Техническая информация
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) c.d####.mob.com:80
- TCP(HTTP/1.1) a####.b####.qq.com:8011
- TCP(HTTP/1.1) api.s####.mob.com:80
- TCP(HTTP/1.1) m.d####.mob.com:80
- TCP(HTTP/1.1) a####.exc.mob.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8012
- TCP(HTTP/1.1) sni.c####.q####.####.net:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) mo####.b####.com:80
- TCP(TLS/1.0) im####.zaz####.net:443
- TCP(TLS/1.0) mobads-####.b####.com:443
- TCP(TLS/1.0) c####.baidust####.com:443
- TCP(TLS/1.0) wn.pos.b####.com:443
- TCP(TLS/1.0) app16####.zaz####.net:443
- TCP(TLS/1.0) ub####.baidust####.com:443
- TCP(TLS/1.0) mo####.b####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5227
- 7j####.c####.z0.####.com
- a####.b####.qq.com
- a####.exc.mob.com
- a####.u####.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- api.s####.mob.com
- app16####.zaz####.net
- c####.baidust####.com
- c####.g####.ig####.com
- c-h####.g####.com
- c.d####.mob.com
- im####.zaz####.net
- m.d####.mob.com
- mo####.b####.com
- mobads-####.b####.com
- pub-####.qin####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- ub####.baidust####.com
- wn.pos.b####.com
- m.d####.mob.com/v2/cconf?appkey=####&plat=####&apppkg=####&appver=####&n...
- mo####.b####.com/ads/pa/8/__xadsdk__remote__8.7055.jar
- sni.c####.q####.####.net/config/hz-hzv3.conf
- sni.c####.q####.####.net/tdata_BAI450
- sni.c####.q####.####.net/tdata_YJA893
- t####.c####.q####.####.com/tdata_EDT356
- a####.b####.qq.com:8011/rqd/async
- a####.exc.mob.com/errconf
- a####.u####.com/app_logs
- aexcep####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- and####.b####.qq.com/rqd/async?aid=####
- api.s####.mob.com/conf5
- api.s####.mob.com/conn
- api.s####.mob.com/log4
- api.s####.mob.com/snsconf
- c-h####.g####.com/api.php?format=####&t=####
- c.d####.mob.com/v2/cdata
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.imprint
- /data/data/####/.lock
- /data/data/####/.mrecord
- /data/data/####/.mrecord (deleted)
- /data/data/####/.mrlock
- /data/data/####/.statistics
- /data/data/####/03d8e5abf34aa635de3836439102b0bee474547375d77fd....0.tmp
- /data/data/####/05c7bea3dfaddc424ea12ffbf16f1fd8356c648cda5094a....0.tmp
- /data/data/####/0fead210407a105f8bc9c9d343c47922cd8d325e9c04763....0.tmp
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/125c164b1cc55fa1057b8b46804d7459eb61aeb514122a2....0.tmp
- /data/data/####/1bbcdd5b3f0cf8c4bcb0f43936a1dc21c4008f0ce19514f....0.tmp
- /data/data/####/1f85b351871081fb6e30f832a955a09866fc6cd24a81e46....0.tmp
- /data/data/####/228a85b5b7e810631f4ce002c3b7f501387a9238697d7f3....0.tmp
- /data/data/####/2cd988fe2b1389e00f548d098f2966e1858568674283199....0.tmp
- /data/data/####/3e044aea80cd1637ecbcba423673cdbfd45390d42ea8fea....0.tmp
- /data/data/####/461e092acf932498bce2c4f8e4e0499027f1fdce5ace151....0.tmp
- /data/data/####/47720118b94687c314b009e5a957e4cd07c7c4490074d42....0.tmp
- /data/data/####/5d09f934c176a15e90d28aa62954232d7ea8eb2745b49a7....0.tmp
- /data/data/####/5dd06fe07676c192958d47cdc026a0afecf58a1aadf3af3....0.tmp
- /data/data/####/69ac488fe41e739b96d9a4bd057d4a4f478ac8c1518ba6f....0.tmp
- /data/data/####/75e902989d4bf420541227b1b970e8ca61dcd9871f505b4....0.tmp
- /data/data/####/79eada9b2c844d31fa68bb1d1b41f2b828e713f01a32ea4....0.tmp
- /data/data/####/7b275f3a6aa1eca8f46383e03bebf37691f28642bfbecdf....0.tmp
- /data/data/####/7dfb17283d36729e7d494c6ce0276f33fa485a97a35ed49....0.tmp
- /data/data/####/8637f70f3255a2aab1162a6a5b54ce0abc5e2dda6cdde53....0.tmp
- /data/data/####/8dd81a4f4ef1
- /data/data/####/94ae3013717f1e0667d2a020162637ddc5345d4e7537d17....0.tmp
- /data/data/####/94b707d9d98556fad7e0570832667f38a091cb85b8a5483....0.tmp
- /data/data/####/962c9a79bad69a0c772e9a342d1aa1e3e74479c49b41394....0.tmp
- /data/data/####/ApplicationCache.db-journal
- /data/data/####/ThrowalbeLog.db-journal
- /data/data/####/__sdk_ral.xml
- /data/data/####/__x_adsdk_agent_header__.xml
- /data/data/####/__xadsdk__remote__final__65275439-a099-48cb-b1f...a3.jar
- /data/data/####/__xadsdk__remote__final__builtin__.jar
- /data/data/####/__xadsdk__remote__final__builtinversion__.jar
- /data/data/####/__xadsdk__remote__final__running__.jar
- /data/data/####/__xadsdk_downloaded__version__.xml
- /data/data/####/a3cd06ff859776d472d51fb77780b46d2b2f197da69a3ef....0.tmp
- /data/data/####/a9f7f26fad9147e90605bf4b4e5bd0b6f63e129f3546861....0.tmp
- /data/data/####/aaa259c609bc9b342ef03004658e65785d7d01de572f74c....0.tmp
- /data/data/####/b1d6dabe625ec430f33987f678ddfa18f43f644c0ddb2c0....0.tmp
- /data/data/####/b40257b8f5f52c27e788a75f00386c2f8e2355c8c9c85f8....0.tmp
- /data/data/####/bb81cb3baa6e2984867d8b9b736e6d82674f4adca7cb42e....0.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/bugly_db_legu-journal
- /data/data/####/c4dde82bc0b7bb37d68419bdcb45691716d2e2c59303767....0.tmp
- /data/data/####/c7844c27e7870dcbebcd4b4a5f79b0acd4125573a19e917....0.tmp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/com.baidu.mobads.loader.xml
- /data/data/####/com.zk.dan.zazhimi.BETA_VALUES.xml
- /data/data/####/crashrecord.xml
- /data/data/####/d8f4715f7708cafd4b8538e7c05d11df6d47f5fa90bdefb....0.tmp
- /data/data/####/d921447d38769d70506d11ff08eb45909de50c374c80c9a....0.tmp
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/e13f11c76d6adeedfbb00dbc52294d5e8faa4ef4bce3af8....0.tmp
- /data/data/####/e281ec970e7b091c64cffb4b9fd580818401e4d89d7a6af....0.tmp
- /data/data/####/eccde8758bb23113ad992e280681b0c919e26d191800a16....0.tmp
- /data/data/####/ee6259463f714deb1ff2839a1d0044207ea8ea1da88ae12....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f0287cee88aab5dfee9938d4fadb656fafcfae580ff3e8f....0.tmp
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/fd631d462f462ae19eaf75e7e1ffd77944f59539edfe4f1....0.tmp
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/https_mobads.baidu.com_0.localstorage-journal
- /data/data/####/https_mobads.baidu.com_0.localstorage-journal (deleted)
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/install_sent.xml
- /data/data/####/journal.tmp
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/mix.dex
- /data/data/####/mob_commons_1.xml
- /data/data/####/mob_sdk_exception_1.xml
- /data/data/####/mob_sdk_exception_1.xml.bak
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/share_sdk_1.xml
- /data/data/####/sharesdk.db-journal
- /data/data/####/tdata_BAI450
- /data/data/####/tdata_BAI450.jar
- /data/data/####/tdata_YJA893
- /data/data/####/tdata_YJA893.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_general_config.xml.bak
- /data/data/####/umeng_it.cache
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/.al
- /data/media/####/.dh-journal
- /data/media/####/.dhlock
- /data/media/####/.dic_lock
- /data/media/####/.dk
- /data/media/####/.duid
- /data/media/####/.globalLock
- /data/media/####/.nulal
- /data/media/####/.nulplt
- /data/media/####/.pkg_lock
- /data/media/####/.rcTag
- /data/media/####/.rc_lock
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.zk.dan.zazhimi.bin
- /data/media/####/com.zk.dan.zazhimi.db
- /data/media/####/d2054d7d8d570fd2d65d7c8758f9d4e2
- /data/media/####/tdata_BAI450
- /data/media/####/tdata_YJA893
- /data/media/####/test.log
- /system/bin/sh -c getprop
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.GeTuiService 24757 300 0
- app_process /system/bin com.android.commands.pm.Pm list packages
- cat /proc/cpuinfo
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- mount
- pm list packages
- sh
- Bugly
- getuiext2
- libnfix
- libshella-2.9.0.2
- libufix
- neh
- nfix
- ufix
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS7Padding
- AES-ECB-NoPadding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding