Техническая информация
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8011
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8012
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) 39.1####.48.223:8106
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) 2####.58.212.206:443
- TCP(TLS/1.0) p0.duya####.com:443
- TCP(TLS/1.0) p2.duya####.com:443
- TCP(TLS/1.0) p1.duya####.com:443
- TCP(TLS/1.0) api.m.hot####.com:443
- TCP c####.g####.ig####.com:5226
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.b####.qq.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- api.m.hot####.com
- c####.g####.ig####.com
- c-h####.g####.com
- log.u####.com
- p0.duya####.com
- p1.duya####.com
- p2.duya####.com
- plb####.u####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- u####.u####.com
- t####.c####.q####.####.com/config/hz-hzv3.conf
- t####.c####.q####.####.com/tdata_bca864
- t####.c####.q####.####.com/tdata_fyR930
- aexcep####.b####.qq.com:8011/rqd/async
- aexcep####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.imprint
- /data/data/####/UM_PROBE_DATA.xml
- /data/data/####/a==7.5.4&&2.2.9_1547061436147_envelope.log
- /data/data/####/bugly_db_legu-journal
- /data/data/####/com.duyao.poisonnovel-journal
- /data/data/####/com.sensorsdata.analytics.android.sdk.SensorsDataAPI.xml
- /data/data/####/comment_setting.xml
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTQ3MDYxNDM1NDg3;
- /data/data/####/dW1weF9zaGFyZV8xNTQ3MDYxNDM3MzY4;
- /data/data/####/dW1weF9zaGFyZV8xNTQ3MDYxNDM3NDY4;
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/i==1.2.0&&2.2.9_1547061435603_envelope.log
- /data/data/####/info.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/mix.dex
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/novelStory.db-journal
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/sensorsdata.xml
- /data/data/####/share.db-journal
- /data/data/####/tdata_bca864
- /data/data/####/tdata_bca864.jar
- /data/data/####/tdata_fyR930
- /data/data/####/tdata_fyR930.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_config.xml.bak
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_socialize.xml
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.cca.dat
- /data/media/####/.umm.dat
- /data/media/####/05538103027f395dfaecbde618ed8007.0.tmp
- /data/media/####/05538103027f395dfaecbde618ed8007.1.tmp
- /data/media/####/0fe7bcc9db4f45be8eb0fb376f97060f.0.tmp
- /data/media/####/0fe7bcc9db4f45be8eb0fb376f97060f.1.tmp
- /data/media/####/14e23cf76482af7c872fcba4146b8758.0.tmp
- /data/media/####/14e23cf76482af7c872fcba4146b8758.1.tmp
- /data/media/####/151992e51b2149b65c6585738a9c5125.0.tmp
- /data/media/####/151992e51b2149b65c6585738a9c5125.1.tmp
- /data/media/####/2321eb7e0f4b5f9280705b2a744a8809.0.tmp
- /data/media/####/2321eb7e0f4b5f9280705b2a744a8809.1.tmp
- /data/media/####/288598277c9559cf04cbeec09d5bb14b.0.tmp
- /data/media/####/288598277c9559cf04cbeec09d5bb14b.1.tmp
- /data/media/####/2df4102f2293801c15b4931b03da464d.0.tmp
- /data/media/####/2df4102f2293801c15b4931b03da464d.1.tmp
- /data/media/####/33653c18d43f8ab9686679fce68266e2.0.tmp
- /data/media/####/33653c18d43f8ab9686679fce68266e2.1.tmp
- /data/media/####/3f023ac2c0643be47a58152f0e4c8181.0.tmp
- /data/media/####/3f023ac2c0643be47a58152f0e4c8181.1.tmp
- /data/media/####/40c51bd771b58d162d4f571f6b5cb0d8.0.tmp
- /data/media/####/40c51bd771b58d162d4f571f6b5cb0d8.1.tmp
- /data/media/####/4511ccaca2ef971c7d5fab68e93e60fc.0.tmp
- /data/media/####/4511ccaca2ef971c7d5fab68e93e60fc.1.tmp
- /data/media/####/4518b8067786788b88616757dd498e4f.0.tmp
- /data/media/####/4518b8067786788b88616757dd498e4f.1.tmp
- /data/media/####/4a7df9f521f6b76a1062d96236fcbd07.0.tmp
- /data/media/####/4a7df9f521f6b76a1062d96236fcbd07.1.tmp
- /data/media/####/4c415cc340fb0c638dac83d8ae6da847.0.tmp
- /data/media/####/4c415cc340fb0c638dac83d8ae6da847.1.tmp
- /data/media/####/509b241f2cba037f38ccf5969cac0c0f.0.tmp
- /data/media/####/509b241f2cba037f38ccf5969cac0c0f.1.tmp
- /data/media/####/5185b9eef39f5bb9365d78435aa3cc79.0.tmp
- /data/media/####/5185b9eef39f5bb9365d78435aa3cc79.1.tmp
- /data/media/####/55880cd330649df6f622ca29607ffb9f.0.tmp
- /data/media/####/55880cd330649df6f622ca29607ffb9f.1.tmp
- /data/media/####/5ab644ab4e71fee1b6ac4bfa1d658593.0.tmp
- /data/media/####/5ab644ab4e71fee1b6ac4bfa1d658593.1.tmp
- /data/media/####/609a62dd8fd7f7827fc426a6d81392db.0.tmp
- /data/media/####/609a62dd8fd7f7827fc426a6d81392db.1.tmp
- /data/media/####/6477bbe27a7c4f5f288eb137e290a892.0.tmp
- /data/media/####/6477bbe27a7c4f5f288eb137e290a892.1.tmp
- /data/media/####/651612ead1fc5e32ab241ea21468cc31.0.tmp
- /data/media/####/651612ead1fc5e32ab241ea21468cc31.1.tmp
- /data/media/####/719897a03d115f1985a901a04f04fced.0.tmp
- /data/media/####/719897a03d115f1985a901a04f04fced.1.tmp
- /data/media/####/7297f193b036541e0f0f0c61cfe3d4da.0.tmp
- /data/media/####/7297f193b036541e0f0f0c61cfe3d4da.1.tmp
- /data/media/####/7a841e2768d3b0c9d01d96488aab902f.0.tmp
- /data/media/####/7a841e2768d3b0c9d01d96488aab902f.1.tmp
- /data/media/####/86ebafdfe63c9092a19ee5e7777facf8.0.tmp
- /data/media/####/86ebafdfe63c9092a19ee5e7777facf8.1.tmp
- /data/media/####/88448f96265004e3fdf52a783515893a.0.tmp
- /data/media/####/9a36c4b1a5f164688be07d6838f00e65.0.tmp
- /data/media/####/9a36c4b1a5f164688be07d6838f00e65.1.tmp
- /data/media/####/app.db
- /data/media/####/b0c127c485e9adb3507c9526a281e9db.0.tmp
- /data/media/####/b0c127c485e9adb3507c9526a281e9db.1.tmp
- /data/media/####/b47deb9d639a56e68f5994e2ee562887.0.tmp
- /data/media/####/b47deb9d639a56e68f5994e2ee562887.1.tmp
- /data/media/####/c11484618b370545bb069cbcf1a4d313.0.tmp
- /data/media/####/c11484618b370545bb069cbcf1a4d313.1.tmp
- /data/media/####/c5b1840b80afe936d687e3a038017c3d.0.tmp
- /data/media/####/c5b1840b80afe936d687e3a038017c3d.1.tmp
- /data/media/####/c856b9552bac0f1a564b4ce50f305ce8.0.tmp
- /data/media/####/c856b9552bac0f1a564b4ce50f305ce8.1.tmp
- /data/media/####/cdd62592bfc8893b66b86e4b81ae6499.0.tmp
- /data/media/####/cdd62592bfc8893b66b86e4b81ae6499.1.tmp
- /data/media/####/com.duyao.poisonnovel.bin
- /data/media/####/com.duyao.poisonnovel.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/d4395c0c86a37cf0917e98982ebf8441.0.tmp
- /data/media/####/d4395c0c86a37cf0917e98982ebf8441.1.tmp
- /data/media/####/d4f42b46200abf2586f0750748331a85.0.tmp
- /data/media/####/d4f42b46200abf2586f0750748331a85.1.tmp
- /data/media/####/d53f3dcc8735b2138280e90d4d11bd66.0.tmp
- /data/media/####/d53f3dcc8735b2138280e90d4d11bd66.1.tmp
- /data/media/####/d74ddd1c7929f397d1ea72a0e55e3565.0.tmp
- /data/media/####/d74ddd1c7929f397d1ea72a0e55e3565.1.tmp
- /data/media/####/dbd491980fcc7898906224d2aac836fc.0.tmp
- /data/media/####/dbd491980fcc7898906224d2aac836fc.1.tmp
- /data/media/####/f6717efa224d93a163ed3e78b337ebe0.0.tmp
- /data/media/####/f6717efa224d93a163ed3e78b337ebe0.1.tmp
- /data/media/####/f721249e6a0b6b495f9cc0ba4d9a775e.0.tmp
- /data/media/####/f721249e6a0b6b495f9cc0ba4d9a775e.1.tmp
- /data/media/####/journal.tmp
- /data/media/####/tdata_bca864
- /data/media/####/tdata_fyR930
- /data/media/####/test.log
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.NovelPushService 25169 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- ls /
- ls /sys/class/thermal
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.service.NovelPushService 25169 300 0
- Bugly
- getuiext3
- libnfix
- libshella-2.9.0.2
- libufix
- nfix
- ufix
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding