Техническая информация
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) sf1-ttc####.ps####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) et2-na6####.wagbr####.ali####.####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(TLS/1.0) api.map.b####.com:443
- TCP(TLS/1.0) c.jinrigo####.com.cn:443
- TCP(TLS/1.0) av1.x####.com:443
- TCP(TLS/1.0) dualsta####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) o####.map.b####.com:443
- TCP(TLS/1.0) c####.x####.com:443
- TCP(TLS/1.0) loc.map.b####.com:443
- TCP(TLS/1.0) g.al####.com:443
- TCP(TLS/1.0) sf3-ttc####.ps####.com:443
- TCP(TLS/1.0) up####.v.qin####.com:443
- TCP(TLS/1.0) gw.alipayo####.com:443
- TCP(TLS/1.0) re####.al####.com:443
- a.alipayo####.com
- and####.b####.qq.com
- api.map.b####.com
- as.alipayo####.com
- av1.x####.com
- c####.x####.com
- c####.x####.com
- c.jinrigo####.com.cn
- cdn.doumist####.com
- ex####.sn####.com
- g.al####.com
- gw.alipayo####.com
- is.sn####.com
- loc.map.b####.com
- log.u####.com
- o####.map.b####.com
- plb####.u####.com
- re####.al####.com
- s####.u####.com
- sdk.o####.p####.####.com
- sf1-ttc####.ps####.com
- sf3-ttc####.ps####.com
- u####.u####.com
- et2-na6####.wagbr####.ali####.####.com/bar/get/5c838b240cafb2d7b700011a/...
- sf1-ttc####.ps####.com/img/ad.union.api/02cf59d00bd5855c207dc70edf6e8bb8...
- sf1-ttc####.ps####.com/img/mosaic-legacy/2c9d7000dfa15ea7f492b~c1_1080x1...
- and####.b####.qq.com/rqd/async
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/-1127729055-1266689676
- /data/data/####/-5998622401067643521
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/000001.dbtmp
- /data/data/####/000002.dbtmp
- /data/data/####/0fedfc9a2ed324cd6cd0bab0be924c76
- /data/data/####/0fedfc9a2ed324cd6cd0bab0be924c76.tmp
- /data/data/####/1021689741840853517
- /data/data/####/143970178-1509997924
- /data/data/####/1567187708821_2136
- /data/data/####/1567187708975.log
- /data/data/####/1567187708975.log.bak
- /data/data/####/1567187708993_2136
- /data/data/####/1567187709205_2136
- /data/data/####/1567187709841_2136
- /data/data/####/1567187712643_2136
- /data/data/####/1567187714207_2266
- /data/data/####/1567187714225_2300
- /data/data/####/1567187714730_2266
- /data/data/####/1567187715271_2300
- /data/data/####/1567187716214_2266
- /data/data/####/1567187723669_2136
- /data/data/####/1567187774011_2136
- /data/data/####/1d4fe3b061213f72f5ba0eaba2062cf5
- /data/data/####/1d4fe3b061213f72f5ba0eaba2062cf5.tmp
- /data/data/####/Archimedes_p1
- /data/data/####/Archimedes_p2
- /data/data/####/Archimedes_p3
- /data/data/####/Archimedes_p4
- /data/data/####/Archimedes_p5
- /data/data/####/INSTALLATION
- /data/data/####/MANIFEST-000001
- /data/data/####/MultiDex.lock
- /data/data/####/TDCloudSettingsConfig3218440684AE4C74A98B0FB8F4CD84DD.xml
- /data/data/####/TD_app_pefercen_profile.xml
- /data/data/####/TDpref_cloudcontrol1.xml
- /data/data/####/TDpref_longtime.xml
- /data/data/####/TDpref_longtime0.xml
- /data/data/####/TDpref_longtime0.xml.bak (deleted)
- /data/data/####/TDpref_shorttime.xml
- /data/data/####/TDpref_shorttime0.xml
- /data/data/####/UM_PROBE_DATA.xml
- /data/data/####/app_crash_copy.xml
- /data/data/####/authStatus_com.jinrigongzuo.martin.xml
- /data/data/####/authStatus_com.jinrigongzuo.martin;pushservice.xml
- /data/data/####/authStatus_com.jinrigongzuo.martin;remote.xml
- /data/data/####/bj_alipay.png
- /data/data/####/bj_bank.png
- /data/data/####/bj_wechat.png
- /data/data/####/bugly_db_-journal
- /data/data/####/cache.manifest
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTY3MTg3NzA4NzAy;
- /data/data/####/daemon
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/dmdid
- /data/data/####/domSetting
- /data/data/####/domSettingTime
- /data/data/####/downloader.db-journal
- /data/data/####/empty_icon.png
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/expression1.png
- /data/data/####/expression2.png
- /data/data/####/expression3.png
- /data/data/####/expression4.png
- /data/data/####/expression5.png
- /data/data/####/expression6.png
- /data/data/####/firll.dat
- /data/data/####/gal.db
- /data/data/####/gal.db-journal
- /data/data/####/getui_sp.xml
- /data/data/####/guide.png
- /data/data/####/guide1.png
- /data/data/####/guide2.png
- /data/data/####/guide3.png
- /data/data/####/guide_step1.png
- /data/data/####/guide_step2.png
- /data/data/####/guide_step3.png
- /data/data/####/guide_step4.png
- /data/data/####/guide_step5.png
- /data/data/####/guide_step6.png
- /data/data/####/hst.db
- /data/data/####/hst.db-journal
- /data/data/####/i==1.2.0&&1.8.0_1567187708763_envelope.log
- /data/data/####/index
- /data/data/####/info.xml
- /data/data/####/init_c1.pid
- /data/data/####/init_er.pid
- /data/data/####/iv
- /data/data/####/jianZhi.xml
- /data/data/####/ker.db-journal
- /data/data/####/libcuid.so
- /data/data/####/libjiagu805720785.so
- /data/data/####/local_crash_lock
- /data/data/####/main.dek
- /data/data/####/multidex.version.xml
- /data/data/####/my_walletHeader_waves.png
- /data/data/####/ofl.config
- /data/data/####/ofl_location.db
- /data/data/####/ofl_location.db-journal
- /data/data/####/ofl_statistics.db
- /data/data/####/ofl_statistics.db-journal
- /data/data/####/pack_violet.png
- /data/data/####/pack_yellow.png
- /data/data/####/pushservice_umeng_common_config.xml
- /data/data/####/remote_umeng_common_config.xml
- /data/data/####/salt
- /data/data/####/security_info
- /data/data/####/t==8.0.0&&1.8.0_1567187712216_envelope.log
- /data/data/####/tdid.xml
- /data/data/####/tianyancha.png
- /data/data/####/tmp.zip
- /data/data/####/tt_materialMeta.xml
- /data/data/####/tt_sdk_settings.xml
- /data/data/####/tt_splash.xml
- /data/data/####/ttopenadsdk.xml
- /data/data/####/ttopensdk.db-journal
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_socialize.xml
- /data/data/####/unfold_violet.png
- /data/data/####/unfold_yellow.png
- /data/data/####/vendors.js
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/webviewCookiesChromium.db-journal (deleted)
- /data/data/####/withdawal_failure.png
- /data/data/####/withdawal_success.png
- /data/data/####/yy_agreement.46c5062116993106bf19.js
- /data/data/####/yy_agreement.9f4fabae1ea4e13de2c3c7503988acfb.css
- /data/data/####/yy_agreement.html
- /data/data/####/yy_applyforwithdrawal.46c5062116993106bf19.js
- /data/data/####/yy_applyforwithdrawal.efce7d7c2e3478f5cc4ffe5cd0631b7f.css
- /data/data/####/yy_applyforwithdrawal.html
- /data/data/####/yy_bindingalipay.46c5062116993106bf19.js
- /data/data/####/yy_bindingalipay.b4f79ba76e9a97049c17da9f2681460a.css
- /data/data/####/yy_bindingalipay.html
- /data/data/####/yy_bindingbankcard.46c5062116993106bf19.js
- /data/data/####/yy_bindingbankcard.f727bc19dbd0061d6553c45c47c24330.css
- /data/data/####/yy_bindingbankcard.html
- /data/data/####/yy_bindingidcard.46c5062116993106bf19.js
- /data/data/####/yy_bindingidcard.b4f79ba76e9a97049c17da9f2681460a.css
- /data/data/####/yy_bindingidcard.html
- /data/data/####/yy_bindingwxpay.46c5062116993106bf19.js
- /data/data/####/yy_bindingwxpay.ccc48de7a1cd8ba168d216ef5bfbb470.css
- /data/data/####/yy_bindingwxpay.html
- /data/data/####/yy_editwithdrawal.46c5062116993106bf19.js
- /data/data/####/yy_editwithdrawal.874f668805fa9b309a6417e59320f330.css
- /data/data/####/yy_editwithdrawal.html
- /data/data/####/yy_mywallet.46c5062116993106bf19.js
- /data/data/####/yy_mywallet.d9c9e422f96a48a4524965f587d9e162.css
- /data/data/####/yy_mywallet.html
- /data/data/####/yy_newbieguide.46c5062116993106bf19.js
- /data/data/####/yy_newbieguide.83e953ef82dcc19f1698784d030956f3.css
- /data/data/####/yy_newbieguide.html
- /data/data/####/yy_tyccompanydetail.2ee5d2cb081369b77ae6e5158bb65552.css
- /data/data/####/yy_tyccompanydetail.46c5062116993106bf19.js
- /data/data/####/yy_tyccompanydetail.html
- /data/data/####/yy_withdrawalstatus.46c5062116993106bf19.js
- /data/data/####/yy_withdrawalstatus.74832fa4c144f1516eb2f289e286a3a8.css
- /data/data/####/yy_withdrawalstatus.html
- /data/data/####/yy_withdrawalway.46c5062116993106bf19.js
- /data/data/####/yy_withdrawalway.7edd51247e34da80f4aa90426ac8927f.css
- /data/data/####/yy_withdrawalway.html
- /data/media/####/-1050787928.tmp
- /data/media/####/-1217920812.tmp
- /data/media/####/-12663731.tmp
- /data/media/####/-1387083220.tmp
- /data/media/####/-1393431412.tmp
- /data/media/####/-1810965093.tmp
- /data/media/####/-1856284385.tmp
- /data/media/####/-1964944677.tmp
- /data/media/####/-43075915.tmp
- /data/media/####/-888895399.tmp
- /data/media/####/-913468083.tmp
- /data/media/####/-955225690.tmp
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.cca.dat
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.nomedia
- /data/media/####/.umm.dat
- /data/media/####/1354599261.tmp
- /data/media/####/1413342689.tmp
- /data/media/####/1910543776.tmp
- /data/media/####/1959765753.tmp
- /data/media/####/727022938.tmp
- /data/media/####/794fdbff1104beadba13f6f4859917af.tmp
- /data/media/####/794fdbff1104beadba13f6f4859917af.tmp (deleted)
- /data/media/####/810268348.tmp
- /data/media/####/BeLog_1567187713214.log
- /data/media/####/BeLog_1567187726319.log
- /data/media/####/BeLog_1567187730355.log
- /data/media/####/ccb79b34a97b88769173a6d24b216637.tmp
- /data/media/####/conlts.dat
- /data/media/####/dmdid
- /data/media/####/domSetting
- /data/media/####/domSettingTime
- /data/media/####/ls.db
- /data/media/####/ls.db-journal
- /data/media/####/temp_pkg_info.json
- /data/media/####/tt_splash_image_cache
- /data/media/####/yoh.dat
- /data/media/####/yol.dat
- /data/media/####/yom.dat
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c type su
- <Package Folder>/app_bin/daemon -p <Package> -s <Package>.daemon.DaemonService -t 120
- chmod 0755 <Package Folder>/app_bin/daemon
- getprop
- getprop ro.board.platform
- getprop ro.build.version.emui
- getprop ro.letv.release.version
- getprop ro.vivo.os.build.display.id
- ls /
- ls /sys/class/thermal
- BaiduMapSDK_base_v5_0_0
- dek
- getuiext2
- kerdb
- libjiagu805720785
- locSDK7b
- pl_droidsonroids_gif
- AES
- AES-CBC-NoPadding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- AES
- AES-CBC-NoPadding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding