Техническая информация
- Android.Backdoor.657.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) 1####.55.28.235:80
- TCP(HTTP/1.1) c####.360.cn:80
- TCP(HTTP/1.1) g.x.cn.####.com:80
- TCP(HTTP/1.1) pic.ange####.cn:80
- TCP(HTTP/1.1) al####.bay####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) pi####.qq.com:80
- TCP(HTTP/1.1) a.e####.cn:80
- TCP(HTTP/1.1) up####.sdk.jig####.cn:80
- TCP(HTTP/1.1) ap####.adi####.com:80
- TCP(HTTP/1.1) ga####.lotu####.com:80
- TCP(HTTP/1.1) rtb.m####.net:80
- TCP(HTTP/1.1) t####.qq.com:8080
- TCP(HTTP/1.1) aliyun-####.al####.com:80
- TCP(HTTP/1.1) f####.ma####.xi####.####.net:80
- TCP(HTTP/1.1) 1####.254.116.117:80
- TCP(HTTP/1.1) ga####.lotu####.com:88
- TCP(HTTP/1.1) u####.bfsspad####.8l####.com:80
- TCP(HTTP/1.1) rcv.a####.com:80
- TCP(HTTP/1.1) norma-e####.m####.com:80
- TCP(HTTP/1.1) dsp.tou####.com:80
- TCP(HTTP/1.1) 1####.26.247.23:80
- TCP(HTTP/1.1) c.appj####.com:80
- TCP(HTTP/1.1) sni.c####.q####.####.net:80
- TCP(HTTP/1.1) reso####.msg.xi####.net:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) st####.qij####.com.####.net:80
- TCP(HTTP/1.1) 47.97.2####.214:80
- TCP(HTTP/1.1) api.map.b####.com:80
- TCP(HTTP/1.1) beacon####.aliy####.com:80
- TCP(HTTP/1.1) a####.a####.m.####.com:80
- TCP(TLS/1.0) statson####.pu####.b####.com:443
- TCP(TLS/1.0) pic.e####.cn:443
- TCP(TLS/1.0) res####.a####.com:443
- TCP(TLS/1.0) sh.wagbr####.alibaba####.com:443
- TCP(TLS/1.0) regi####.xm####.xi####.com:443
- TCP(TLS/1.0) sh.wagbr####.ta####.com:443
- TCP(TLS/1.0) api.tui####.b####.com:443
- TCP(TLS/1.0) ada####.ut.ta####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP 47.74.1####.158:5222
- TCP 4####.62.94.2:443
- TCP c####.g####.ig####.com:5226
- TCP ope####.m.ta####.com:443
- UDP s.j####.cn:19000
- TCP 1####.121.49.85:7010
- TCP t####.qq.com:14000
- 7j####.c####.z0.####.com
- a####.m.ta####.com
- a.e####.cn
- acs4pu####.m.ta####.com
- ada####.ut.ta####.com
- adas####.ut.ta####.com
- al####.bay####.com
- ap####.adi####.com
- api.map.b####.com
- api.tui####.b####.com
- beacon####.aliy####.com
- c####.360.cn
- c####.g####.ig####.com
- c-h####.g####.com
- c.appj####.com
- dsp.tou####.com
- f1.ma####.xi####.com
- g.x.cn.####.com
- ga####.lotu####.com
- mpush####.al####.com
- norma-e####.m####.com
- on####.lotu####.com
- pi####.qq.com
- pic.ange####.cn
- pic.e####.cn
- plb####.u####.com
- rcv.a####.com
- regi####.xm####.xi####.com
- res####.a####.com
- reso####.msg.xi####.net
- rtb.m####.net
- s.j####.cn
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- st####.qij####.com
- statson####.pu####.b####.com
- t####.qq.com
- u####.bfsspad####.8l####.com
- u####.u####.com
- up####.sdk.jig####.cn
- a.e####.cn/public/getClickUrlList.shtml?lng=####&sd=####&screenheight=##...
- a.e####.cn/public/getClickUrlPoList.shtml?lng=####&sd=####&screenheight=...
- a.e####.cn/public/getCommonBannerAd.shtml?height=####&width=####&lng=###...
- a.e####.cn/public/getCommonStartUpAd.shtml?height=####&width=####&lng=##...
- a.e####.cn/public/isDebugAd.shtml?ts=####&appid=####&sign=####
- a.e####.cn/public/rab.shtml?id=####&network=####&machine=####
- a.e####.cn/public/showUrlVisit.shtml?os=####&osversion=####&appversion=#...
- al####.bay####.com/adv/1930/1890/20171023210034_55.png
- ap####.adi####.com/tj?key=####&rd=####&req=####&token=####
- api.map.b####.com/location/ip?ak=####&coor=####
- dsp.tou####.com/api/ruangao/ads/show?extra=####&price=####
- f####.ma####.xi####.####.net/download/AppStore/0294d4dc7d915f83fbb0470c9...
- g.x.cn.####.com/x.gif?bb=####&gg=####&be=####&bf=####&os=####&m2=####&ci...
- norma-e####.m####.com/android/exchange/getpublickey.do
- pic.ange####.cn/web/246791392.jpg!m720
- pic.ange####.cn/web/246822840.jpg!m720
- pic.ange####.cn/web/246822858.jpg!m720
- pic.ange####.cn/web/246822876.jpg!m720
- pic.ange####.cn/web/246822879.jpg!m720
- pic.ange####.cn/web/246822886.jpg!m720
- pic.ange####.cn/web/246822894.jpg
- pic.ange####.cn/web/246822894.jpg!m720
- pic.ange####.cn/web/246822937.jpg!m720
- pic.ange####.cn/web/246822978.jpg!m720
- pic.ange####.cn/web/257657663.jpg
- pic.ange####.cn/web/259670579.jpg
- pic.ange####.cn/web/259928278.jpg!s1
- pic.ange####.cn/web/3251614.jpg
- pic.ange####.cn/web/46958136.jpg!m720
- pic.ange####.cn/web/46958166.jpg!m720
- pic.ange####.cn/web/46958170.jpg!m720
- pic.ange####.cn/web/46958231.jpg
- pic.ange####.cn/web/46958231.jpg!m720
- pic.ange####.cn/web/46958245.jpg!m720
- pic.ange####.cn/web/46958312.jpg!m720
- pic.ange####.cn/web/50526428.jpg!s1
- rcv.a####.com/show?CAAQGg.####
- rcv.a####.com/show?CAAQJQ.####
- reso####.msg.xi####.net/gslb/?ver=4.0&type=wap&conpt=dvidpodv >>4>>4>>4...
- rtb.m####.net/vw?info=CN####&wp=####&ts=####&appid=####&sign=####
- sni.c####.q####.####.net/config/hz-hzv3.conf
- sni.c####.q####.####.net/tdata_SBh025
- sni.c####.q####.####.net/tdata_ZKm258
- st####.qij####.com.####.net/testad/3.jpg
- u####.bfsspad####.8l####.com/adShow?v=####&b=####&i=####&r=####&bid=####...
- a####.a####.m.####.com/amdc/mobileDispatch?appkey=####&deviceId=####&pla...
- aliyun-####.al####.com/config
- beacon####.aliy####.com/beacon/fetch/config/byappkey
- c####.360.cn/stra_packet
- c-h####.g####.com/api.php?format=####&t=####
- c.appj####.com/ad/splash/stats.html
- ga####.lotu####.com/?st=####&sv=####&tm=####&sid=GyA####&apn=####&ct=###...
- ga####.lotu####.com:88/?mid=####&st=####&sv=####&tm=####&sid=GyA####&apn...
- norma-e####.m####.com/push/android/external/add.do
- pi####.qq.com/mstat/report/?index=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- t####.qq.com:8080/203.205.211.75:8080/
- up####.sdk.jig####.cn/v1/push/sdk/postlist
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/.jgrpa.xml
- /data/data/####/.log.lock
- /data/data/####/.log.rpa
- /data/data/####/.tpns.service.xml.xml
- /data/data/####/.tpns.settings.xml.xml
- /data/data/####/.tpush_mta.xml
- /data/data/####/.tpush_mta.xml.bak
- /data/data/####/07207f9b586b774b06186425682a1d37.0.tmp
- /data/data/####/07207f9b586b774b06186425682a1d37.1.tmp
- /data/data/####/0e4b05d2d36657f5bef644f114f0640c.0.tmp
- /data/data/####/0e4b05d2d36657f5bef644f114f0640c.1.tmp
- /data/data/####/1917d3f42802daf0c6dc3496d5a06aaf.0.tmp
- /data/data/####/1917d3f42802daf0c6dc3496d5a06aaf.1.tmp
- /data/data/####/1d45b13c58a1b07d13afefd2b6f2cf92.0.tmp
- /data/data/####/1d45b13c58a1b07d13afefd2b6f2cf92.1.tmp
- /data/data/####/282288d4a1f80b0b3bc27e4221885cb5.0.tmp
- /data/data/####/282288d4a1f80b0b3bc27e4221885cb5.1.tmp
- /data/data/####/2b09c75cf3fdd8cfe0bfa507ef6e242a.0.tmp
- /data/data/####/2b09c75cf3fdd8cfe0bfa507ef6e242a.1.tmp
- /data/data/####/37315a290374d7a5a44cedb40784aa15.0.tmp
- /data/data/####/37315a290374d7a5a44cedb40784aa15.1.tmp
- /data/data/####/40c3369818b26cecd894d66ad9c9c6e1.0.tmp
- /data/data/####/40c3369818b26cecd894d66ad9c9c6e1.1.tmp
- /data/data/####/427fa56386724b05d00314315a2d6b0d.0.tmp
- /data/data/####/427fa56386724b05d00314315a2d6b0d.1.tmp
- /data/data/####/45fb0e1e90f1bd5928a92a5b0486d473.0.tmp
- /data/data/####/45fb0e1e90f1bd5928a92a5b0486d473.1.tmp
- /data/data/####/471092750498df31c6274bb9cf1783b1.0.tmp
- /data/data/####/471092750498df31c6274bb9cf1783b1.1.tmp
- /data/data/####/47d4f3bbbc968c5777c26e81558b23ea.0.tmp
- /data/data/####/47d4f3bbbc968c5777c26e81558b23ea.1.tmp
- /data/data/####/5886994f7ae21dc2a6b4a3ad8e4a4a45.0.tmp
- /data/data/####/5886994f7ae21dc2a6b4a3ad8e4a4a45.1.tmp
- /data/data/####/5a5b49076b5387ecf37b9a5bdcc78cdf.0.tmp
- /data/data/####/5a5b49076b5387ecf37b9a5bdcc78cdf.1.tmp
- /data/data/####/5c174cf9031eb8e79e35a425d2930d0c.0.tmp
- /data/data/####/5c174cf9031eb8e79e35a425d2930d0c.1.tmp
- /data/data/####/5cf90f3076feba16794606b480cf9ded.0.tmp
- /data/data/####/5cf90f3076feba16794606b480cf9ded.1.tmp
- /data/data/####/6ba5fd1f0b064ac422bccd112dba7264.0.tmp
- /data/data/####/6ba5fd1f0b064ac422bccd112dba7264.1.tmp
- /data/data/####/7009b3114c0f0eb8c2f6a401bb0404f2.0.tmp
- /data/data/####/7009b3114c0f0eb8c2f6a401bb0404f2.1.tmp
- /data/data/####/720576cd3dc6d0c3b06c4f990395bfd7.0.tmp
- /data/data/####/720576cd3dc6d0c3b06c4f990395bfd7.1.tmp
- /data/data/####/73159bdf0e45aebb12333d5ff91a82ab.0.tmp
- /data/data/####/73159bdf0e45aebb12333d5ff91a82ab.1.tmp
- /data/data/####/74e9561448684252dc2bde90f38ff358.0.tmp
- /data/data/####/74e9561448684252dc2bde90f38ff358.1.tmp
- /data/data/####/7ddf4c68d586ac88620324f920134699.0.tmp
- /data/data/####/7ddf4c68d586ac88620324f920134699.1.tmp
- /data/data/####/7fce3ec540af5d68e7f3ecf4cb2a81e3.0.tmp
- /data/data/####/7fce3ec540af5d68e7f3ecf4cb2a81e3.1.tmp
- /data/data/####/ACCS_BIND24865293.xml
- /data/data/####/ACCS_SDK.xml
- /data/data/####/AGOO_BIND.xml
- /data/data/####/Agoo_AppStore.xml
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/JPushSA_Config.xml
- /data/data/####/Ji.xml
- /data/data/####/UM_PROBE_DATA.xml
- /data/data/####/UTCommon.xml
- /data/data/####/XMPushServiceConfig.xml
- /data/data/####/a==7.3.1&&4.80.34_1531532149000_envelope.log
- /data/data/####/accs.db-journal
- /data/data/####/ad_show_time.xml
- /data/data/####/ap.Lock
- /data/data/####/b6f3759437be53d4aea8a8b7c6ea4843.0.tmp
- /data/data/####/b6f3759437be53d4aea8a8b7c6ea4843.1.tmp
- /data/data/####/bac8508172843ab0a2f047751cea4def.0.tmp
- /data/data/####/bac8508172843ab0a2f047751cea4def.1.tmp
- /data/data/####/bd9135a9fafabc2055b083a091ba3286.0.tmp
- /data/data/####/bd9135a9fafabc2055b083a091ba3286.1.tmp
- /data/data/####/bdpush_modeconfig.json
- /data/data/####/caa836f73f5bd418ddf9f1c122ea7be4.0.tmp
- /data/data/####/caa836f73f5bd418ddf9f1c122ea7be4.1.tmp
- /data/data/####/cc18928c37c2002e762f9e31acf517af.0.tmp
- /data/data/####/cc18928c37c2002e762f9e31acf517af.1.tmp
- /data/data/####/cd4c3fc66e49828f41a65a0fa1dcd8b1.0.tmp
- /data/data/####/cd4c3fc66e49828f41a65a0fa1dcd8b1.1.tmp
- /data/data/####/channelpref.xml
- /data/data/####/cn.ecook.xml
- /data/data/####/cn.ecookad.library.xml
- /data/data/####/cn.ecookad.library.xml.bak
- /data/data/####/cn.jpush.android.user.profile.xml
- /data/data/####/cn.jpush.preferences.v2.rid.xml
- /data/data/####/cn.jpush.preferences.v2.xml
- /data/data/####/cn.push.module.xml
- /data/data/####/cn.push.module.xml (deleted)
- /data/data/####/cn.zuocaivideo.push_sync.xml
- /data/data/####/cn.zuocaivideo.self_push_sync.xml
- /data/data/####/cn.zuocaivideo;pushservice
- /data/data/####/cn.zuocaivideo_preferences.xml
- /data/data/####/collectiondatabase
- /data/data/####/collectiondatabase-journal
- /data/data/####/com.baidu.pushservice.BIND_CACHE.xml
- /data/data/####/com.baidu.pushservice.app_stat.xml
- /data/data/####/com.x.y.1.xml
- /data/data/####/com.x.y.2.xml
- /data/data/####/com_alibaba_aliyun_crash_defend_sdk_info
- /data/data/####/d50e3e369ff949e090b4a97db0a91a02.0.tmp
- /data/data/####/d50e3e369ff949e090b4a97db0a91a02.1.tmp
- /data/data/####/d9c02960cb0130588ee5cf160cafddd7.0.tmp
- /data/data/####/d9c02960cb0130588ee5cf160cafddd7.1.tmp
- /data/data/####/d==7.3.1&&4.80.34_1531532149192_envelope.log
- /data/data/####/d==7.3.1&&4.80.34_1531532155481_envelope.log
- /data/data/####/d==7.3.1&&4.80.34_1531532166118_envelope.log
- /data/data/####/d==7.3.1&&4.80.34_1531532173427_envelope.log
- /data/data/####/d==7.3.1&&4.80.34_1531532181600_envelope.log
- /data/data/####/d==7.3.1&&4.80.34_1531532186721_envelope.log
- /data/data/####/d==7.3.1&&4.80.34_1531532189855_envelope.log
- /data/data/####/d==7.3.1&&4.80.34_1531532193041_envelope.log
- /data/data/####/d==7.3.1&&4.80.34_1531532197479_envelope.log
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/dc9d15e06aa85d7fe3add62ef517a248.0.tmp
- /data/data/####/dc9d15e06aa85d7fe3add62ef517a248.1.tmp
- /data/data/####/device_id.xml
- /data/data/####/e0d3d5911b0a6ebcf0a03bd33da15e38.0.tmp
- /data/data/####/e0d3d5911b0a6ebcf0a03bd33da15e38.1.tmp
- /data/data/####/e8a1f3c344b83fbe35d8b5666d644937.0.tmp
- /data/data/####/e8a1f3c344b83fbe35d8b5666d644937.1.tmp
- /data/data/####/ea16194e6ebaba54d83cc063cfbd373f.0.tmp
- /data/data/####/ea16194e6ebaba54d83cc063cfbd373f.1.tmp
- /data/data/####/ecookdatabase
- /data/data/####/ecookdatabase-journal
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f5f536162f502106908c6c7a0d77d18b.0.tmp
- /data/data/####/f5f536162f502106908c6c7a0d77d18b.1.tmp
- /data/data/####/fa582559aaa299a99b4fd9fd36e509aa.0.tmp
- /data/data/####/fa582559aaa299a99b4fd9fd36e509aa.1.tmp
- /data/data/####/ff5945a919dd1038bf1c1cc7c7c6d10e.0.tmp
- /data/data/####/ff5945a919dd1038bf1c1cc7c7c6d10e.1.tmp
- /data/data/####/gdaemon_20161017
- /data/data/####/geofencing.db
- /data/data/####/geofencing.db-journal
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/index
- /data/data/####/info.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/jg_app_update_settings_random.xml
- /data/data/####/jg_so_upgrade_setting.xml
- /data/data/####/journal.tmp
- /data/data/####/jpush_stat_cache.json
- /data/data/####/jpush_stat_cache_history.json
- /data/data/####/libcuid.so
- /data/data/####/libjiagu904070529.so
- /data/data/####/lonLat.xml
- /data/data/####/lotuseed.apps
- /data/data/####/lotuseed.s
- /data/data/####/lotuseed_global.xml
- /data/data/####/material.db-journal
- /data/data/####/mipush.xml
- /data/data/####/mipush_account.xml
- /data/data/####/mipush_extra.xml
- /data/data/####/mipush_region
- /data/data/####/mipush_region.lock
- /data/data/####/multidex.version.xml
- /data/data/####/pst.xml
- /data/data/####/pst.xml (deleted)
- /data/data/####/push.pid
- /data/data/####/pushclient.xml
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushinfo.db
- /data/data/####/pushinfo.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/pushstat_6.0.0.db
- /data/data/####/pushstat_6.0.0.db-journal
- /data/data/####/recipe.db-journal
- /data/data/####/recipedatabase-journal
- /data/data/####/run.pid
- /data/data/####/tdata_SBh025
- /data/data/####/tdata_SBh025.jar
- /data/data/####/tdata_ZKm258
- /data/data/####/tdata_ZKm258.jar
- /data/data/####/tiny_data.data
- /data/data/####/tiny_data.lock
- /data/data/####/tpush.shareprefs.xml
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/ut.db
- /data/data/####/ut.db-journal
- /data/data/####/wakeup_cache.json
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/webviewCookiesChromiumPrivate.db-journal
- /data/data/####/xg_message.db
- /data/data/####/xg_message.db-journal
- /data/media/####/-1017210057.tmp
- /data/media/####/-1277742070.tmp
- /data/media/####/-1286536769.tmp
- /data/media/####/-129800856.tmp
- /data/media/####/-1400823179.tmp
- /data/media/####/-1620896950.tmp
- /data/media/####/-1664767470.tmp
- /data/media/####/-1743525519.tmp
- /data/media/####/-1861116622.tmp
- /data/media/####/-1976371088.tmp
- /data/media/####/-1990363694.tmp
- /data/media/####/-2131399408.tmp
- /data/media/####/-306731591.tmp
- /data/media/####/-457192273.tmp
- /data/media/####/-509246706.tmp
- /data/media/####/-680240399.tmp
- /data/media/####/-712785105.tmp
- /data/media/####/-763352001.tmp
- /data/media/####/-975030155.tmp
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.nomedia
- /data/media/####/.push_deviceid
- /data/media/####/1075814795.tmp
- /data/media/####/1097192758.tmp
- /data/media/####/1112400116.tmp
- /data/media/####/112418750.tmp
- /data/media/####/1202715211.tmp
- /data/media/####/1339759086.tmp
- /data/media/####/1387507835.tmp
- /data/media/####/1424584175.tmp
- /data/media/####/1578183565.tmp
- /data/media/####/1800052529.tmp
- /data/media/####/1d313b0299874fb2a78f42d3e6ed01cc
- /data/media/####/1e53aca3123c477a96b8514bf8de4db7
- /data/media/####/2018-07-14.log.txt
- /data/media/####/245667498.tmp
- /data/media/####/494529787.tmp
- /data/media/####/736931762.tmp
- /data/media/####/750218571.tmp
- /data/media/####/874144632.tmp
- /data/media/####/927846043.tmp
- /data/media/####/957771732.tmp
- /data/media/####/960313236.tmp
- /data/media/####/Alvin2.xml
- /data/media/####/Alvin2.xml (deleted)
- /data/media/####/ContextData.xml
- /data/media/####/app.db
- /data/media/####/cn.zuocaivideo.bin
- /data/media/####/cn.zuocaivideo.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/log.lock
- /data/media/####/log1.txt
- /data/media/####/lotuseed.devid
- /data/media/####/tdata_SBh025
- /data/media/####/tdata_ZKm258
- /data/media/####/test.log
- <Package Folder>/files/gdaemon_20161017 0 <Package>/cn.ecook.pushmoudle.push.gettuipush.GeTuiPushService 24441 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu904070529.so
- ls /
- ls /sys/class/thermal
- netstat -ant
- ps
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/cn.ecook.pushmoudle.push.gettuipush.GeTuiPushService 24441 300 0
- bdpush_V2_9
- getuiext2
- jcore119
- libjiagu904070529
- tnet-3.1
- tpnsSecurity
- ut_c_api
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-CFB8-NoPadding
- AES-ECB-PKCS5Padding
- AES-ECB-PKCS7Padding
- RSA
- RSA-ECB-PKCS1PADDING
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-CFB8-NoPadding
- AES-ECB-NoPadding
- DES-ECB-PKCS5Padding