/shared_prefs/Agoo_AppStore.xml
- <Package Folder>/shared_prefs/Alvin2.xml
- <Package Folder>/shared_prefs/ContextData.xml
- <Package Folder>/shared_prefs/D862hunter_config.xml
- <Package Folder>/shared_prefs/D862other_config.xml
- <Package Folder>/shared_prefs/D862service_config.xml
- <Package Folder>/shared_prefs/D862service_config.xml.bak
- <Package Folder>/shared_prefs/D862sp_config.xml
- <Package Folder>/shared_prefs/D862sp_config.xml.bak
- <Package Folder>/shared_prefs/D862upgrade_config.xml
- <Package Folder>/shared_prefs/LoginPreUtil.xml
- <Package Folder>/shared_prefs/LoginPreUtil.xml.bak
- <Package Folder>/shared_prefs/LoginPreUtil.xml.bak (deleted)
- <Package Folder>/shared_prefs/coolook.xml
- <Package Folder>/shared_prefs/crashrecord.xml
- <Package Folder>/shared_prefs/device_info.xml
- <Package Folder>/shared_prefs/multidex.version.xml
- <Package Folder>/shared_prefs/snowfoxprf.xml
- <Package Folder>/shared_prefs/sp_cache.xml
- <Package Folder>/shared_prefs/t_ini.xml
- <Package Folder>/shared_prefs/umeng_general_config.xml
- <Package Folder>/tx_shell/libnfix.so
- <Package Folder>/tx_shell/libshella-2.10.7.1.so
- <Package Folder>/tx_shell/libufix.so
- <SD-Card>/.17ba4e3b/####/plcfg.xml
- <SD-Card>/.DataStorage/ContextData.xml
- <SD-Card>/.UTSystemConfig/####/Alvin2.xml
- <SD-Card>/4b22d453ede840120543957f43c08aa7/####/data.db-journal
- <SD-Card>/4b22d453ede840120543957f43c08aa7/host
- <SD-Card>/Android/####/.nomedia
- <SD-Card>/Android/####/092207b9ffb01c096b1c9026e4033f6b.0.tmp
- <SD-Card>/Android/####/092207b9ffb01c096b1c9026e4033f6b.1.tmp
- <SD-Card>/Android/####/2958f850c1ae202cef77238fed017e52.0.tmp
- <SD-Card>/Android/####/2958f850c1ae202cef77238fed017e52.1.tmp
- <SD-Card>/Android/####/359334a4cc224cf7a0d2244a72c79a11
- <SD-Card>/Android/####/4469f863b89c18e20fa11b993d0ec07a.0.tmp
- <SD-Card>/Android/####/4469f863b89c18e20fa11b993d0ec07a.1.tmp
- <SD-Card>/Android/####/720dc888e0a227db5d02b44ad7f5f504.0.tmp
- <SD-Card>/Android/####/720dc888e0a227db5d02b44ad7f5f504.1.tmp
- <SD-Card>/Android/####/aa607f8fb3d26e35721ced7167367729.0.tmp
- <SD-Card>/Android/####/aa607f8fb3d26e35721ced7167367729.1.tmp
- <SD-Card>/Android/####/b93ef1b02f2b9d6cdc90bbb26207bce3.0.tmp
- <SD-Card>/Android/####/b93ef1b02f2b9d6cdc90bbb26207bce3.1.tmp
- <SD-Card>/Android/####/dev_52e5c0eb.txt
- <SD-Card>/Android/####/imei.txt
- <SD-Card>/Android/####/inapp_20171204.log
- <SD-Card>/Android/####/journal
- <SD-Card>/Android/####/journal.tmp
- <SD-Card>/LogN/####/sp
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/sh -c getprop
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/DaemonServer -s <Package Folder>/lib/ -n runServer -p startservice -n <Package>/com.taobao.accs.ChannelService --user 0 -f <Package Folder> -t 600 -c agoo.pid -P <Package Folder> -K 1009527 -U tb_accs_eudemon_1.1.3 -L http://agoodm.m.taobao.com/agoo/report -D {"package":"<Package>","appKey":"umeng:5a1e7549f29d98602f000133","utdid":"WiW7bH87aDcDAGdzx1GCqwSY","sdkVersion":"220"} -I agoodm.m.taobao.com -O 80 -T -Z
- cat /sys/class/net/wlan0/address
- chmod 500 <Package Folder>/files/DaemonServer
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.10.7.1.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- chmod 777 <Package Folder>/servi
- dd if=<Package Folder>/lib/libservi.so of=<Package Folder>/servi
- getprop
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- sh
- Bugly
- cfe
- libnfix
- libshella-2.10.7.1
- libufix
- nfix
- nke
- servi
- tnet-3.1
- ufix