Техническая информация
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) app.taoke####.cn:80
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) ada####.m.ta####.com:80
- TCP(HTTP/1.1) hk.wagbr####.non####.####.com:80
- TCP(HTTP/1.1) 1####.134.99.106:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) gd2.al####.com:80
- TCP(HTTP/1.1) ad####.m.ta####.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8011
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8012
- TCP(HTTP/1.1) wild####.al####.com.####.net:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) qin####.com.www.####.com:80
- TCP(HTTP/1.1) o####.lanlan####.com:80
- TCP(HTTP/1.1) url.olivec####.cn:80
- TCP(TLS/1.0) gd3.al####.com:443
- TCP(TLS/1.0) nbsdk-b####.al####.com:443
- TCP(TLS/1.0) gd2.al####.com:443
- TCP(TLS/1.0) wild####.al####.com.####.net:443
- TCP c####.g####.ig####.com:5226
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.b####.qq.com
- a####.u####.com
- ad####.m.ta####.com
- ada####.m.ta####.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- app.taoke####.cn
- c####.g####.ig####.com
- c-h####.g####.com
- gd1.al####.com
- gd2.al####.com
- gd3.al####.com
- img.al####.com
- img.taoke####.cn
- nbsdk-b####.al####.com
- o####.lanlan####.com
- o####.lanlan####.com
- pub-####.qin####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- url.olivec####.cn
- y####.al####.com
- ad####.m.ta####.com/rest/gc2?ak=####&av=####&c=####&d=####&sv=####&t=###...
- app.taoke####.cn/Api/check_version?b=####
- app.taoke####.cn/Api/get_type_shopdetails?b=####&type=####&page=####&sho...
- app.taoke####.cn/Api/index?b=####&page=####&mac=####&token=####
- app.taoke####.cn/Api/tb_shopdetails?b=####&numId=####&token=####
- app.taoke####.cn/Uploads/ITEM_IMG/2018-07-17/5b4d6101cf6ce.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-07-17/5b4d610dd362d.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-07-17/5b4d929f29958.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-07-17/5b4d92a33734d.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-07-17/5b4d92a57c945.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-07-17/5b4d92a9ad6b7.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-07-17/5b4d92aef13f1.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-07-17/5b4d92b1904ee.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-07-17/5b4d92b640b67.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-07-17/5b4d92b8a4ee6.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-07-17/5b4d92bc821e8.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-07-17/5b4d92c062089.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-11-12/5be9277758e51.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-11-12/5be9278791cc4.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-11-12/5be92793e6b11.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-11-19/5bf2745f940ee.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-11-19/5bf277801f720.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-11-26/5bfbad618df8a.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-11-26/5bfbb1de35960.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-11-28/5bfe54fff062e.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-11-28/5bfe59921618f.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-11-29/5bfface679235.png
- app.taoke####.cn/Uploads/ITEM_IMG/2018-11-29/5bffae516952b.png
- app.taoke####.cn/Uploads/RJ_VERSION/2018-12-01/5c02487133f4d.apk
- app.taoke####.cn/index.php?c=####&a=####&b=####&platform=####&applicatio...
- gd2.al####.com/imgextra/i2/2093154810/O1CN01Hvb6Rq1lP1aT39cqg_!!20931548...
- o####.lanlan####.com/42032e4f9cb9a04a3d321104413624c2_800x800.jpg@!1-500...
- o####.lanlan####.com/c74cedc3319e58394baec9740523b929_800x800.jpg@!1-500...
- qin####.com.www.####.com/tdata_EDT369
- t####.c####.q####.####.com/tdata_RSQ274
- t####.c####.q####.####.com/tdata_RbW195
- t####.c####.q####.####.com/tdata_qHR433
- ti####.c####.l####.####.com/config/hz-hzv3.conf
- url.olivec####.cn/GetUrl/get_api_url?b=####&token=####
- wild####.al####.com.####.net/imgextra/i1/880734502/TB2jdZVlhrI8KJjy0FpXX...
- wild####.al####.com.####.net/imgextra/i2/628189716/TB2Wt51ij3z9KJjy0FmXX...
- wild####.al####.com.####.net/imgextra/i3/649655714/O1CN01zrzrKi1s53blwFk...
- wild####.al####.com.####.net/imgextra/i4/1650553491/O1CN011bev8S6XhscqPq...
- wild####.al####.com.####.net/imgextra/i4/929443759/TB2o77ubhHI8KJjy1zbXX...
- a####.u####.com/app_logs
- ada####.m.ta####.com/rest/sur?ak=####&av=####&c=####&v=####&s=####&d=###...
- aexcep####.b####.qq.com:8011/rqd/async
- aexcep####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- c-h####.g####.com/api.php?format=####&t=####
- hk.wagbr####.non####.####.com/saveWb.json
- /data/data/####/.imprint
- /data/data/####/0a231bd8575dcf72.txt
- /data/data/####/21c22f492aba3de8.lock
- /data/data/####/8ef9c457b3bbb403.lock
- /data/data/####/930a31b34bd52c08.lock
- /data/data/####/AlibcLinkPartner.xml
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/Q0VSVC5SU0EK.txt8fa
- /data/data/####/SGMANAGER_DATA2.tmp
- /data/data/####/UTCommon.xml
- /data/data/####/aliTradeConfigSP.xml
- /data/data/####/ap.Lock
- /data/data/####/auth_sdk_device.xml
- /data/data/####/bugly_db_legu-journal
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/com.baicaibuy.daili_preferences.xml
- /data/data/####/de4f44d35a32
- /data/data/####/demo.db-journal
- /data/data/####/dingding.xml
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/gdaemon_20161017
- /data/data/####/gkt-journal
- /data/data/####/init.pid
- /data/data/####/init_c.pid
- /data/data/####/libnfix.so
- /data/data/####/libsgmainso-5.1.96.so.tmp
- /data/data/####/libsgsecuritybodyso-5.1.25.so.tmp
- /data/data/####/libshella-2.8.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/lock.lock
- /data/data/####/mix.dex
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/sp.lock
- /data/data/####/tdata_RSQ274
- /data/data/####/tdata_RSQ274.jar
- /data/data/####/tdata_RbW195
- /data/data/####/tdata_RbW195.jar
- /data/data/####/tdata_qHR433
- /data/data/####/tdata_qHR433.jar
- /data/data/####/timestamp
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/ut.db
- /data/data/####/ut.db-journal
- /data/data/####/webview.db-journal
- /data/media/####/.nomedia
- /data/media/####/11h9jjfutwqvak8v6yzyy4bws0.tmp
- /data/media/####/176zriku7wiim3r8yv5cu4m790.tmp
- /data/media/####/1g5dc8v2nrl3q0mof9cqoj2tx0.tmp
- /data/media/####/1vwjvylp5pmb5nkiifejvtws10.tmp
- /data/media/####/1w08ha7wrcbtalotn2dmjae9v0.tmp
- /data/media/####/209viq1t2geef1sir4kmsmf5f0.tmp
- /data/media/####/22rjhqywa0qu1urjsp3187ry90.tmp
- /data/media/####/24fuf3dzuhv98n32l4ke8kjk70.tmp
- /data/media/####/28ivepb1wti8rfkg1unrvkunr0.tmp
- /data/media/####/2e58qstipmqzrju8s52feog7b0.tmp
- /data/media/####/2q6u508eep20emhtxa9am8g7k0.tmp
- /data/media/####/3cay9gw3oe43tdlgq5yeohxge0.tmp
- /data/media/####/3eo8l51yv058eh2x8ypc3rxs30.tmp
- /data/media/####/3gui2qgxy16nlpnocot093sd40.tmp
- /data/media/####/3wiid2ylq2rhkgbmqek7kgmjg0.tmp
- /data/media/####/3wng4tg3yqm2lih8nvup932l70.tmp
- /data/media/####/3xe9rklcsod815m87fuernnvx0.tmp
- /data/media/####/41njayrkdl6hy319twrtgniw20.tmp
- /data/media/####/443ddca8jmxtflbzpzqe3a2z70.tmp
- /data/media/####/49flhxqdhw9wg89wbtjp571pc0.tmp
- /data/media/####/4aim2j1avsd1ab3e9ol9lh7r40.tmp
- /data/media/####/4df2hm6fnbp6p5fktzm3gejt20.tmp
- /data/media/####/4lgwbbci3bxkwbk9l5n6kuzer0.tmp
- /data/media/####/4ndxpra3sx0lxvrgboa5onrvr0.tmp
- /data/media/####/54s3mz0gv2rtvkolj1jvnooqw0.tmp
- /data/media/####/58vteusjhaoy08gdvivo70ruj0.tmp
- /data/media/####/59en30rd2b62r3oqcl9uky1kf0.tmp
- /data/media/####/5b7veq97yjsf6xbhq2274azlf0.tmp
- /data/media/####/5db8hljyriom7l8z5fa9edsq60.tmp
- /data/media/####/5q2rodthzrzulhn03dkom7tjd0.tmp
- /data/media/####/5xwz0a7ti6ec39shx4ofm37v80.tmp
- /data/media/####/62f1nlr36nkg5xapmo3nktg140.tmp
- /data/media/####/68o151a05ebtwqkizmqptopmz0.tmp
- /data/media/####/6a4nbk9n5rz391t2lc033sydh0.tmp
- /data/media/####/6c709c11d2d46a7b
- /data/media/####/6cnhji1bedw9xvxwl96tuaq3x0.tmp
- /data/media/####/6m4omxd7u3iv962xz8oetxet90.tmp
- /data/media/####/6s703v0h4sufnr3usm38731rv0.tmp
- /data/media/####/6suctykt127ai0u2xm8gc4q8f0
- /data/media/####/6vs2mbbn12aipfo93qeqg59vr0.tmp
- /data/media/####/6ya5du1sqd8htxakasb2raac0.tmp
- /data/media/####/713y4va78krtqt8jd2tr2suio0.tmp
- /data/media/####/72tfiuu42920r6zda5gw4yk9n0.tmp
- /data/media/####/78y4zk875tmqq0tc0r5erx9as0.tmp
- /data/media/####/7hqlwycneqdu6j0lcf0g9xl9e0.tmp
- /data/media/####/83qkznckw1gmptvd9obe23af0.tmp
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/Test.apk
- /data/media/####/app.db
- /data/media/####/com.baicaibuy.daili.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/cwdmlm29xj7y4ry6ddbxce4a0.tmp
- /data/media/####/dd7893586a493dc3
- /data/media/####/eicejv2p6wmydnqzbb6yjffb0.tmp
- /data/media/####/gkt-journal
- /data/media/####/gktper
- /data/media/####/gsyzjk6q4bknggtelaxbo6jo0.tmp
- /data/media/####/hid.dat
- /data/media/####/japhh16b29iscziplhpf918i0.tmp
- /data/media/####/journal.tmp
- /data/media/####/px3xfzyih35crs3asvyoh0rn0.tmp
- /data/media/####/py64xph12e7a4vjfsejpe4yk0.tmp
- /data/media/####/s86cwkxqdniac6epvqeys5n20.tmp
- /data/media/####/tdata_RSQ274
- /data/media/####/tdata_RbW195
- /data/media/####/tdata_qHR433
- /data/media/####/test.log
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.igexin.sdk.PushService 24863 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.8.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- mount
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/com.igexin.sdk.PushService 24863 300 0
- Bugly
- getuiext2
- libnfix
- libshella-2.8
- libufix
- nfix
- sgmainso-5.1
- sgsecuritybodyso-5.1
- ufix
- ut_c_api
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-CFB-NoPadding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding