Техническая информация
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) m.d####.mob.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8012
- TCP(HTTP/1.1) sni.c####.q####.####.net:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) pin####.qq.com:80
- TCP(HTTP/1.1) a####.exc.mob.com:80
- TCP(HTTP/1.1) m.zero####.cn:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) pi####.qq.com:80
- TCP(TLS/1.0) 1####.217.17.142:443
- TCP(TLS/1.0) and####.cli####.go####.com:443
- TCP c####.g####.ig####.com:5226
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.exc.mob.com
- a####.u####.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- and####.cli####.go####.com
- c####.g####.ig####.com
- c-h####.g####.com
- f####.zero####.cn
- m.d####.mob.com
- m.zero####.cn
- pi####.qq.com
- pin####.qq.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- m.d####.mob.com/v3/cconf?appkey=####&plat=####&apppkg=####&appver=####&n...
- m.zero####.cn/getUserIsBindPhone.htm
- m.zero####.cn/index.htm
- m.zero####.cn/mobile/css/iconfont.css?2####
- m.zero####.cn/mobile/css/mui.css?2####
- m.zero####.cn/mobile/css/mui.icons-extra.css?2####
- m.zero####.cn/mobile/css/mui.picker.min.css?2####
- m.zero####.cn/mobile/css/mui.poppicker.css?2####
- m.zero####.cn/mobile/css/style.css?2####
- m.zero####.cn/mobile/fonts/mui.ttf
- m.zero####.cn/mobile/images/icon/reg-pwd1.png?2018081####
- m.zero####.cn/mobile/images/icon/reg-pwd1.png?2018081####&__t=####
- m.zero####.cn/mobile/images/icon/reg-pwd2.png?2018081####
- m.zero####.cn/mobile/images/icon/reg-pwd2.png?2018081####&__t=####
- m.zero####.cn/mobile/images/icon/reg-user1.png?2018081####
- m.zero####.cn/mobile/images/icon/reg-user1.png?2018081####&__t=####
- m.zero####.cn/mobile/js/base.min.js?2####
- m.zero####.cn/mobile/js/base.min.js?2####&__t=####
- m.zero####.cn/mobile/js/jquery-1.9.1.min.js?2####
- m.zero####.cn/mobile/js/jquery-1.9.1.min.js?2####&__t=####
- m.zero####.cn/mobile/js/jquery.Toast.js?2####
- m.zero####.cn/mobile/js/jquery.Toast.js?2####&__t=####
- m.zero####.cn/mobile/js/jquery.cookie.js?2####
- m.zero####.cn/mobile/js/jquery.cookie.js?2####&__t=####
- m.zero####.cn/mobile/js/mui.min.js?2####
- m.zero####.cn/mobile/js/mui.min.js?2####&__t=####
- m.zero####.cn/mobile/js/myscript-webview.js?2####
- m.zero####.cn/mobile/js/myscript-webview.js?2####&__t=####
- m.zero####.cn/mobile/js/system/login.js?2####
- m.zero####.cn/mobile/js/system/login.js?2####&__t=####
- m.zero####.cn/mobile/js/wxbUtil.js?2####
- m.zero####.cn/mobile/js/wxbUtil.js?2####&__t=####
- m.zero####.cn/mobileConfig.htm?deviceId=####&clientId=####&deviceType=##...
- m.zero####.cn/mobileConfig.htm?deviceId=####&deviceType=####&__t=####
- m.zero####.cn/msg/getUserMessageNum.htm
- m.zero####.cn/toLogin.htm?__ar=####&__t=####
- m.zero####.cn/upload/index_pic/2018/05/11/96.png?t=####
- m.zero####.cn/upload/index_pic/2018/07/27/85.png?t=####
- m.zero####.cn/upload/index_pic/2018/08/09/101.jpg?t=####
- m.zero####.cn/upload/startup/66_1513561449361.jpg
- m.zero####.cn/upload/startup/67_1513561471854.jpg
- m.zero####.cn/upload/startup/70_1513577872078.jpg
- m.zero####.cn/upload/startup/72_1513580526254.jpg
- m.zero####.cn/verifyCode.htm
- sni.c####.q####.####.net/config/hz-hzv3.conf
- sni.c####.q####.####.net/tdata_Soq141
- sni.c####.q####.####.net/tdata_vxj811
- a####.exc.mob.com/errconf
- a####.u####.com/app_logs
- aexcep####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- c-h####.g####.com/api.php?format=####&t=####
- m.zero####.cn/indexItem.htm?type=####&page.currentPage=####
- pi####.qq.com/mstat/report/?index=####
- pin####.qq.com/request
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.imprint
- /data/data/####/.lock
- /data/data/####/03cbda9490dc3391e4bc7e96e05b468c.0.tmp
- /data/data/####/03cbda9490dc3391e4bc7e96e05b468c.1.tmp
- /data/data/####/142bdb4cc2adda6a8de13f7ddb75918f.0.tmp
- /data/data/####/142bdb4cc2adda6a8de13f7ddb75918f.1.tmp
- /data/data/####/1627346f6190e64323e9fe3781bc3539.0.tmp
- /data/data/####/1627346f6190e64323e9fe3781bc3539.1.tmp
- /data/data/####/1cd60139fa35ea79b1b42b269e1a5b47.0.tmp
- /data/data/####/1cd60139fa35ea79b1b42b269e1a5b47.1.tmp
- /data/data/####/25591077.1365602
- /data/data/####/25591077.1365602 (deleted)
- /data/data/####/25591077.8969295
- /data/data/####/25591077.8969295 (deleted)
- /data/data/####/25591081.5979251
- /data/data/####/25591081.5979251 (deleted)
- /data/data/####/25591082.9870231
- /data/data/####/25591082.9870231 (deleted)
- /data/data/####/8aa8c31b78c8993ff27abc81c27bd260.0.tmp
- /data/data/####/8aa8c31b78c8993ff27abc81c27bd260.1.tmp
- /data/data/####/8d7a3a10619d7436171afe548d03b474.0.tmp
- /data/data/####/8d7a3a10619d7436171afe548d03b474.1.tmp
- /data/data/####/9b003693cfaa430f5692791ce6cb4f81.0.tmp
- /data/data/####/9b003693cfaa430f5692791ce6cb4f81.1.tmp
- /data/data/####/9cd7387d4ac598c9b3ee66e81aeb47eb.0.tmp
- /data/data/####/9cd7387d4ac598c9b3ee66e81aeb47eb.1.tmp
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/b0c8706f973ee2d148fb8f320e42200c.0.tmp
- /data/data/####/b0c8706f973ee2d148fb8f320e42200c.1.tmp
- /data/data/####/ba09f43f2fd6006325520d7dcafddd32.0.tmp
- /data/data/####/ba09f43f2fd6006325520d7dcafddd32.1.tmp
- /data/data/####/bugly_db_legu-journal
- /data/data/####/c5e216f9fb2d8fc205892ca7570ff705.0.tmp
- /data/data/####/c5e216f9fb2d8fc205892ca7570ff705.1.tmp
- /data/data/####/cbff13b6dbc73497a85a4c25fda99d43.0.tmp
- /data/data/####/cbff13b6dbc73497a85a4c25fda99d43.1.tmp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f69bb3ec1185e45b6805351b3f4933e3.0.tmp
- /data/data/####/f69bb3ec1185e45b6805351b3f4933e3.1.tmp
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/fb63bed7b1ff3d58991281c5af35b3cb.0.tmp
- /data/data/####/fb63bed7b1ff3d58991281c5af35b3cb.1.tmp
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/legu_tencent_analysis.db_net.zdsoft.zerobook_an...ournal
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/mix.dex
- /data/data/####/mob_commons_1.xml
- /data/data/####/mob_sdk_exception_1.xml
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/net.zdsoft.zerobook_android.mid.world.ro.xml
- /data/data/####/net.zdsoft.zerobook_android_preferences.xml
- /data/data/####/pri_legu_tencent_analysis.db_net.zdsoft.zeroboo...ournal
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/tdata_Soq141
- /data/data/####/tdata_Soq141.jar
- /data/data/####/tdata_vxj811
- /data/data/####/tdata_vxj811.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/user_data.xml
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/xUtils_http_cookie.db
- /data/data/####/xUtils_http_cookie.db-journal
- /data/media/####/.dic_lock
- /data/media/####/.duid
- /data/media/####/.globalLock
- /data/media/####/.mid.txt
- /data/media/####/.mid.txt1000001
- /data/media/####/.nulplt
- /data/media/####/.pkg_lock
- /data/media/####/.rcTag
- /data/media/####/.rc_lock
- /data/media/####/2dbcef87dcf4059f2a58d440820583cf.9.1.min.js
- /data/media/####/39c9f8b779d327c5a6d76604c96783bc.png
- /data/media/####/3cc8d8ee0d39e2956a6fb19e554e823c.min.js
- /data/media/####/4eb179057dad02fb33d6b604c25b6f8b.png
- /data/media/####/59fa4e37db4a45f4244ab69793fff64a.cookie.js
- /data/media/####/66_1513561449361.jpg.tmp
- /data/media/####/67_1513561471854.jpg.tmp
- /data/media/####/70_1513577872078.jpg.tmp
- /data/media/####/72_1513580526254.jpg.tmp
- /data/media/####/99169a79bdbe7ed0b30f9c123f7fb0cc.js
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/a8237b7ae09aab45147699f31d75ef5e.png
- /data/media/####/aebb2f16c037639a880ae5010a6773fb.js
- /data/media/####/app.db
- /data/media/####/cb7a8d8a52abbb5443162389e47c3fbc.min.js
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/d4a1c44ef0e41330cb440e88cdce37c3.Toast.js
- /data/media/####/e1373722edb60716e62627db47e19434.js
- /data/media/####/net.zdsoft.zerobook_android.bin
- /data/media/####/net.zdsoft.zerobook_android.db
- /data/media/####/tdata_Soq141
- /data/media/####/tdata_vxj811
- /data/media/####/test.log
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/net.zdsoft.zerobook.common.business.service.getui.GeTuiPushService 25792 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- sh
- Bugly
- MtaNativeCrash
- getuiext2
- libnfix
- libshella-2.9.0.2
- libufix
- neh
- nfix
- pl_droidsonroids_gif
- ufix
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-CFB-NoPadding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- RSA-NONE-PKCS1PADDING
- AES-CFB-NoPadding
- AES-ECB-NoPadding
- AES-GCM-NoPadding